last executing test programs: 57.253022311s ago: executing program 3 (id=43): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x16}, @flat=@weak_binder={0x77622a85, 0x10a, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 57.156199804s ago: executing program 3 (id=46): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtclass={0x24, 0x28, 0x202, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x17, 0xb}, {0xfff2, 0x11}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 57.060561527s ago: executing program 3 (id=49): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x104}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) close(r3) 57.017735008s ago: executing program 3 (id=50): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$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") r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000000000000300000d0002000009000000030000000c000000570600000d00000002000000000000000000000d000000000000000001000013040000000200008e"], &(0x7f0000000900)=""/252, 0x6a, 0xfc, 0x1}, 0x28) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) fsmount(r6, 0x0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee6"], 0x0}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x77c6) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000001c0)=0x20, 0x4) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0x0, 0x9, 0x8, 0x125}) 56.258769471s ago: executing program 3 (id=59): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x16}, @flat=@weak_binder={0x77622a85, 0x10a, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 55.751298636s ago: executing program 3 (id=70): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) setsockopt$inet6_tcp_int(r6, 0x6, 0x17, &(0x7f0000000040)=0x5b9, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 55.701850998s ago: executing program 32 (id=70): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) setsockopt$inet6_tcp_int(r6, 0x6, 0x17, &(0x7f0000000040)=0x5b9, 0x4) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 34.384604292s ago: executing program 1 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30}, 0x80d0) 34.283869275s ago: executing program 1 (id=612): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 33.77687845s ago: executing program 1 (id=613): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = syz_pidfd_open(r1, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r3, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990370900be00"], 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r10 = syz_usb_connect$midi(0x0, 0x71, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0xf, 0x50, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9f, 0x53}, @ms_header={0x7, 0x24, 0x1, 0xff, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0xf, 0x24, 0x3, 0x3, 0xa0, 0x4, [{0x0, 0x9f}, {0x3d, 0x4}, {0xfb, 0x17}, {0x9, 0x7}], 0x6}], [{{0x9, 0x5, 0x0, 0x3, 0x10, 0x1c, 0x5, 0x65, {0x5, 0x25, 0x1, 0x1, "ca"}}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0xfe, 0x2, 0x0, {0x13, 0x25, 0x1, 0xf, "e8625ba4e950f02045a4dae744ec47"}}}]}}}}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x200, 0x8, 0x9, 0xd, 0xff, 0xf8}, 0x5, &(0x7f0000000600)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x243f}}, {0xed, &(0x7f0000000680)=@string={0xed, 0x3, "c3712a93c28bce5377a7ff45dc98b111cae5d2ba8a24609132ee2305c3f53628966755abb9cb8de77564516406a839824821d62ffeda12de4f529b3317077480ffa235807ec941cb0b2e15687b16b8ab53a604f8d155ee3bde30b498875ccaa7246ab4779628572b06b2a73ead5ea6ad8e1477c4b7ad9d7d2f1d8184542df1dc621ba8ce7361557c6eb0d90dbe41a0b6a86798e3c5ac661f0086c7d0108feac7bf6fe7db7fec673c232cb0da3a9f8850c96f9e1ea7a6e241188b21e8f301899d33574a4916d0dd1ca0d1318e28530742134831e36789a9895133057f15a637f22d17782216209d30959fa9"}}, {0x15, &(0x7f0000000780)=@string={0x15, 0x3, "777188677ab235e280888764b74208a1ee0600"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x80a}}, {0xd4, &(0x7f0000000840)=@string={0xd4, 0x3, "ef4e6a8730d67811dc6130874ffa5a1ce8a1098fe3d5c96a2750a1fe4c5ebe86ba4c665f5abcfbeba54827c8764ad25dfa4445e05a091309fdf44f55af30c42806567ddcecf551158e1e9ac8c07949f44b6bbc39938c9cd926e98b77eedcfbc61fd9b5c4b3accd63c44a9add32fde94c7abe47d1d010f6f5fab198855c4a60d464c23aa961afdbb04614b2cc36828afac4941d4947cd1307988f3738ec39d3aac5d24979a4674fc2e00c7da0fb804462370e5be53bf1125daa4b0e7f78397bc1aa62a7686709fe712d8b808a8c2d4fa77020"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x1800}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1c1d}}, {0xbb, &(0x7f0000000ac0)=@string={0xbb, 0x3, "06de4c83dd5a2976a7e3be82c082e92dad3fc575f2ad8dd9e349d9034b845b5dcee929def576ac60d58ae3e07fcc6ba9c4a60ba23f373958973e7a83871e58f5cf061c8ddf13de6457b49624a4b911a3f50d68a8c61783ad33bd8fda5cd1d1ea4ae87379307f35a45778c330a39135862f3e4d4bd604b71a16e0cb252bee15b371bc8e73b5e4ad081c285f461f68483bad2cabc0de93d5df2c8b2c398befdf25eb59c87a76b3314850bfeded3a96eb95e151f8d2b7f4762fae"}}]}) syz_usb_control_io$uac3(r10, &(0x7f0000001200)={0x14, &(0x7f0000001100)={0x40, 0x0, 0xa2, {0xa2, 0x10, "b222910f2ac756eb73ff09adea6ea590f44b25a889127f32ee4f90c44c39a8e2a06a7e257237982e90197248246256c46e56a26ac89c94e52ac8ec298d57900a748456d82df984ae71a22a35604b6abd7a26c8a02406834e3ebbc1f1ebd2017b4c629889d8128350aa3be13f1c896073b5d86b7bbcd12b6be245c8480d007167abdb99d2b76e9b2bd8a270217a7cbbb6c773171af59c442e6961e3a58071a3da"}}, &(0x7f00000011c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}}, &(0x7f00000014c0)={0x44, &(0x7f0000001240)={0x0, 0xd, 0x91, "3a0b684f2ac36c0267f1a7dbc4e20ca327c634cde3eb71a6830955937396bdb19f64a0dc13b5737747061427c4cb802a76a807c694f4991cc27a93f930c667d4f9bc0ae56ab4e2ad4b6c0532a4c84229dbd0fc24e6ba04ad714a7420f53a12ab5d3341198f6be50b5c82434ce269864ec7dc68fc77be64e7f8b3d1e9da225d01edc9d34b323a67923d5a569ef7e819cdf8"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000001380)={0x20, 0x81, 0x3, "de5a80"}, &(0x7f00000013c0)={0x20, 0x82, 0x3, "04f99e"}, &(0x7f0000001400)={0x20, 0x83, 0x1, ':'}, &(0x7f0000001440)={0x20, 0x84, 0x2, "c8da"}, &(0x7f0000001480)={0x20, 0x85, 0x3, "a08ff1"}}) dup3(r2, r2, 0x80000) syz_usb_control_io$uac2(r10, &(0x7f0000000dc0)={0x14, &(0x7f0000000c40)={0x60, 0x23, 0x62, {0x62, 0xa, "fd8c6f6057a00e657d28e8eea891be80a32389ce69f313b12cae0d3d7aa017fc93caa56dcc81d3d2cec15727a78c2c534be1a44c1123fc9e3a74d989115527d3cddef6a59f8e3e22e4adf1a2fd834e92c9caf5a6834e5903d39749abd4419ddf"}}, &(0x7f0000000cc0)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "6bff56f8d6134d7cc28d1c18b12a7d1801b2944d7a92758edad6cd5ae7b749683396c8c818a1917717f753e9451e7df24dc69e3176f6869fdc7a84e26b97265d0d2402d34fbe3454a1c7124c0a4835e4ff0b16e5ddd084292f031bc56eaa2c6fcd202d432ce46a5bc8d991b0ee7e609952333226aa5bf36088cc241652397f720b52d558de3dd99202a134dee9f78c759868ef85af3240bd976ea360139a0bd679ca12323ba023aa76563bcd3e20b2286e50afece9a71a5cf97e052c8612cf16ffd9c33efc796eb313e3d0"}}}, &(0x7f0000001080)={0x44, &(0x7f0000000e00)={0x20, 0x31, 0xa9, "70181cf281e996845f4cbb33f155d19f8b9e0876ca714c1a27d9682186dbc419ac566125a2393721af1fbcb03dac27892773b8a9d0ee401d18033f2325ba0b5c85c6a2ac5d2abe427e4eec9a2cc61553e8034d753da6390aea1cc37508dd168424a4d036321e22c877a8246c1b9fd57c1688db5a6d4f78a52a79cdc6795a61738cdb20a98b85ccbd025700e5ecfa5e643d0d67737a04cfd029dec32350948c30724b87c56e7e59bd6a"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000f40)={0x20, 0x81, 0x1, '#'}, &(0x7f0000000f80)={0x20, 0x82, 0x2, "962c"}, &(0x7f0000000fc0)={0x20, 0x83, 0x1, "bb"}, &(0x7f0000001000)={0x20, 0x84, 0x2, "b763"}, &(0x7f0000001040)={0x20, 0x85, 0x3, "3ea5f5"}}) syz_usb_connect$uac3(0x1, 0xdd, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x96, 0x5, 0xf9, 0x20, 0x8}, 0x43, &(0x7f0000000280)={0x5, 0xf, 0x43, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x7, 0x0, 0x1fc, 0x10}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x5, 0x0, 0x7ff, [0x0, 0xff0000, 0xcf, 0x3f30, 0xff3fcf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x40, 0xb, 0x46f0}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2001}}, {0x9f, &(0x7f00000000c0)=@string={0x9f, 0x3, "9c6e98a116abb12347efc273946fbfd046ab14fdd509ca5a6d959bc99070215c3db6d8bbf998720592a922b58c5608fde09d169b1308fa82d47484017ff25f1d1206bda43ce6e462dbefd33b3270e5591297a932a275efc5d6ea0238fa6832e1d3f66bddf56ebc50d2d058b8201e724431bc7c09ffca7f068505fa1fb19c049c8accbead1f5fc8ae8f91d34bc279248ee70a4df60c1ba48933788e3b09"}}]}) io_submit(r9, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="0300"]) io_setup(0x2, &(0x7f0000000180)) 30.873975358s ago: executing program 1 (id=680): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1f, 0x5, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x3, &(0x7f0000000140)=[{0x20}, {0x54}, {0x6, 0x9, 0x0, 0xc2}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace(0x420e, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) io_uring_setup(0x2fa8, &(0x7f0000000040)={0x0, 0xcce1, 0x800, 0x1, 0x2d3, 0x0, r1}) 29.979906005s ago: executing program 1 (id=694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb", 0x94, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000780)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 29.696932033s ago: executing program 1 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25df5c01, {0x0, 0x0, 0x0, r3, {}, {0x1, 0xb}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x3, 0x3, 0x5, 0xe, 0x4, 0x4d, 0x19, 0x8, 0x2, {0x6, 0x8, 0x10001, 0x4, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 29.567574677s ago: executing program 33 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25df5c01, {0x0, 0x0, 0x0, r3, {}, {0x1, 0xb}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x3, 0x3, 0x5, 0xe, 0x4, 0x4d, 0x19, 0x8, 0x2, {0x6, 0x8, 0x10001, 0x4, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 28.338363934s ago: executing program 2 (id=716): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$eJzs3c9vI1cdAPDvOHHi/OgmLT0AgnZpCwtarZN426jqAcoRoUqIHkHahsQbRbHjKHZKE/awPXNFohIneuQP4NwTB25cENy4LAckfkSgDRIHoxlPst6svTGbTRziz0cazXvzZv19L868t/NizwtgZF2PiPsRMRERH0TEXH48ybd4t7Ol5z08uLd6eHBvNYl2+/2/J1l5eiy6/k1qJn/NUkR8/9OIHyVPxm3u7W+u1GrVnTy/0KpvLzT39m9t1FfWq+vVrUpleWl58e3bb1WeW1tfrU/kqS8/+N39b/wkrdZsfqS7Hf+zpNPePkURUTyOkxqPiO8+c7DLZSxvz8SwK8IzKUTESxHxWnb9z8VY9m4CAFdZuz0X7bnuPABw1RWyObCkUM7nAmajUCiXO3N4L8d0odZotm7ebexurXXmyuajWLi7Uasu5nOF81FM0vxSln6Ur5zI346IFyPiZ5NTWb682qitDfM/PgAwwmZOjP//muyM/wDAFVcadgUAgAvXZ/zv95lWAOAKcP8PAKPH+A8Ao6eUPcNhatjVAAAukPt/ABg9xn8AGCnfe++9dGsf5s+/Xvtwb3ez8eGttWpzs1zfXS2vNna2y+uNxnr2zJ76aa9XazS2l96M3Y/mv7ndbC009/bv1Bu7W6072XO971SL2Vm+WQAAw/Tiq5/9MUlH5Hemsi261nIoDrVmwHkrDLsCwNCM9UkDV5/VvmB0neEe3/QAXBE9luh9TCl6fEGo3W63z69KwDm78QXz/zCquub/fQoYRow5fxhd5v9hdLXbyaBr/segJwIAl5s5fqDP3/9fyve/yv848MO1k2d8cp61AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvtaP3fcr4W+GwUCuVyxAsRMR/F5O5GrboYEdci4g+Txck0vzTkOgMAZ1X4S5Kv/3Vj7o3Zx4pemTlOTkTEj3/x/s8/Wmm1dn4fMZH8Y/LoeOuT/Hjl4msPAJzuaJzO9l038g8P7q0ebRdZn79+OyJKnfiHBxNxeBx/PMazfSmKETH9zyTPdyRdcxdncf/jiPh8r/YnMZvNgXRWPj0ZP439woXGLzwWv5CVdfbpz+Jzz6EuMGo+S/ufd3tdf4W4nu17X/+lrIc6u7z/S19q9TDrAx/FP+r/xvr0f9cHjfHmb77TSU09WfZxxBfHI45iH3b1P0fxkz7x3xgw/p++9Mpr/crav4y4Eb3jd8daaNW3F5p7+7c26ivr1fXqVqWyvLS8+PbttyoL2Rz1Qv/R4G/v3LzWryxt/3Sf+KVT2v/VAdv/6X8++MFXnhL/66/3il+Il58SPx0TvzZg/JXpX5f6laXx1/q0/7T3/+aA8R/8ef+JZcMBgOFp7u1vrtRq1Z2nJa4dRpx2zv9lIgY7+bf5D+tS1HmkE+m7cAmq0TPxra4jM3GOsSb6XIw/fb3zazoZ0f2L3W4/U6x+PcbzmHUDLoPjiz4i/j3sygAAAAAAAAAAAAAAAD1dxLejht1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArq7/BgAA//8BoMnq") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0xf2ff, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 28.117449591s ago: executing program 2 (id=719): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) (async) llistxattr(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r1, &(0x7f0000002140)="1195ac9218230be8698e3c32212a907ef4ebdb358a3845acde78d80602e932aff327ea7fa73f792c40cebdba37cecd38ed8a684e8e7e17c283a4a8133578350204e227bc8b66e6e3e496a9058407be3b1c02fe6a537132a7dbb038450582558bc290991aa904db098add7df0dfbb1872456b02af0baa9d727d628215805b913a4a76742f8086dc1d4aeafee73a85593ad0b5894773faa16ba06cf2f5a42ff342dd413b65c59ee263d078e5224bfa88f40e834878bb4ddc596a258558f4faef188fcb81f6de204fa4c275aec29c3d198c8918c230e80cbbffb8b4847d949783042e0aa097ac44b197332210e6f983f88f077b8e9e98ab605534a19e2c7099bad58f5d45cc9e9132320a2c53696f9011a9e6410046f32556f58cacbd56b22e38206ae6f3b09eefd692c89d1434ec54964aaba6c6704863aba623d0a6f99ee44b353a29b1e0b3311509200ee9052c8a98127b2f60b73d8390a5ea306879122e314431dbebce943b924e2b02c6b7cae0ccf680fca614bd21e3d04fbda26ec22518ce189371a0757b334332f21f028571779919a1562a0c9fbcb2161060a4491761a5d1c75725665db8078cfbe681a5a486fdad7f53a300e8fe749c54be9807e2a1bea17a8b4e75f0f6e66d0b73b2db67b985c9fb0464343b4d8a4f7e3f7cf99ae2ccb5140791863f765b6334c08bb123ac632c0326db66baa39006083c9afe2573da0191b6866c089223271e3914cdf6806795e2ab2fc9f78cd6527088cce01447266c0773120b71d72a03a110d142277c4324330dee504d11fe46bf3b13ee94e8d3266dd27207ebae0da9559f7198165aa5d962272465dde32e68017341bc7a8baaa727c279db496bfa3427628aa4a2ac26300c117607d9e771c70408c9a1fc8fc01d6a7c4e53374e249f0d77d93d8f5e065981e2001e8d3eb6e7db05547abb747b7c405de291f383a048bf15e5ab07527ea8cf32aa96980494b8c540ec04fa2f498d469afda8dcf289521a459e532054e62aa42a97f912627449ef20f30e6ca203fc3d2a84eb115898744e65790253d5b2813e5c7b8b27ab17c7562964baa46589a46868eb79491d7309eb2a87958619825d4a0971d34962fc48ad762e0fbc0e0f3217d88950199c4e4c00322509f9a1d03f2f375b1ec77190df881ea468c62baa4ec4caba3302e5442157a63596e723f04fb40b6b1e6740e2af48820f0b53ebe9031f2ec6b59810ee5abb6ae2d1ce2372eba86db69e313ff7a6f17d15b8ddc2170c24bdb065dd6baf0edc38f41e37473a66e4dbc4b1ffde72f5450716bd88c5992f0a61953234965ec5d1e031df13cdefabdcf89b6521996dd1b1392813dd4c845a939dc6e629e72f967e7d0bcdd0f1af46335a581f8bad4146f48907c36cee6d7a9c449f122c56956768f2a5658506bba553683724a7c36fa9d5f3ae9064f9a67ad964c2d8442f3812aed7ce0941a11309f80c69d478beb9c8c88332693645bbfce9987e61ca2fd008bb5f5296c842d80b367c0dc49da3ebcc8b7c2cbfebc656e546c0bd9b9422d4c49f13cfc8152958ae75a03174d693eb4d5df1a45a0ac12481053b7874b08b6701e85c4f058cba81cbae4ff8bd426f625ee2884bf719f490795fba7927765c4299b6c2c03c3521e74a19130dfe76dbb26f4aef2689060a6ea83956e2af600c87c894b79f2d172d9ffb572ec7731662ff5f38129dac6bbe75176e56d3e4d01bcd94343bdecac0047d916b09a5a0cd9bae339f481e085c900f1ac282ae8f6eb04c4fbecdc697227247ee5c9d632c50e33d716cbd6d60d90182fc0235f92aa7480b2ebfba9fb6e3e2a175ad83fb5bddd8e7fd539bdcc9388a2e59a4f6b445c60210d30d66d652be1d705f26809291d13f78c028af6dbe38cb3f1635bb671e1d36183a32047f80959e489441c24ce546abea2aee04cd742e9fcec01760197b914a9cd677e5862b748c1e6f8b760fc1d6add31578176b0c149ced98a4379f115990bb629107914498e933bfb1bad94098063bcab75b2b8667df6fab15d3460fe3bbfd09157f860eacf75a23b4a4744af043bccf4aa3c3f3180130bf2a1de45f8304bdbaca1be46bcfddaa1e8524f40523c8c2bf1249f4bb8cd811a24e1b6f820c7daa8b6b9367554f97f7f3f68634ad6de0a59256d58b4e5cbba2524ff2cf97c3afa90e529e9d802ec9ad5ff49e9a1ac4151abc68e7ce7c03673c3513736925420c6f667a5e68adbbe8d062b4fc163ff20748055c152a42412b980ca3c692bfe759a6e0b2ce14f2c5f470927e6ce00ee18ddfee2de194e3793b1921f9039a90147ebe9902bd0d0e1541a9c7cc803492394a13645aa94ebd712f8908070ad8daf1a6b58e74caad344eeda72315b2fc3db4455d46dfbec77d0aeece7a7f6f566e636dcbdbdd872341b0bf8ee54b46471da2ce085afabada91cfd1785f5e2d1824d55844a42c99a94fae9acdde0e22da26cee563a0421512fd60605709d8fe4b6a6166617982d28529dc73232ab55b19e65ebeecf47a921d6e60be3f3049d93694baf5a93a4af602a37cfcb6f9801765e5fac20fe221ef4a083fa4e01bb6c7836b3691aa4ef846b18e8181f8a73fb81437c0f1400eae9866c43eca0393e5628b85f03e5706d223ac4cb58919f4a906f3e3a225cb139e1f2feef448f173c778978757edbb9fa8cc9777c51bb1c6a5f45e7769fb7c1134df864599449a4dbe80c6fa944a1e21ca31fc0cdae18eaf88999c9c196967dd3de189e6ff8d04dcdf7cd11a73cd80904b5e3f5d1c5383103ccb549d194d97b9dfabfc51e07e80a64565c1d8683ea5803f81e54e1dee4004d56eefeed1a96dbcbc98a5bdeb9b327216ae3334b78a48f5a8d45aabe7931f08c4b13fe4719d3119d4ad59ed094c1f38fefc6afca15bc8027401a0ca65bae1f3d4be2327d776c4f3dd0de91aa4acbbe1166577e9eab77ddafd055b1ae6e9c2653faacda733f850bc97ed023e66922346c3ae3b20b46a7caca216eeb65c35bef91a1910f96696d1addb5e71090757db69e7799eb6924c331db23ba05db7a1a8e51262925c9d71aa238676499bdf0150c43a0e19a184d861f66f9d8c422e6aa64f49d4c0b802dd4f7b36f4743d3872ee32761b5984f6c04a19ac52d44edb701f8349bf8bb3a753bbae71e042b89936747d13d75c681bd8e79a76edba119389464c267af8fb237ca3ff2a8e3e577da6f6480ead48e0958638e28769ccf4aa93be482513ebe87a15d127b46f526599b60e9f771a1fa2513c790ea1f8ee09ac98316b7f461a0dcbaab6c3bc4f92709cde1a4021ece3f9801c1bf08d875d97b4728bc903f18b45cf4d57c0ef1003bc7a3df29a648b152f0d9571d38f1c16dfb289bcd8a1dc9499dfa15ff73ebf844f749b6508d250adcaee0fd01ba3de01ed05be515c814c5e9879a12e540dfc44df0298bc5ead95cec9ed47c0a26a3805ca1cd7a98f7d4e46da93c4e7108ed562ca0c31fd8bb1d55ab0f759e4229fe34129c65267973869fefca9c1d3e839db40c897cce4e7fbe147e2a063f3647a085807d34afc1971724ec56497e91b79fd3353562dd604cced748c45429d6e30269b19380c567fe2aa4a6149fc6476c31050cc82af709ec4f62e5fb6faa51c86f3cd6fb81dc64a6bccb739f0e9f559ba9d4acf882c3e77d1401f824c702af544a29eb05edde2f0ae10dbb4a2edd9d78933444932e7e4a278372643d01743ff954abbeb4f9946b74ca37086cd3faf4680e809202cd2c2bbd50cd936f4a8a3d4f9df8ae90a568f3ac6f6788541b202ae298df9a69ac09f68c1f8364850f67b2b5a69172ac8c4fdfc097a3d02c13e04578f6c766c5d3f1e6c3db86ffb4510718a267d8bbe00ca2b17a5c1cfc046c906c08010ed4981a1bc4e10d71f9148dcdf8524d939f86a3fb1f64a8e3de5544a8779dac4a43709240f36288b14d39ec68e59b9063f61bdfd7d20d98da5766a95bed463a564d38c263ecc9a3b2e4022941611c8975f2b3ca232ba5e4fa9d6b371a816fcc9ab66a52c9ada22c735d312d7846c4674afdd58ce7965f1c93c43feef6f558483f91c575525f09ef7f0713bdacf60415527efdcf12f09b6641fa058a13ff76fe7af55a15e39bed26c45c2c3464d503f6ff2b6b95e3d4101ef1aa4e0aa6b60248c4f26c72497b026a9f0f8a25ca38f358624ae18258aa3594d3d0596a8b66b3c5e259168bb5f61881eaa4b9733119474a64b28f61a18c049d2514f9ca508af4aaacc005965d3fe68538cbdcf17e4aa9e82fef208d2fd3d9b6f7099337631ec8268b83b90279e5f8c18572b2c15edf1b1e08fc00fb2b38c856e66a79885d61d2f1bd04c93bb892ef5343d9dd04eb75db7a4cf2a25f3be77369937d802f57c4fed0860f6f721892d9ba5324a3aa6d5231f54d07fb0a1450c4c708c996bfcf3fd6a79c8050b2fd34652655681869c5ea07c1f9c3228add4089be8593a6ea05193719221a99e4c90f400e5c3d59bfdbdc6ea3c56687267a9a48a8aa636acb99f07ed893f7ae3f7d50f82217166140ba0b003c23cae03aa1445c0025e92e67b342dc37acf5795fdc802da80900e1cd9a84cb6f749752bae73ac05f9a5778a4679927d7ec777fbb8d5edcd230846f74079018fd494d657e9a099f4e0d8cd70d1c60d37972998b3a83abf35d1b8c090afa28c56999381008d23a7dac91a196a316c7d5e284cec002d1ff145f569abb70910fd9abbd9d017bed22ef0c5f48466d70e386ea4ee50cce142cf4e562b80b4e17ba1282701ca36a917d4bbd98a8795c120b0e7c38cdaa4bfd86d9860442a60f955ac03a9db8503884fadd3f8dcc0174570c145e0f22859667a6f44ca297bce84b2192bd0bd5e4cd006ee43a9bb77474414ba8f96a3fc940d41cb6bc05eb90d3025e57c9c6697485d5dc6d9be64705684602433fcde9303289bb23db0739a6db6dc7682ea6aab49c5077f66fa21e8af5cd01833654cead3646d48184bbb68bdd897b8026f3580d538fad7dce7c7e9f163a09e8edffa5cfbee9ac743e4d97a2a1461fc945c4541be3e4b940c73d64e69471adeeb7b2bfb3c5fefacc68414b24c7cc5e124aa51430618ed69c496440651bfb95aa766bb3336eabc3a817c82c39c4b81acbb6d97f623ca1fdd3fbeef5ef7e6cefd09e16391f1d409a3ed1305b79c82b3d29077849b8d584c5edcfe08dcb0361684c7d4f56e408cb745e11196ad0fcea32866140a181c17ddb0097ba22b714bd49f228bc6b57fd6fea29475f3f61e1d68330e6015539eda198e3cf85ac9b5012e8f5f44a272c61ca3af2c3040ea0cb425dc43d02e0641d831369b96eae13bbe494d08a49409f7d9ba07642ad0bce66d22ba548acebf527c09f8d0bf8167215ce0844241e91978ab487cf84e4ddcf49213a360ca8dfd060f345ac9a177bff55e41247663b4db3f874026149c81f3281193d0d634f056aab00bf4a56bfb9ff9c50e4260ec224cfbdb06ba8ccddd3c46cbc1482e3c3d121dd783b11b5a4af3956259b943e4054b9e5d8954aef77f7f0d997324969c63631e157be36d082c6fe9090012fadd6384c8ac4a915346aac0e6c033b13fa1a50d2d13baa70ad596fd841d0711cc5465d7fa5ee72b0734fc570dececfdc62356fd5f97aaba7c1ffc89b73ecd4ff69a3aba137648b1ef8022bac30aad32393acaa5fa16c976a809f1572f7c766bbd36f9886dbc477501c412b966edd8751dc603e0dafec7fdb020a21701fa27b250f88662cc934775b82e788f9847425c21a9d93276d572213a5dbea46155b747a03e5e9126a1c2710b3d3be575d1d4c40fe10efda14606a7203585314ff929c636221fc4bb17f5243f61d4b877917e11b2956cf785f5b3e2a154b6cf9fe7694f2829983801b79ec796f4d47407f75eed168826c489e9f295c78546e8c628785e9fc2989fc30ec2416782bb78ebaeea24bc4b20699db6150e28984cfb809f1adb18fbd5dcf7ea4d3c248d99324806c9c27e644a88a1193c26eaf692f33edbe9f6de2ab448d1683b98cd82d6990b6b105ec77a36c81260d525b0f75dd3f1da8f75072fa90b31b15caa883eb60026d2a4dc80c84e169f4a6d50f1a3f083043a8cfa01e47b83b7d8a15c73a416c035692e3612664b253de522846d12f82d90c7d7a1a1c41ba04e19859f527b47ca588632fb18cf45a06a58d85e08f61f77a4bf1fdd68a4ea06d75b4d6ad2f0f26b9e72b37e5104e17240c40fc5e4c1c9f6145715c0529baee5a3cd72ab30ef31ab61b38bc91ab6279e48351268680eb3cad3481cd550cb64654bc90f073149786ef959f94f9390184250ce0268ad6221b43efaf14a11de971c45a370a2db06d592c742e84917550ef2b37b9b68966e802f95a2c00da784afe8e62a6deb1d6976a08db1008093418dd35e4d4ba8a0f9f2bfa20c7d0b3c2afffe755cf1296b5ab84393248bce17ac3cd71eec5966801e3b3b1d2de47131e59f487587767485edfbfe6ff037531e57e1db1b61921d7b702dceff03b925d14d205f9b8697110490ccbb383ef911dc6b6a16b617902da843d27747cef1ef311157b25cb1cdd9231aaf86647d343ca36c85c4059f59fe8a7508f466c6240476d867ae06883ac7f45c50613e56b337692cce24ba24efad08ef93920119fb2b0879474d3f0ba61da5a4f3299ca80d2cb65fc905ab5271303db67ac86723203071b354d45945f342c9821a9845bc0ba3df7ed61c12f88512f692d5757a30911072af8e0fa95142315c6be38726f390d696cd4938d2d9bf357064513cc90510a0422be150e1218fb22a5b71de6e8c313a565c939cb48a6b1ac1b75638e3ae00a4caec8834c16c297df319508441e7f063d67c6e4062b1ad606b18e039da59e7167dd3a0b34356f95f9f52093939106180a0071533bf71ab47086263bd96c7b4004085779bc813c2186b5f44f84aecab71b78027f7fcca02be7d149db4c0f17835201ef03c9ca6fbcca3a1353d5d94fc366bc2fda593280ca7daec8ae12815f854fc84cc1c3e40b4412850baec19331413fb4d19b2a51769af14c51b98e9bb8575d0a066a060f9bc44202f22183a1ba2713453259599690bd70392782fef5b7c5e3f8e6379ea84a3b602273e372805f9acc7994dd745bbb9ab401035b6d042c9e0a1fa329502e2e0f17ee9d34b96c255a3305b6e311fe4893d144c10afd860d74218ee78d83f252d4620964a1d7bccf718fad9df3baf5dd5bfec7448e52601f598e78665546ad09ccbc9e1b96debdada7a570ba6ff018fff9a589111ab45b71b9daa9f068a8fb09a16a1c1a6f6e22296ccad7d5d968821794236a79a62262e5edc5756c99c7e733e88ab78120da5f844968d02fa0b9e2fc3763dd16f354117b9ce848c21992b2b391137a7a8c31f2226d4c0669a8334ce6d5d85fac701bb0b23452453ff766373f18dc9c44b80151ef728e256656b40baf747b9292489de5e20184a9c022c1ed330003454f4b686a393e68b0db21e8fd931aca596ba3f51243101250fe78de2ebd95f4f333ad25edd6f80406a00dee774121da8f8b23b6eb7f2c657852fc777122753bf2fe4566ce403b6c0ef0b8bd0c53823d9f60bc44d0ddd6ac788e8888df28f322ad00d2f1b1e8273fb7a1ca6395c882090422af5ca6f803877f172fa3e3bba15facb5bcef8fa89a5e3c661b835b11e02b19f6d5c872bdc4917913458c5972b4e2cd3aaa08cb2ec668c0ec2692eb53d61988f63c8460aa945a2975ad59abfe00ad67242739b653e8ad422675a37026396f6e7d9bdc9f311ee667ddbc64c4afb4166316ea167780c718d541846d29202113b869ae8ef66811edb958cda474195542b7a0becbe351ccc7ef78f6b572af15e431b59fc5f82d47265372c4f3fc18da44c9aee246bcc248de3533f20a60b61d8a4b8324dca11ec571028271a7d1bc83183e92be5385ed4b2e94343452468f50f747c3a4b172e34c947b9a40415602d44469dcf426087ccb2a3977a8698c5c1190e1a84f70366b544c89fab78146b7b6daace5676067a48e00fb90a6073167be04341ebf2181575559cfbc03a9871617cd7718ce1a46c52dd3faf79babd1a01fbeaf89d8b59fa9dc6400766cd102db6cd6132e8f5daf25061614042f9dc254f91a4ed14031992476021a0cfe5b7cd8a8410391d80572c19404c43d5328fe9c96e7feedde6b3741d04b5240900000000000000c36b5824a899d7aa1918fce06dc08d3cb2b29581553ff352b8f606db5fbfcca1a154c4613de096ab5c7f4eb6250096d964b270ebe242850c359686114b1bcfeb715c7154f04a772973c41ca9399b61841d7fdaeee47745cfce51f842f7cf412022d006567f58fb49dfb3eba342191ea6ed037d32e6a92123d7e58777ad352c2bc27da93ed46c378ff631a7dce38d94fd8d865b5ce62de4c67af96bfee74018671be2fedd63823306c3492320fe530b099b5cdd144608b6cb14aa79f5482b01f828b8aadb6e98415daea029984e470f8b28b2655b2ac753d33b8035963b4a5c00bb0cfda3372b2782590596d6d03c237e95a4ab347531d2819c9ac9ba37f642298f6a999fdaaa13778e10d07e3fc9c1387a0a76016a4b30317fb3d8ddeb4433d0b04d17d30c29615aacf0f8697255a6a55e6b47d64fa45d7171a8ca4af78b32047acb2b7c5c70969e530828882287a16ad460c3f372cce00404ba06b2fe64166d70dcb4f6bb636fd53a267be9a13beb9a1d8253dbc9e49028981f7479488eb40ccb58cfa1c0c9fd61437ef0e84f51ed5f788d8e9595e5955faa744c700d6677bfe3c5e52f0ecf70270b9e62610d5cbd53b2321033a7aa3bd70ad8a9506545f0da4cfce3aac6e9a03051ad703a0f564685ef2b1e5f203637edd5c30ba505f81666012e2cae3b3a815d33ae97b0767e8b48f3d42272f9d326e8bcf176f852a8aeb0603a11fe12b5e04c3c5ab4cab621eedfb5e86436661bb279459e3d874ba0fba92e55fcc763cb8b732b5cd9286e8f3147d3cadf5f342dc9313f64bd83ed828fc426b69761179ce732a3009194b8777a10eb2d3f4881129478b994e55abaf73965d62d846b8c4976f91d009b73738ca1c81f055e0936aeb527cb4002daa96ddd8cefe2e390bb5f90eca8e6d6997ade6819be3b44b2e346d533f7ca8f3c031f3c5ebbe9e17ee00d0e0823c61d850c6fea943fbdb4caa6539e3f7903e05a304e7cdf24b989908ba2f41b8bf67cec6a83ebdddeca2ec954e70c7816d8241d703b8109029869f3cb58c62e1e7c9fee329af5a3ec5d8a12db1f00fb579fad7ff18fe5a72bf1b185f52cdae932df12744b5eb24a0c3e4e5706c880f5f6b64ffdf6b71a17985fc4d2cea77860196f378ccf5b2b235b93b0278fb69fc7f460f21472cb90ec54d16d168a5caf2337d63b8ebf11012568d2ea0d92e91e83cd6cbbc88afba1097a84cd1af3948a2388891225237b30b4704d2fefb6bc7bf6adf6dd86b7a65c511637d96a3397096217c3a9743050133bf836b8333519d001947230cd25ade2e2e4e9b8a1227ae4283b2052b2c3a58a11bf7edc534bc11113c329791cea22dc5b71f3b4702d1529d965f4ed81951ce99a61779452751bca8d3a0070c47b1f8fb636ae6bef93514950f607c1746f5d9afa96902effd960b770a26aedad55aa5ad869d18c98e24b470c99b901badbaee298d93c2458303104e5c2dc3077b93c39ff46f0e81440a6f9d2a267f05f533c3c0943b6bfe50906944d2325143d84e5c12d528841ec611014d2768b116992fe1483c1764467eab1446b14adce8e366ec1615f7ad0fcc272355ade823771ea79db57f2dfba3335a50dd0c1c6105ec51f245e096c1492ba4230a752871e4c16e8ee301bf5960e97fdc948c7d54697f7c01439f18f97cfd01c4b74022607e9459fbdcd10243239b4b7f29dbc217a0caafc0b613e43e9689dc1bb2e135e9deca88bebfc61cffdea1ee33df41967cf96ef72a9d87c45084fb105077273109aeba2e3384ef27b604f356984401a8643c493acbc56e3780f0f0ce868db37c0f0f91d403e99951e9c33ec808ac1107a133109588e065162ccb0fa254c8fdc3fc89bfba51a17c975ba3cfc4d1f0faac685619bd5453ea2acaa8a3dcf34b2cac31447d77a89ad8adc9b1c0c620b6b72234102f978a5407572fc3994c59b764b27221aece8b8ce9faed1d6c442672c102d7f2d28059173b6b6b188dbad05273ff852e0b9f14380f2ba94a34859092407449b9118a7d54201890c216a4720001f026306a9f8e57d0bdb9c29b9eea019e001ef92e5e6a93852dd3e26cd3eda7a27cf479e88dab17bae6d339f2519b76824f1e5549304dd01333b393082274655b8c3dc00e602aea10f35793d6882069ce5a4debf9884c51d38aa1d83c91a92c0606d38076a1dbd7bd4c0cc5ad01dfb2b04b0dcdb1cfa9cb08c498ec9481559f0b5fdfca94ef3f2f07de6b541ccc5b287904d0344ba8b5b51c535644e8d459d15166c3af4bf36cfdccfd1ac83ebf540d61db77069f13152f27f17757d68536fa52473dee6b1db107f7c9aca2d6a98ab5e537b9fdc5625e7febe87c2127dbe140a94018dd26a640fd42a769bba8e6ffa284d5435d6c57a1f950933a6f6b45d2c7faf19ae2e8f2d2a96b946f1f6d2aeb335aeee909a746a5944f7dcd85f9cef487e9b182ed90cc03d9b170c1173cbdb0e9c40382e0cbdac38bbe8c3ffeee255c009f0423efc3d8135f9f7c949d12d4b700d2aff5bd3c0fa3c9f30a6054959b4f609c2ec8e235f5652d6416be3d13abcb84fe2db79e304757ffcbfbe286a1c8b4c0f8aa19d846608f6fd7f8a34acad860a73588593eb1cf7cc6f3586356747d43726982a38a527f3d94dcc25849ab71286b89c5a30cea07b8cb255dfe1b86b54d077960db18eaa30cae8101b4a61fef2147f1f38a5e83e40e262e2484bc552b728879d1c169a81713db17379c4bf5f9dcdbfd0196228a7afa3b181d401d98ac322c5ec619b0d504e28aa71a450b259c0c89fa2ba1ba7a7356da009b58085bb6e25fe5cd0097d822d39f9f3c9b39da1041c58ac1a4556de9d34f452c995ec21d1034e959218e8fe002d2b757c674848eb7ac84e8bd457a312c4378303ebb3184d4c90108e0604cca678487bcdd0be37facdd7c6b17e740a098fa4b38091b10f1536df1f297902bdb5f02d69f25e4e84d3f4700070f63189440a2a39b9bab6d4f3dbc23634867aeeca99dba4aec39ee94e701ccb77ead02aed1012f7eaa84eb44ad3e625d5619aec5ef76172213ab1d66680d42872e8ce8846e057329fe5937757e3ca7c1be1f3db31305f48978a178a043eb8d4a060d125dcc202e6d8c75205fdb2e42b0b0d215e768c73832d58ecceca993f7d5cca8c3ea340a8c1e722b806c865ed1380a1cd83b8b5e93ad4e2ea1d66cc7979fbac5fa26a2bf881b6db305bb60eb05a39edafbbed715e6aee84245b1cf950a2cb69dd631d95365e1c731ba5756b2ae1fdba6384cea97d7d74f9be62cb83fa7ea1287b6f26eb6f24532c6dad7f7869eff58b8a3448a5a6b0c4f45d8c1eb277174e3636aff670d8f169e040a445dce4b33f6c33b3be3e0100", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x441410, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r1, &(0x7f0000008840)="7b903d4763079f496736ebdccf95aca07a5af9eb6976364b5b3d3bd8c42b6392f3d244d6fcc4063cfd72e2f12adf73b6ab0300eb123636938e23aeb432e4cffedd9bfc12f33f42234c832345d62a7594616c97e968c82088586fc6e9ecfd9bbbc37b3d4cdb914a25e605681aeabf797dc3597859e5b494c09d70c8949f8fe545c173c632466cfd4223ee4be29e3bfbc6f5962ea3b1044071d4f46c1c30f903193c4a1d74e9e091f49a3ca1f5289c5692930da06af35c334680a3034ca907881e4f2f680a93935c6a31dca2c8af12526e71f556cbd6e8e93c4f4f686ecb4a5b1a1a9f9c1dd993d912dbec33f1cf859b5b74550a1de236a49726b86da6a006d13be5af26b1576c5bb9b21f8f6d4a16bfbd0aa256f43594c59d39a9e7335abdaec4dbfba27811ccbb934aa113c901b9af55177e8d2e4444ee3fea5def8a787b34ca5c42e4b087358ce8d41f80a82092676c776fbdc86d63f8740395dbe0ecc2684eccb5a020e6501f2dd64a640979e8f6b0962206b6c47bfb132bc3d9a827c8f2edb4318cb15e310a3de97b7c410e81ad1fc15dfd263de4f84dedf25e4e200d782f4b23ee3beb5c8a1a57f6ffd298d82223d0b9820da41f22381890ac457a00693d564165b5659d880055b10d2a473305a4ee7e3d3953204e1b91be5fa44628e381eada216d007b69c85c832483f241938c05ed22922d4bc68c190ff497379e36fe69b3efca66dfcdf5479b0978b0400f2663b8d3092d8331210dacc30747af4db2f3f3d82ca1db2921a9dcb2c7fc1280bd4360add4663f25826551a74f22380cbcca0df1ce00728453a4d74f95f3aaf862c366b6e6ce8e031150219c72966d82e2fdb5b720cf0dac60aaee72aa769862e3a9c6a10a961d9b7a6b11222835dc7ae982dbf9037acab7f9860db503879a7e9df1b41c9fe794c498609830ae26dd808abbbd70f1667f0744d11137347896a2d99ce20d56040be4e28a1edfecd03494e59e0e065e9fee44083e81ab9605f47d2c97cf9a4b69fa5d26711e45adba2d79c717b5b183a550637109dca0fddf42efd817187dd27241ed3dbcc8a0547df55ad0d623620c72bf3f60c8bb051c348e30c90c0a1de3269a254e994ae7b27f385f5f56cbc2669d89ed62feaf7573199a1dbea749bfaf158a187971114a7d11582d9b5ddf7d86673f51006e994277d4be948011d42bd405a509aa0c117def9cc4e5de12e9180d532a48b631df8fe689562a8c8453a9ecb494aae5099222cd68255d3ede4c3fb3d752b1e61c7edb24e2e43292670f093d476909a25676972d7fbc65dbe0d565a4d4737d98b7e14051418d49f8f97885de545ff30ad9adf123f6e1e46e8f3d02f3a62439bb2dee2859d4c6e42b08a5c4cad99a0270cc1729d25ff7e1325d2380f87c733746a2ed5f532e674c3a2415dbee679d9e5163672bc10b57723afc0654682ffc5c4533bc9b392d9f192b895930062c94f858f17501801d9dcc870b72bf8380af9a7b00a6752ee685dc4ede93051687eba57f215d53bc9cfc1b0798c9b7c02b7e5374fd95953cbea4e432898072aad22dcb6a1062307a150bbdfd33019e91b4d29a5046158a2d30aceb4996e5f34591844b5562f5e6d696d7081e805d804ac8deb653c1bc591fdfe9e2a09e8b20a5f2fcd41638c3cefd5ceea0fc9f59de09b0cbbdae7aa60b8bd8781e284297bb3433d885cdba5353d7bec37047aeb19955eb00c09ef94b5868bb59c48d3531479910429fa4cc4f175d364faf660601a93f949193887d811bb16ddd95d2e67ac3688d400b97ded39c8531aff108f89406426d6fe170629b9ca357ad310e1d095c597413dfe76413a86b6dc185b83990b7cff5709d36da9c0b06749bca6356a6bd287dddd60c9945532f5b5f4cf4038f17aa67ea5cae5bc15b32ff8bd53320169b2a0119bb0f3d9de912321975bb55eb8de56a128e9425167f650946d5c90851e4c52bda21339b2dc80a66900b4114594b90cf7fe74a04d8690071b396af673f0d95d5e05727650b3a6a770c8440801c1287e544fd43af7b3aa3bcf06fb2d1ca2ee3aeba76c9c0f796a750be5631125ba50e5e7b8eb7ac493add2de950f59a579d4dea95e5c9301b18c08d1998a2da74e41eecc129bb23a873f94268e217760f3ff0a99e34eaff15af9a6ed2b976a74b1f97db0ad9c3781f24dd137aa7eb807d725ba1617abb1d54be93843c1cc14b20fc037dadcf0cd58c6c7d3151ec8d5efe5a916af7e1694e036e6afe55cd2887d79f399cb42478f9f9998297a89a710adf7e7f48063cc0168782668a71c6d139747ecb265e5eefcbd8d617b24c45fe1586f2b97a626b7f0926969d02d6cde13bc7d46475c65522da105cae8f43dee9d51a6fd37c74fe08a7589405fc8cbb2f781fff3913285454bcfa48f90f5c3f0dc0f2c6e4b5b1af0da6e0f550ae79eea3b4705ce2b5490bbcdf4b25c7533b08ec1605a13693aad0f1ac9220d0b43507d1521ba2652ca0e9a7868a3af8a970b9372efa1ad71bc0d8617ff1a5d0e8e36581715419efbb664dae910ba188128dfbfb0d6380527061d79317ccf6e2a183c1559c19d35d5b6100730776bc7aed48ca52f292b90d461c529b5cede9a2cce0b8f28f073eef23fd805fea69b5db489428b3a34b3f2c79a84c034b957fca3289b092051021ecee2a769e5bb22ada14bb7fe3da96cdf3de0545c302744343d838047e8fcc56e72a1799451b152d0a38cd392487f8f052424bd2ef672e40b80edc37e279ecc5d6bdd9235aca028b9391d2c0db4514490152cf3892f2a60d7a12841895f84dd731f74345d5242646ff968442f6f4983588bcd77ca6eaa7558b575f7c1c45629670b57af4d5c9159291844be56f1160b1784584c84eb2c0f5b2052db039534082ff1b180488dcb99461c05796364c9f37c8a932300ea627b3f14669be0d56b272decdfe1883dd51aa23ccf2785cad3967bdf3412b308f20364a9485eba4c6d7b1a5ce6fd87544d0e72c0baef82e02cef7e78e57e88074990423ae010ad0ffc2e21b36536cc5226f739245d9743110786cc34d68e694f21a46af16317ccb03d7994ba1ad121b4f6ff17595c5c6627de95ec0df0b80e7498a7f2b6005f5c1fb26328c0666c3cbe801b1d761a94d41c1f76b0ddcfa9939e14d69150457a4f950c4df7060b1be046ac8bdc0c657832d1beb07529362c34ffcbac348d563657ebdc9fdab4e11f956b74656e5ce36495237b53513e5b4839b2e5d1a8f1e3f7a5e8f1199c4a19ad88449fab9040e443b712c1a2537b0ca26aa69d20943dbaefa4aa7a981ed11b4ee0f59ccef072c4f55d413f7e905889eefc516fd215e59d4c3cb78509f945ddce8b2bac919e0ba4dbd1a9ee0aecc66a7d15766e9a0cf0f703069831cbeb34edb06798b162117b0a9fd18337f14537d0ee7839119521416072f114be3d6c8254ddced0aaf9533f7e0836f5ebde4df68f3496e083912be564eb85569bcd981be606a6b51fe66c8bf88b9980c3b52ab35536a0e6167cce361113c5352e3e35a385398f5ec0c277dd1843a7e8f1eb7be76a574c178ae0c96f8cbd613fa72d331692ca7df6429c5fb150f88ed77ad1b3ff621016185f7fe64c10618c23efc8cf3ec090e4d9db9f1ab62de1bbf72d813eb94d92dcb2b5775cc8927d934bf034b1c7bf69f4ad0afd19fc81ea4efe2dd323ec58d5bd9b6ae584666a96c9b37aa689f7f7d73b9daa98ea5a93f43d52b29c9e518252a9b72af7c1e0e6b87105b20e0cae46a2fae11fb4b6027a5a77d09bbe468e57fe9ada13e0768806fb753caa55ee2519592c4d43b3d1e078e64dd4bb2a1c909517e6b0e41f929b9e3844a460f62b34f40698d3eef651d6d4e7dbb2461a367d9a6e0df04552215c9ca59b95aef5689ffa1188d7ed4fa12bcd5434ccbbea730c21ee88a1033bb3eaf4d4f3e56296a596c88c1c3306923a25bbe2d54fc5832b23dea14f069e45526010bd08313a93a22a6baede96336cf5f0e0f48dab9aa0a69ed8643f09b06cff60306d76c835249739c52de9894e8173c240d55f51fc656df7f3e469c0493f8a7032e9d62b9e0888050bfe4121f0c94267daffca3516cbd4e530218a217f539ace5239dd2e6c5ee6a80f1aa73962cb48b6249ddb32a805891950a1598801b3e270f22ef4f278ba9f51dd48f4379904534b7d644cb4bb3abe780415aa9c1f69a97f2ca5adc2dea47fea5f20338352721b47777fd232bf5dcc95a2098cf77debf758d9eb800d7e314f243e0206bf5266cd3bec6e28c396f42d397e625a9a6d0e91019ece68e30a187cc7e9f0cf33aa567b31e33bcaefb3b08d24cb6f6cafc422879f014149710d6daf012a75565efd0ac15afbaa3ddbf66556f7510c94e512f1930714a639bbe9c0442bd857c30fcc284a07a3e85678b3b11bf1911135646a07f1008fb204f67f2f8bf0c261eaac5ca8f0db68b1b140fd51f7fa25120690a1e71552d96723a9fdd5faa586250b65b08a19c8b01e310abf9b18244adbcd6cb0cf83eb23c7d9cb7769dd3873555e64752bb0745b412d22c59c96e8378ad46f1d1d7acde23717b76b4522b64f4fb3553509c44d636a08505f7cf5f24d08e75e8b1452f20fe8758430bbfc03489cea9cbc33fe71a351cc1bbbb4bfa722d8dc2a9fd8fec42761aac32975194692aaaf9e5e3eff09e7dc93141d16b901dfd0b1a3533cf2096a27d03bd5eee5713b64435ba625f95c86dcf39f8b43eb497f2875abb11e576df0873fecc16ef55118e9d47234b41d606b4972e5a65cdc760a5108c63b70034edca7cdb90f5947d47dad444c06a43dacf354f1da89aa535aa2017888f1bf09019860f2ebe4af8c6398f3b83a0da7d806576712be4a9464d309b52ebbd2afea4a2636d6662f46d4dd5224550bfe2491d4b07329d630d551c12cdd15a793ff9be35e216ccb2b4da192d688bcd5385f8545bdac7c3e73303a62d7d96122a8cfc81687308864bf3615050cf4424a29c3ca879fdb1b2d99c9c55cb4a224fc40aea4f090a84434d65b169cf01700653ef3247c386426660dd7ed1d6c4d36cf0807ae1bbf85af71c88d010832035414156e8469794c5a9f899284978ab86bc1479d7ed34806ea61c0da78194b75e7d8127e4a43dc294ad6e0fe9873b363844180c5b5bc2ed43c8d0e1324c666d994a32ca6b1f67aa78781699c7e1333ea4d186e8e333eee3cc60f3838ab7dcff8606583c309f4abd63cf9514ba6ed702de8cb3b90befcac8112fc8e9ec04d2accb4eae42ca78e227caf8a174b3865fe8788cf13ef251186c579a905bcc614331789724084db04a50f726a1d2347c6a4ed296ebc4db25ebce1566a047dd5b087e33f11acc2887824b84b480fc76a5fd0da60f319bdbefe4f69a68297670248a21306aa27f1130031cddb19d16d335e17d4762d82a9b116a3502b81ab308e3c5d1f926bc8cc451175b7e60eeece7f5e112961ef2878608441fed09b4b85a5cd34755517f5460f22350422a62670819ae2179077b1014271b576fc744bfa353b1e6301d2707fdfad98c1e84993c724f497287ce7e01eb02c1e5ad36d705f1db9778745e34e67eaba1be1cc514313721aa645a41173eb210a7bebc30e58469cbfc744a02d8f58f11a462f76b9596b04daae3392f06af76b8435f035bed35f1fb61332d39f63419c1866789ff34359077825ab908b2149967365a7fb57199986d0ca6d272706945419b5cfafa10e7950ef65a69f11c1870cbeaf0b2e6a8ed4a4bc8435d65f17ab826f61794fd757e9383f15b7ba9aa9c3e46121ae89066772f019d6d4b9ae8d07ff7ec32f8eaeb1d5936605ce324b3b90e2dc420e1ca53503c38c5253639bb2f2fff06f6d2c6a6510d26a7f5961a5b6aa36afda7948f8f14d0d71a1f28ccf7ad57d7ae5dbecfa4c39179178452209da2e8b8f333833b0d6a4df5707fb3c92566478296878ea6d0ff4e69861d3488d80bd4b32c0f6538d2bbb3cbd908e1db68fce2efd23c6b2a3fcf0ca40234b8620e345051ffe72ac84cc7e317ba432e6bf971cedd63bcd81af4b51625390605b422d96808a553c77d82beec6d7608601244e2b4e3249a2a14c92b086f70ea32852b7c581009ad8bc3e3fcec68bbc2a91733e79153f3b5e8535a5c74a93441cf4fa3e4cbd1924db1245942e0d6b46af39fb2f84c8997094189629af49a4f6f03365fc3f66ac501989932c97962b4944efdf0dc41917848d562c6caf63a466b3468d4961e14f6a05efb3d16769847d760399a6d9aa787da5831a56249b255628100f792bfc20cb015d883ada6574b11ab0fad62f3001372937227f55f2e07079ea650ab6f8ca28491435e2b5c22b0dc6eb4dc39fef7036e39c8a0dad562ec52105cec7d24fd474103b0eae322be8b3351e06a0c2f29de1e6cc304be172d894112ad6ce47390c210f3af1fe590ae9dad65399aa0850ac6c119dcaeb9e097d1d1497851f6f25ba2e0cb0f9933f704e4bbec0b7aba8efc7201182159944a964bf4f1afc7a99fd5b3f610d6894c57d6dd617ac584bca652391b4de559e9b962316e72a5b44b5f83e416bfb223fb08004021e174a0a40592c6bffba981c7d86fbc1e856a1661a72c812a2f7d501015be7da4d126e28dbd142b8a9ed479d19967f4c2810ad6d8b4acc26f6abea8d563e620a0fd69d07689abf4059b01f6dde406b32e355ec8bb8fb821f53ce7c3632e25533e4059d57fab7583744a37946c51031747f6ca1e80a4fc9f97fec8dc71b2f081141f070a4455d25b0511a8737b5d3a43de54ef8352c4235d6259792e51b487ac3d0a3713b4670a1751b7c3af6e4f17cbd2363d456e54b1192bfaeb986285b9a0b3adb27534e6c4980e0b0bdea5d7fa389d1efb40cb0c8de49cc965e93dab04d97a5feb21958703918b10058ca07291dce2159c9fecc44ca60099cfa44657306a9280b687682f841e0e2a88de2b6b78eb73a70cf0f8b40e3f5282dfa66d2f94326536b851a7b59ae16a7e8ad9c5ba4aff4cf3740bae5e4f62ddaff71759a74ed2e762330223624bb603f9cd599d70b35623d75c2dc6e14eac8d9ecdcb6f3f999b012c263a0a4c0701f65803b1b99e749088a614f0f493a115e26f884d0a0498da78819137b8272bd6f8c9a42b262408520314169ac907628370de94561ad3a84ceeed01517753d895f1d4816e8e7fbc8e4be35ae28241098ea99416ee0c9000f43a8612774366572053f49bc66dc4710cb01099309a312d069bbef5ee0164632d8a7e88086ff4eaab5060ce23006a3546eb27cccf94254a14853b30eb1c4e0f3f411bb03d24f78b0dbfdd478984dd2902b40bd2ad7ac4d264ea1dc3bbd5304f34d87f21c77ff526105874dc73f0037b882315fd62f17c6891f24107d7319b97ab7a117731b200976bafc208e1d1bbd9bc448c167f62a6466275b61dc8619eb0d4379877013259a80ea8361f94a3dffcb7206c4288e136ce323074a813c7771b1861af89a2ad09bf2cb3b6e959e772f85b5c825769ec65e99a41b671798f0d44a94f6de58d2375fb671e71d4713a2187d6824cb6bde02f75ced2d897e59cb3d3facea4b9da8df8c47ed9e028824010a847ea05a4931b3f05ef1e1cd10d795d46862cb81bdd856c8d33174432714c3ca741817901dacd93524d05c98e1fd888177351223b81379f3d9bcb49eb9f3b3419e2757f601e91d611b708aa75a90e3e7eddaf668006933f5ce06ff5fc6993cf68ed52d4bfedd40cd9c3d9bd5d1a1ff4ddf5e80e3692e9f40ef4a2f8cda749c27779c116b164f6fea698047f664f3802266b3dfb137fafe6c5548cfe944934d989247b448970b64198fb9087dd8dc4371162eed8bee93d7c1838b0bb4e6dcd1177670bd6bb3700fd6b9cdbabce42013645dfbd8f857acb371bed930f0f0fea42636880ac9aac6f72218905ec3d44b1d3bc8802a886c00ae8306b26d58a518310445ca1e395ad6e2f0da6ed612e3386d9eb20c97b3c5dba4616fdb8c248f73182b0499b4352e5e5e7f0fd11ac9b4c44f488952e83cb782ea528432186381c9f94166256ac05bec3412de62fe138f72f3b28546888f6a484e9f664aba471e36e804b2eed48961a37c145f89e65e4fdcdf6fdf36bdadc2fe2bfb82a23a7e15d85553bc91cb5decbb83308942fd2e4e9f55902b9957153d55b820c65754c09eb2d6204da760fa98d43814baf7150b96a79830e62a39d0c0865dd51f06f6dfbcd913fc03577eb3aaf66a60d0b79b8927f0964bdf17983086e3898681b5fe48ca0fedaf28a6bd40fe821119991a3b1d871ad9a169b01f8adcd051780cac02580e123ad8bdcf4453168f6d81b61e0cfe952c89e29a60c2b8542b62d5bc15dd6bb16a67f3447a320e529c3a3e158b42a3cd704762b00b680d1755ae04e0f6fe51ed56dcbcb0be2e440aca7a374fb1cb96bd5d0738fe5070f8693b687bf06c758637807d88313590c1b11e48ad815817cb1eb41b40777e708261c87c5f45d3dd1d6303a75377e6d6cb5a9c2340cbdf4b1c7b9e59cc88cec5736156af5cfd4dd1a711f1e0f3b7838f690e5ac6d391510ebf61829ab3fb340f7153ccca061bba56dba4d3ae2716037628ae0153fa02baecc871bc26e34a943ae7e24a4759aaf034760db4281de7f072ae8ff6cdf306d9bc633c4a2254530857f53becfe665268f38fa0c4b37be92e08a68640f9e1311529db34419340f79b5b32f6ee40f11cc1c2e3db7644006357dc863863f22ca366c2c19bc4ceb5ef2d7289ab160de917567c439261968dfabac512c40e87b6a54fbac29cfa92954ceb369a54b94d80f9bd1a60aeee614cf31c99cbdf5c2c42eac68f58cea51f2f84c8f966ad658fb8791d8c974e36df1fda2ba39ed0b0378c20509d81d1b24c30b660238e5e34fea782e432cce664efcff1f38f115fa5798dbfeb51512a15a4664a3012f9a15cea3d1e5b982ce659974da2cfcd7124dfe12990021896b874437d5dc3a13916d9fcd69c3d38f2a0c71fd37515e22793657ad09ca82e7305634443a73f15b0044817945a6baa5b16027a7ffbc3f2e0c97401a96d77648a3739059996230ec93ce41608f827e4d6b4484d9698765f0629614f21a8b84afae461c21317fb885369b1ea83d2a1af9cc18973f75c9c6e611bcc3fa6f34264035e7c13004e0a35a1e315868452b7a7c8d4d7d34064913e5d19c23af39ef6bbaf8d38c0fbadc5c4fdf73221e868b83230c326985399c6c74bf2d7a39533bbb14a1795998f2b4228baf47ec528832eb28ae8be7efceed4b42e58d87c3e694e7af029ed9dde2072fbf85cc81169fa257198e197ade59bdaf1c407e9fa7b953616a6d1019a0ecc13523f49a12f26fd6d1f7b9a5fd7cb64349efbd53a1ac8b5e749b490fa9398a24a99538e42b2681e7e5f4074e6570bc72698241adb1ba8e5592b1bddb0b665b40b3556bd938a2d63b443196dd5501b9d1c4bbcda80de18c3d4e06692db3b882ad35e314070bafa11ed2e48af0c7faa139aaa084a27b4f16d8f04ebe6f3ddc6ffb491aa5e0a32820fe6d204c801e80c3e46a0cbe2dcf6b7a97c82ec1a7828caebcfc4253b6ab357b561ea8725d14924437a4bfd51f95ed55f2b89de0591dc87810c50726200b0bafbbfff53bbbe138449f054ecc97c357a783df15f857b43cbd8257f08d7965975fb73af29de9b2a90faba4ecb44890b0c30798e304df0c722ae8541af399792738911dd54dda011742a6fa222ff712d5f879afef13de6908e2b87c2ed30d3e19dacf8b4201980ca959c315be8f8f7c072537fcf7956195ca13bea104981050839f47d860165750e6925818c5a369ecd1a2f7c4b0b9da152bddf3e556286c7677a460cd7813da2beb0ae1d0af1a6cb515792306033bbf35026d9295aae5051bc0f5d17ea1aee5163c99af2a55b1e5fb390097471093dcd9b8e2f3d1feda008e5eedf9e534724580eb1313ac5fd868a8c6c10005ccef8e7e4612fdbdda5bf3c8d3176feb84b5779893923ef7d6c4e91a7b40d5fb34dcfcebe619e7f924802500098222006c62758cbb85d167298cb1299f87ca7233c62af86d856bfa8460d766163c472ba5156e65450f975d13476dd3cd62f4a6be4fa773f4cb6432aa6a1c4a9a07e4a25d7aface37f62dfb61bc5bd125aec27e8de0db76eeb088839b8b10a51ba97c518a110f40ee87c3dae28237b709d601b245712ff73ca7c77b0c5fb55c5ba874ef7e56b656cb6e26e3a2a9ca1901d518fb1788bc14b60fb3760893459337fc5f170d52a12ff275d715d75896c0a91687823b7dba4b717d4c05952fea87d27544c8deeee9de9289a7ae9ea6e7e11b9c3cff4f6125fe039949f7c167e4174ae493e590bdb7882080bc9e427cd642deac07beaaf3f354078edb589cb767123a7aadf548b4fb7daeca83f4b8514f907aa14b50c114e4023a778214badf38e7a5f5a573e490dbbc3da5292bd0a3f5c5bb09f4e40bfe3336dd56d49f83335378828961eae17931e0b793d1b3ff422d73f21ee6f99ab42f368bb94d1d89da21f230dce9b51b769385859a557537e31bc169234260566a1d826ad7dcddce7cfc5ff09bf3d7ff2073473ae3a2eaab04728b55d55863025cbfbe3884ea55b7b0e8e4f3d1605bfdaf95656d79257205970f4db96ef957ad6ee76b43b017dbade7a81960f1eee89892cda0dec99512a8ff1bbc2ac93af581b90315bb866efdd70b1d5f857b69b512298d1108e469f8122d1cfa916dea972050f3baf6b315678347989638b02aa96d8f0a30edb7b8310a82b2a012d2c2be89258eb360a29b81ceb8e0ae7e73867fc20794d0164e23e1ed2288fea8a6fb7263720f21ce3b630387c46bc8dc2bf5789a8296c7c81c4daa636d4dcfb8578596c7de6517f99f8df533244237f6141e535c1041eabc5d2076aa3b04c179fb4f1d7c456f010af195d9d50f4a32fdb04ee776c4cf62910235ef243b4fcac1e541b226a79367129f164d54c84f0c923977b5ddfd2af6b5667f4c1112810d92b54fee3cd8258416f6fcc0fd163d2bf636c08468bdafd6f3068bfa5ee59fb2ef61a33459c88a0a48a645a2725d5c77659eb9b84b380fcf84e26a11a6a1241f359e76803ece3d4320bc5a728b58c153f7f085f7e9c17fe52fcdc8edbf1a0842adc032652727da7bad3abc4e60f40a8415579ba1ac7303203c07503a28b69afb4abb73d5e1e806986a5f46e549d13ad2e33c8b8b301afb30a18bdaa5805d074a74e4e99f6c8dd69e55a474e961ca7f8849664dcd4bc25b13e27d93464683b5bdd84164e06741127b623e71db56e322aab71f6e34ad5702ada7331c657ccbd4063bf1955ae5aafaadb865a1b92377b4d15323d0222c57874bfae352158f823b412b7933126a0d34b6af028409263304b1ea7b6b6b65cf5dab1e6b6c34a418d7a74e399616ee864019aecfe459765b44904de338a354cc0fc4edea90f1a6e4e9b14dbd02bc150bf648536f3821c18f8517f096fa7330d334abbd452e5f0a9ba57ac2f0473366d12cc39646a875d4683368339ba8cbf8f4c8b945434c644d7cb1344e4f4c1d5aaf89bfa7aa04284545152076b47185ff6ef90f7cd458581265cccb3fcdd3acdb23", 0x2000, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xfd6, {0x7, 0x0, 0x10000000000007, 0x1, 0x5, 0x400000, {0x0, 0x10000004, 0x5, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) (async) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x0, 0x0) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001200010a00000000ffdbdf25070000000c00d90003"], 0x28}}, 0x0) 28.011395224s ago: executing program 2 (id=720): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x2c8adcf884fa2429, './file0\x00'}, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014004000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.007820884s ago: executing program 2 (id=723): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x19624bc, &(0x7f00000037c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYRES64, @ANYBLOB="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", @ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='pids.events\x00', 0x275a, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1ef, &(0x7f0000000b80)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 27.095616012s ago: executing program 2 (id=736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtclass={0x24, 0x28, 0x202, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x17, 0xb}, {0xfff2, 0x11}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.974559236s ago: executing program 2 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 26.903660048s ago: executing program 34 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x80d, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.542691113s ago: executing program 0 (id=973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30}, 0x80d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.438819486s ago: executing program 0 (id=976): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtclass={0x24, 0x28, 0x202, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x17, 0xb}, {0xfff2, 0x11}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 12) 3.700417878s ago: executing program 0 (id=984): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x16}, @flat=@weak_binder={0x77622a85, 0x10a, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 3.699746068s ago: executing program 0 (id=985): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f0000004440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004500)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000004600)=0xe8) r2 = getgid() mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x1e020, &(0x7f0000004640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{}, {@default_permissions}], [{@appraise_type}]}}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019", 0x21}], 0x1) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002340)={0x50, 0x0, r3, {0x7, 0x2b, 0x7, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000023c0)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x78, 0x0, 0x8, {0x7, 0x5, 0x0, {0x4, 0x8000000000000001, 0x4, 0x0, 0x1cc2f0c3, 0x200000000000101, 0x4, 0x6, 0xbfb, 0x4000, 0x9, r4, r5, 0x8, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(0x0, 0x0, 0x0) capget(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) execve(&(0x7f0000000a00)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x10, 0x13, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 3.440697736s ago: executing program 5 (id=989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000780)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 3.386979318s ago: executing program 5 (id=991): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x40000004}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x74}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 3.31044841s ago: executing program 5 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x0, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x200000d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 3.200238683s ago: executing program 5 (id=995): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x11) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@user_xattr}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47e, &(0x7f0000001340)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000500000/0x2000)=nil, 0x2000, 0x17) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x9, 0x7f, 0x8000, 0x4, "42341f00"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) 2.442607246s ago: executing program 6 (id=1000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30}, 0x80d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.356520879s ago: executing program 6 (id=1002): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000780)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 2.32146092s ago: executing program 6 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x4048000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a2a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010500000001000000000624fdee7c1b0905810308000300000904010000020d00000904010102020d0000090582"], 0x0) syz_usb_connect$uac3(0x1, 0x101, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x3, 0x1, 0x6, 0x70, 0x7, {0x8, 0xb, 0x2, 0x1, 0x1, 0x0, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x3e, 0x1}, [@selector_unit={0xc, 0x24, 0xc, 0x8, 0x7, "52e9afbe5cd992"}, @feature_unit={0x1d, 0x24, 0x7, 0x1, 0x1, [0x8, 0xff, 0xd, 0xb, 0xa, 0x8]}, @multiply_unit={0xb, 0x24, 0xd, 0x10, 0x2, 0x0, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x62d8, 0x20}, @as_header={0x17, 0x24, 0x1, 0x7, 0x2, 0x6, 0x1, 0x4, 0xd7, 0x3de6, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xb, 0xa, 0xf, {0xa, 0x25, 0x25, 0x3, 0xa2, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x3, 0xf4, 0x7, "22d9db7be74b71"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x2, 0xe1, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xf, 0x7f, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x55, 0x0, 0x6, 0x0, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x608, 0x1, 0x6, 0x4c, {0xa, 0x25, 0x25, 0x1, 0x4, 0xd4}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x7, 0x4, 0x57, 0x8, 0xab}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x402}}, {0xaa, &(0x7f0000000340)=@string={0xaa, 0x3, "eae7bd891b99d583684054730b46d71ef1b73908694ff3f4e6e16a3b7c2cdbb292308bcf5b7045b6a9b246355fd7a9baa353eb832961c3aa14e1b9683ddf70f7bcb70abbe9f36cee8ccb58c159c9a28df135e7946e8127790950af482b5d4b14f6c3f6ae2965d0ba9e8778fd8d9e1902300070fa41c44aba14fa2fee9cb969e54fd54cb0aaf74c851d57c232ee1bff82fe0ea9818c93dbf1a096ac9e411a8c006f03bcfc8e3a10a7"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc0a}}, {0xe6, &(0x7f0000000500)=@string={0xe6, 0x3, "74882dc68a4e13e31766fbe15d95341b0f7ad170a630fb02b05a535c4b7fb26d8c3887fd980e9a3623530592d4d077efdab75386fffa9acd89ffcdc7875a37552eb35d7a185292eebccc19385956aad1afcba7883467eebb3f6cbf08b8d288a31a844daff51383dab1b01b684c98ba0ae4064d7ee8cf9cf567a1a866c9dfaf2cd6f49ff959e8e463ac31fb8791d9d267e1268c4ddb8ca323a937f8c6e616700cb46aac7311681b54f504a0a5c9660cde5618f8d4d1f44e0107ea2bbbe8eb9ae1019a082ae87e03d580ab5de914310cd9232276501d4ea10eb173addee82332763a99a11f"}}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000104030000810200000000ffff0000100500010003"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) unshare(0x26000400) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$sock(r4, &(0x7f0000002080), 0x8000379, 0x4000801) shutdown(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.254388852s ago: executing program 5 (id=1006): ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x1}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@private1, @in=@local, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in6=@mcast1, 0x6, 0x4, 0x1, 0x0, 0x40401}]}]}, 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a0001"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000440)=0xf) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000046c0)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x51c, &(0x7f0000000700)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1.946752981s ago: executing program 7 (id=1010): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') writev(r0, &(0x7f00000007c0)=[{&(0x7f0000001440)='d', 0x1}], 0x1) 1.946584881s ago: executing program 5 (id=1011): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x16}, @flat=@weak_binder={0x77622a85, 0x10a, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 1.872393194s ago: executing program 35 (id=1011): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x16}, @flat=@weak_binder={0x77622a85, 0x10a, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 1.870572614s ago: executing program 7 (id=1013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30}, 0x80d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.843867464s ago: executing program 4 (id=1015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtclass={0x24, 0x28, 0x202, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x17, 0xb}, {0xfff2, 0x11}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c041}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 14) 1.451025987s ago: executing program 0 (id=1016): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x3, 0x38) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000002700)=""/79, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001680)) r4 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000001c0)={0x0, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/198, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2cf2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r2}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="000022f001040600e700040008000180c2000002aaaaaaaaaa130800457100300066000004019078ac14140d000000000400907800000000459d0fff0067009c07624052000600000000e000efaf24817cd55841308384350a5b367140df3cef43b5eaa54c262910e1e218fdb67365eaddeada1226f38374dbad65eb4346ddb0ed1d59cc98608aae5f78b188631922032a758b34b7eed84844ce09b36cda8f16040bb178eb908d4752385b7ecd37432569ec051fd8d6a63d9c655668dfe192ba64f00a583614"], 0x4c) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 1.214465083s ago: executing program 7 (id=1017): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) flock(r0, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3], 0x27) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x4, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.170973164s ago: executing program 4 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x0, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x200000d0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14) 1.027082989s ago: executing program 7 (id=1019): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x3, 0x25000, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket(0x21, 0x3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtclass={0x24, 0x28, 0x202, 0x70bd2f, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0xfff2, 0x11}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c041}, 0x40090) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000001c0)={0x30000, 0x4000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.0006215s ago: executing program 4 (id=1020): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0xfff1, r0, &(0x7f0000000000), 0x200a00}]) 737.542408ms ago: executing program 4 (id=1021): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000180)=0x4, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x800c0) 647.178851ms ago: executing program 7 (id=1022): ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x1}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@private1, @in=@local, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x2, @in6=@mcast1, 0x6, 0x4, 0x1, 0x0, 0x40401}]}]}, 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000002700010000000000000000000a0001"], 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000440)=0xf) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000046c0)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x51c, &(0x7f0000000700)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 646.547261ms ago: executing program 4 (id=1023): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0x1) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xbcc8, 0x0, 0x0, 0x205}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_MCE_KILL(0x23, 0x7, 0x7fffffffeffe) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x3d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x401, 0xdb7, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x41}}}, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r7 = fsopen(&(0x7f00000002c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x9) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r9, 0x100, 0x1) getdents64(r9, 0x0, 0xfffffffffffffe3e) dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) io_setup(0xfffffff8, &(0x7f0000000000)) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r10, 0x0, 0x0, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG(r11, 0x50009402, 0x0) socket$nl_route(0x10, 0x3, 0x0) 508.096745ms ago: executing program 6 (id=1024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f0000000780)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 464.366416ms ago: executing program 6 (id=1025): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff0720670600001f000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x10000000, 0x80000000, {0x0, 0x0, 0x0, r11, 0x69c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0xd39d}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) sendto$packet(r8, &(0x7f0000000080)="fdeb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x2f, 0x20, 0x7, 0x6, 0x10, @dev={0xfe, 0x80, '\x00', 0x1e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x700, 0x9, 0x6}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @private}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x11c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x81) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x16}, @flat=@weak_binder={0x77622a85, 0x10a, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 179.282775ms ago: executing program 6 (id=1026): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x58, &(0x7f0000000100)={&(0x7f0000000280)=@bridge_getlink={0x15, 0x12, 0xd78a15a23bbb6357, 0x70bd26, 0x25dbdbfb, {0x7, 0x0, 0x0, 0x0, 0x20, 0x2104}, [@IFLA_XDP={0x4, 0x1d, 0x0, 0x1, [@IFLA_XDP_FD, @IFLA_XDP_FD]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x4000000) io_setup(0x2, &(0x7f0000000400)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c00048034"], 0x108}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800030000bf1c000a0001"], 0x48}}, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r8) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000000)={0x3, r9, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x9, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0x1}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x85, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x1, 0x4, 0xc}, {0x7f, 0x8, 0xb, '\x00', 0x8}, {0x8, 0xc, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xee, 0x3, 0x26}, {0xcd, 0x3, 0xb, '\x00', 0x9}, {0xf, 0xee, 0xa, '\x00', 0x4f}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x8, 0x6, 0x2}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0xa}, {0x0, 0x80, 0x5, '\x00', 0x6}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x23, 0x3, '\x00', 0x10}, {0x1, 0x23, 0x5, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 47.172538ms ago: executing program 8 (id=1012): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 14.90177ms ago: executing program 4 (id=1027): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x1d, 0x28, 0x68, 0x0, 0x16, 0x6, 0x0, @multicast1, @empty}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x1b87, 0x0, 0xfff9}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x70, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x1, 0xffe0}, {0xffe0, 0xa}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x6, 0x200, 0xc, 0x1, 0x40000002, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x18, 0x7, 0xf, 0x0, 0x4, 0x9, 0x4}}, {0xc, 0x2, [0x4, 0x7f, 0x7, 0xd61]}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbd2, &(0x7f00000017c0)="$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") r5 = syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)={0x60f34819ac974d, 0xa0, 0x29}, 0x18) renameat2(r6, &(0x7f0000000380)='./file1\x00', r5, &(0x7f00000004c0)='./file1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0xf00a, 0xee, 0x40, 0x9}, {0x2, 0x40, 0xff, 0x400}, {0x200, 0x4, 0x3, 0x3}, {0x8, 0x1f, 0xa, 0x1}, {0xd, 0x4, 0x10, 0x7}]}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r7}, 0xc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r8, 0x0, 0x483, &(0x7f0000000000)={0x3a, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 'fo\x00', 0x26, 0x1800000, 0x39}, 0x2c) 14.15171ms ago: executing program 7 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30}, 0x80d0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 0 (id=1029): io_setup(0x20fe, 0x0) io_pgetevents(0x0, 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r2, 0x2, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) sendto$packet(r2, &(0x7f0000000000)="43a2288c0bdfbefbe8322185e5baddd3829c3a62675bca43f66cd4606eb34a977d0912f3ebd45b09b666c0d7e729074dd98b462afb6f32baef16f55ceadac88d", 0x40, 0x0, &(0x7f00000000c0)={0x11, 0x3, r3, 0x1, 0x77, 0x6, @random="1bc4a17a8f5f"}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[], 0x50}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) setpgid(0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="86dd00"/14, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): pdate_fn+0x270/0x270 [ 65.434373][ T2353] ? 0xffffffffa00041c0 [ 65.438533][ T2353] ? is_bpf_text_address+0x177/0x190 [ 65.443846][ T2353] ? kernel_text_address+0xa0/0xd0 [ 65.449014][ T2353] ? __kernel_text_address+0xd/0x30 [ 65.454244][ T2353] ? unwind_get_return_address+0x4d/0x90 [ 65.459974][ T2353] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 65.466160][ T2353] ? arch_stack_walk+0xfc/0x150 [ 65.471067][ T2353] ? stack_trace_save+0xa6/0xf0 [ 65.476504][ T2353] ? vmx_vcpu_pi_load+0x14c/0x840 [ 65.481556][ T2353] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 65.486948][ T2353] ? _parse_integer_limit+0x18e/0x1d0 [ 65.492343][ T2353] ? __asan_set_shadow_00+0xe/0x10 [ 65.497487][ T2353] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 65.502355][ T2353] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 65.507588][ T2353] ? __this_cpu_preempt_check+0x13/0x20 [ 65.513174][ T2353] ? xfd_validate_state+0x70/0x150 [ 65.518327][ T2353] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 65.523683][ T2353] ? __local_bh_enable_ip+0x58/0x80 [ 65.528911][ T2353] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 65.534474][ T2353] kvm_vcpu_ioctl+0x8ed/0xc00 [ 65.539175][ T2353] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 65.544412][ T2353] ? selinux_file_ioctl+0x3ad/0x4c0 [ 65.549642][ T2353] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 65.555222][ T2353] ? mutex_unlock+0x8f/0x230 [ 65.559881][ T2353] ? __cfi_mutex_unlock+0x10/0x10 [ 65.564933][ T2353] ? __fget_files+0x2d1/0x330 [ 65.569638][ T2353] ? security_file_ioctl+0x95/0xc0 [ 65.574773][ T2353] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 65.580011][ T2353] __se_sys_ioctl+0x12f/0x1b0 [ 65.584708][ T2353] __x64_sys_ioctl+0x7b/0x90 [ 65.589313][ T2353] x64_sys_call+0x58b/0x9a0 [ 65.593921][ T2353] do_syscall_64+0x4c/0xa0 [ 65.598357][ T2353] ? clear_bhb_loop+0x30/0x80 [ 65.603048][ T2353] ? clear_bhb_loop+0x30/0x80 [ 65.607740][ T2353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.613697][ T2353] RIP: 0033:0x7f1bd879ce59 [ 65.618127][ T2353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.637740][ T2353] RSP: 002b:00007f1bd968d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.646166][ T2353] RAX: ffffffffffffffda RBX: 00007f1bd8a15fa0 RCX: 00007f1bd879ce59 [ 65.654627][ T2353] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 65.662701][ T2353] RBP: 00007f1bd968d090 R08: 0000000000000000 R09: 0000000000000000 [ 65.670709][ T2353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.678697][ T2353] R13: 00007f1bd8a16038 R14: 00007f1bd8a15fa0 R15: 00007ffcf4313cd8 [ 65.686707][ T2353] [ 65.693287][ T2355] binder: 2291:2355 unknown command 0 [ 65.698723][ T2355] binder: 2291:2355 ioctl c0306201 200000000080 returned -22 [ 65.715205][ T288] EXT4-fs (loop0): unmounting filesystem. [ 65.728563][ T2355] binder: BINDER_SET_CONTEXT_MGR already set [ 65.734958][ T2355] binder: 2291:2355 ioctl 4018620d 200000004a80 returned -16 [ 65.775056][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.786920][ T2360] input: syz1 as /devices/virtual/input/input6 [ 65.794374][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.807936][ T2363] loop7: detected capacity change from 0 to 512 [ 65.811959][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.832970][ T2363] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 65.845807][ T2366] device syzkaller0 entered promiscuous mode [ 65.852025][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.859699][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.868768][ T2366] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 65.876907][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.884531][ T2363] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.896966][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.905257][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.912837][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.921622][ T2368] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 65.930738][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.938306][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.940056][ T2368] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.946822][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.974827][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.982353][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.984445][ T2371] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 65.990271][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.005649][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.013201][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.021045][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.029151][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.036804][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.050037][ T2126] EXT4-fs (loop7): unmounting filesystem. [ 66.052824][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.063316][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.070790][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.078373][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.086029][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.093522][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.100971][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.108399][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.115881][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.123457][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.130990][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.138430][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.145932][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.153388][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.161112][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.168549][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.179115][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.186569][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.194073][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.201533][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.208969][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.216431][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.223862][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.231314][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.238738][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.246238][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.253680][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.261158][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.268567][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.276005][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.283433][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.290867][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.298278][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.305773][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.313228][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.320697][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.328110][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.335548][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.342975][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.350414][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.357853][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.365354][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.372795][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.380237][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.387676][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.395146][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.402787][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.410257][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.417678][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.425126][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.432595][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.440072][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.447510][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.455028][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.462469][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.469926][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.477356][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.484811][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.492258][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.499748][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.507165][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.514639][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.522076][ T652] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.531701][ T652] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 66.537327][ T2014] EXT4-fs (loop6): unmounting filesystem. [ 66.581009][ T2379] device syzkaller0 entered promiscuous mode [ 66.671885][ T2383] device syzkaller0 entered promiscuous mode [ 66.679572][ T2386] fido_id[2386]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 66.688962][ T2389] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.707386][ T2389] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.728979][ T2389] FAULT_INJECTION: forcing a failure. [ 66.728979][ T2389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 66.751456][ T2389] CPU: 0 PID: 2389 Comm: syz.4.833 Not tainted syzkaller #0 [ 66.758846][ T2389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 66.768947][ T2389] Call Trace: [ 66.772285][ T2389] [ 66.775246][ T2389] __dump_stack+0x21/0x24 [ 66.779638][ T2389] dump_stack_lvl+0x110/0x170 [ 66.784362][ T2389] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.789422][ T2389] ? debug_smp_processor_id+0x17/0x20 [ 66.794834][ T2389] ? try_charge_memcg+0x258/0x1650 [ 66.799986][ T2389] dump_stack+0x15/0x24 [ 66.804188][ T2389] should_fail_ex+0x3bf/0x510 [ 66.808893][ T2389] should_fail_alloc_page+0x61/0x90 [ 66.814152][ T2389] prepare_alloc_pages+0x131/0x570 [ 66.819308][ T2389] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 66.824549][ T2389] ? cgroup_rstat_updated+0xf0/0x360 [ 66.829868][ T2389] __alloc_pages+0x15b/0x610 [ 66.834501][ T2389] ? __cfi___alloc_pages+0x10/0x10 [ 66.839653][ T2389] ? folio_add_lru+0x2d6/0x650 [ 66.844462][ T2389] ? mas_state_walk+0x7ab/0xa80 [ 66.849352][ T2389] __folio_alloc+0x12/0x40 [ 66.853981][ T2389] handle_mm_fault+0x1989/0x26b0 [ 66.858963][ T2389] ? __cfi_handle_mm_fault+0x10/0x10 [ 66.864370][ T2389] ? down_read_trylock+0x27f/0x660 [ 66.869538][ T2389] ? up_read+0x56/0x1d0 [ 66.873739][ T2389] ? lock_mm_and_find_vma+0x9e/0x320 [ 66.879055][ T2389] ? do_user_addr_fault+0x2eb/0x1030 [ 66.884372][ T2389] do_user_addr_fault+0x61e/0x1030 [ 66.889509][ T2389] exc_page_fault+0x51/0xb0 [ 66.894032][ T2389] asm_exc_page_fault+0x27/0x30 [ 66.898993][ T2389] RIP: 0010:clear_user_erms+0xa/0x10 [ 66.904345][ T2389] Code: 74 03 f3 48 ab 83 e2 07 74 04 89 d1 f3 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 90 90 90 48 83 f9 40 0f 82 76 ff ff ff aa 31 c0 c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 d4 72 ba fd [ 66.923981][ T2389] RSP: 0018:ffffc90000e37538 EFLAGS: 00050206 [ 66.930074][ T2389] RAX: 0000000000000000 RBX: ffffc90000e37a80 RCX: 00000000001f6a00 [ 66.938161][ T2389] RDX: 0000000000000000 RSI: 00000000001fe200 RDI: 000020000000a000 [ 66.946167][ T2389] RBP: ffffc90000e37690 R08: ffff88811960bcc0 R09: 0000000000000005 [ 66.954167][ T2389] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000002800 [ 66.962163][ T2389] R13: 0000200000002800 R14: dffffc0000000000 R15: 00000000001fe200 [ 66.970157][ T2389] ? iov_iter_zero+0x3ba/0xf60 [ 66.974954][ T2389] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 66.980365][ T2389] ? __cfi_iov_iter_zero+0x10/0x10 [ 66.985515][ T2389] ? iomap_iter+0x72b/0xb20 [ 66.990125][ T2389] __iomap_dio_rw+0x1155/0x1c90 [ 66.995013][ T2389] ? __cfi___iomap_dio_rw+0x10/0x10 [ 67.000246][ T2389] ? downgrade_write+0x370/0x370 [ 67.005211][ T2389] ? kasan_set_track+0x60/0x70 [ 67.009993][ T2389] ? io_submit_one+0x133/0x1910 [ 67.014888][ T2389] ? __se_sys_io_submit+0x17b/0x3e0 [ 67.020111][ T2389] ? down_read+0xa6/0xf0 [ 67.024383][ T2389] iomap_dio_rw+0x41/0x90 [ 67.028736][ T2389] ext4_file_read_iter+0x367/0x470 [ 67.033882][ T2389] aio_read+0x348/0x4b0 [ 67.038071][ T2389] ? __get_reqs_available+0x420/0x420 [ 67.043471][ T2389] ? kasan_save_alloc_info+0x1f/0x30 [ 67.048780][ T2389] ? __kasan_slab_alloc+0x72/0x80 [ 67.053840][ T2389] io_submit_one+0x6d7/0x1910 [ 67.058573][ T2389] ? irqentry_exit+0x37/0x40 [ 67.063195][ T2389] ? lookup_ioctx+0x2b0/0x2b0 [ 67.067898][ T2389] ? asm_exc_page_fault+0x27/0x30 [ 67.072953][ T2389] ? memset+0x35/0x40 [ 67.076958][ T2389] ? blk_start_plug+0x9b/0x130 [ 67.081755][ T2389] __se_sys_io_submit+0x17b/0x3e0 [ 67.086805][ T2389] ? __x64_sys_io_submit+0x90/0x90 [ 67.091939][ T2389] ? ksys_write+0x1fa/0x260 [ 67.096474][ T2389] ? __cfi_ksys_write+0x10/0x10 [ 67.101350][ T2389] ? debug_smp_processor_id+0x17/0x20 [ 67.106763][ T2389] __x64_sys_io_submit+0x7b/0x90 [ 67.111740][ T2389] x64_sys_call+0x81d/0x9a0 [ 67.116274][ T2389] do_syscall_64+0x4c/0xa0 [ 67.120718][ T2389] ? clear_bhb_loop+0x30/0x80 [ 67.125416][ T2389] ? clear_bhb_loop+0x30/0x80 [ 67.130111][ T2389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.136029][ T2389] RIP: 0033:0x7f692859ce59 [ 67.140478][ T2389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.160117][ T2389] RSP: 002b:00007f6929490028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 67.168578][ T2389] RAX: ffffffffffffffda RBX: 00007f6928815fa0 RCX: 00007f692859ce59 [ 67.176568][ T2389] RDX: 0000200000000540 RSI: 0000000000003f0a RDI: 00007f692946f000 [ 67.184555][ T2389] RBP: 00007f6929490090 R08: 0000000000000000 R09: 0000000000000000 [ 67.192545][ T2389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.200539][ T2389] R13: 00007f6928816038 R14: 00007f6928815fa0 R15: 00007ffeff6bb488 [ 67.208535][ T2389] [ 67.224577][ T1774] usb 6-1: USB disconnect, device number 5 [ 67.256401][ T2396] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.289131][ T289] EXT4-fs (loop4): unmounting filesystem. [ 67.329561][ T2402] device syzkaller0 entered promiscuous mode [ 67.340345][ T2396] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 67.347313][ T2402] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 67.351677][ T2396] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.394580][ T2396] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 67.414684][ T2396] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 67.420361][ T2406] FAULT_INJECTION: forcing a failure. [ 67.420361][ T2406] name failslab, interval 1, probability 0, space 0, times 0 [ 67.439423][ T2396] EXT4-fs (loop7): This should not happen!! Data will be lost [ 67.439423][ T2396] [ 67.450513][ T2406] CPU: 0 PID: 2406 Comm: syz.4.836 Not tainted syzkaller #0 [ 67.458034][ T2406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 67.459343][ T2396] EXT4-fs (loop7): Total free blocks count 0 [ 67.468121][ T2406] Call Trace: [ 67.468133][ T2406] [ 67.468142][ T2406] __dump_stack+0x21/0x24 [ 67.484819][ T2406] dump_stack_lvl+0x110/0x170 [ 67.489537][ T2406] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.494593][ T2406] dump_stack+0x15/0x24 [ 67.495029][ T2396] EXT4-fs (loop7): Free/Dirty block details [ 67.498781][ T2406] should_fail_ex+0x3bf/0x510 [ 67.509382][ T2406] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 67.515512][ T2406] __should_failslab+0xac/0xf0 [ 67.520319][ T2406] should_failslab+0x9/0x20 [ 67.524850][ T2406] kmem_cache_alloc+0x3b/0x320 [ 67.525737][ T2396] EXT4-fs (loop7): free_blocks=65280 [ 67.529671][ T2406] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 67.535004][ T2396] EXT4-fs (loop7): dirty_blocks=33 [ 67.541078][ T2406] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 67.541115][ T2406] kvm_mmu_topup_memory_cache+0x20/0x30 [ 67.557712][ T2406] kvm_mmu_load+0x99/0x2570 [ 67.562256][ T2406] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 67.566916][ T2396] EXT4-fs (loop7): Block reservation details [ 67.567750][ T2406] ? queue_delayed_work_on+0x10d/0x160 [ 67.579314][ T2406] ? kvm_apic_has_interrupt+0x776/0x780 [ 67.584918][ T2406] vcpu_enter_guest+0x4d3b/0x7050 [ 67.585409][ T2396] EXT4-fs (loop7): i_reserved_data_blocks=33 [ 67.590004][ T2406] ? __cfi_avc_has_perm+0x10/0x10 [ 67.590030][ T2406] ? pvclock_gtod_update_fn+0x270/0x270 [ 67.590059][ T2406] ? 0xffffffffa00041c0 [ 67.610819][ T2406] ? is_bpf_text_address+0x177/0x190 [ 67.616158][ T2406] ? kernel_text_address+0xa0/0xd0 [ 67.621319][ T2406] ? __kernel_text_address+0xd/0x30 [ 67.626613][ T2406] ? unwind_get_return_address+0x4d/0x90 [ 67.632289][ T2406] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 67.638617][ T2406] ? arch_stack_walk+0xfc/0x150 [ 67.643516][ T2406] ? stack_trace_save+0xa6/0xf0 [ 67.648409][ T2406] ? vmx_vcpu_pi_load+0x14c/0x840 [ 67.653475][ T2406] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 67.658892][ T2406] ? _parse_integer_limit+0x18e/0x1d0 [ 67.664321][ T2406] ? __asan_set_shadow_00+0xe/0x10 [ 67.669493][ T2406] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 67.674388][ T2406] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 67.679639][ T2406] ? __this_cpu_preempt_check+0x13/0x20 [ 67.685222][ T2406] ? xfd_validate_state+0x70/0x150 [ 67.690439][ T2406] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 67.695766][ T2406] ? __local_bh_enable_ip+0x58/0x80 [ 67.701004][ T2406] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 67.706591][ T2406] kvm_vcpu_ioctl+0x8ed/0xc00 [ 67.711327][ T2406] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 67.716577][ T2406] ? selinux_file_ioctl+0x3ad/0x4c0 [ 67.721817][ T2406] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 67.727410][ T2406] ? mutex_unlock+0x8f/0x230 [ 67.728408][ T2396] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 67.732037][ T2406] ? __cfi_mutex_unlock+0x10/0x10 [ 67.732073][ T2406] ? __fget_files+0x2d1/0x330 [ 67.753980][ T2406] ? security_file_ioctl+0x95/0xc0 [ 67.759134][ T2406] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 67.764458][ T2406] __se_sys_ioctl+0x12f/0x1b0 [ 67.769159][ T2406] __x64_sys_ioctl+0x7b/0x90 [ 67.773950][ T2406] x64_sys_call+0x58b/0x9a0 [ 67.778492][ T2406] do_syscall_64+0x4c/0xa0 [ 67.782930][ T2406] ? clear_bhb_loop+0x30/0x80 [ 67.787708][ T2406] ? clear_bhb_loop+0x30/0x80 [ 67.792402][ T2406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.798348][ T2406] RIP: 0033:0x7f692859ce59 [ 67.802799][ T2406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.822446][ T2406] RSP: 002b:00007f6929490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 67.830880][ T2406] RAX: ffffffffffffffda RBX: 00007f6928815fa0 RCX: 00007f692859ce59 [ 67.838867][ T2406] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 67.846864][ T2406] RBP: 00007f6929490090 R08: 0000000000000000 R09: 0000000000000000 [ 67.854859][ T2406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.862944][ T2406] R13: 00007f6928816038 R14: 00007f6928815fa0 R15: 00007ffeff6bb488 [ 67.871125][ T2406] [ 67.880662][ T2396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.834'. [ 67.902827][ T2411] set_capacity_and_notify: 3 callbacks suppressed [ 67.902848][ T2411] loop0: detected capacity change from 0 to 256 [ 67.931772][ T2411] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.931856][ T2413] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 67.953985][ T2411] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 67.969816][ T2411] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 68.049735][ T2420] device syzkaller0 entered promiscuous mode [ 68.090212][ T2418] loop6: detected capacity change from 0 to 512 [ 68.105319][ T2427] loop5: detected capacity change from 0 to 512 [ 68.112188][ T2418] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 68.121547][ T2418] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.152677][ T2427] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.175798][ T2431] syz.0.838 uses obsolete (PF_INET,SOCK_PACKET) [ 68.200073][ T2427] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.243623][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 68.243650][ T28] audit: type=1400 audit(1781328879.483:343): avc: denied { append } for pid=2410 comm="syz.0.838" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.356100][ T28] audit: type=1400 audit(1781328879.523:344): avc: denied { sqpoll } for pid=2433 comm="syz.7.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 68.401283][ T2441] loop4: detected capacity change from 0 to 512 [ 68.414888][ T28] audit: type=1400 audit(1781328879.573:345): avc: denied { write } for pid=2436 comm="syz.4.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.440657][ T2443] device syzkaller0 entered promiscuous mode [ 68.471505][ T2441] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.493987][ T492] EXT4-fs (loop5): unmounting filesystem. [ 68.499953][ T2441] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.539976][ T2441] FAULT_INJECTION: forcing a failure. [ 68.539976][ T2441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 68.588998][ T2449] device syzkaller0 entered promiscuous mode [ 68.595134][ T2441] CPU: 1 PID: 2441 Comm: syz.4.849 Not tainted syzkaller #0 [ 68.595167][ T2441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 68.595180][ T2441] Call Trace: [ 68.595187][ T2441] [ 68.595195][ T2441] __dump_stack+0x21/0x24 [ 68.623154][ T2441] dump_stack_lvl+0x110/0x170 [ 68.627876][ T2441] ? __cfi_dump_stack_lvl+0x8/0x8 [ 68.632952][ T2441] ? debug_smp_processor_id+0x17/0x20 [ 68.638490][ T2441] ? try_charge_memcg+0x258/0x1650 [ 68.643649][ T2441] dump_stack+0x15/0x24 [ 68.647848][ T2441] should_fail_ex+0x3bf/0x510 [ 68.652566][ T2441] should_fail_alloc_page+0x61/0x90 [ 68.657823][ T2441] prepare_alloc_pages+0x131/0x570 [ 68.662987][ T2441] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 68.668226][ T2441] ? folio_batch_move_lru+0x37a/0x470 [ 68.673657][ T2441] __alloc_pages+0x15b/0x610 [ 68.678149][ T2450] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 68.678290][ T2441] ? mem_cgroup_threshold+0x5b/0x70 [ 68.691323][ T2441] ? __cfi___alloc_pages+0x10/0x10 [ 68.696494][ T2441] ? folio_add_lru+0x2d6/0x650 [ 68.701308][ T2441] ? mas_state_walk+0x7ab/0xa80 [ 68.706212][ T2441] __folio_alloc+0x12/0x40 [ 68.710680][ T2441] handle_mm_fault+0x1989/0x26b0 [ 68.715664][ T2441] ? __cfi_handle_mm_fault+0x10/0x10 [ 68.720983][ T2441] ? down_read_trylock+0x27f/0x660 [ 68.726142][ T2441] ? up_read+0x56/0x1d0 [ 68.730352][ T2441] ? lock_mm_and_find_vma+0x9e/0x320 [ 68.735678][ T2441] ? do_user_addr_fault+0x2eb/0x1030 [ 68.741018][ T2441] do_user_addr_fault+0x61e/0x1030 [ 68.746185][ T2441] exc_page_fault+0x51/0xb0 [ 68.750731][ T2441] asm_exc_page_fault+0x27/0x30 [ 68.755633][ T2441] RIP: 0010:clear_user_erms+0xa/0x10 [ 68.760967][ T2441] Code: 74 03 f3 48 ab 83 e2 07 74 04 89 d1 f3 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 90 90 90 48 83 f9 40 0f 82 76 ff ff ff aa 31 c0 c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 d4 72 ba fd [ 68.780617][ T2441] RSP: 0018:ffffc900028ef538 EFLAGS: 00050206 [ 68.786734][ T2441] RAX: 0000000000000000 RBX: ffffc900028efa80 RCX: 00000000001f5a00 [ 68.794744][ T2441] RDX: 0000000000000000 RSI: 00000000001fe200 RDI: 000020000000b000 [ 68.802752][ T2441] RBP: ffffc900028ef690 R08: ffff88811635a880 R09: 0000000000000005 [ 68.810764][ T2441] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000002800 [ 68.818817][ T2441] R13: 0000200000002800 R14: dffffc0000000000 R15: 00000000001fe200 [ 68.826836][ T2441] ? iov_iter_zero+0x3ba/0xf60 [ 68.831663][ T2441] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 68.837086][ T2441] ? __cfi_iov_iter_zero+0x10/0x10 [ 68.842296][ T2441] ? iomap_iter+0x72b/0xb20 [ 68.846853][ T2441] __iomap_dio_rw+0x1155/0x1c90 [ 68.851754][ T2441] ? __cfi___iomap_dio_rw+0x10/0x10 [ 68.857005][ T2441] ? downgrade_write+0x370/0x370 [ 68.862000][ T2441] ? kasan_set_track+0x60/0x70 [ 68.866803][ T2441] ? io_submit_one+0x133/0x1910 [ 68.871696][ T2441] ? __se_sys_io_submit+0x17b/0x3e0 [ 68.877120][ T2441] ? down_read+0xa6/0xf0 [ 68.881409][ T2441] iomap_dio_rw+0x41/0x90 [ 68.885785][ T2441] ext4_file_read_iter+0x367/0x470 [ 68.890945][ T2441] aio_read+0x348/0x4b0 [ 68.895144][ T2441] ? __get_reqs_available+0x420/0x420 [ 68.900557][ T2441] ? kasan_save_alloc_info+0x1f/0x30 [ 68.905876][ T2441] ? __kasan_slab_alloc+0x72/0x80 [ 68.910978][ T2441] io_submit_one+0x6d7/0x1910 [ 68.915713][ T2441] ? irqentry_exit+0x37/0x40 [ 68.920359][ T2441] ? lookup_ioctx+0x2b0/0x2b0 [ 68.925116][ T2441] ? asm_exc_page_fault+0x27/0x30 [ 68.930208][ T2441] ? memset+0x35/0x40 [ 68.934231][ T2441] ? blk_start_plug+0x9b/0x130 [ 68.939045][ T2441] __se_sys_io_submit+0x17b/0x3e0 [ 68.944115][ T2441] ? __x64_sys_io_submit+0x90/0x90 [ 68.949272][ T2441] ? ksys_write+0x1fa/0x260 [ 68.953818][ T2441] ? __cfi_ksys_write+0x10/0x10 [ 68.958708][ T2441] ? debug_smp_processor_id+0x17/0x20 [ 68.964125][ T2441] __x64_sys_io_submit+0x7b/0x90 [ 68.969197][ T2441] x64_sys_call+0x81d/0x9a0 [ 68.973745][ T2441] do_syscall_64+0x4c/0xa0 [ 68.978201][ T2441] ? clear_bhb_loop+0x30/0x80 [ 68.982915][ T2441] ? clear_bhb_loop+0x30/0x80 [ 68.987632][ T2441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.993571][ T2441] RIP: 0033:0x7f692859ce59 [ 68.994978][ T2455] loop5: detected capacity change from 0 to 4096 [ 68.998024][ T2441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.998046][ T2441] RSP: 002b:00007f6929490028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 69.032524][ T2441] RAX: ffffffffffffffda RBX: 00007f6928815fa0 RCX: 00007f692859ce59 [ 69.040532][ T2441] RDX: 0000200000000540 RSI: 0000000000003f0a RDI: 00007f692946f000 [ 69.048544][ T2441] RBP: 00007f6929490090 R08: 0000000000000000 R09: 0000000000000000 [ 69.056559][ T2441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 69.064592][ T2441] R13: 00007f6928816038 R14: 00007f6928815fa0 R15: 00007ffeff6bb488 [ 69.072596][ T2441] [ 69.092222][ T2014] EXT4-fs (loop6): unmounting filesystem. [ 69.107960][ T28] audit: type=1400 audit(1781328880.343:346): avc: denied { unmount } for pid=2014 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.138731][ T2455] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 69.169942][ T289] EXT4-fs (loop4): unmounting filesystem. [ 69.190452][ T2458] netlink: 20 bytes leftover after parsing attributes in process `syz.6.854'. [ 69.219930][ T2455] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 8 out of range 0-5 [ 69.240011][ T2455] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 69.250962][ T2465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59646 sclass=netlink_route_socket pid=2465 comm=syz.6.854 [ 69.273427][ T2455] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.853: Failed to acquire dquot type 1 [ 69.290615][ T2467] device syzkaller0 entered promiscuous mode [ 69.324771][ T492] EXT4-fs (loop5): unmounting filesystem. [ 69.407467][ T2472] FAULT_INJECTION: forcing a failure. [ 69.407467][ T2472] name failslab, interval 1, probability 0, space 0, times 0 [ 69.429747][ T2472] CPU: 0 PID: 2472 Comm: syz.7.859 Not tainted syzkaller #0 [ 69.437125][ T2472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 69.447216][ T2472] Call Trace: [ 69.450631][ T2472] [ 69.453588][ T2472] __dump_stack+0x21/0x24 [ 69.457961][ T2472] dump_stack_lvl+0x110/0x170 [ 69.462668][ T2472] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.467723][ T2472] dump_stack+0x15/0x24 [ 69.471914][ T2472] should_fail_ex+0x3bf/0x510 [ 69.476616][ T2472] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 69.482724][ T2472] __should_failslab+0xac/0xf0 [ 69.487533][ T2472] should_failslab+0x9/0x20 [ 69.492098][ T2472] kmem_cache_alloc+0x3b/0x320 [ 69.496914][ T2472] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 69.503028][ T2472] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 69.508964][ T2472] kvm_mmu_topup_memory_cache+0x20/0x30 [ 69.514554][ T2472] kvm_mmu_load+0x99/0x2570 [ 69.519089][ T2472] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 69.524578][ T2472] ? queue_delayed_work_on+0x10d/0x160 [ 69.530075][ T2472] ? kvm_apic_has_interrupt+0x776/0x780 [ 69.535654][ T2472] vcpu_enter_guest+0x4d3b/0x7050 [ 69.540749][ T2472] ? __cfi_avc_has_perm+0x10/0x10 [ 69.545807][ T2472] ? pvclock_gtod_update_fn+0x270/0x270 [ 69.551478][ T2472] ? 0xffffffffa00041c0 [ 69.555660][ T2472] ? is_bpf_text_address+0x177/0x190 [ 69.560997][ T2472] ? kernel_text_address+0xa0/0xd0 [ 69.566153][ T2472] ? __kernel_text_address+0xd/0x30 [ 69.571392][ T2472] ? unwind_get_return_address+0x4d/0x90 [ 69.577060][ T2472] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 69.583258][ T2472] ? arch_stack_walk+0xfc/0x150 [ 69.588159][ T2472] ? stack_trace_save+0xa6/0xf0 [ 69.593051][ T2472] ? vmx_vcpu_pi_load+0x14c/0x840 [ 69.598114][ T2472] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 69.603523][ T2472] ? _parse_integer_limit+0x18e/0x1d0 [ 69.608922][ T2472] ? __asan_set_shadow_00+0xe/0x10 [ 69.614072][ T2472] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 69.618952][ T2472] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 69.624194][ T2472] ? __this_cpu_preempt_check+0x13/0x20 [ 69.629785][ T2472] ? xfd_validate_state+0x70/0x150 [ 69.634955][ T2472] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 69.640267][ T2472] ? __local_bh_enable_ip+0x58/0x80 [ 69.645500][ T2472] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 69.651072][ T2472] kvm_vcpu_ioctl+0x8ed/0xc00 [ 69.655786][ T2472] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 69.661045][ T2472] ? selinux_file_ioctl+0x3ad/0x4c0 [ 69.666288][ T2472] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 69.672216][ T2472] ? mutex_unlock+0x8f/0x230 [ 69.676842][ T2472] ? __cfi_mutex_unlock+0x10/0x10 [ 69.681901][ T2472] ? __fget_files+0x2d1/0x330 [ 69.686610][ T2472] ? security_file_ioctl+0x95/0xc0 [ 69.689357][ T292] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 69.691785][ T2472] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 69.704484][ T2472] __se_sys_ioctl+0x12f/0x1b0 [ 69.709201][ T2472] __x64_sys_ioctl+0x7b/0x90 [ 69.713821][ T2472] x64_sys_call+0x58b/0x9a0 [ 69.718353][ T2472] do_syscall_64+0x4c/0xa0 [ 69.722837][ T2472] ? clear_bhb_loop+0x30/0x80 [ 69.727545][ T2472] ? clear_bhb_loop+0x30/0x80 [ 69.732244][ T2472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.738182][ T2472] RIP: 0033:0x7f1bd879ce59 [ 69.742653][ T2472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.762296][ T2472] RSP: 002b:00007f1bd968d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.770753][ T2472] RAX: ffffffffffffffda RBX: 00007f1bd8a15fa0 RCX: 00007f1bd879ce59 [ 69.778756][ T2472] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 69.786766][ T2472] RBP: 00007f1bd968d090 R08: 0000000000000000 R09: 0000000000000000 [ 69.794778][ T2472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.802781][ T2472] R13: 00007f1bd8a16038 R14: 00007f1bd8a15fa0 R15: 00007ffcf4313cd8 [ 69.810814][ T2472] [ 69.844505][ T2479] tipc: Enabling of bearer rejected, failed to enable media [ 69.874484][ T2479] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 69.885445][ T28] audit: type=1400 audit(1781328881.133:347): avc: denied { ioctl } for pid=2481 comm="syz.4.862" path="socket:[28641]" dev="sockfs" ino=28641 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.890122][ T2479] tipc: Enabled bearer , priority 10 [ 69.914415][ T292] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.939829][ T292] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 69.959179][ T28] audit: type=1400 audit(1781328881.193:348): avc: denied { write } for pid=2476 comm="syz.6.860" name="wireless" dev="proc" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.985273][ T2485] loop7: detected capacity change from 0 to 512 [ 70.064550][ T292] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.073889][ T292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.089126][ T292] usb 6-1: Product: syz [ 70.093373][ T292] usb 6-1: Manufacturer: syz [ 70.097998][ T292] usb 6-1: SerialNumber: syz [ 70.104133][ T2485] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 70.114063][ T2485] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.125301][ T292] cdc_mbim 6-1:1.0: skipping garbage [ 70.452049][ T292] cdc_mbim 6-1:1.0: bind() failure [ 70.470039][ T292] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 70.476873][ T292] cdc_ncm 6-1:1.1: bind() failure [ 70.507008][ T292] usb 6-1: USB disconnect, device number 6 [ 70.527988][ T28] audit: type=1400 audit(1781328881.763:349): avc: denied { connect } for pid=2494 comm="syz.5.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.569161][ T28] audit: type=1400 audit(1781328881.783:350): avc: denied { write } for pid=2494 comm="syz.5.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 70.596552][ T2126] EXT4-fs (loop7): unmounting filesystem. [ 70.612900][ T2497] device syzkaller0 entered promiscuous mode [ 70.627169][ T2497] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 70.653479][ T2505] loop6: detected capacity change from 0 to 512 [ 70.656924][ T2506] loop7: detected capacity change from 0 to 512 [ 70.672336][ T2505] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 70.684374][ T2506] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 70.693668][ T2505] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.704482][ T2506] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.747328][ T2505] FAULT_INJECTION: forcing a failure. [ 70.747328][ T2505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.760876][ T2505] CPU: 1 PID: 2505 Comm: syz.6.869 Not tainted syzkaller #0 [ 70.768225][ T2505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 70.778315][ T2505] Call Trace: [ 70.781630][ T2505] [ 70.784600][ T2505] __dump_stack+0x21/0x24 [ 70.788977][ T2505] dump_stack_lvl+0x110/0x170 [ 70.793700][ T2505] ? __cfi_dump_stack_lvl+0x8/0x8 [ 70.798788][ T2505] ? debug_smp_processor_id+0x17/0x20 [ 70.804207][ T2505] ? try_charge_memcg+0x258/0x1650 [ 70.805873][ T2512] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 70.809358][ T2505] dump_stack+0x15/0x24 [ 70.809388][ T2505] should_fail_ex+0x3bf/0x510 [ 70.809410][ T2505] should_fail_alloc_page+0x61/0x90 [ 70.831338][ T2505] prepare_alloc_pages+0x131/0x570 [ 70.836500][ T2505] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 70.841742][ T2505] ? cgroup_rstat_updated+0xf0/0x360 [ 70.847067][ T2505] __alloc_pages+0x15b/0x610 [ 70.851697][ T2505] ? __cfi___alloc_pages+0x10/0x10 [ 70.856854][ T2505] ? folio_add_lru+0x2d6/0x650 [ 70.861674][ T2505] ? mas_state_walk+0x7ab/0xa80 [ 70.866558][ T2505] __folio_alloc+0x12/0x40 [ 70.871021][ T2505] handle_mm_fault+0x1989/0x26b0 [ 70.876004][ T2505] ? __cfi_handle_mm_fault+0x10/0x10 [ 70.881318][ T2505] ? down_read_trylock+0x27f/0x660 [ 70.886473][ T2505] ? up_read+0x56/0x1d0 [ 70.890683][ T2505] ? lock_mm_and_find_vma+0x9e/0x320 [ 70.895999][ T2505] ? do_user_addr_fault+0x2eb/0x1030 [ 70.901319][ T2505] do_user_addr_fault+0x61e/0x1030 [ 70.906475][ T2505] exc_page_fault+0x51/0xb0 [ 70.911012][ T2505] asm_exc_page_fault+0x27/0x30 [ 70.915909][ T2505] RIP: 0010:clear_user_erms+0xa/0x10 [ 70.921228][ T2505] Code: 74 03 f3 48 ab 83 e2 07 74 04 89 d1 f3 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 90 90 90 48 83 f9 40 0f 82 76 ff ff ff aa 31 c0 c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 d4 72 ba fd [ 70.940869][ T2505] RSP: 0018:ffffc900047bf538 EFLAGS: 00050206 [ 70.946987][ T2505] RAX: 0000000000000000 RBX: ffffc900047bfa80 RCX: 00000000001f4a00 [ 70.954996][ T2505] RDX: 0000000000000000 RSI: 00000000001fe200 RDI: 000020000000c000 [ 70.963008][ T2505] RBP: ffffc900047bf690 R08: ffff88810ffee540 R09: 0000000000000005 [ 70.971025][ T2505] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000002800 [ 70.979123][ T2505] R13: 0000200000002800 R14: dffffc0000000000 R15: 00000000001fe200 [ 70.987229][ T2505] ? iov_iter_zero+0x3ba/0xf60 [ 70.992045][ T2505] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 70.997455][ T2505] ? __cfi_iov_iter_zero+0x10/0x10 [ 71.002612][ T2505] ? iomap_iter+0x72b/0xb20 [ 71.007152][ T2505] __iomap_dio_rw+0x1155/0x1c90 [ 71.012048][ T2505] ? __cfi___iomap_dio_rw+0x10/0x10 [ 71.017316][ T2505] ? downgrade_write+0x370/0x370 [ 71.022308][ T2505] ? kasan_set_track+0x60/0x70 [ 71.027114][ T2505] ? io_submit_one+0x133/0x1910 [ 71.032014][ T2505] ? __se_sys_io_submit+0x17b/0x3e0 [ 71.037255][ T2505] ? down_read+0xa6/0xf0 [ 71.041525][ T2505] iomap_dio_rw+0x41/0x90 [ 71.045903][ T2505] ext4_file_read_iter+0x367/0x470 [ 71.051055][ T2505] aio_read+0x348/0x4b0 [ 71.055259][ T2505] ? __get_reqs_available+0x420/0x420 [ 71.060671][ T2505] ? kasan_save_alloc_info+0x1f/0x30 [ 71.065987][ T2505] ? __kasan_slab_alloc+0x72/0x80 [ 71.071052][ T2505] io_submit_one+0x6d7/0x1910 [ 71.075769][ T2505] ? irqentry_exit+0x37/0x40 [ 71.080391][ T2505] ? lookup_ioctx+0x2b0/0x2b0 [ 71.085106][ T2505] ? asm_exc_page_fault+0x27/0x30 [ 71.090171][ T2505] ? memset+0x35/0x40 [ 71.094190][ T2505] ? blk_start_plug+0x9b/0x130 [ 71.098996][ T2505] __se_sys_io_submit+0x17b/0x3e0 [ 71.104079][ T2505] ? __x64_sys_io_submit+0x90/0x90 [ 71.109232][ T2505] ? ksys_write+0x1fa/0x260 [ 71.113773][ T2505] ? __cfi_ksys_write+0x10/0x10 [ 71.118662][ T2505] ? debug_smp_processor_id+0x17/0x20 [ 71.124066][ T2505] __x64_sys_io_submit+0x7b/0x90 [ 71.129046][ T2505] x64_sys_call+0x81d/0x9a0 [ 71.133584][ T2505] do_syscall_64+0x4c/0xa0 [ 71.138039][ T2505] ? clear_bhb_loop+0x30/0x80 [ 71.142743][ T2505] ? clear_bhb_loop+0x30/0x80 [ 71.147451][ T2505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.153393][ T2505] RIP: 0033:0x7f1302f9ce59 [ 71.157847][ T2505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.177577][ T2505] RSP: 002b:00007f1303d77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 71.186040][ T2505] RAX: ffffffffffffffda RBX: 00007f1303215fa0 RCX: 00007f1302f9ce59 [ 71.194049][ T2505] RDX: 0000200000000540 RSI: 0000000000003f0a RDI: 00007f1303d56000 [ 71.202058][ T2505] RBP: 00007f1303d77090 R08: 0000000000000000 R09: 0000000000000000 [ 71.210060][ T2505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.218062][ T2505] R13: 00007f1303216038 R14: 00007f1303215fa0 R15: 00007ffcda067d18 [ 71.226079][ T2505] [ 71.234890][ T477] tipc: Node number set to 2358437553 [ 71.298801][ T2521] device syzkaller0 entered promiscuous mode [ 71.307060][ T2520] device syzkaller0 entered promiscuous mode [ 71.324269][ T2014] EXT4-fs (loop6): unmounting filesystem. [ 71.491308][ T2532] FAULT_INJECTION: forcing a failure. [ 71.491308][ T2532] name failslab, interval 1, probability 0, space 0, times 0 [ 71.823518][ T2126] EXT4-fs (loop7): unmounting filesystem. [ 71.840268][ T2532] CPU: 1 PID: 2532 Comm: syz.0.878 Not tainted syzkaller #0 [ 71.847707][ T2532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 71.857797][ T2532] Call Trace: [ 71.861114][ T2532] [ 71.864073][ T2532] __dump_stack+0x21/0x24 [ 71.868453][ T2532] dump_stack_lvl+0x110/0x170 [ 71.873173][ T2532] ? __cfi_dump_stack_lvl+0x8/0x8 [ 71.878243][ T2532] dump_stack+0x15/0x24 [ 71.882421][ T2532] should_fail_ex+0x3bf/0x510 [ 71.887119][ T2532] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 71.893212][ T2532] __should_failslab+0xac/0xf0 [ 71.897996][ T2532] should_failslab+0x9/0x20 [ 71.902518][ T2532] kmem_cache_alloc+0x3b/0x320 [ 71.907317][ T2532] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 71.913420][ T2532] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 71.919347][ T2532] kvm_mmu_topup_memory_cache+0x20/0x30 [ 71.924926][ T2532] kvm_mmu_load+0x99/0x2570 [ 71.929445][ T2532] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 71.934919][ T2532] ? queue_delayed_work_on+0x10d/0x160 [ 71.940400][ T2532] ? kvm_apic_has_interrupt+0x776/0x780 [ 71.945969][ T2532] vcpu_enter_guest+0x4d3b/0x7050 [ 71.951015][ T2532] ? __cfi_avc_has_perm+0x10/0x10 [ 71.956057][ T2532] ? pvclock_gtod_update_fn+0x270/0x270 [ 71.961628][ T2532] ? 0xffffffffa00041c0 [ 71.965801][ T2532] ? is_bpf_text_address+0x177/0x190 [ 71.971116][ T2532] ? kernel_text_address+0xa0/0xd0 [ 71.976254][ T2532] ? __kernel_text_address+0xd/0x30 [ 71.981476][ T2532] ? unwind_get_return_address+0x4d/0x90 [ 71.987131][ T2532] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 71.993308][ T2532] ? arch_stack_walk+0xfc/0x150 [ 71.998197][ T2532] ? stack_trace_save+0xa6/0xf0 [ 72.003077][ T2532] ? vmx_vcpu_pi_load+0x14c/0x840 [ 72.008120][ T2532] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 72.013514][ T2532] ? _parse_integer_limit+0x18e/0x1d0 [ 72.018903][ T2532] ? __asan_set_shadow_00+0xe/0x10 [ 72.024038][ T2532] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 72.028913][ T2532] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 72.034138][ T2532] ? __this_cpu_preempt_check+0x13/0x20 [ 72.039704][ T2532] ? xfd_validate_state+0x70/0x150 [ 72.044931][ T2532] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 72.050232][ T2532] ? __local_bh_enable_ip+0x58/0x80 [ 72.055455][ T2532] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 72.061103][ T2532] kvm_vcpu_ioctl+0x8ed/0xc00 [ 72.065804][ T2532] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 72.071030][ T2532] ? selinux_file_ioctl+0x3ad/0x4c0 [ 72.076255][ T2532] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 72.081820][ T2532] ? mutex_unlock+0x8f/0x230 [ 72.086437][ T2532] ? __cfi_mutex_unlock+0x10/0x10 [ 72.091486][ T2532] ? __fget_files+0x2d1/0x330 [ 72.096316][ T2532] ? security_file_ioctl+0x95/0xc0 [ 72.101475][ T2532] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 72.106727][ T2532] __se_sys_ioctl+0x12f/0x1b0 [ 72.111442][ T2532] __x64_sys_ioctl+0x7b/0x90 [ 72.116058][ T2532] x64_sys_call+0x58b/0x9a0 [ 72.120584][ T2532] do_syscall_64+0x4c/0xa0 [ 72.125018][ T2532] ? clear_bhb_loop+0x30/0x80 [ 72.129708][ T2532] ? clear_bhb_loop+0x30/0x80 [ 72.134408][ T2532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.140328][ T2532] RIP: 0033:0x7f9ba319ce59 [ 72.144765][ T2532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.164387][ T2532] RSP: 002b:00007f9ba4033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.172817][ T2532] RAX: ffffffffffffffda RBX: 00007f9ba3415fa0 RCX: 00007f9ba319ce59 [ 72.180804][ T2532] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 72.188795][ T2532] RBP: 00007f9ba4033090 R08: 0000000000000000 R09: 0000000000000000 [ 72.196783][ T2532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.204771][ T2532] R13: 00007f9ba3416038 R14: 00007f9ba3415fa0 R15: 00007ffcd6bfe558 [ 72.213458][ T2532] [ 72.389875][ T2543] loop7: detected capacity change from 0 to 1024 [ 72.436169][ T2545] device syzkaller0 entered promiscuous mode [ 72.445059][ T2545] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 72.455810][ T2547] loop0: detected capacity change from 0 to 512 [ 72.481437][ T2543] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 72.486612][ T2547] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.498510][ T2547] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.500882][ T2543] EXT4-fs (loop7): orphan cleanup on readonly fs [ 72.539742][ T2551] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 72.549307][ T2543] EXT4-fs warning (device loop7): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 72.565049][ T2543] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 72.574255][ T2543] EXT4-fs (loop7): 1 truncate cleaned up [ 72.580009][ T2543] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 72.641190][ T288] EXT4-fs (loop0): unmounting filesystem. [ 72.649348][ T2126] EXT4-fs (loop7): unmounting filesystem. [ 72.683126][ T2514] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 72.697271][ T2514] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 72.721111][ T2558] device syzkaller0 entered promiscuous mode [ 72.727274][ T2514] F2FS-fs (loop4): invalid crc value [ 72.763037][ T2514] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.765200][ T2562] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 72.778661][ T2562] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.822584][ T2559] Alternate GPT is invalid, using primary GPT. [ 72.829000][ T2559] loop0: p2 p3 p7 [ 72.848851][ T2562] FAULT_INJECTION: forcing a failure. [ 72.848851][ T2562] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.864883][ T2562] CPU: 1 PID: 2562 Comm: syz.5.888 Not tainted syzkaller #0 [ 72.872244][ T2562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 72.882420][ T2562] Call Trace: [ 72.885726][ T2562] [ 72.888673][ T2562] __dump_stack+0x21/0x24 [ 72.893035][ T2562] dump_stack_lvl+0x110/0x170 [ 72.897766][ T2562] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.902824][ T2562] ? debug_smp_processor_id+0x17/0x20 [ 72.908222][ T2562] ? try_charge_memcg+0x258/0x1650 [ 72.913454][ T2562] dump_stack+0x15/0x24 [ 72.917632][ T2562] should_fail_ex+0x3bf/0x510 [ 72.922335][ T2562] should_fail_alloc_page+0x61/0x90 [ 72.927565][ T2562] prepare_alloc_pages+0x131/0x570 [ 72.932704][ T2562] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 72.937929][ T2562] ? cgroup_rstat_updated+0xf0/0x360 [ 72.943237][ T2562] __alloc_pages+0x15b/0x610 [ 72.947852][ T2562] ? __cfi___alloc_pages+0x10/0x10 [ 72.953015][ T2562] ? folio_add_lru+0x2d6/0x650 [ 72.957808][ T2562] ? mas_state_walk+0x7ab/0xa80 [ 72.962681][ T2562] __folio_alloc+0x12/0x40 [ 72.967127][ T2562] handle_mm_fault+0x1989/0x26b0 [ 72.972081][ T2562] ? __cfi_handle_mm_fault+0x10/0x10 [ 72.977380][ T2562] ? down_read_trylock+0x27f/0x660 [ 72.982539][ T2562] ? up_read+0x56/0x1d0 [ 72.986720][ T2562] ? lock_mm_and_find_vma+0x9e/0x320 [ 72.992022][ T2562] ? do_user_addr_fault+0x2eb/0x1030 [ 72.997347][ T2562] do_user_addr_fault+0x61e/0x1030 [ 73.002488][ T2562] exc_page_fault+0x51/0xb0 [ 73.007007][ T2562] asm_exc_page_fault+0x27/0x30 [ 73.011894][ T2562] RIP: 0010:clear_user_erms+0xa/0x10 [ 73.017205][ T2562] Code: 74 03 f3 48 ab 83 e2 07 74 04 89 d1 f3 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 90 90 90 48 83 f9 40 0f 82 76 ff ff ff aa 31 c0 c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 d4 72 ba fd [ 73.036835][ T2562] RSP: 0018:ffffc9000304f538 EFLAGS: 00050206 [ 73.042924][ T2562] RAX: 0000000000000000 RBX: ffffc9000304fa80 RCX: 00000000001f3a00 [ 73.050918][ T2562] RDX: 0000000000000000 RSI: 00000000001fe200 RDI: 000020000000d000 [ 73.058907][ T2562] RBP: ffffc9000304f690 R08: ffff888119028000 R09: 0000000000000005 [ 73.066899][ T2562] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000002800 [ 73.074882][ T2562] R13: 0000200000002800 R14: dffffc0000000000 R15: 00000000001fe200 [ 73.082878][ T2562] ? iov_iter_zero+0x3ba/0xf60 [ 73.087760][ T2562] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 73.093155][ T2562] ? __cfi_iov_iter_zero+0x10/0x10 [ 73.098402][ T2562] ? iomap_iter+0x72b/0xb20 [ 73.102927][ T2562] __iomap_dio_rw+0x1155/0x1c90 [ 73.107812][ T2562] ? __cfi___iomap_dio_rw+0x10/0x10 [ 73.113040][ T2562] ? downgrade_write+0x370/0x370 [ 73.118180][ T2562] ? kasan_set_track+0x60/0x70 [ 73.122967][ T2562] ? io_submit_one+0x133/0x1910 [ 73.127846][ T2562] ? __se_sys_io_submit+0x17b/0x3e0 [ 73.133597][ T2562] ? down_read+0xa6/0xf0 [ 73.137863][ T2562] iomap_dio_rw+0x41/0x90 [ 73.142213][ T2562] ext4_file_read_iter+0x367/0x470 [ 73.147351][ T2562] aio_read+0x348/0x4b0 [ 73.151529][ T2562] ? __get_reqs_available+0x420/0x420 [ 73.156923][ T2562] ? kasan_save_alloc_info+0x1f/0x30 [ 73.162221][ T2562] ? __kasan_slab_alloc+0x72/0x80 [ 73.167272][ T2562] io_submit_one+0x6d7/0x1910 [ 73.172006][ T2562] ? irqentry_exit+0x37/0x40 [ 73.176616][ T2562] ? lookup_ioctx+0x2b0/0x2b0 [ 73.181321][ T2562] ? asm_exc_page_fault+0x27/0x30 [ 73.186370][ T2562] ? memset+0x35/0x40 [ 73.190367][ T2562] ? blk_start_plug+0x9b/0x130 [ 73.195177][ T2562] __se_sys_io_submit+0x17b/0x3e0 [ 73.200223][ T2562] ? __x64_sys_io_submit+0x90/0x90 [ 73.205353][ T2562] ? ksys_write+0x1fa/0x260 [ 73.209895][ T2562] ? __cfi_ksys_write+0x10/0x10 [ 73.214761][ T2562] ? debug_smp_processor_id+0x17/0x20 [ 73.220146][ T2562] __x64_sys_io_submit+0x7b/0x90 [ 73.225102][ T2562] x64_sys_call+0x81d/0x9a0 [ 73.229647][ T2562] do_syscall_64+0x4c/0xa0 [ 73.234078][ T2562] ? clear_bhb_loop+0x30/0x80 [ 73.238769][ T2562] ? clear_bhb_loop+0x30/0x80 [ 73.243463][ T2562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.249378][ T2562] RIP: 0033:0x7f719ef9ce59 [ 73.253817][ T2562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.273440][ T2562] RSP: 002b:00007f719ff3c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 73.281870][ T2562] RAX: ffffffffffffffda RBX: 00007f719f215fa0 RCX: 00007f719ef9ce59 [ 73.289866][ T2562] RDX: 0000200000000540 RSI: 0000000000003f0a RDI: 00007f719ff1b000 [ 73.297854][ T2562] RBP: 00007f719ff3c090 R08: 0000000000000000 R09: 0000000000000000 [ 73.305869][ T2562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.313858][ T2562] R13: 00007f719f216038 R14: 00007f719f215fa0 R15: 00007ffd141896a8 [ 73.321853][ T2562] [ 73.339470][ T2514] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 73.346570][ T2514] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 73.356391][ T2570] binder: BINDER_SET_CONTEXT_MGR already set [ 73.377697][ T2570] binder: 2568:2570 ioctl 4018620d 200000004a80 returned -16 [ 73.447485][ T2514] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 73.468341][ T1476] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.470438][ T492] EXT4-fs (loop5): unmounting filesystem. [ 73.487847][ T2578] set_capacity_and_notify: 3 callbacks suppressed [ 73.487865][ T2578] loop7: detected capacity change from 0 to 512 [ 73.510034][ T1476] udevd[1476]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 73.519689][ T2045] udevd[2045]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 73.532096][ T2578] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 73.541744][ T320] udevd[320]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 73.544309][ T2578] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.578208][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 73.578225][ T28] audit: type=1400 audit(1781328884.813:355): avc: denied { connect } for pid=2581 comm="syz.0.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.609213][ T28] audit: type=1400 audit(1781328884.813:356): avc: denied { write } for pid=2581 comm="syz.0.891" path="socket:[29676]" dev="sockfs" ino=29676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.623794][ T2583] device syzkaller0 entered promiscuous mode [ 73.645950][ T2583] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 73.710028][ T2594] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 73.749187][ T292] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 73.810944][ T2603] device syzkaller0 entered promiscuous mode [ 73.829194][ T2601] FAULT_INJECTION: forcing a failure. [ 73.829194][ T2601] name failslab, interval 1, probability 0, space 0, times 0 [ 73.846363][ T2601] CPU: 1 PID: 2601 Comm: syz.6.900 Not tainted syzkaller #0 [ 73.853712][ T2601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 73.863799][ T2601] Call Trace: [ 73.867098][ T2601] [ 73.870144][ T2601] __dump_stack+0x21/0x24 [ 73.874510][ T2601] dump_stack_lvl+0x110/0x170 [ 73.879219][ T2601] ? __cfi_dump_stack_lvl+0x8/0x8 [ 73.884279][ T2601] dump_stack+0x15/0x24 [ 73.888472][ T2601] should_fail_ex+0x3bf/0x510 [ 73.893182][ T2601] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 73.899291][ T2601] __should_failslab+0xac/0xf0 [ 73.904092][ T2601] should_failslab+0x9/0x20 [ 73.908624][ T2601] kmem_cache_alloc+0x3b/0x320 [ 73.913433][ T2601] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 73.919540][ T2601] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 73.925472][ T2601] kvm_mmu_topup_memory_cache+0x20/0x30 [ 73.931050][ T2601] kvm_mmu_load+0x99/0x2570 [ 73.935584][ T2601] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 73.941067][ T2601] ? queue_delayed_work_on+0x10d/0x160 [ 73.946559][ T2601] ? kvm_apic_has_interrupt+0x776/0x780 [ 73.952130][ T2601] vcpu_enter_guest+0x4d3b/0x7050 [ 73.957187][ T2601] ? __cfi_avc_has_perm+0x10/0x10 [ 73.962243][ T2601] ? pvclock_gtod_update_fn+0x270/0x270 [ 73.967823][ T2601] ? 0xffffffffa00041c0 [ 73.972003][ T2601] ? is_bpf_text_address+0x177/0x190 [ 73.977321][ T2601] ? kernel_text_address+0xa0/0xd0 [ 73.982465][ T2601] ? __kernel_text_address+0xd/0x30 [ 73.987698][ T2601] ? unwind_get_return_address+0x4d/0x90 [ 73.993367][ T2601] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 73.999579][ T2601] ? arch_stack_walk+0xfc/0x150 [ 74.004498][ T2601] ? stack_trace_save+0xa6/0xf0 [ 74.009385][ T2601] ? vmx_vcpu_pi_load+0x14c/0x840 [ 74.014446][ T2601] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 74.019844][ T2601] ? _parse_integer_limit+0x18e/0x1d0 [ 74.025269][ T2601] ? __asan_set_shadow_00+0xe/0x10 [ 74.030413][ T2601] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 74.035286][ T2601] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 74.040515][ T2601] ? __this_cpu_preempt_check+0x13/0x20 [ 74.046086][ T2601] ? xfd_validate_state+0x70/0x150 [ 74.051234][ T2601] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 74.056551][ T2601] ? __local_bh_enable_ip+0x58/0x80 [ 74.061780][ T2601] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 74.067352][ T2601] kvm_vcpu_ioctl+0x8ed/0xc00 [ 74.072061][ T2601] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 74.077288][ T2601] ? selinux_file_ioctl+0x3ad/0x4c0 [ 74.082519][ T2601] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 74.088099][ T2601] ? mutex_unlock+0x8f/0x230 [ 74.092722][ T2601] ? __cfi_mutex_unlock+0x10/0x10 [ 74.097784][ T2601] ? __fget_files+0x2d1/0x330 [ 74.102668][ T2601] ? security_file_ioctl+0x95/0xc0 [ 74.107812][ T2601] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 74.113042][ T2601] __se_sys_ioctl+0x12f/0x1b0 [ 74.117755][ T2601] __x64_sys_ioctl+0x7b/0x90 [ 74.122404][ T2601] x64_sys_call+0x58b/0x9a0 [ 74.126941][ T2601] do_syscall_64+0x4c/0xa0 [ 74.131384][ T2601] ? clear_bhb_loop+0x30/0x80 [ 74.136082][ T2601] ? clear_bhb_loop+0x30/0x80 [ 74.140781][ T2601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.146711][ T2601] RIP: 0033:0x7f1302f9ce59 [ 74.151155][ T2601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.170791][ T2601] RSP: 002b:00007f1303d77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.179250][ T2601] RAX: ffffffffffffffda RBX: 00007f1303215fa0 RCX: 00007f1302f9ce59 [ 74.187256][ T2601] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 74.195261][ T2601] RBP: 00007f1303d77090 R08: 0000000000000000 R09: 0000000000000000 [ 74.203363][ T2601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.211361][ T2601] R13: 00007f1303216038 R14: 00007f1303215fa0 R15: 00007ffcda067d18 [ 74.219373][ T2601] [ 74.250115][ T2514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.871'. [ 74.317318][ T2608] loop6: detected capacity change from 0 to 512 [ 74.338938][ T2608] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 74.348399][ T2608] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.406550][ T2126] EXT4-fs (loop7): unmounting filesystem. [ 74.439781][ T28] audit: type=1400 audit(1781328885.673:357): avc: denied { mounton } for pid=2605 comm="syz.0.901" path="/154/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 74.480655][ T2014] EXT4-fs (loop6): unmounting filesystem. [ 74.514994][ T2617] loop6: detected capacity change from 0 to 512 [ 74.557395][ T2619] device syzkaller0 entered promiscuous mode [ 74.564895][ T2619] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 74.574361][ T2622] binder: 2621:2622 unknown command 1078485779 [ 74.574386][ T2622] binder: 2621:2622 ioctl c0306201 2000000001c0 returned -22 [ 74.598525][ T2624] loop6: detected capacity change from 0 to 512 [ 74.633592][ T2624] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 74.633673][ T2624] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.654363][ T2593] loop5: detected capacity change from 0 to 131072 [ 74.679471][ T2624] FAULT_INJECTION: forcing a failure. [ 74.679471][ T2624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 74.693232][ T2624] CPU: 1 PID: 2624 Comm: syz.6.908 Not tainted syzkaller #0 [ 74.700569][ T2624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 74.710749][ T2624] Call Trace: [ 74.714067][ T2624] [ 74.717023][ T2624] __dump_stack+0x21/0x24 [ 74.721390][ T2624] dump_stack_lvl+0x110/0x170 [ 74.726474][ T2624] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.731579][ T2624] ? debug_smp_processor_id+0x17/0x20 [ 74.737089][ T2624] ? try_charge_memcg+0x258/0x1650 [ 74.742259][ T2624] dump_stack+0x15/0x24 [ 74.746467][ T2624] should_fail_ex+0x3bf/0x510 [ 74.751195][ T2624] should_fail_alloc_page+0x61/0x90 [ 74.756442][ T2624] prepare_alloc_pages+0x131/0x570 [ 74.761609][ T2624] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 74.766851][ T2624] ? folio_batch_move_lru+0x37a/0x470 [ 74.772272][ T2624] ? cgroup_rstat_updated+0xf0/0x360 [ 74.777596][ T2624] __alloc_pages+0x15b/0x610 [ 74.782331][ T2624] ? __cfi___alloc_pages+0x10/0x10 [ 74.787498][ T2624] ? folio_add_lru+0x2d6/0x650 [ 74.792321][ T2624] ? mas_state_walk+0x7ab/0xa80 [ 74.797223][ T2624] __folio_alloc+0x12/0x40 [ 74.801687][ T2624] handle_mm_fault+0x1989/0x26b0 [ 74.806666][ T2624] ? __cfi_handle_mm_fault+0x10/0x10 [ 74.807249][ T2593] F2FS-fs (loop5): Found nat_bits in checkpoint [ 74.811994][ T2624] ? down_read_trylock+0x27f/0x660 [ 74.812032][ T2624] ? up_read+0x56/0x1d0 [ 74.812063][ T2624] ? lock_mm_and_find_vma+0x9e/0x320 [ 74.831223][ T2629] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 74.832879][ T2624] ? do_user_addr_fault+0x2eb/0x1030 [ 74.846006][ T2624] do_user_addr_fault+0x61e/0x1030 [ 74.851176][ T2624] exc_page_fault+0x51/0xb0 [ 74.855723][ T2624] asm_exc_page_fault+0x27/0x30 [ 74.860624][ T2624] RIP: 0010:clear_user_erms+0xa/0x10 [ 74.865965][ T2624] Code: 74 03 f3 48 ab 83 e2 07 74 04 89 d1 f3 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 90 90 90 48 83 f9 40 0f 82 76 ff ff ff aa 31 c0 c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 d4 72 ba fd [ 74.885636][ T2624] RSP: 0018:ffffc9000388f538 EFLAGS: 00050206 [ 74.891757][ T2624] RAX: 0000000000000000 RBX: ffffc9000388fa80 RCX: 00000000001f2a00 [ 74.899766][ T2624] RDX: 0000000000000000 RSI: 00000000001fe200 RDI: 000020000000e000 [ 74.907773][ T2624] RBP: ffffc9000388f690 R08: ffff888112889440 R09: 0000000000000005 [ 74.915790][ T2624] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000002800 [ 74.923799][ T2624] R13: 0000200000002800 R14: dffffc0000000000 R15: 00000000001fe200 [ 74.931817][ T2624] ? iov_iter_zero+0x3ba/0xf60 [ 74.936670][ T2624] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 74.942347][ T2624] ? __cfi_iov_iter_zero+0x10/0x10 [ 74.947515][ T2624] ? iomap_iter+0x72b/0xb20 [ 74.952073][ T2624] __iomap_dio_rw+0x1155/0x1c90 [ 74.956977][ T2624] ? __cfi___iomap_dio_rw+0x10/0x10 [ 74.962339][ T2624] ? downgrade_write+0x370/0x370 [ 74.967357][ T2624] ? kasan_set_track+0x60/0x70 [ 74.972166][ T2624] ? io_submit_one+0x133/0x1910 [ 74.977068][ T2624] ? __se_sys_io_submit+0x17b/0x3e0 [ 74.982307][ T2624] ? down_read+0xa6/0xf0 [ 74.986585][ T2624] iomap_dio_rw+0x41/0x90 [ 74.990967][ T2624] ext4_file_read_iter+0x367/0x470 [ 74.996122][ T2624] aio_read+0x348/0x4b0 [ 75.000322][ T2624] ? __get_reqs_available+0x420/0x420 [ 75.005738][ T2624] ? kasan_save_alloc_info+0x1f/0x30 [ 75.011062][ T2624] ? __kasan_slab_alloc+0x72/0x80 [ 75.016131][ T2624] io_submit_one+0x6d7/0x1910 [ 75.016807][ T2593] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 75.020857][ T2624] ? irqentry_exit+0x37/0x40 [ 75.020881][ T2624] ? lookup_ioctx+0x2b0/0x2b0 [ 75.020907][ T2624] ? asm_exc_page_fault+0x27/0x30 [ 75.042689][ T2624] ? memset+0x35/0x40 [ 75.047172][ T2624] ? blk_start_plug+0x9b/0x130 [ 75.052069][ T2624] __se_sys_io_submit+0x17b/0x3e0 [ 75.057141][ T2624] ? __x64_sys_io_submit+0x90/0x90 [ 75.062385][ T2624] ? ksys_write+0x1fa/0x260 [ 75.066940][ T2624] ? __cfi_ksys_write+0x10/0x10 [ 75.071824][ T2624] ? debug_smp_processor_id+0x17/0x20 [ 75.077231][ T2624] __x64_sys_io_submit+0x7b/0x90 [ 75.082205][ T2624] x64_sys_call+0x81d/0x9a0 [ 75.086748][ T2624] do_syscall_64+0x4c/0xa0 [ 75.091219][ T2624] ? clear_bhb_loop+0x30/0x80 [ 75.095930][ T2624] ? clear_bhb_loop+0x30/0x80 [ 75.100639][ T2624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.106577][ T2624] RIP: 0033:0x7f1302f9ce59 [ 75.111020][ T2624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.130633][ T2624] RSP: 002b:00007f1303d77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 75.139096][ T2624] RAX: ffffffffffffffda RBX: 00007f1303215fa0 RCX: 00007f1302f9ce59 [ 75.147136][ T2624] RDX: 0000200000000540 RSI: 0000000000003f0a RDI: 00007f1303d56000 [ 75.155123][ T2624] RBP: 00007f1303d77090 R08: 0000000000000000 R09: 0000000000000000 [ 75.163102][ T2624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.171115][ T2624] R13: 00007f1303216038 R14: 00007f1303215fa0 R15: 00007ffcda067d18 [ 75.179124][ T2624] [ 75.184875][ T292] usb 5-1: unable to get BOS descriptor or descriptor too short [ 75.206071][ T292] usb 5-1: no configurations [ 75.214185][ T292] usb 5-1: can't read configurations, error -22 [ 75.246554][ T2593] F2FS-fs (loop5): lookup inode (7) has corrupted xattr [ 75.275510][ T28] audit: type=1400 audit(1781328886.513:358): avc: denied { read write } for pid=2592 comm="syz.5.896" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 75.368585][ T28] audit: type=1400 audit(1781328886.513:359): avc: denied { open } for pid=2592 comm="syz.5.896" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 75.405744][ T2014] EXT4-fs (loop6): unmounting filesystem. [ 75.420215][ T28] audit: type=1400 audit(1781328886.543:360): avc: denied { ioctl } for pid=2592 comm="syz.5.896" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 75.487093][ T2646] FAULT_INJECTION: forcing a failure. [ 75.487093][ T2646] name failslab, interval 1, probability 0, space 0, times 0 [ 75.517879][ T28] audit: type=1400 audit(1781328886.543:361): avc: denied { sys_module } for pid=2592 comm="syz.5.896" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.549508][ T2646] CPU: 0 PID: 2646 Comm: syz.6.917 Not tainted syzkaller #0 [ 75.556921][ T2646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 75.567015][ T2646] Call Trace: [ 75.570328][ T2646] [ 75.573286][ T2646] __dump_stack+0x21/0x24 [ 75.577290][ T2651] loop0: detected capacity change from 0 to 512 [ 75.577692][ T2646] dump_stack_lvl+0x110/0x170 [ 75.588645][ T2646] ? __cfi_dump_stack_lvl+0x8/0x8 [ 75.593709][ T2646] dump_stack+0x15/0x24 [ 75.597902][ T2646] should_fail_ex+0x3bf/0x510 [ 75.602621][ T2646] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 75.608741][ T2646] __should_failslab+0xac/0xf0 [ 75.613532][ T2653] device syzkaller0 entered promiscuous mode [ 75.613560][ T2646] should_failslab+0x9/0x20 [ 75.624091][ T2646] kmem_cache_alloc+0x3b/0x320 [ 75.628903][ T2646] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 75.631329][ T2653] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 75.635019][ T2646] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 75.648778][ T2646] kvm_mmu_topup_memory_cache+0x20/0x30 [ 75.654376][ T2646] kvm_mmu_load+0x99/0x2570 [ 75.658917][ T2646] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 75.664417][ T2646] ? queue_delayed_work_on+0x10d/0x160 [ 75.669923][ T2646] ? kvm_apic_has_interrupt+0x776/0x780 [ 75.675500][ T2646] vcpu_enter_guest+0x4d3b/0x7050 [ 75.680581][ T2646] ? __cfi_avc_has_perm+0x10/0x10 [ 75.685646][ T2646] ? pvclock_gtod_update_fn+0x270/0x270 [ 75.691237][ T2646] ? 0xffffffffa00041c0 [ 75.695423][ T2646] ? is_bpf_text_address+0x177/0x190 [ 75.700745][ T2646] ? kernel_text_address+0xa0/0xd0 [ 75.705890][ T2646] ? __kernel_text_address+0xd/0x30 [ 75.711121][ T2646] ? unwind_get_return_address+0x4d/0x90 [ 75.716786][ T2646] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 75.723031][ T2646] ? arch_stack_walk+0xfc/0x150 [ 75.727926][ T2646] ? stack_trace_save+0xa6/0xf0 [ 75.732809][ T2646] ? vmx_vcpu_pi_load+0x14c/0x840 [ 75.737869][ T2646] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 75.743283][ T2646] ? _parse_integer_limit+0x18e/0x1d0 [ 75.748689][ T2646] ? __asan_set_shadow_00+0xe/0x10 [ 75.753845][ T2646] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 75.758733][ T2646] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 75.763985][ T2646] ? __this_cpu_preempt_check+0x13/0x20 [ 75.769572][ T2646] ? xfd_validate_state+0x70/0x150 [ 75.774723][ T2646] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 75.780031][ T2646] ? __local_bh_enable_ip+0x58/0x80 [ 75.785520][ T2646] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 75.791100][ T2646] kvm_vcpu_ioctl+0x8ed/0xc00 [ 75.795829][ T2646] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 75.801060][ T2646] ? selinux_file_ioctl+0x3ad/0x4c0 [ 75.806306][ T2646] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 75.811885][ T2646] ? mutex_unlock+0x8f/0x230 [ 75.816519][ T2646] ? __cfi_mutex_unlock+0x10/0x10 [ 75.821576][ T2646] ? __fget_files+0x2d1/0x330 [ 75.826280][ T2646] ? security_file_ioctl+0x95/0xc0 [ 75.831423][ T2646] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 75.836658][ T2646] __se_sys_ioctl+0x12f/0x1b0 [ 75.841370][ T2646] __x64_sys_ioctl+0x7b/0x90 [ 75.845987][ T2646] x64_sys_call+0x58b/0x9a0 [ 75.850526][ T2646] do_syscall_64+0x4c/0xa0 [ 75.855003][ T2646] ? clear_bhb_loop+0x30/0x80 [ 75.859714][ T2646] ? clear_bhb_loop+0x30/0x80 [ 75.864429][ T2646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.870377][ T2646] RIP: 0033:0x7f1302f9ce59 [ 75.874838][ T2646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.894470][ T2646] RSP: 002b:00007f1303d77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.902920][ T2646] RAX: ffffffffffffffda RBX: 00007f1303215fa0 RCX: 00007f1302f9ce59 [ 75.910916][ T2646] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 75.918910][ T2646] RBP: 00007f1303d77090 R08: 0000000000000000 R09: 0000000000000000 [ 75.926909][ T2646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.934904][ T2646] R13: 00007f1303216038 R14: 00007f1303215fa0 R15: 00007ffcda067d18 [ 75.942913][ T2646] [ 75.960419][ T2651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.979694][ T2651] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.026416][ T2659] loop7: detected capacity change from 0 to 512 [ 76.047198][ T2661] device syzkaller0 entered promiscuous mode [ 76.084030][ T2659] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 76.093219][ T2659] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.168984][ T2668] loop4: detected capacity change from 0 to 128 [ 76.172398][ T2666] loop5: detected capacity change from 0 to 512 [ 76.185666][ T2668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 76.194882][ T2668] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.232710][ T2672] loop6: detected capacity change from 0 to 512 [ 76.251704][ T289] EXT4-fs (loop4): unmounting filesystem. [ 76.270839][ T2126] EXT4-fs (loop7): unmounting filesystem. [ 76.281840][ T2666] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.915: inode has both inline data and extents flags [ 76.304807][ T2672] EXT4-fs (loop6): 1 truncate cleaned up [ 76.312842][ T2676] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 76.323346][ T2672] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 76.338561][ T2666] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.915: couldn't read orphan inode 15 (err -117) [ 76.354675][ T2672] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.924: bg 0: block 465: padding at end of block bitmap is not set [ 76.369424][ T2666] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 76.388005][ T2672] EXT4-fs error (device loop6) in ext4_setattr:5697: error 28 [ 76.398030][ T28] audit: type=1400 audit(1781328887.643:362): avc: denied { rename } for pid=2671 comm="syz.6.924" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.438935][ T2014] EXT4-fs (loop6): unmounting filesystem. [ 76.470322][ T2684] device syzkaller0 entered promiscuous mode [ 76.610309][ T2688] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 76.698909][ T2682] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 76.709314][ T2688] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.745692][ T2688] FAULT_INJECTION: forcing a failure. [ 76.745692][ T2688] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 76.779195][ T288] EXT4-fs (loop0): unmounting filesystem. [ 76.802180][ T2688] CPU: 0 PID: 2688 Comm: syz.6.930 Not tainted syzkaller #0 [ 76.809541][ T2688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 76.819618][ T2688] Call Trace: [ 76.822923][ T2688] [ 76.825871][ T2688] __dump_stack+0x21/0x24 [ 76.830234][ T2688] dump_stack_lvl+0x110/0x170 [ 76.834934][ T2688] ? __cfi_dump_stack_lvl+0x8/0x8 [ 76.839983][ T2688] ? debug_smp_processor_id+0x17/0x20 [ 76.845385][ T2688] ? try_charge_memcg+0x258/0x1650 [ 76.850534][ T2688] dump_stack+0x15/0x24 [ 76.854724][ T2688] should_fail_ex+0x3bf/0x510 [ 76.859436][ T2688] should_fail_alloc_page+0x61/0x90 [ 76.864677][ T2688] prepare_alloc_pages+0x131/0x570 [ 76.869829][ T2688] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 76.875063][ T2688] ? folio_batch_move_lru+0x37a/0x470 [ 76.880471][ T2688] ? cgroup_rstat_updated+0xf0/0x360 [ 76.885793][ T2688] __alloc_pages+0x15b/0x610 [ 76.890588][ T2688] ? __cfi___alloc_pages+0x10/0x10 [ 76.895734][ T2688] ? folio_add_lru+0x2d6/0x650 [ 76.900531][ T2688] ? mas_state_walk+0x7ab/0xa80 [ 76.905415][ T2688] __folio_alloc+0x12/0x40 [ 76.909868][ T2688] handle_mm_fault+0x1989/0x26b0 [ 76.914830][ T2688] ? __cfi_handle_mm_fault+0x10/0x10 [ 76.920140][ T2688] ? down_read_trylock+0x27f/0x660 [ 76.925288][ T2688] ? up_read+0x56/0x1d0 [ 76.929503][ T2688] ? lock_mm_and_find_vma+0x9e/0x320 [ 76.934809][ T2688] ? do_user_addr_fault+0x2eb/0x1030 [ 76.940132][ T2688] do_user_addr_fault+0x61e/0x1030 [ 76.945279][ T2688] exc_page_fault+0x51/0xb0 [ 76.949806][ T2688] asm_exc_page_fault+0x27/0x30 [ 76.954693][ T2688] RIP: 0010:clear_user_erms+0xa/0x10 [ 76.960005][ T2688] Code: 74 03 f3 48 ab 83 e2 07 74 04 89 d1 f3 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 90 90 90 48 83 f9 40 0f 82 76 ff ff ff aa 31 c0 c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 d4 72 ba fd [ 76.979636][ T2688] RSP: 0018:ffffc9000470f538 EFLAGS: 00050206 [ 76.985755][ T2688] RAX: 0000000000000000 RBX: ffffc9000470fa80 RCX: 00000000001f1a00 [ 76.993751][ T2688] RDX: 0000000000000000 RSI: 00000000001fe200 RDI: 000020000000f000 [ 77.001742][ T2688] RBP: ffffc9000470f690 R08: ffff88813d0a1440 R09: 0000000000000005 [ 77.009737][ T2688] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000002800 [ 77.017737][ T2688] R13: 0000200000002800 R14: dffffc0000000000 R15: 00000000001fe200 [ 77.025828][ T2688] ? iov_iter_zero+0x3ba/0xf60 [ 77.030633][ T2688] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 77.036044][ T2688] ? __cfi_iov_iter_zero+0x10/0x10 [ 77.041204][ T2688] ? iomap_iter+0x72b/0xb20 [ 77.045739][ T2688] __iomap_dio_rw+0x1155/0x1c90 [ 77.050624][ T2688] ? __cfi___iomap_dio_rw+0x10/0x10 [ 77.055857][ T2688] ? downgrade_write+0x370/0x370 [ 77.060830][ T2688] ? kasan_set_track+0x60/0x70 [ 77.065631][ T2688] ? io_submit_one+0x133/0x1910 [ 77.070513][ T2688] ? __se_sys_io_submit+0x17b/0x3e0 [ 77.075778][ T2688] ? down_read+0xa6/0xf0 [ 77.080048][ T2688] iomap_dio_rw+0x41/0x90 [ 77.084411][ T2688] ext4_file_read_iter+0x367/0x470 [ 77.089584][ T2688] aio_read+0x348/0x4b0 [ 77.093776][ T2688] ? __get_reqs_available+0x420/0x420 [ 77.099183][ T2688] ? kasan_save_alloc_info+0x1f/0x30 [ 77.104498][ T2688] ? __kasan_slab_alloc+0x72/0x80 [ 77.109566][ T2688] io_submit_one+0x6d7/0x1910 [ 77.114280][ T2688] ? irqentry_exit+0x37/0x40 [ 77.118900][ T2688] ? lookup_ioctx+0x2b0/0x2b0 [ 77.123713][ T2688] ? asm_exc_page_fault+0x27/0x30 [ 77.128876][ T2688] ? memset+0x35/0x40 [ 77.132887][ T2688] ? blk_start_plug+0x9b/0x130 [ 77.137686][ T2688] __se_sys_io_submit+0x17b/0x3e0 [ 77.142770][ T2688] ? __x64_sys_io_submit+0x90/0x90 [ 77.147921][ T2688] ? ksys_write+0x1fa/0x260 [ 77.152459][ T2688] ? __cfi_ksys_write+0x10/0x10 [ 77.157338][ T2688] ? debug_smp_processor_id+0x17/0x20 [ 77.162803][ T2688] __x64_sys_io_submit+0x7b/0x90 [ 77.167775][ T2688] x64_sys_call+0x81d/0x9a0 [ 77.172308][ T2688] do_syscall_64+0x4c/0xa0 [ 77.176752][ T2688] ? clear_bhb_loop+0x30/0x80 [ 77.184857][ T2688] ? clear_bhb_loop+0x30/0x80 [ 77.189586][ T2688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.195535][ T2688] RIP: 0033:0x7f1302f9ce59 [ 77.199993][ T2688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.219713][ T2688] RSP: 002b:00007f1303d77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 77.228160][ T2688] RAX: ffffffffffffffda RBX: 00007f1303215fa0 RCX: 00007f1302f9ce59 [ 77.236162][ T2688] RDX: 0000200000000540 RSI: 0000000000003f0a RDI: 00007f1303d56000 [ 77.244203][ T2688] RBP: 00007f1303d77090 R08: 0000000000000000 R09: 0000000000000000 [ 77.252200][ T2688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.260201][ T2688] R13: 00007f1303216038 R14: 00007f1303215fa0 R15: 00007ffcda067d18 [ 77.268211][ T2688] [ 77.299946][ T492] EXT4-fs (loop5): unmounting filesystem. [ 77.313102][ T2682] fuse: Unknown parameter '' [ 77.564825][ T2694] device syzkaller0 entered promiscuous mode [ 77.613035][ T2700] device syzkaller0 entered promiscuous mode [ 77.658328][ T2694] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 77.691302][ T2014] EXT4-fs (loop6): unmounting filesystem. [ 77.710807][ T2703] FAULT_INJECTION: forcing a failure. [ 77.710807][ T2703] name failslab, interval 1, probability 0, space 0, times 0 [ 77.722757][ T28] audit: type=1400 audit(1781328888.953:363): avc: denied { create } for pid=2708 comm="syz.6.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 77.744967][ T2705] binder: BINDER_SET_CONTEXT_MGR already set [ 77.753243][ T2703] CPU: 0 PID: 2703 Comm: syz.7.936 Not tainted syzkaller #0 [ 77.759990][ T2705] binder: 2704:2705 ioctl 4018620d 200000004a80 returned -16 [ 77.760582][ T2703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 77.778032][ T2703] Call Trace: [ 77.781381][ T2703] [ 77.784350][ T2703] __dump_stack+0x21/0x24 [ 77.788720][ T2703] dump_stack_lvl+0x110/0x170 [ 77.793437][ T2703] ? __cfi_dump_stack_lvl+0x8/0x8 [ 77.798511][ T2703] dump_stack+0x15/0x24 [ 77.802705][ T2703] should_fail_ex+0x3bf/0x510 [ 77.807423][ T2703] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 77.813534][ T2703] __should_failslab+0xac/0xf0 [ 77.818339][ T2703] should_failslab+0x9/0x20 [ 77.822899][ T2703] kmem_cache_alloc+0x3b/0x320 [ 77.827714][ T2703] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 77.833831][ T2703] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 77.839784][ T2703] kvm_mmu_topup_memory_cache+0x20/0x30 [ 77.845370][ T2703] kvm_mmu_load+0x99/0x2570 [ 77.849906][ T2703] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 77.855578][ T2703] ? queue_delayed_work_on+0x10d/0x160 [ 77.861089][ T2703] ? kvm_apic_has_interrupt+0x776/0x780 [ 77.866676][ T2703] vcpu_enter_guest+0x4d3b/0x7050 [ 77.871754][ T2703] ? __cfi_avc_has_perm+0x10/0x10 [ 77.876818][ T2703] ? pvclock_gtod_update_fn+0x270/0x270 [ 77.882410][ T2703] ? 0xffffffffa00041c0 [ 77.886597][ T2703] ? is_bpf_text_address+0x177/0x190 [ 77.891919][ T2703] ? kernel_text_address+0xa0/0xd0 [ 77.897068][ T2703] ? __kernel_text_address+0xd/0x30 [ 77.902304][ T2703] ? unwind_get_return_address+0x4d/0x90 [ 77.908145][ T2703] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 77.914339][ T2703] ? arch_stack_walk+0xfc/0x150 [ 77.919239][ T2703] ? stack_trace_save+0xa6/0xf0 [ 77.924130][ T2703] ? vmx_vcpu_pi_load+0x14c/0x840 [ 77.929191][ T2703] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 77.934594][ T2703] ? _parse_integer_limit+0x18e/0x1d0 [ 77.940000][ T2703] ? __asan_set_shadow_00+0xe/0x10 [ 77.945160][ T2703] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 77.950042][ T2703] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 77.955311][ T2703] ? __this_cpu_preempt_check+0x13/0x20 [ 77.960898][ T2703] ? xfd_validate_state+0x70/0x150 [ 77.966052][ T2703] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 77.971374][ T2703] ? __local_bh_enable_ip+0x58/0x80 [ 77.976614][ T2703] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 77.982203][ T2703] kvm_vcpu_ioctl+0x8ed/0xc00 [ 77.986928][ T2703] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 77.992166][ T2703] ? selinux_file_ioctl+0x3ad/0x4c0 [ 77.997408][ T2703] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 78.002995][ T2703] ? mutex_unlock+0x8f/0x230 [ 78.007635][ T2703] ? __cfi_mutex_unlock+0x10/0x10 [ 78.012723][ T2703] ? __fget_files+0x2d1/0x330 [ 78.017449][ T2703] ? security_file_ioctl+0x95/0xc0 [ 78.022610][ T2703] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 78.027856][ T2703] __se_sys_ioctl+0x12f/0x1b0 [ 78.032575][ T2703] __x64_sys_ioctl+0x7b/0x90 [ 78.037220][ T2703] x64_sys_call+0x58b/0x9a0 [ 78.041769][ T2703] do_syscall_64+0x4c/0xa0 [ 78.046223][ T2703] ? clear_bhb_loop+0x30/0x80 [ 78.050930][ T2703] ? clear_bhb_loop+0x30/0x80 [ 78.055738][ T2703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.061676][ T2703] RIP: 0033:0x7f1bd879ce59 [ 78.066216][ T2703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.085862][ T2703] RSP: 002b:00007f1bd968d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 78.094327][ T2703] RAX: ffffffffffffffda RBX: 00007f1bd8a15fa0 RCX: 00007f1bd879ce59 [ 78.102335][ T2703] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 78.110341][ T2703] RBP: 00007f1bd968d090 R08: 0000000000000000 R09: 0000000000000000 [ 78.118352][ T2703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 78.126441][ T2703] R13: 00007f1bd8a16038 R14: 00007f1bd8a15fa0 R15: 00007ffcf4313cd8 [ 78.134464][ T2703] [ 78.174624][ T2718] device syzkaller0 entered promiscuous mode [ 78.223062][ T2728] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 78.242488][ T2728] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.327877][ T2717] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 78.342542][ T492] EXT4-fs (loop5): unmounting filesystem. [ 78.419384][ T2717] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.434133][ T28] audit: type=1400 audit(1781328889.673:364): avc: denied { bind } for pid=2745 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.463826][ T2744] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 78.497507][ T2748] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 78.521147][ T2746] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.539731][ T2751] device syzkaller0 entered promiscuous mode [ 78.545880][ T2746] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.581767][ T2744] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.642875][ T288] EXT4-fs (loop0): unmounting filesystem. [ 78.688498][ T2744] FAULT_INJECTION: forcing a failure. [ 78.688498][ T2744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 78.729187][ T2744] CPU: 0 PID: 2744 Comm: syz.5.947 Not tainted syzkaller #0 [ 78.736555][ T2744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 78.746659][ T2744] Call Trace: [ 78.749980][ T2744] [ 78.753043][ T2744] __dump_stack+0x21/0x24 [ 78.757427][ T2744] dump_stack_lvl+0x110/0x170 [ 78.762151][ T2744] ? __cfi_dump_stack_lvl+0x8/0x8 [ 78.767227][ T2744] ? debug_smp_processor_id+0x17/0x20 [ 78.772645][ T2744] ? try_charge_memcg+0x258/0x1650 [ 78.777810][ T2744] dump_stack+0x15/0x24 [ 78.782022][ T2744] should_fail_ex+0x3bf/0x510 [ 78.786774][ T2744] should_fail_alloc_page+0x61/0x90 [ 78.792023][ T2744] prepare_alloc_pages+0x131/0x570 [ 78.797204][ T2744] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 78.802445][ T2744] ? folio_batch_move_lru+0x37a/0x470 [ 78.807874][ T2744] ? cgroup_rstat_updated+0xf0/0x360 [ 78.813203][ T2744] __alloc_pages+0x15b/0x610 [ 78.817854][ T2744] ? __cfi___alloc_pages+0x10/0x10 [ 78.823012][ T2744] ? folio_add_lru+0x2d6/0x650 [ 78.827843][ T2744] ? mas_state_walk+0x7ab/0xa80 [ 78.832787][ T2744] __folio_alloc+0x12/0x40 [ 78.837250][ T2744] handle_mm_fault+0x1989/0x26b0 [ 78.842237][ T2744] ? __cfi_handle_mm_fault+0x10/0x10 [ 78.847556][ T2744] ? down_read_trylock+0x27f/0x660 [ 78.852729][ T2744] ? up_read+0x56/0x1d0 [ 78.856951][ T2744] ? lock_mm_and_find_vma+0x9e/0x320 [ 78.862277][ T2744] ? do_user_addr_fault+0x2eb/0x1030 [ 78.867607][ T2744] do_user_addr_fault+0x61e/0x1030 [ 78.872766][ T2744] exc_page_fault+0x51/0xb0 [ 78.877315][ T2744] asm_exc_page_fault+0x27/0x30 [ 78.882215][ T2744] RIP: 0010:clear_user_erms+0xa/0x10 [ 78.882777][ T2757] device syzkaller0 entered promiscuous mode [ 78.887537][ T2744] Code: 74 03 f3 48 ab 83 e2 07 74 04 89 d1 f3 aa 31 c0 c3 48 c1 e1 03 83 e2 07 48 01 d1 eb f1 90 90 90 48 83 f9 40 0f 82 76 ff ff ff aa 31 c0 c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 d4 72 ba fd [ 78.887560][ T2744] RSP: 0018:ffffc90005307538 EFLAGS: 00050206 [ 78.919263][ T2744] RAX: 0000000000000000 RBX: ffffc90005307a80 RCX: 00000000001f0a00 [ 78.927276][ T2744] RDX: 0000000000000000 RSI: 00000000001fe200 RDI: 0000200000010000 [ 78.931006][ T2757] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 78.935282][ T2744] RBP: ffffc90005307690 R08: ffff888113a19440 R09: 0000000000000005 [ 78.935303][ T2744] R10: 0000000000000006 R11: 0000000000000000 R12: 0000000000002800 [ 78.935317][ T2744] R13: 0000200000002800 R14: dffffc0000000000 R15: 00000000001fe200 [ 78.967108][ T2744] ? iov_iter_zero+0x3ba/0xf60 [ 78.971926][ T2744] ? __cfi_ext4_iomap_begin+0x10/0x10 [ 78.977348][ T2744] ? __cfi_iov_iter_zero+0x10/0x10 [ 78.982608][ T2744] ? iomap_iter+0x72b/0xb20 [ 78.987158][ T2744] __iomap_dio_rw+0x1155/0x1c90 [ 78.992060][ T2744] ? __cfi___iomap_dio_rw+0x10/0x10 [ 78.997315][ T2744] ? downgrade_write+0x370/0x370 [ 79.002306][ T2744] ? kasan_set_track+0x60/0x70 [ 79.007116][ T2744] ? io_submit_one+0x133/0x1910 [ 79.012012][ T2744] ? __se_sys_io_submit+0x17b/0x3e0 [ 79.017256][ T2744] ? down_read+0xa6/0xf0 [ 79.021543][ T2744] iomap_dio_rw+0x41/0x90 [ 79.025958][ T2744] ext4_file_read_iter+0x367/0x470 [ 79.031118][ T2744] aio_read+0x348/0x4b0 [ 79.035336][ T2744] ? __get_reqs_available+0x420/0x420 [ 79.040763][ T2744] ? kasan_save_alloc_info+0x1f/0x30 [ 79.046080][ T2744] ? __kasan_slab_alloc+0x72/0x80 [ 79.046844][ T2763] set_capacity_and_notify: 7 callbacks suppressed [ 79.046878][ T2763] loop0: detected capacity change from 0 to 256 [ 79.051146][ T2744] io_submit_one+0x6d7/0x1910 [ 79.051179][ T2744] ? irqentry_exit+0x37/0x40 [ 79.051202][ T2744] ? lookup_ioctx+0x2b0/0x2b0 [ 79.076043][ T2763] exfat: Deprecated parameter 'utf8' [ 79.077927][ T2744] ? asm_exc_page_fault+0x27/0x30 [ 79.088278][ T2744] ? memset+0x35/0x40 [ 79.092558][ T2744] ? blk_start_plug+0x9b/0x130 [ 79.097372][ T2744] __se_sys_io_submit+0x17b/0x3e0 [ 79.101603][ T2763] exfat: Deprecated parameter 'namecase' [ 79.102436][ T2744] ? __x64_sys_io_submit+0x90/0x90 [ 79.113229][ T2744] ? ksys_write+0x1fa/0x260 [ 79.117783][ T2744] ? __cfi_ksys_write+0x10/0x10 [ 79.122675][ T2744] ? debug_smp_processor_id+0x17/0x20 [ 79.128094][ T2744] __x64_sys_io_submit+0x7b/0x90 [ 79.133061][ T2744] x64_sys_call+0x81d/0x9a0 [ 79.137588][ T2744] do_syscall_64+0x4c/0xa0 [ 79.142024][ T2744] ? clear_bhb_loop+0x30/0x80 [ 79.146713][ T2744] ? clear_bhb_loop+0x30/0x80 [ 79.151407][ T2744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.157586][ T2744] RIP: 0033:0x7f719ef9ce59 [ 79.162021][ T2744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.181642][ T2744] RSP: 002b:00007f719ff3c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 79.190078][ T2744] RAX: ffffffffffffffda RBX: 00007f719f215fa0 RCX: 00007f719ef9ce59 [ 79.198157][ T2744] RDX: 0000200000000540 RSI: 0000000000003f0a RDI: 00007f719ff1b000 [ 79.206147][ T2744] RBP: 00007f719ff3c090 R08: 0000000000000000 R09: 0000000000000000 [ 79.214138][ T2744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.222125][ T2744] R13: 00007f719f216038 R14: 00007f719f215fa0 R15: 00007ffd141896a8 [ 79.230118][ T2744] [ 79.234480][ T2763] exfat: Deprecated parameter 'namecase' [ 79.244059][ T2763] exfat: Deprecated parameter 'utf8' [ 79.269037][ T2763] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 79.300500][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 79.300516][ T28] audit: type=1400 audit(1781328890.543:369): avc: denied { write } for pid=2761 comm="syz.0.954" path="/169/file0/file1" dev="loop0" ino=1048640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.337894][ T2765] FAULT_INJECTION: forcing a failure. [ 79.337894][ T2765] name failslab, interval 1, probability 0, space 0, times 0 [ 79.358495][ T2014] EXT4-fs (loop6): unmounting filesystem. [ 79.370398][ T28] audit: type=1400 audit(1781328890.543:370): avc: denied { getattr } for pid=2761 comm="syz.0.954" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 79.376424][ T2765] CPU: 1 PID: 2765 Comm: syz.4.955 Not tainted syzkaller #0 [ 79.399980][ T2765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 79.410163][ T2765] Call Trace: [ 79.413476][ T2765] [ 79.416437][ T2765] __dump_stack+0x21/0x24 [ 79.420808][ T2765] dump_stack_lvl+0x110/0x170 [ 79.425519][ T2765] ? __cfi_dump_stack_lvl+0x8/0x8 [ 79.430587][ T2765] dump_stack+0x15/0x24 [ 79.434787][ T2765] should_fail_ex+0x3bf/0x510 [ 79.439500][ T2765] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 79.445627][ T2765] __should_failslab+0xac/0xf0 [ 79.450435][ T2765] should_failslab+0x9/0x20 [ 79.454972][ T2765] kmem_cache_alloc+0x3b/0x320 [ 79.459946][ T2765] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 79.466056][ T2765] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 79.471999][ T2765] kvm_mmu_topup_memory_cache+0x20/0x30 [ 79.477594][ T2765] kvm_mmu_load+0x99/0x2570 [ 79.482135][ T2765] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 79.487634][ T2765] ? queue_delayed_work_on+0x10d/0x160 [ 79.493134][ T2765] ? kvm_apic_has_interrupt+0x776/0x780 [ 79.498724][ T2765] vcpu_enter_guest+0x4d3b/0x7050 [ 79.503794][ T2765] ? __cfi_avc_has_perm+0x10/0x10 [ 79.508861][ T2765] ? pvclock_gtod_update_fn+0x270/0x270 [ 79.514492][ T2765] ? 0xffffffffa00041c0 [ 79.518677][ T2765] ? is_bpf_text_address+0x177/0x190 [ 79.524015][ T2765] ? kernel_text_address+0xa0/0xd0 [ 79.529174][ T2765] ? __kernel_text_address+0xd/0x30 [ 79.534413][ T2765] ? unwind_get_return_address+0x4d/0x90 [ 79.540085][ T2765] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 79.546282][ T2765] ? arch_stack_walk+0xfc/0x150 [ 79.551181][ T2765] ? stack_trace_save+0xa6/0xf0 [ 79.556070][ T2765] ? vmx_vcpu_pi_load+0x14c/0x840 [ 79.561132][ T2765] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 79.566574][ T2765] ? _parse_integer_limit+0x18e/0x1d0 [ 79.571981][ T2765] ? __asan_set_shadow_00+0xe/0x10 [ 79.577136][ T2765] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 79.582022][ T2765] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 79.587260][ T2765] ? __this_cpu_preempt_check+0x13/0x20 [ 79.592861][ T2765] ? xfd_validate_state+0x70/0x150 [ 79.598043][ T2765] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 79.603374][ T2765] ? __local_bh_enable_ip+0x58/0x80 [ 79.608630][ T2765] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 79.614248][ T2765] kvm_vcpu_ioctl+0x8ed/0xc00 [ 79.618961][ T2765] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 79.624210][ T2765] ? selinux_file_ioctl+0x3ad/0x4c0 [ 79.629434][ T2765] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 79.635006][ T2765] ? mutex_unlock+0x8f/0x230 [ 79.639617][ T2765] ? __cfi_mutex_unlock+0x10/0x10 [ 79.644664][ T2765] ? __fget_files+0x2d1/0x330 [ 79.649363][ T2765] ? security_file_ioctl+0x95/0xc0 [ 79.654500][ T2765] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 79.659731][ T2765] __se_sys_ioctl+0x12f/0x1b0 [ 79.664425][ T2765] __x64_sys_ioctl+0x7b/0x90 [ 79.669031][ T2765] x64_sys_call+0x58b/0x9a0 [ 79.673556][ T2765] do_syscall_64+0x4c/0xa0 [ 79.677996][ T2765] ? clear_bhb_loop+0x30/0x80 [ 79.682697][ T2765] ? clear_bhb_loop+0x30/0x80 [ 79.687388][ T2765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.693332][ T2765] RIP: 0033:0x7f692859ce59 [ 79.697764][ T2765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.717389][ T2765] RSP: 002b:00007f6929490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 79.725828][ T2765] RAX: ffffffffffffffda RBX: 00007f6928815fa0 RCX: 00007f692859ce59 [ 79.733832][ T2765] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 79.741856][ T2765] RBP: 00007f6929490090 R08: 0000000000000000 R09: 0000000000000000 [ 79.749851][ T2765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.757838][ T2765] R13: 00007f6928816038 R14: 00007f6928815fa0 R15: 00007ffeff6bb488 [ 79.765831][ T2765] [ 79.788464][ T2769] loop7: detected capacity change from 0 to 4096 [ 79.796364][ T2769] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 79.845004][ T2773] device syzkaller0 entered promiscuous mode [ 79.859747][ T2771] device syzkaller0 entered promiscuous mode [ 79.882839][ T2771] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 79.884066][ T492] EXT4-fs (loop5): unmounting filesystem. [ 79.980442][ T2780] loop7: detected capacity change from 0 to 512 [ 80.002075][ T2783] device syzkaller0 entered promiscuous mode [ 80.150228][ T2794] binder: 2792:2794 ioctl c0306201 2000000004c0 returned -22 [ 80.167884][ T2796] device syzkaller0 entered promiscuous mode [ 80.220926][ T2801] loop0: detected capacity change from 0 to 256 [ 80.239920][ T2803] loop5: detected capacity change from 0 to 512 [ 80.257551][ T2801] FAT-fs (loop0): Unrecognized mount option ">G%Tmh_̘{u;x\\I5[Q-@bb2 y)pdZ3cLףf.:Cg9Fz` [ 80.257551][ T2801] sndv [ 80.257551][ T2801] ?([XUASퟙvE<\ꢲ9g" or missing value [ 80.299942][ T2803] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 80.314035][ T2803] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.398121][ T2810] device syzkaller0 entered promiscuous mode [ 80.406204][ T2810] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 80.474675][ T492] EXT4-fs (loop5): unmounting filesystem. [ 80.539559][ T2822] device syzkaller0 entered promiscuous mode [ 80.547051][ T2821] FAULT_INJECTION: forcing a failure. [ 80.547051][ T2821] name failslab, interval 1, probability 0, space 0, times 0 [ 80.567181][ T2827] loop5: detected capacity change from 0 to 1024 [ 80.575410][ T2821] CPU: 1 PID: 2821 Comm: syz.0.976 Not tainted syzkaller #0 [ 80.582759][ T2821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 80.592849][ T2821] Call Trace: [ 80.596159][ T2821] [ 80.599116][ T2821] __dump_stack+0x21/0x24 [ 80.603502][ T2821] dump_stack_lvl+0x110/0x170 [ 80.608210][ T2821] ? __cfi_dump_stack_lvl+0x8/0x8 [ 80.613272][ T2821] dump_stack+0x15/0x24 [ 80.617464][ T2821] should_fail_ex+0x3bf/0x510 [ 80.622346][ T2821] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 80.625993][ T2827] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 80.628468][ T2821] __should_failslab+0xac/0xf0 [ 80.642821][ T2821] should_failslab+0x9/0x20 [ 80.647364][ T2821] kmem_cache_alloc+0x3b/0x320 [ 80.652169][ T2821] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 80.658284][ T2821] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 80.664228][ T2821] kvm_mmu_topup_memory_cache+0x20/0x30 [ 80.669817][ T2821] kvm_mmu_load+0x99/0x2570 [ 80.674360][ T2821] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 80.678026][ T2827] EXT4-fs error (device loop5): ext4_get_journal_inode:5749: inode #32: comm syz.5.980: iget: special inode unallocated [ 80.679849][ T2821] ? queue_delayed_work_on+0x10d/0x160 [ 80.679883][ T2821] ? kvm_apic_has_interrupt+0x776/0x780 [ 80.679907][ T2821] vcpu_enter_guest+0x4d3b/0x7050 [ 80.708579][ T2821] ? __cfi_avc_has_perm+0x10/0x10 [ 80.714101][ T2821] ? pvclock_gtod_update_fn+0x270/0x270 [ 80.719778][ T2821] ? 0xffffffffa00041c0 [ 80.723960][ T2821] ? is_bpf_text_address+0x177/0x190 [ 80.728783][ T2827] EXT4-fs (loop5): no journal found [ 80.729283][ T2821] ? kernel_text_address+0xa0/0xd0 [ 80.729314][ T2821] ? __kernel_text_address+0xd/0x30 [ 80.743728][ T2827] EXT4-fs (loop5): can't get journal size [ 80.744937][ T2821] ? unwind_get_return_address+0x4d/0x90 [ 80.756312][ T2821] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 80.762505][ T2821] ? arch_stack_walk+0xfc/0x150 [ 80.767442][ T2821] ? stack_trace_save+0xa6/0xf0 [ 80.772332][ T2821] ? vmx_vcpu_pi_load+0x14c/0x840 [ 80.777396][ T2821] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 80.782818][ T2821] ? _parse_integer_limit+0x18e/0x1d0 [ 80.788228][ T2821] ? __asan_set_shadow_00+0xe/0x10 [ 80.793381][ T2821] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 80.798264][ T2821] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 80.803501][ T2821] ? __this_cpu_preempt_check+0x13/0x20 [ 80.809082][ T2821] ? xfd_validate_state+0x70/0x150 [ 80.814230][ T2821] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 80.819552][ T2821] ? __local_bh_enable_ip+0x58/0x80 [ 80.824781][ T2821] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 80.830363][ T2821] kvm_vcpu_ioctl+0x8ed/0xc00 [ 80.835087][ T2821] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 80.840329][ T2821] ? selinux_file_ioctl+0x3ad/0x4c0 [ 80.845566][ T2821] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 80.851151][ T2821] ? mutex_unlock+0x8f/0x230 [ 80.855783][ T2821] ? __cfi_mutex_unlock+0x10/0x10 [ 80.860852][ T2821] ? __fget_files+0x2d1/0x330 [ 80.865564][ T2821] ? security_file_ioctl+0x95/0xc0 [ 80.870718][ T2821] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 80.876007][ T2821] __se_sys_ioctl+0x12f/0x1b0 [ 80.880717][ T2821] __x64_sys_ioctl+0x7b/0x90 [ 80.885341][ T2821] x64_sys_call+0x58b/0x9a0 [ 80.889879][ T2821] do_syscall_64+0x4c/0xa0 [ 80.894358][ T2821] ? clear_bhb_loop+0x30/0x80 [ 80.899072][ T2821] ? clear_bhb_loop+0x30/0x80 [ 80.903781][ T2821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.909720][ T2821] RIP: 0033:0x7f9ba319ce59 [ 80.914171][ T2821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.933812][ T2821] RSP: 002b:00007f9ba4033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.942260][ T2821] RAX: ffffffffffffffda RBX: 00007f9ba3415fa0 RCX: 00007f9ba319ce59 [ 80.950270][ T2821] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 80.951130][ T2827] EXT4-fs (loop5): filesystem is read-only [ 80.958269][ T2821] RBP: 00007f9ba4033090 R08: 0000000000000000 R09: 0000000000000000 [ 80.958288][ T2821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.978731][ T2827] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 80.980072][ T2821] R13: 00007f9ba3416038 R14: 00007f9ba3415fa0 R15: 00007ffcd6bfe558 [ 80.980097][ T2821] [ 81.005841][ T2830] loop4: detected capacity change from 0 to 1024 [ 81.033643][ T2827] EXT4-fs (loop5): shut down requested (2) [ 81.067722][ T2835] device syzkaller0 entered promiscuous mode [ 81.098100][ T2830] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.112855][ T28] audit: type=1400 audit(1781328892.353:371): avc: denied { mounton } for pid=2829 comm="syz.4.979" path="/202/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.161025][ T2838] loop6: detected capacity change from 0 to 512 [ 81.170761][ T28] audit: type=1400 audit(1781328892.353:372): avc: denied { unlink } for pid=2829 comm="syz.4.979" name="#9" dev="loop4" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 81.193932][ T2838] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 81.211825][ T289] EXT4-fs (loop4): unmounting filesystem. [ 81.217706][ T2838] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 81.227872][ T28] audit: type=1400 audit(1781328892.383:373): avc: denied { setattr } for pid=2829 comm="syz.4.979" path="/202/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.251344][ T2838] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 81.261918][ T492] EXT4-fs (loop5): unmounting filesystem. [ 81.286935][ T28] audit: type=1400 audit(1781328892.523:374): avc: denied { write } for pid=2846 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.293405][ T2851] loop7: detected capacity change from 0 to 512 [ 81.316989][ T2849] device syzkaller0 entered promiscuous mode [ 81.324396][ T28] audit: type=1400 audit(1781328892.523:375): avc: denied { remount } for pid=2844 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 81.340738][ T2849] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 81.344742][ T2838] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 81.367114][ T2855] netlink: 60 bytes leftover after parsing attributes in process `syz.4.986'. [ 81.377410][ T2838] EXT4-fs (loop6): failed to initialize system zone (-117) [ 81.386887][ T2838] EXT4-fs (loop6): mount failed [ 81.394213][ T28] audit: type=1400 audit(1781328892.643:376): avc: denied { bind } for pid=2846 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.394547][ T2851] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 81.416567][ T2855] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 81.436018][ T2851] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.447532][ T2855] loop4: detected capacity change from 0 to 512 [ 81.490718][ T2855] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.559095][ T652] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 81.568625][ T2864] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.593026][ T2855] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 81.617987][ T2864] netlink: 104 bytes leftover after parsing attributes in process `syz.6.992'. [ 81.637020][ T2855] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 81.649567][ T2868] device syzkaller0 entered promiscuous mode [ 81.656807][ T2855] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.986: Failed to acquire dquot type 0 [ 81.734096][ T2872] EXT4-fs (loop5): orphan cleanup on readonly fs [ 81.741085][ T2872] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 81.754863][ T2872] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #15: comm syz.5.995: corrupted inode contents [ 81.776027][ T652] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 81.778959][ T2870] binder: 2869:2870 ioctl 89f3 200000000380 returned -22 [ 81.785371][ T652] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 81.793356][ T2872] EXT4-fs error (device loop5): ext4_dirty_inode:6158: inode #15: comm syz.5.995: mark_inode_dirty error [ 81.801142][ T652] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 81.822035][ T652] usb 1-1: config 220 has no interface number 2 [ 81.828345][ T652] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 81.841617][ T652] usb 1-1: config 220 interface 0 has no altsetting 0 [ 81.842578][ T2872] EXT4-fs error (device loop5): ext4_do_update_inode:5281: inode #15: comm syz.5.995: corrupted inode contents [ 81.848596][ T652] usb 1-1: config 220 interface 76 has no altsetting 0 [ 81.862907][ T2878] binder: 2869:2878 ioctl 8933 2000000003c0 returned -22 [ 81.867529][ T652] usb 1-1: config 220 interface 1 has no altsetting 0 [ 81.881712][ T2879] FAULT_INJECTION: forcing a failure. [ 81.881712][ T2879] name failslab, interval 1, probability 0, space 0, times 0 [ 81.883699][ T652] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 81.903532][ T2872] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2945: inode #15: comm syz.5.995: mark_inode_dirty error [ 81.929164][ T2879] CPU: 0 PID: 2879 Comm: syz.4.996 Not tainted syzkaller #0 [ 81.936517][ T2879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 81.946600][ T2879] Call Trace: [ 81.949993][ T2879] [ 81.952951][ T2879] __dump_stack+0x21/0x24 [ 81.955252][ T2872] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2948: inode #15: comm syz.5.995: mark inode dirty (error -117) [ 81.957324][ T2879] dump_stack_lvl+0x110/0x170 [ 81.971830][ T2872] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 81.974453][ T2879] ? __cfi_dump_stack_lvl+0x8/0x8 [ 81.984503][ T2872] EXT4-fs (loop5): 1 orphan inode deleted [ 81.988520][ T2879] dump_stack+0x15/0x24 [ 81.998450][ T2879] should_fail_ex+0x3bf/0x510 [ 82.001517][ T2882] binder: BINDER_SET_CONTEXT_MGR already set [ 82.003268][ T2879] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 82.015366][ T2879] __should_failslab+0xac/0xf0 [ 82.020184][ T2879] should_failslab+0x9/0x20 [ 82.024726][ T2879] kmem_cache_alloc+0x3b/0x320 [ 82.029539][ T2879] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 82.035652][ T2879] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 82.041596][ T2879] kvm_mmu_topup_memory_cache+0x20/0x30 [ 82.045352][ T2882] binder: 2880:2882 ioctl 4018620d 200000004a80 returned -16 [ 82.047199][ T2879] kvm_mmu_load+0x99/0x2570 [ 82.059107][ T2879] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 82.064630][ T2879] ? queue_delayed_work_on+0x10d/0x160 [ 82.070205][ T2879] ? kvm_apic_has_interrupt+0x776/0x780 [ 82.075787][ T2879] vcpu_enter_guest+0x4d3b/0x7050 [ 82.080835][ T2879] ? __kasan_check_write+0x14/0x20 [ 82.085973][ T2879] ? __cfi_pick_next_task_fair+0x10/0x10 [ 82.091657][ T2879] ? pvclock_gtod_update_fn+0x270/0x270 [ 82.097219][ T2879] ? _raw_spin_lock+0x94/0xf0 [ 82.101913][ T2879] ? _raw_spin_unlock+0x4c/0x70 [ 82.106787][ T2879] ? finish_task_switch+0x16b/0x7c0 [ 82.112006][ T2879] ? switch_mm_irqs_off+0x2f0/0x960 [ 82.117223][ T2879] ? __schedule+0xbea/0x14b0 [ 82.121838][ T2879] ? release_firmware_map_entry+0x190/0x190 [ 82.127752][ T2879] ? kernel_text_address+0xa0/0xd0 [ 82.132889][ T2879] ? __kasan_check_read+0x11/0x20 [ 82.137931][ T2879] ? preempt_schedule_irq+0xca/0x120 [ 82.143236][ T2879] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 82.148978][ T2879] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 82.155071][ T2879] ? irqentry_exit+0x37/0x40 [ 82.159685][ T2879] ? sysvec_reschedule_ipi+0x78/0x80 [ 82.164998][ T2879] ? vmx_vcpu_pi_load+0x14c/0x840 [ 82.170041][ T2879] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 82.175702][ T2879] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 82.181090][ T2879] ? _parse_integer_fixup_radix+0xfa/0x320 [ 82.186912][ T2879] ? _parse_integer_limit+0x18e/0x1d0 [ 82.192303][ T2879] ? __asan_set_shadow_00+0xe/0x10 [ 82.197442][ T2879] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 82.202323][ T2879] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 82.207540][ T2879] ? __this_cpu_preempt_check+0x13/0x20 [ 82.213101][ T2879] ? xfd_validate_state+0x70/0x150 [ 82.218249][ T2879] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 82.223589][ T2879] ? __local_bh_enable_ip+0x58/0x80 [ 82.228825][ T2879] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 82.234398][ T2879] kvm_vcpu_ioctl+0x8ed/0xc00 [ 82.239116][ T2879] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.244357][ T2879] ? selinux_file_ioctl+0x3ad/0x4c0 [ 82.249580][ T2879] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 82.255155][ T2879] ? mutex_unlock+0x8f/0x230 [ 82.259768][ T2879] ? __cfi_mutex_unlock+0x10/0x10 [ 82.264821][ T2879] ? __fget_files+0x2d1/0x330 [ 82.269519][ T2879] ? security_file_ioctl+0x95/0xc0 [ 82.274655][ T2879] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.279964][ T2879] __se_sys_ioctl+0x12f/0x1b0 [ 82.284659][ T2879] __x64_sys_ioctl+0x7b/0x90 [ 82.289281][ T2879] x64_sys_call+0x58b/0x9a0 [ 82.293820][ T2879] do_syscall_64+0x4c/0xa0 [ 82.298354][ T2879] ? clear_bhb_loop+0x30/0x80 [ 82.303048][ T2879] ? clear_bhb_loop+0x30/0x80 [ 82.307755][ T2879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 82.313677][ T2879] RIP: 0033:0x7f692859ce59 [ 82.318109][ T2879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.337735][ T2879] RSP: 002b:00007f692944e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.346168][ T2879] RAX: ffffffffffffffda RBX: 00007f6928816180 RCX: 00007f692859ce59 [ 82.354158][ T2879] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 82.362145][ T2879] RBP: 00007f692944e090 R08: 0000000000000000 R09: 0000000000000000 [ 82.370129][ T2879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 82.378117][ T2879] R13: 00007f6928816218 R14: 00007f6928816180 R15: 00007ffeff6bb488 [ 82.386208][ T2879] [ 82.395149][ T652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.407635][ T2885] device syzkaller0 entered promiscuous mode [ 82.410075][ T652] usb 1-1: Product: syz [ 82.417904][ T652] usb 1-1: Manufacturer: syz [ 82.426696][ T652] usb 1-1: SerialNumber: syz [ 82.454975][ T2889] device syzkaller0 entered promiscuous mode [ 82.462448][ T2889] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 82.635380][ T2845] process 'syz.0.985' launched './file0' with NULL argv: empty string added [ 82.652340][ T2903] device syzkaller0 entered promiscuous mode [ 82.654008][ T492] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 82.686695][ T652] usb 1-1: selecting invalid altsetting 0 [ 82.696443][ T652] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 82.712595][ T492] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag [ 82.724050][ T652] usb 1-1: No valid video chain found. [ 82.735075][ T652] usb 1-1: USB disconnect, device number 9 [ 82.741570][ T492] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: unexpected EA_INODE flag [ 82.761725][ T2905] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.792979][ T2909] ext4: Unknown parameter 'subj_type' [ 82.820417][ T2045] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.891859][ T43] tipc: Left network mode [ 82.919355][ T1774] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 82.976570][ T2911] binder: 2910:2911 ioctl 89f3 200000000380 returned -22 [ 82.995993][ T2911] binder: 2910:2911 ioctl 8933 2000000003c0 returned -22 [ 83.055831][ T2916] device syzkaller0 entered promiscuous mode [ 83.066153][ T2916] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 83.090694][ T2920] FAULT_INJECTION: forcing a failure. [ 83.090694][ T2920] name failslab, interval 1, probability 0, space 0, times 0 [ 83.105656][ T2920] CPU: 0 PID: 2920 Comm: syz.4.1015 Not tainted syzkaller #0 [ 83.113078][ T2920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 83.123161][ T2920] Call Trace: [ 83.126470][ T2920] [ 83.129434][ T2920] __dump_stack+0x21/0x24 [ 83.133980][ T2920] dump_stack_lvl+0x110/0x170 [ 83.138686][ T2920] ? __cfi_dump_stack_lvl+0x8/0x8 [ 83.143740][ T2920] dump_stack+0x15/0x24 [ 83.147938][ T2920] should_fail_ex+0x3bf/0x510 [ 83.152642][ T2920] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 83.158745][ T2920] __should_failslab+0xac/0xf0 [ 83.161232][ T1774] usb 7-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 83.163627][ T2920] should_failslab+0x9/0x20 [ 83.178302][ T2920] kmem_cache_alloc+0x3b/0x320 [ 83.183107][ T2920] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 83.189214][ T2920] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 83.195326][ T2920] kvm_mmu_topup_memory_cache+0x20/0x30 [ 83.199229][ T1774] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.200909][ T2920] kvm_mmu_load+0x99/0x2570 [ 83.215148][ T2920] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 83.220638][ T2920] ? queue_delayed_work_on+0x10d/0x160 [ 83.222379][ T1774] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.226137][ T2920] ? kvm_apic_has_interrupt+0x776/0x780 [ 83.244515][ T2920] vcpu_enter_guest+0x4d3b/0x7050 [ 83.249779][ T2920] ? __cfi_avc_has_perm+0x10/0x10 [ 83.254834][ T2920] ? pvclock_gtod_update_fn+0x270/0x270 [ 83.260421][ T2920] ? 0xffffffffa00041c0 [ 83.261336][ T1774] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 83.264599][ T2920] ? is_bpf_text_address+0x177/0x190 [ 83.279092][ T2920] ? kernel_text_address+0xa0/0xd0 [ 83.284242][ T2920] ? __kernel_text_address+0xd/0x30 [ 83.289150][ T1774] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.289482][ T2920] ? unwind_get_return_address+0x4d/0x90 [ 83.297470][ T1774] usb 7-1: Product: syz [ 83.303201][ T2920] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 83.303233][ T2920] ? arch_stack_walk+0xfc/0x150 [ 83.317163][ T1774] usb 7-1: Manufacturer: syz [ 83.318422][ T2920] ? stack_trace_save+0xa6/0xf0 [ 83.323096][ T1774] usb 7-1: SerialNumber: syz [ 83.327965][ T2920] ? vmx_vcpu_pi_load+0x14c/0x840 [ 83.337595][ T2920] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 83.342007][ T1774] cdc_subset: probe of 7-1:1.0 failed with error -22 [ 83.343003][ T2920] ? _parse_integer_limit+0x18e/0x1d0 [ 83.350157][ T1774] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 83.355072][ T2920] ? __asan_set_shadow_00+0xe/0x10 [ 83.363317][ T1774] cdc_ncm 7-1:1.0: bind() failure [ 83.367564][ T2920] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 83.376095][ T1774] cdc_subset: probe of 7-1:1.1 failed with error -22 [ 83.377486][ T2920] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 83.385221][ T1774] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 83.389419][ T2920] ? __this_cpu_preempt_check+0x13/0x20 [ 83.389451][ T2920] ? xfd_validate_state+0x70/0x150 [ 83.396659][ T1774] cdc_ncm 7-1:1.1: bind() failure [ 83.401868][ T2920] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 83.401899][ T2920] ? __local_bh_enable_ip+0x58/0x80 [ 83.423148][ T2920] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 83.428744][ T2920] kvm_vcpu_ioctl+0x8ed/0xc00 [ 83.433483][ T2920] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 83.438737][ T2920] ? selinux_file_ioctl+0x3ad/0x4c0 [ 83.444069][ T2920] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 83.449745][ T2920] ? mutex_unlock+0x8f/0x230 [ 83.454383][ T2920] ? __cfi_mutex_unlock+0x10/0x10 [ 83.459464][ T2920] ? __fget_files+0x2d1/0x330 [ 83.464184][ T2920] ? security_file_ioctl+0x95/0xc0 [ 83.470169][ T2920] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 83.475417][ T2920] __se_sys_ioctl+0x12f/0x1b0 [ 83.480145][ T2920] __x64_sys_ioctl+0x7b/0x90 [ 83.484771][ T2920] x64_sys_call+0x58b/0x9a0 [ 83.489311][ T2920] do_syscall_64+0x4c/0xa0 [ 83.493775][ T2920] ? clear_bhb_loop+0x30/0x80 [ 83.498485][ T2920] ? clear_bhb_loop+0x30/0x80 [ 83.503193][ T2920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.509131][ T2920] RIP: 0033:0x7f692859ce59 [ 83.513578][ T2920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.533298][ T2920] RSP: 002b:00007f6929490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.542023][ T2920] RAX: ffffffffffffffda RBX: 00007f6928815fa0 RCX: 00007f692859ce59 [ 83.550032][ T2920] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 83.556166][ T2899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.558212][ T2920] RBP: 00007f6929490090 R08: 0000000000000000 R09: 0000000000000000 [ 83.573034][ T2899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.574643][ T2920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.590375][ T2920] R13: 00007f6928816038 R14: 00007f6928815fa0 R15: 00007ffeff6bb488 [ 83.598393][ T2920] [ 83.640429][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.647623][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.656303][ T2922] device bridge_slave_0 entered promiscuous mode [ 83.663756][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.671023][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.678586][ T2922] device bridge_slave_1 entered promiscuous mode [ 83.781478][ T2934] device syzkaller0 entered promiscuous mode [ 83.852256][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.859430][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.866779][ T2922] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.874386][ T2922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.967350][ T2943] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.030366][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.040866][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.060587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.073654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.091968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.103606][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.110749][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.118631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.127459][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.134555][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.150053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.177861][ T43] device bridge_slave_1 left promiscuous mode [ 84.184258][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.192709][ T43] device bridge_slave_0 left promiscuous mode [ 84.198947][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.223869][ T2926] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 84.250325][ T43] device veth1_macvtap left promiscuous mode [ 84.265126][ T43] device veth0_vlan left promiscuous mode [ 84.290650][ T1774] usb 7-1: USB disconnect, device number 2 [ 84.298839][ T2953] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1022'. [ 84.340260][ T2953] netlink: 'syz.7.1022': attribute type 1 has an invalid length. [ 84.361901][ T2953] set_capacity_and_notify: 6 callbacks suppressed [ 84.361923][ T2953] loop7: detected capacity change from 0 to 512 [ 84.454671][ T2953] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.496738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.512529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.545718][ T2922] device veth0_vlan entered promiscuous mode [ 84.560037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.572864][ T2960] binder: 2959:2960 ioctl 89f3 200000000380 returned -22 [ 84.583817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.599974][ T2960] binder: 2959:2960 ioctl 8933 2000000003c0 returned -22 [ 84.609979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.636123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.655518][ T2922] device veth1_macvtap entered promiscuous mode [ 84.671081][ T2953] __quota_error: 2 callbacks suppressed [ 84.671099][ T2953] Quota error (device loop7): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 84.695655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.705508][ T2953] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 84.706030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.741703][ T2963] loop6: detected capacity change from 0 to 512 [ 84.748674][ T2953] EXT4-fs error (device loop7): ext4_acquire_dquot:6828: comm syz.7.1022: Failed to acquire dquot type 0 [ 84.770496][ T2963] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.786357][ T28] audit: type=1400 audit(1781328896.023:379): avc: denied { mount } for pid=2922 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.811550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.819454][ T2963] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1026'. [ 84.839530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.872965][ T2966] device syzkaller0 entered promiscuous mode [ 84.909451][ T531] ------------[ cut here ]------------ [ 84.914979][ T531] kernel BUG at fs/ext4/inode.c:2763! [ 84.930923][ T531] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 84.937060][ T531] CPU: 1 PID: 531 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 84.944560][ T531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 84.948648][ T2969] loop4: detected capacity change from 0 to 4096 [ 84.954645][ T531] Workqueue: writeback wb_workfn (flush-7:0) [ 84.954681][ T531] RIP: 0010:ext4_writepages+0x3085/0x30a0 [ 84.954716][ T531] Code: ae 84 ff 84 db 75 31 e8 99 ab 84 ff 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 48 8b 5c 24 30 e9 41 d3 ff ff e8 7b ab 84 ff <0f> 0b e8 74 ab 84 ff e8 0b d3 13 ff eb 98 e8 68 ab 84 ff e8 ff d2 [ 84.992985][ T531] RSP: 0018:ffffc9000f507120 EFLAGS: 00010293 [ 84.999077][ T531] RAX: ffffffff81eca9a5 RBX: 0000008410000000 RCX: ffff88811d642880 [ 85.007182][ T531] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 85.015174][ T531] RBP: ffffc9000f507490 R08: ffff888117536cff R09: 1ffff11022ea6d9f [ 85.023167][ T531] R10: dffffc0000000000 R11: ffffed1022ea6da0 R12: 0000000000000001 [ 85.031163][ T531] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff88811ce90000 [ 85.039162][ T531] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 85.048123][ T531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.054731][ T531] CR2: 00007f691edf7000 CR3: 000000013d1c0000 CR4: 00000000003526a0 [ 85.062729][ T531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.070721][ T531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.078716][ T531] Call Trace: [ 85.082014][ T531] [ 85.084972][ T531] ? debug_smp_processor_id+0x17/0x20 [ 85.090373][ T531] ? loopback_xmit+0x3a8/0x530 [ 85.095167][ T531] ? __cfi_ext4_writepages+0x10/0x10 [ 85.100477][ T531] ? __kasan_check_read+0x11/0x20 [ 85.105536][ T531] ? dev_hard_start_xmit+0x6c8/0x730 [ 85.110848][ T531] ? __dev_queue_xmit+0x281/0x3540 [ 85.115993][ T531] ? __kasan_check_write+0x14/0x20 [ 85.121144][ T531] ? __cfi_ext4_writepages+0x10/0x10 [ 85.126462][ T531] do_writepages+0x3ab/0x600 [ 85.131078][ T531] ? __cfi_do_writepages+0x10/0x10 [ 85.136207][ T531] ? __kasan_check_write+0x14/0x20 [ 85.141335][ T531] ? _raw_spin_lock+0x94/0xf0 [ 85.146029][ T531] __writeback_single_inode+0xd9/0xb10 [ 85.151508][ T531] ? wbc_attach_and_unlock_inode+0xce/0x500 [ 85.157424][ T531] ? inode_io_list_move_locked+0x366/0x3d0 [ 85.163254][ T531] writeback_sb_inodes+0x9fd/0x1610 [ 85.168474][ T531] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 85.174659][ T531] ? queue_io+0x4b0/0x4b0 [ 85.179017][ T531] ? __kasan_check_read+0x11/0x20 [ 85.184059][ T531] ? queue_io+0x377/0x4b0 [ 85.188407][ T531] wb_writeback+0x3eb/0x990 [ 85.192942][ T531] ? inode_cgwb_move_to_attached+0x3b0/0x3b0 [ 85.198981][ T531] ? set_worker_desc+0x1ba/0x1f0 [ 85.203950][ T531] ? __kasan_check_write+0x14/0x20 [ 85.209086][ T531] ? __kmem_cache_free+0xb7/0x1b0 [ 85.214167][ T531] wb_workfn+0x378/0xeb0 [ 85.218432][ T531] ? io_ring_ctx_free+0x8e0/0x987 [ 85.223478][ T531] ? __cfi_wb_workfn+0x10/0x10 [ 85.228266][ T531] ? __kasan_check_write+0x14/0x20 [ 85.233394][ T531] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 85.238872][ T531] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 85.244813][ T531] ? _raw_spin_unlock+0x4c/0x70 [ 85.249684][ T531] ? __kasan_check_write+0x14/0x20 [ 85.254814][ T531] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 85.260640][ T531] ? try_to_wake_up+0x622/0x1250 [ 85.265615][ T531] process_one_work+0x717/0xc30 [ 85.270487][ T531] worker_thread+0xa4d/0x11d0 [ 85.275191][ T531] kthread+0x281/0x320 [ 85.279275][ T531] ? __cfi_worker_thread+0x10/0x10 [ 85.284400][ T531] ? __cfi_kthread+0x10/0x10 [ 85.289006][ T531] ret_from_fork+0x1f/0x30 [ 85.293449][ T531] [ 85.296527][ T531] Modules linked in: [ 85.305310][ T2969] EXT4-fs (loop4): Test dummy encryption mode enabled [ 85.312683][ T531] ---[ end trace 0000000000000000 ]--- [ 85.320396][ T531] RIP: 0010:ext4_writepages+0x3085/0x30a0 [ 85.323186][ T2971] device syzkaller0 entered promiscuous mode [ 85.327283][ T531] Code: ae 84 ff 84 db 75 31 e8 99 ab 84 ff 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 48 8b 5c 24 30 e9 41 d3 ff ff e8 7b ab 84 ff <0f> 0b e8 74 ab 84 ff e8 0b d3 13 ff eb 98 e8 68 ab 84 ff e8 ff d2 [ 85.336410][ T2971] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 85.364145][ T531] RSP: 0018:ffffc9000f507120 EFLAGS: 00010293 [ 85.373976][ T2969] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 85.384371][ T531] RAX: ffffffff81eca9a5 RBX: 0000008410000000 RCX: ffff88811d642880 [ 85.394047][ T531] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 85.402465][ T531] RBP: ffffc9000f507490 R08: ffff888117536cff R09: 1ffff11022ea6d9f [ 85.410957][ T2969] System zones: 0-5 [ 85.415133][ T531] R10: dffffc0000000000 R11: ffffed1022ea6da0 R12: 0000000000000001 [ 85.424212][ T531] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff88811ce90000 [ 85.434985][ T531] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 85.453667][ T531] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.460779][ T531] CR2: 00007fdeb4409000 CR3: 000000010fccb000 CR4: 00000000003526a0 [ 85.468899][ T531] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.477192][ T531] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.485583][ T531] Kernel panic - not syncing: Fatal exception [ 85.492301][ T531] Kernel Offset: disabled [ 85.496653][ T531] Rebooting in 86400 seconds..