last executing test programs: 3m25.953461284s ago: executing program 32 (id=16): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") openat(0xffffffffffffff9c, 0x0, 0x70b101, 0x36) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file2\x00', &(0x7f0000000e80), 0x100) 3m3.85218661s ago: executing program 33 (id=181): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x4028, 0x0, 0x5, 0x0, 0x0) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) syz_open_dev$loop(0x0, 0x9, 0x80) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4a4, &(0x7f0000000380)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xc00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f00000005c0)={[{@mblk_io_submit}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, 0x0) write(r0, &(0x7f0000000200)='1af4 1050 ffff ffff 0 0 0\n', 0x1a) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) socket$vsock_stream(0x28, 0x1, 0x0) 2m30.28714246s ago: executing program 34 (id=441): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x100000000, 0xa9e}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x1a0) getdents64(r2, 0x0, 0x0) lseek(r2, 0x3, 0x1) connect$inet6(r1, 0x0, 0x1d) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @none, 0x0, 0x1}, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000b00000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100", @ANYRESOCT], 0x68}, 0x1, 0x7}, 0x24044040) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2m22.111907115s ago: executing program 35 (id=509): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) close(0x3) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x3f00, 0x0, 0x5, 0x0, r0, 0x0}]) 1m58.937579017s ago: executing program 36 (id=565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000c4) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x81, 0x105f1, &(0x7f0000000680)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0x0]) lseek(r0, 0x9, 0x0) 1m45.79249408s ago: executing program 37 (id=661): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0xc, 0x4, "ea57bb76"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000001840)='./file2\x00', 0xfffffffffffffffe, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000400)={0x0, 0x1, 0x18, 0x0, 0x107, &(0x7f0000000000)="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"}) socket$inet(0x2, 0x2, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) 1m40.637421393s ago: executing program 38 (id=702): r0 = fsopen(&(0x7f00000000c0)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='w%//\x00', &(0x7f0000000140)='\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa000000c}) poll(&(0x7f00000000c0)=[{r2, 0x1009}], 0x1, 0x8000007) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) pwritev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)='\n', 0x1}], 0x1, 0x4, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x13, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000008000000950000000000914ac05619717b0b90cd9a3764cc8a0539b673edd212283f7afee7ea6d9e951f0c8e6da6a99eed8a8b29e6b17666b8788ac0b21a4b9a2bc439a1b8f62cca9fd23b46b0ce6d22c31c5e0e4fd92a9ca36830c325412ed9483ff848e9d9b63077a4fbe354d269fd5051bd9cf6a9c55e41d21de3d8e8407b76ae2d415e6615af5bf18608958cf8bb00"/163], &(0x7f0000000180)='GPL\x00'}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10013}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newlink={0x3c, 0x10, 0xc09, 0x2, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x49}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x281008a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000580)="$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") timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) socket$igmp(0x2, 0x3, 0x2) 1m29.622465426s ago: executing program 39 (id=804): r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1m26.90845331s ago: executing program 40 (id=825): unshare(0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'erspan0\x00', 0x4}, 0x18) 1m1.801836698s ago: executing program 41 (id=1065): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 47.609724166s ago: executing program 3 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x24040084) 47.382902302s ago: executing program 3 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)=""/146, 0x92}], 0x1, &(0x7f0000000840)=""/104, 0x68}, 0x3}, {{&(0x7f00000008c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/213, 0xd5}, {&(0x7f0000000a40)=""/24, 0x18}], 0x2}, 0x5}, {{&(0x7f0000000ac0)=@l2, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b40)=""/5, 0x5}, {&(0x7f0000000b80)=""/16, 0x10}, {&(0x7f0000000bc0)=""/138, 0x8a}, {&(0x7f0000000c80)=""/242, 0xf2}, {&(0x7f0000000d80)=""/77, 0x4d}, {&(0x7f0000000e00)=""/40, 0x28}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/204, 0xcc}, {&(0x7f0000000f80)=""/11, 0xb}], 0x9, &(0x7f0000001080)=""/121, 0x79}, 0x17c}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001100)=""/92, 0x5c}, {&(0x7f0000001180)=""/171, 0xab}, {0x0}], 0x3, &(0x7f00000013c0)=""/180, 0xb4}, 0x7f}], 0x4, 0x40, &(0x7f00000015c0)={0x0, 0x3938700}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000380)) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_file_permission\x00') 47.370836172s ago: executing program 42 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000740)=""/146, 0x92}], 0x1, &(0x7f0000000840)=""/104, 0x68}, 0x3}, {{&(0x7f00000008c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/213, 0xd5}, {&(0x7f0000000a40)=""/24, 0x18}], 0x2}, 0x5}, {{&(0x7f0000000ac0)=@l2, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b40)=""/5, 0x5}, {&(0x7f0000000b80)=""/16, 0x10}, {&(0x7f0000000bc0)=""/138, 0x8a}, {&(0x7f0000000c80)=""/242, 0xf2}, {&(0x7f0000000d80)=""/77, 0x4d}, {&(0x7f0000000e00)=""/40, 0x28}, {&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/204, 0xcc}, {&(0x7f0000000f80)=""/11, 0xb}], 0x9, &(0x7f0000001080)=""/121, 0x79}, 0x17c}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001100)=""/92, 0x5c}, {&(0x7f0000001180)=""/171, 0xab}, {0x0}], 0x3, &(0x7f00000013c0)=""/180, 0xb4}, 0x7f}], 0x4, 0x40, &(0x7f00000015c0)={0x0, 0x3938700}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000380)) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_file_permission\x00') 32.129577815s ago: executing program 8 (id=1265): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f00000003c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) r7 = userfaultfd(0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25fe8000000000000000000000000000aaac1414bb000000000000000000000000000000004e210000020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000075a000/0x3000)=nil, 0x3000}, 0x3}) inotify_add_watch(0xffffffffffffffff, &(0x7f00000006c0)='.\x00', 0x40001a2) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) r9 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) getdents64(0xffffffffffffffff, 0x0, 0x0) vmsplice(r2, &(0x7f0000000500), 0x0, 0xd) sendfile(r9, r9, &(0x7f0000000100)=0x4, 0x8112) 31.158948748s ago: executing program 8 (id=1272): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0x1, 0x200101, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0xfff, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x45c, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x800008, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x100000, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x2, 0x4, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0xab5, 0x10000, 0x1, 0x9, 0x0, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0xb4, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x1, 0x18000, 0x14, 0x1000, 0x6, 0x2002, 0x80, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x8000942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x7, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x4, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x6, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x2, 0x8, 0x8000, 0x10004, 0x9, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x10007fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x8d0f, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4, 0x6, 0x7fffffff, 0x2, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x8, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623254, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x4, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x5, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10004, 0x1000, 0x5, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x5, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x23, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0xc, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3ff, 0x1df, 0x2006, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0xff, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xfffffffc, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x0, 0x2, 0xffff351b, 0x7, 0xa00000, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x9, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x3c, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x20c47, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0xfffffdab, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x5, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xa, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x8, 0x6, 0x7, 0xa, 0xf, 0x0, 0x71, 0xfff, 0x7, 0x8]}) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000007b0000000c0001000800010011488811000000"], 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) fsopen(&(0x7f0000000080)='omfs\x00', 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001280)={"33e42ad0dd8106399c52e23a27d44113", 0x0, 0x0, {0x8, 0x4}, {0x8, 0x7f}, 0x200, [0x1, 0x9, 0x6, 0x10, 0xffffffffffffffff, 0xa61, 0x0, 0xa48, 0x2, 0x7, 0x4, 0x0, 0xc, 0x8, 0x1, 0xc1a5]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8902, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1b) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000008c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000900)={"98c1251500763fb9ca30cf4be155e57c", 0x0, r4, {0x1ff, 0x7}, {0x7, 0xff}, 0x7, [0x4, 0x3, 0x6, 0x1, 0x9, 0x10, 0x0, 0x9862, 0x1796, 0x1ff, 0x1, 0x3, 0x7, 0x1, 0x2, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001380)={"ad75ef75a3345d1c8a28fffdaffb14e1", r1, r4, {0xffffffffffffffff, 0x3}, {0x900000000, 0x3}, 0x9, [0x2, 0xaa, 0x9, 0x7, 0x4, 0x9, 0x4, 0xa55a, 0x0, 0x100000000, 0x6, 0x7, 0x3, 0xe, 0xf3]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000103c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40841}, 0xc050) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x4) 20.550070301s ago: executing program 8 (id=1326): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e006018001f06b9409b0dffff110d0207be040205060506100a124300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 20.443710173s ago: executing program 8 (id=1327): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001040)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xf31}}, {@journal_dev={'journal_dev', 0x3d, 0x623}}, {@nodelalloc}, {@minixdf}, {@sb={'sb', 0x3d, 0x7}}]}, 0x4, 0xbbe, &(0x7f0000001240)="$eJzs3M1rXOUaAPDnnHy3uXfSy+VyezfN5XJp4V6naSXFFsFWKm5cCLoVGtJJCZl+kERq0iwm+g+IuhbcCGpRurDrbhTcutG6tbgQisRGQUQjZz6SmMwkaTvJCcnvB++c9533zDzPM6fTc16YkwD2rcHsIY04HBEXkohC/fk0Irqrvd6ISm2/xYW50Z8X5kaTWFp66Yckkoh4sDA32nivpL49WB/0RsSXzybxtzfWx52amZ0YKZdLk/Xx8enL145Pzcw+MX555FLpUunKiVNPDZ8cPjV0erhttf7y7dnbP/37+e8qv374280f334/ibPRX59bXUe7DMbg8meyWmdEjLQ7WE466vWsrjPp3ORF6TYnBQBAS+mqa7h/RCE6YuXirRCffZVrcgAAAEBbLHVELAEAAAB7XGL9DwAAAHtc43cADxbmRhst318k7Kz75yJioFb/Yr3VZjqjUt32RldEHHiQxOrbWpPayx7bYETc++b0J1mLbboPeSOV+Yj4Z7Pjn1TrH6jexb2+/jQihtoQf3DNeLfV///u1vWfbUP8vOsHYH+6c652Ilt//kuXr3+iyfmvs8m561Hkff5rXP8trrv+W6m/o8X134tbjHHjg3evt5rL6n/69nMfN1oWP9s+VlEP4f58xL86m9WfLNef1OrvW1v/hS3GKPx+vdRqLu/6l96LOBrN629INv77RMfHxsulodpj0xjzXwx/1Cp+3vVnx/9Ai/rXHP91//6vbTHGK+fP32o1t3n96ffdycvVXnf9mddGpqcnT0R0Jy+sf/5k/Yb2Fhr7NN4jq//Yfzb+/jerPwtRqX8O2Vpgvr7Nxq+vifnMzRufblR/tvbL8/hffMTj/+YWY/z387eOtZpbvf7NWhb/XlJbCwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAQxoR/ZGkxeV+mhaLEQcj4u9xIC1fnZr+39jVV69czOYiBqIrHRsvl4YiolAbJ9n4RLW/Mj65ZvxkRByKiHcKfdVxcfRq+WLexQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDsYET0R5IWIyKNiMVCmhaLeWcFAAAAtN1A3gkAAAAA2876HwAAAPY+638AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC22aEjd+4mEVE501dtme76XFeumQHbLc07ASA3HXknAOSmM+8EgNw85Brf5QLsQckm870tZ3rangsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9fRw3fuJhFROdNXbZnu+lxX01cc2cHsgO2U5p0AkJuOjSY7dy4PYOf5isP+1XyND+wnySbzvSv7VP4807NtOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw+/RXW5IWIyKt9tO0WIz4S0QMRFcyNl4uDUXEXyPi60JXTzbuyTtpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2m5qZnZipFwuTersuU4SuyINna12kt2RRq2T9/9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYWpmdmKkXC5NTuWdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC3qZnZiZFyuTS5hc6th9l5VSfvGgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyM8fAQAA//+prw01") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x2, 0x1ed7, 0x2}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000340)='rxrpc\x00', &(0x7f0000000380)=',*\x00') add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x88, 0x30, 0x829, 0x0, 0x0, {}, [{0x74, 0x1, [@m_skbedit={0x70, 0x1, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PTYPE={0x1b, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8006, 0x219, 0x0, 0x6, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf25287fffffff00f1ee030000007480000008004ea300000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) preadv(r0, &(0x7f00000000c0), 0x0, 0xfffffffd, 0x7) 19.73515598s ago: executing program 8 (id=1334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x1d8, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0xe1ad, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000040)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r4, 0x0) lstat(&(0x7f0000002e40)='./control\x00', &(0x7f0000002e80)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x40000c16) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 19.577905224s ago: executing program 8 (id=1338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000940)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") mkdir(&(0x7f0000000140)='./control\x00', 0x111) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xc0) rmdir(&(0x7f0000000100)='./control\x00') 19.577717394s ago: executing program 43 (id=1338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000940)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x3, 0x447, &(0x7f0000000380)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xIEDEn8BJ7gg4ITEFe6oUoV6aeFktPZuYjt2mocTF/z7SdvO7M5q5vPu2DM72QD61kj2TxKxKyJ+j4jhera5wEj9v1s3Lk7/fePidBLV6lt/JbVyN29cnC6KFuftzDOjaUT6aRIH2tQ7f/7C6alKZfZcnh9fOPP++Pz5C8+eOjN1cvbk7NnJY8eOHpl44fnJ57oSZ9amm/s/mju477V3rr4xffzquz9/mxTxt8TRJSMrHXyiWu1ydb21uyGdDPSwIaxJKSKyyzVY6//DUYqlizccr37S08YBm6parVZ3dj58uQr8jyXR6xYAvVH80Gfz32LboqHHHeH6S/UJUBb3rXyrHxmINC8z2DK/7aaRiDh++Z8vsy025zkEAECT77PxzzPtxn9p3N9Q7u58bagcEfdExJ6IuDci9kbEfRG1sg9ExINrrL91kWT5+Ce9tq7AVikb/72Yr201j/+K0V+US3ludy3+weTEqcrs4fwzGY3BbVl+YoU6fnjlt887HWsc/2VbVn8xFszbcW1gW/M5M1MLUxuJudH1jyP2D7SLP1lcCUgiYl9E7F9nHaee+uZgp2O3j38FXVhnqn4V8WT9+l+OlvgLycrrk+N3RWX28HhxVyz3y69X3uxU/4bi74Ls+u9oe/8vxl9OGtdr59dex5U/Pus4p1nd/V+91HhOdv8PJW/X0kP5vg+nFhbOTUQMJa/XG924f3Lp3CJflM/iHz3Uvv/viaVP4kBEZDfxQxHxcEQ8krf90Yh4LCIOrRD/Ty8//t76499cWfwza7r+S4mhaN3TPlE6/eN3TZWW1xJ/dv2P1lKj+Z7VfP+tpl3ru5sBAADgvyeNiF2RpGOL6TQdG6v/vfze2JFW5uYXnj4x98HZmfo7AuUYTIsnXcMNz0Mn8ml9kZ+M+LoxfyR/bvxFaXstPzY9V5npdfDQ53Z26P+ZP0u9bh2w6byvBf1L/4f+pf9D/9L/oX+16f/be9EOYOu1+/2/1IN2AFuvpf9b9oM+Yv4P/Uv/h/6l/0Nfmt8et39JXkJiWSLSO6IZEt1JpBHRtGf5d0W5F19QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG/RvAAAA//831udB") mkdir(&(0x7f0000000140)='./control\x00', 0x111) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xc0) rmdir(&(0x7f0000000100)='./control\x00') 14.545897794s ago: executing program 0 (id=1391): prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f00000015c0)={0x0, 0x3938700}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000380)) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_file_permission\x00') 14.328788959s ago: executing program 4 (id=1394): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000500)="52aff5f36ec6c942ea2f8645dd2ad0de49ed224d9baea92933543709a762a3c73bc71838e7c290319fb1eff835f043ad3cf26acbc69b6a4c1fbb97f157cdfe03fd8800f7ebd9c39ae11e5c0ec1bc151ce33df80847551dc729288ce05759e388cdfec65b40dac954ab593961276488ea9bb99d933510d6a502addd0a5f2b957f2b37f4e9741eb0862225deb506e1e509e84ef036cc0597a5", 0x98, r1) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)}, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x6, 0x4, 0x1, 0x102000000000002, 0x80000009, 0x400002004c8, 0x10001, 0x100000000003, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0xffffffffffffff51, 0x50fd24f7], 0x60000, 0xc42d4}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) syz_usb_control_io(r0, &(0x7f0000000b40)={0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="20110c0000000c48451202e5af6c7b510625"], 0x0, 0x0, 0x0, 0x0}, 0x0) 13.763291042s ago: executing program 6 (id=1397): mkdir(&(0x7f0000000140)='./control\x00', 0x111) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000680005062cbd7000000000000a0004000000000008000500", @ANYRES32=0x1, @ANYBLOB="14000600fe80000000010000000000000000001006000700"], 0x3c}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1c5) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000b00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000006c0)={r6, 0xd, 0x0, [0x100000000, 0x4, 0x7a9d36d5, 0x3, 0x101], [0x10001, 0x8ebd, 0x0, 0x0, 0x1, 0x8000000000000000, 0x1, 0x9b61, 0x3ff, 0x1, 0x8, 0x2, 0x40000000000, 0x3, 0x3, 0x1000000064e, 0x4000000000000002, 0xbe3, 0x9, 0xfefffffffffffbff, 0x6, 0x6, 0x6, 0x8, 0x9, 0x7, 0x0, 0x2, 0x80000004, 0x2, 0x5, 0x4, 0x4, 0x2, 0x36e6, 0x5, 0x0, 0x8001, 0x6, 0x6, 0x8, 0x5, 0x89, 0x3, 0x4, 0x12dd, 0x5, 0x0, 0x10001, 0x0, 0x8ac, 0x4, 0x0, 0x5, 0xa, 0xa9, 0x4, 0x1, 0x1d5, 0x7, 0x7f, 0x3, 0x8008, 0x8, 0x1000a, 0x400, 0x4, 0x1, 0x5, 0x4, 0x8, 0x4, 0x6, 0x7, 0x20fd, 0xfffffffffffffffb, 0x4, 0x800, 0xffff, 0x3, 0x66, 0x2a, 0x100000001, 0x7f, 0xfffffffffffffffe, 0x9, 0x5, 0x1, 0x0, 0x71c6d084, 0x3, 0x0, 0x5, 0x5, 0x3ff, 0x9, 0x100000000, 0x7fffffffffffffff, 0x3f79, 0x9, 0x5, 0x1, 0x7, 0xb703, 0x7, 0xa, 0x8, 0x0, 0x0, 0x1, 0x0, 0x5fc, 0x62, 0x4000800000000000, 0x0, 0x2f, 0x7fffffffffffffff, 0x8000000000000000, 0x4, 0x3, 0xfff]}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$VT_GETMODE(r1, 0x5601, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0xd6) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) r7 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r7, &(0x7f00000006c0)='184', 0x3) 13.673416695s ago: executing program 0 (id=1398): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwritev(r0, &(0x7f00000071c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000007240)="74fa9daffa55aad4f79ef3eb1d2c71cbf00bd1feff3e9eb0901168103bcbae84894bdeade2e39110438cdb5d2fbf880c4e40e96a1ac59e20525039e4d32fe086649aa0d661d8e22e5ca250fdc3254b32029bdf00edc7079e0e3d9039f7270966b2faad1e89253bd81ba3417b0a23c90e90ec81dee25ab4e9d3b3b7c9cd6d843b95d394592c5a03d42ce35aab807b99e144ee191e94c8f4a8d75c950499a0da67359cddf51e05d19b2f3a6c53368956e5753598b421bd2d4db9a72796b654ebd78121ffd48f13f74f91f74bf310834bcf39958c85ee57e3aea2a127377496bba360047c892c22777497a172de6a6c4a12cded3dfcadada6557f8d242f1cdae694136a1ab97a3cd38803bcd483610127f142bb00b4497de33b9795715fd6420a93be6fe6859076c597b91594fe4ab003d12c6759a65ef596d52b02e563df0b2b0b6a2be842d56a5afcf26a47abb0733a81a9898a7a2e455e0405b03833de1408e6784aa3a67fa9aca989e07c88f123f3b1135c586e257430ef5caced79b98bff30b667b14a5a49622731e91fdb4cd61877628a1fe772d28164f70d431640bb5e50a6ef9971a1ca23799eb7288435229f1d7f5beb85217098c01da809cf34c0456c0dbd110f1e40c29bd33c9ec26f13fa9339fc736a39df46d380d3fce768df06645d1dbfae4b52eda35186a3d3b5a995c993540abcde56031dbab575312bf8657e58a9d304b207fc1553f58e2561de5b9a5a29a9374fa80a4c356ddafd3c96edba08e6a13504bcb9e50043b5acc2287c4e4eda0b6e3b871dfcefbe8d1df95f57c5bddcd91a24bbd86b5e17aed01114b3a00508dae3977f3f529be55665d8223f2a8d7b888ab8ccf6ef156ec073fe8c99913256f7868911baef35643eac48792f42f1fcc77333c39582409591c0a9991163ca563e13223c77bec981e6e30197091a13418a0daf797090a188463b3e4a22114b530d2397dca33e1cdf3233a8fe3030090139cee0d6596c74d471d63cb9fbdb40a1173d2b7497ed200c6cc2e1c7676017704298c43db373b6da7e7c6202c14a52763c54763ffac5ffe78b3d748f11cb65714a29c1aff233572609abba82dedbb4f05ef4c2e054b5bd7b8c447a4cb6ddbb5afe384a47f79c448160ea8187652750956c8f8de76b5b87287b2a427ecbdd52cb633891b2fbb49d629df889447124b3fad887c8ca1157f88347caabf8a8c70b20c155206b07420f6f69b767001381e68e30d1089b078d8587cd979c091f570118dc88fc4ea87305ca63885c4c4b5ba94ba32569ca99c08425f970cbd4a57c8eb398137e7c386a28102d96563b19b2a49dbcb9530e7e7640d9bb244f46309a5beff98ccd43862c1f986824579bb0448c626f5f4210c6b619624e2b613be9b242f2eb71878d9bc8d640e7b898f93ec9ea3658b46b46a1ab80fae1bf38c153673aebe8dd1e9ab8997c276bc05f14ad902650f76c995a700fdc61f53e6b00eeeb98c5007c34847c28f25b3efc5874e0efd92fc43818911a786f4068c9ca87ebc2440f44b7e27b8bbce22afc30d4d8475f325d87428e95d0b66a1293c9f1efc2cace86ff8b8ec4e0654d86a9a8a9079303f1b45711fe2bb73cafe96ca54d54ba1c6887c4358ec18108d03b3390bf19576e320c871710194a983293e75de8b31208378265c7e14135f8d833f60b857f74ab8569973092bdcfd3507e7606b99666a72e2d27748649fd94e5004dbab1e8d762f15375839d8733bc905d44b09d86dda24154d6a322d893064baa23f7c5739fb40981050eaeff4b644abd23e950a114520b7544082edbd64233c7352f095ad39eba470e7fbac2d9d578af5b14be9044b7925f1ed742f3c7e5e44e3832f767db2e8daf032bf1cc719c345e1d20c3bfd4f8601cc78975cb04d153eebdcbcb8bd23d398064bbf6dd408aa36d6770c0e5a3acd17c8649f181c927dd74be4d4bd0ca77bb2c7ac16be3799de1dacb23f55fe44f5defeda259f6c7fcbd10d4ed2db37b0bb1d416511df91d08314b65760e8bf6aa3a964419ca0bcee7facf8c70a159d8c503100a2e91f2992e7b1ffea1032e477fcc47bfb79b9a00de43b936dd06cc174c355ffe2f108ed6831bb398e9c3d140d97bcedb72d146fb3986f3e5a1fde8e286ede4793f6dbc98182c451beecc6bf02d67a194848ae769747578537a256a0eb9efc72f9716ac52161befec85753af52e8eb4d4dbc340eef86de1d3b2af6fd4d01a01bf61e709a9e0473279996ee0191e2079218ab98d9548dd1c16b61a0289bf2eb8d033cf167785cc44adf68c1ef20c29225e8355af76bdb20f2dc7846e76c9fdc8e81fa46291a589d3b2294e3abb623cbba9af46e70b6bf81fd62397d64ebe7e22270533746e373d26da9e751976c01af58bf9cca8b5ff332d7c394e55ea2807c2d8d3ae9ac239fa8d987d606424a64c029b98f27158e6b424c8a7a8963138342358bde253d7b0c8af5f8331c1e880d3f9948cf191b0a65ab3a54be75c4ec77896a7be4f4357021b4072e502e5eb8b1cde2dcd6d50cd550ff11a0953ab5b81a3b4714b2350a06e41167597ffd2274259bbbaf2eb7e0c108b1182e6173cb5e01440371769aa9d6e4dfeffffff377263f6fc7e56b29271398d111625f0a5e2397b0ff58b6a2a3f0d0d95229f2687cf8905f2e005000567582f54943573c1fe0fa658aa4d0273b75160bdad5438a118452f84ee6d0d23ec57c92508291b9f2b126c4775f4c105a991296849123fe79a7cb8843fca16409ae26cceaeda46ac9cd13845c125fbf1a52a4857b0417fb082d60d32596c9a9d3c1ff102bba58d0cca5578c29fadb8dbe34d2adbdfd3c6c3077b6c0e39c08048be068de58e2821c6b2b3aa5095c09c9d8d37adcc9954ea4bb1850e9ac7f323c551e2f9c57a082a1bb0f75a03d8fc59def2272ed5f42b13813d4e1ad1309149c453ceb5c1e2bc56b76ec14238fe7328c984d928d846e2e5474d43b6975ceaaf526e6fae2618b55e7609b95e2f82723c548f5a1b13fffa9e30129ed2933c3aa659f6aafe3bfdc433ab12b7f3796758597a2ad1ace8445c640ad7ab61bd749a3987e9f1468e4c62291464593327f2cf41c0d35b2c9a3f0ae87d8734bc4d8fa86e5b738aaa4789c333caa0281100615be0cc5a9d6c2cfd67aa797cb348bd1205d3f17ec41d5480d29f0206324ccae468996222aa95bbff838eadb12ce61e4b7260e2291d098d189a7c7609ef86d8075897a3df94554b63b05026f92621e18dbb9b3a13a6ad6ee78fe0e317593b0dcdf56f5d13a7cd22cc3de1feca4bba93fe6595d63e564bd421f6c6ab74aea60086555af16de900eef50615149ac198f200aed3acfa45c1a8ac40767138dfda5e55ab2e075589af200c1a9b490225978cfcf0c30aaa9f4c361d52a6fab1b65343df5f8b47c738c173d2fc965bed6c72ad6c53d6668ab6e22fcf5c991aebeceb99d5dd44d7f5368f2e11509a9b775b56b27ea461b2f9606c43bf30afcab60244b1d8f9d3ad68811fcde7b04b0353a61af1066160482589f100617029a988220bf30b14788a42de82caa9b974b84735b63b38f28c85baebd09de41b23b9bf1e745c120c780a735386539f578217f2c273c6a21d9832864b630425a95dedf7316ce20688ac40655bfe5daf663f63ba258c94796893ac7d05a989c75a4aab53420e5a41b641792469322aa7e8bace27e0bddfc1069d18f7facf8e1616cdc7c744112eb39c4c60e4a8125bfd978b27f74779a251797080ea4e4e2a2936354c415c29708956cfb631d874406131d3e348cb8783d52924df167df9a43029b3051c2fa47121941c5b3fb38f2911b4a3e75da28348848530b246a35da7e46fc6a354d68bd924baf9f10d15746b3d5e60c269899680ec7f52ca5866bc1c921a5b5dba471f82495fdc8b19d272365dc67b0054e9df808d449b627c896dce2cd2cdd8117a5da80a79b25fe1e78510a7cd98abed7c6b03048067ec941e9b1016d321233f04c2d52183eaf3cff378606bd022d9a040ef7ee8da792a0582b07f304e68469506ef70fd13cab55712c1a80c5507fcd839615acda1996a972ef64ac5245fc4bdaeb9c43858aa7dad4c46323f673cc6eee9259fe94fd75f079216f9ebdd7ba38133554797c1d78427b7711b670a34ff97fcf027d61e2d0e0c7dac953728dd4892eecc0dd92f1a92c9166ceeab463d4dc7b522a51ff54117a1015b3b6a8826dcc63800d9f3b38c863bf5c469c180b9c8c9ec6388cae8c4a390594b91bee3581178bccc75e077c61a021ada8f19297548ca2cf58bd620c56742fc014192f7e066ec4083b55dd11c91980bb77e1fc76e4534682cdb4d6c2cacbf4d2a444057984ead312d44fdd82ed06db4ec82c161d675c95af6c83682cb0f7cc0f4d9d1947aaafbac33fa926165bb08884c5938a406b07b4b412862899985a127b0a5c4300fc71a4d95746645ab0cbd1e8196a2473c518631745be2d18a31c910506bdb9c5434f85acc2c27958f3cba06efc5602b4035c80dc7ceb02a6d548ad1403975b2b68842a55632de179752773fa8547ef2f604284fce8d147747128d98a48304780e0592d8e3d6426b5525c0b35d58d2f6b01e2440da5252643376d48a1feea0f7ccfbdee3cfcade999ef67b049aadc292c7a0ddff40a29e0556dc98fbbf0bb8cd2e92786e9e1620f37b051ad22613f636de3e087089083a8e846235f6b39bede66ac31bbf415196465e3ac134b967a2a11902d744b21ac350a2873729d17e9d1cbf91bde8dc3f28130ee5e1eff751a04d95cf94db2cc03f2ec3e2457557792c057d182bd8f44ca115e97a6c273858735cdbfc4385519af4ce32402b582e9869c36b7c56490695dfccc45a244171bc3cfe75f474e7d9b407a1c095bf6a852014c971d53cb87ec4e27be0c4674b7a4d8e7cae8ec1a30023d377822f806e896e79ddb7b3b2e11406e6bef4f45fd3cae4ea413ffceeb878cd2519ca5db7d7ad48364d9931517988721329e95b2e46a687f9d5f764f7161a340b0ba7ab74289ad1d59fda598faa0d1ad1b99720f304e96b51f61bf5489b14bd0b620a1c07760d909c1c13a57608497cbbc714c058fa60751ba7ae33af7f470b3a5aeaee930dc5784bfbb391bea4b992928a6aa4a212b9eba7136589beb274b2e331894980b3820f18908a925bbf5cedfcf476409a4ab18057b442b9cec1a9c8966c78af0cab892e70c94e72239f9ff517dbeffa403934d64c113d18aadb411b181b4351b6a871a0a8e26c156c5dc81e0bc4bdc41a79ec217de0e14e7b0082ec17f13e7d9e43c8db571766697f843f4d02052bb6b52f3de5263df6d771efbd05b03fa6813e763756bbe5a062b5568563a79c0d747783613f1848389d817e732c6e7f1c39af5e390a4d48f84ba35d1fea1d7c18c4cba403a95d38219118cb24b89787eee35ffbadce2c7256286187cbd065cfe0874c3a37e6515a9ce1ee3ee94a78e8016ce8a2d4250d6b26a5d95165f32ebb880a139c9091ff465898e96703a0611e72b8d5a5def85cc894a5dbf3952308f727c028bebbf39920cb1816bef452a198e15dab5e6671c2a94a89170883dd81fe0f1ac90e82cde08b8d9e15abd7c9c696780cb9d1f61db38c3a502690bd30126abb90e7853d4dcd69219ad94ea23e7585f1c34233a4c516ca82f637f56caa2470659a599a864e2cf20c359bbfaf987b9a6fef21318587ebbc1cc29bcb14fe766d7ba5f732eb1f306fec42224b15efe9c8b0d7e54cbf1abddd2ab37e46e5bfa6bc0e98fdb0e53aacdcb100000000", 0x1001}, {0x0}], 0x5, 0x2e8, 0x800) syz_usb_connect(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000408c0d030100010000000109026400020100803209040000000101000009240100011e0001010c2402010101000203000000092403030506000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c0"], 0x0) 12.813540105s ago: executing program 6 (id=1403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000280)='./file0\x00', 0x25af4) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0xa, 0x8}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000100)="4500001c00010000401174c00c0002010c00020100010001", 0x18, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12.498352393s ago: executing program 6 (id=1404): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 12.411807954s ago: executing program 6 (id=1405): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8002, 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x40, 0x20) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 12.367640876s ago: executing program 4 (id=1407): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000280)='./file0\x00', 0x25af4) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0xa, 0x8}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000100)="4500001c00010000401174c00c0002010c00020100010001", 0x18, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x84}, 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000710300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 12.124302301s ago: executing program 4 (id=1409): r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 12.089063892s ago: executing program 4 (id=1410): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x2d05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x5, 0x30, 0x19, {0x8, 0xb, 0x0, 0x1, 0x1, 0xb, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x305, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0xc, 0x40, 0xfff8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x800, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x2f, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9}, @hopopts={0x8}]}}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x138, 0x16, 0x633, 0x70bd27, 0x80000000, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {@in=@remote, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0x5, 0x0, 0x5}, {0x4}, 0x2, 0x2, 0x8, 0x4, 0x18}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=';\x00'/12, @ANYRES32=0x0, @ANYBLOB="80"], 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmod(0xffffffffffffffff, 0x10a) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 10.655157996s ago: executing program 0 (id=1416): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f0000001040), 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x2}]}, 0x10) close(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x16c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd28, 0x70bd29, 0x70bd2c, 0x70bd2d, 0x3, [0x2, 0x948]}}, @algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "000102030405060708090a0b0c0d0e0f"}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00', 0xfffffffffffffd5e, 0x24000040, 0x0, 0x0) 10.636610987s ago: executing program 6 (id=1417): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x100000000, 0xa9e}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x1a0) getdents64(r2, 0x0, 0x0) lseek(r2, 0x3, 0x1) connect$inet6(r1, 0x0, 0x1d) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x6, @none, 0x0, 0x1}, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000b00000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100", @ANYRESOCT], 0x68}, 0x1, 0x7}, 0x24044040) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 10.549864259s ago: executing program 6 (id=1418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) 10.549560739s ago: executing program 44 (id=1418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) 9.879300315s ago: executing program 4 (id=1425): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 9.810813507s ago: executing program 0 (id=1426): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setpriority(0x0, 0x0, 0x3a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ustat(0x7, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000001c40)={0x2020}, 0x2020) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c646d61736b3d30303030303030303030303030303030a9f8e7d73030342c756e695f786c6174653d302c726f6469722c73686f72746e616d653d77696e6e742c6e66733d7374616c655f72772c696f636861727365743d6b6f69382d722c666c7573682c6e6f6e756d7461696c3d302c00762466dfef460ac9a714774126024de2dbfca6"], 0x81, 0x2ae, &(0x7f0000001980)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x20440a, &(0x7f0000000280)=ANY=[@ANYRES8=0x0], 0x1, 0x152c, &(0x7f0000003cc0)="$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") syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000200)=0x18) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x17, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 9.654264591s ago: executing program 0 (id=1427): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") (async) io_setup(0x1, &(0x7f0000000600)) r0 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r1, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0006d2d3000000"], 0x18, 0x20040800}}], 0x4a, 0x40) (async) close_range(r0, r2, 0x0) (async, rerun: 64) mmap(0x0, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) r6 = fcntl$dupfd(r5, 0x0, r5) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x8100}, 0x2800804c) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0xc4) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, &(0x7f00000001c0)={0x80, 0x6, 0x301, 0x0, 0x1d, 0x101, 0x0}) ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000000080)) (async) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) lseek(r3, 0xfffffffffffffffc, 0x2) getdents(r3, 0x0, 0x54) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async, rerun: 64) r10 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000001300000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001200330002"], 0xa0}}, 0x4048080) 9.583901612s ago: executing program 4 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x1d8, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0xe1ad, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r4 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000040)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r5, 0x0) lstat(&(0x7f0000002e40)='./control\x00', &(0x7f0000002e80)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x40000c16) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 9.583433392s ago: executing program 45 (id=1428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x1d8, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0xe1ad, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r4 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000040)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r5, 0x0) lstat(&(0x7f0000002e40)='./control\x00', &(0x7f0000002e80)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x40000c16) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 9.564188133s ago: executing program 0 (id=1430): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2) 7.038983383s ago: executing program 5 (id=1449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6.955094635s ago: executing program 5 (id=1451): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.931271085s ago: executing program 5 (id=1452): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0xf0ffffff7f0000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) 6.372509018s ago: executing program 5 (id=1458): syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./bus\x00', 0x10c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x1520, &(0x7f0000000440)="$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") syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000840)={[{@dmask={'dmask', 0x3d, 0x402}}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@dmask={'dmask', 0x3d, 0x5}}, {@fmask={'fmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x7f}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@dmask={'dmask', 0x3d, 0x401}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@keep_last_dots}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x20008, 0x0, 0xff, 0x0, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x404, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103100, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)='M', 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0x2f8}, 0x80) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000880)=""/151, 0x97}], 0x1, &(0x7f0000000540)=""/244, 0xf4}, 0x0) unlink(&(0x7f0000000180)='./file1\x00') fsetxattr$security_capability(r1, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0xe, 0x8}, {0x5, 0xf8000000}]}, 0x14, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000200)=0x5, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) pwrite64(r0, &(0x7f0000000080)="679636075670e7a95377440b9be64aaa6de0e35b02439dfd70684d37986b33565574e59cd7b35562c493bb1fd767ce13e99fd779a6f47bf584fdde5434b9657099121b102365193d631afd2a9a13c33e8e085872e42f65432795df94457f12a9b91cf491da43342112a9c3dbd0f7f4b4812dbfd010731c42f96679839e47f0b934", 0x81, 0x4) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0xfffffffffffffcfd, 0x21, 0x2}, 0x7) 5.700334745s ago: executing program 9 (id=1463): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x473c, 0x4) sendmmsg(r2, &(0x7f0000000000)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb) unshare(0x60000600) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) 5.46973405s ago: executing program 5 (id=1464): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800990b000000000000000002180000ff0000080000000008000100ac1414"], 0x24}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x200d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x40, "", [{{0x9, 0x4, 0x0, 0x3, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd2871000000000000010902240001000000000904010001030000000921020000012205"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}, 0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x4, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xffff8000}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) 5.286263924s ago: executing program 9 (id=1465): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000500)="52aff5f36ec6c942ea2f8645dd2ad0de49ed224d9baea92933543709a762a3c73bc71838e7c290319fb1eff835f043ad3cf26acbc69b6a4c1fbb97f157cdfe03fd8800f7ebd9c39ae11e5c0ec1bc151ce33df80847551dc729288ce05759e388cdfec65b40dac954ab593961276488ea9bb99d933510d6a502addd0a5f2b957f2b37f4e9741eb0862225deb506e1e509e84ef036cc0597a5", 0x98, r1) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b40)={0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="20110c0000000c48451202e5af6c7b510625"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.250601605s ago: executing program 5 (id=1466): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8002, 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x40, 0x20) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000064000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80) 5.230878966s ago: executing program 46 (id=1466): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8002, 0x1) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x40, 0x20) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000200000000000000000008500000064000000950000000000000049db185086ea6334aa453ec969352991eb38f162575a68c0e574b1758d28a5aa8e86720031a818d25477fc738a2157e500171427cceeb8adc298f40b9affaa9ceb28e1ac72f4d412696ddf196f7380423f5d1cff072e84bf03770a9bf0bede62157b45b5a2ef59cea5048ffb"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc5, &(0x7f00000001c0)=""/197}, 0x80) 4.138250692s ago: executing program 7 (id=1474): r0 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r1, 0x0, &(0x7f0000000100), &(0x7f0000000140)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000080)={0x2000000, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x4, 0x5}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000a00)) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x70, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x8}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x70}}, 0x0) 4.066241303s ago: executing program 7 (id=1477): prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000014c0), 0x0, 0x40, &(0x7f00000015c0)={0x0, 0x3938700}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000380)) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_file_permission\x00') 3.334996091s ago: executing program 9 (id=1480): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x100, 0x8000) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) memfd_create(0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = dup3(r0, r1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2000}) read$watch_queue(r2, &(0x7f0000000040)=""/111, 0x6f) 3.281777622s ago: executing program 9 (id=1481): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='0'], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000500)="52aff5f36ec6c942ea2f8645dd2ad0de49ed224d9baea92933543709a762a3c73bc71838e7c290319fb1eff835f043ad3cf26acbc69b6a4c1fbb97f157cdfe03fd8800f7ebd9c39ae11e5c0ec1bc151ce33df80847551dc729288ce05759e388cdfec65b40dac954ab593961276488ea9bb99d933510d6a502addd0a5f2b957f2b37f4e9741eb0862225deb506e1e509e84ef036cc0597a5", 0x98, r1) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b40)={0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="20110c0000000c48451202e5af6c7b510625"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.243159073s ago: executing program 7 (id=1482): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c0840, &(0x7f0000000040), 0x1, 0x5d2, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @rand_addr=0x64010100}, {0x300}, 0xfdfdffff, {0x2, 0xfffc, @local}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) 2.571372799s ago: executing program 2 (id=1486): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0xfffffffffffffffe, 0x0, &(0x7f0000bbdffc)) 2.370882164s ago: executing program 7 (id=1489): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001040)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xf31}}, {@journal_dev={'journal_dev', 0x3d, 0x623}}, {@nodelalloc}, {@minixdf}, {@sb={'sb', 0x3d, 0x7}}]}, 0x4, 0xbbe, &(0x7f0000001240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x2, 0x1ed7, 0x2}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000340)='rxrpc\x00', &(0x7f0000000380)=',*\x00') add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2.318066655s ago: executing program 1 (id=1490): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@minixdf}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0xe3}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4ab, &(0x7f0000000740)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xa0}}, 0x0) 2.216902028s ago: executing program 1 (id=1491): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r2 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x3e, &(0x7f0000000400)=ANY=[]) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x14) 1.729199379s ago: executing program 2 (id=1492): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', '', [], 0xa, "27d39da599dc0afbaf0afc8fae41c88e54b36ae54dd34a"}, 0x1b) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0xc) timer_create(0x4, &(0x7f0000000240)={0x0, 0x8, 0x4, @tid=r2}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(0xffffffffffffffff, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setrlimit(0x8, &(0x7f0000000300)={0x100000001, 0x2}) 1.69619566s ago: executing program 7 (id=1493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) fcntl$setown(r1, 0x8, 0x0) r2 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000040)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, r3, 0x0) lstat(&(0x7f0000002e40)='./control\x00', &(0x7f0000002e80)) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x40000c16) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 1.397918237s ago: executing program 7 (id=1494): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f0000001040), 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x2}]}, 0x10) close(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x16c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd28, 0x70bd29, 0x70bd2c, 0x70bd2d, 0x3, [0x2, 0x948]}}, @algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "000102030405060708090a0b0c0d0e0f"}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00', 0xfffffffffffffd5e, 0x24000040, 0x0, 0x0) 1.397682387s ago: executing program 47 (id=1494): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") socket$pptp(0x18, 0x1, 0x2) ppoll(&(0x7f0000001040), 0x0, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x2}]}, 0x10) close(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x16c, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd28, 0x70bd29, 0x70bd2c, 0x70bd2d, 0x3, [0x2, 0x948]}}, @algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "000102030405060708090a0b0c0d0e0f"}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00', 0xfffffffffffffd5e, 0x24000040, 0x0, 0x0) 1.112514414s ago: executing program 9 (id=1496): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.094849014s ago: executing program 9 (id=1497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {0x6, 0x4}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000001000)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000020, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="696f636861727365743d63703837342c6e6e6f6e756d7461696c3d312c757466383d312c636f6465706167653d313235302c636865636b3d6e6f726d616c2c696f636861727365743d69736f383835392d342c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c73686f72746e616d653d6d697865642c6e6f8b756d7461696c3d302c756e695f786c6174653d312c726f6469722c73686f72746e616d653d77696e39352c00"], 0xfd, 0x2a8, &(0x7f0000000240)="$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") r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000000), 0x4) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) setgroups(0x3, &(0x7f0000000080)=[r6, r6, r6]) socket$inet6_icmp(0xa, 0x2, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) setxattr$trusted_overlay_upper(&(0x7f0000001300)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000280)="7a19b9aa9d0f4036e6698de02996eabb844976e5e542a6a02c4c4fbad80e5b8554bd78cd2d65f6a79f656ba91690d49ec6ae824c776813012840819c0e8c25e86d487bf6f43750e70aca89659176dacdbd1b91412e188c3dfa15e07db271a1a586eea3e13ed1c9bbbc8ccd7041f6e59b42562ece6788e24dff9caff82b4582de49258e1dfa3e8c318b9259f6d7c15d3490bd070a8fda554cd0b5ffd0addc36c8b89f5556fae4fe70318a9202ccdefe56ebbb1b31c9d9a2ed4c789af61ec495ddd5d2595d1ad41d06fe32", 0xca) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x9, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) 971.168147ms ago: executing program 3 (id=1495): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @dev}, &(0x7f0000000040)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 905.869899ms ago: executing program 3 (id=1498): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@errors_remount}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x80}) r1 = socket$nl_route(0x10, 0x3, 0x0) fchown(r1, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000900)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x20, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000480)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) 852.03729ms ago: executing program 2 (id=1499): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x38728a2, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0xffffff7f}}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000400)=ANY=[], 0xfd, 0x347, &(0x7f0000000080)="$eJzs3U2IG2UYwPEn2Y/OrO4miAoK6qO9qEjo5ihCu5SuiIGKNlItCFN3oiFjsmRCNEU2KRR68eDFr7MKIoUF8SAIpR48yS6ld0/2tgfXk6LFVyaZcWabmaxGuz30/zvMPrzv88wzmTcMu2/Y3Z1n3n/rD2NMzelIXnKSPyaD3I2cFCUvkYE88fbm1YdeeuXV51cqlRMvqq6unFouq+rSI5fPvHvpsSudu17+eunbQ7JVfG1nt3x96/6tB3b+PPVm3de6r81WRx21wpPp2od+o6T6guc6vqv1pu+2g/mzrVbHOeu5WvNa6+s9dZprdy+st13fV6fZ04bb005LO+2eOm849aaWSiVdXBCkOj88WiKXup+sZKdVv/zNGNnt/GDMoYEYY8Iq3Ck0/Dpaf1tE3stOPr54UJeFA5J4qFsi3sVutVsV8ZaCY2ClJnXxxJUjUpAbEjwjzKebZvioCI7vlDcr1578/jtVLcqG1w/r+93qTFxvnnZleT7RNa5ffa5yYllH9tbPyUKyf1kKcu+oZiSuL6fWz8vjhxP1JSnItdelJZ5sX3701+snL34U1W8sqx4/WRnW5yWqt2UtulxLvvgl/fYVb+3qAAAAAAAAAAAwnZKqqi2atX9fChIuBNFiUTaiz4SD+VEU7q/nkp8PRPvzM2H2kdT9+Vk5dlteMQAAAAAAdx6/dyGMeucajue5bd+OgmAk+hk+HkkEdjwym5WTCO5b2ptjjOnHOdEVZZZPDOypqsLAmrLpuYZjT7o/w+Cz8/udx5Zo5OHVyU0PH53ZDhsO4qm5m1fwXweWuO25m6ceNMbsHZkXkWla/H46OVKY6lLFGq/KjyfP/v3O3veEw1RLJuVYEu9iZeXMRYEtKefJ5UbVaS1+nnq9kkHYIFjBjPfhs2d+/Grf88yP3Z9xo229K//XswcAAADAwYq/6T8q/do33f7ppz74h6WmMPzdcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8F9N8SfHtj9Om9IguOfzaORqYiq1cW43+jcBWX66da8aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg9lcAAAD//wcPnf8=") (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000400)=ANY=[], 0xfd, 0x347, &(0x7f0000000080)="$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") 824.62629ms ago: executing program 3 (id=1500): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x10000000000) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x473c, 0x4) sendmmsg(r2, &(0x7f0000000000)=[{{&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) unshare(0x60000600) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) 729.889093ms ago: executing program 1 (id=1501): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001040)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xf31}}, {@journal_dev={'journal_dev', 0x3d, 0x623}}, {@nodelalloc}, {@minixdf}, {@sb={'sb', 0x3d, 0x7}}]}, 0x4, 0xbbe, &(0x7f0000001240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x2, 0x1ed7, 0x2}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 626.346425ms ago: executing program 2 (id=1502): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'ipvlan0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x841e, 0xa04f, 0x2e2, 0x0, 0x8, 0x1, 0x4, 0x40009, 0x7, 0x7d52, 0x8, 0x2, 0x0, 0xa3a, 0x6, 0x101, 0x1, 0x10006, 0x8, 0xffffff7f, 0xd6e1, 0xfffffffb}}) r0 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) setuid(0xee01) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4, 0x4000000}, [], {}, [], {0x10, 0x3}}, 0x24, 0x2) 583.813196ms ago: executing program 2 (id=1503): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000d00)={0x0, 0x0, 0x10, 0x16, 0x9, &(0x7f0000000900)="f3c2f033d98b22009dbedf7c2f440b12486ee6919988afdb2b0adbbaf1fb80ac644b96be8d91ab2b6e921d2183ce39b14f62d696f5828807a93f94b469f894342fe1bee89e8097845e5f01b8dc2b85d756b42ded6e93d2159995a7225de7fdb78b191b2b7dbeb07ece4563bbabb8b517fb328cc31ad6dbc7bbdb36ad9e954ebb09bea509ef0ceb72c7263a97c2a378b820c5dc88cf27bd60ee06716449563d3b5960fa0da977f799e086c65e9faf003e5bad4c474e815139d3778ce522bd587132ca4313188c9b4f638ebafc753194a80b42b996b4289438e1d10aa088ad0c575ea3d9ce959dd6e952913ceefbb8687040e6b222e505e0748570df8e7633b64179285d22cb7d6f9a077a1f0d401fe714da8435e90913ebc5f6429210a031a079049073c1dd44f8a783b9804a6412acec2dc34da0d25a5bbbda5ab2daa0f6af3441f1d1887c4fafe3947acdda786114a139b638ae63464dbc2c04d0cddb93f351ac20c9e5ac76d685d5ef541a1abfdcdba21f949d104ae99c2459b287549919ff9389fd53e74f36de0aed1b235e67709b0c987c28e55765380c3863767a4f2d6eea75102869f9d89190cc81ab204130bfb9cb2ddd3e3d43d15c29ffdf3ceaca201a80e0a189f75345db5428eb690f4c1ac8aca12910139745d442e3529e5c0854c90194d14e9430166793fcbdb619369f35ae8bb82e5605719d3fe43c2f47c34eeb9161c0231fabd8ece99fb01693e64a000c5495757d9753dc95c13e6485924a0cb98aec9bc952e5567f68b22580e796e92eb263cdbcf20058693de20c5f8d2d5a4ab290b61e0ac6ea510c2ad918e9751ca4d0542cabd91005908e402bde9c076429ea113a8546eb7b0c81ff11e6a63bbf92b1636e5c510290b0aa46159b6c412738dd212fbc75582f417a36558e4a68626a1ff3d57057df1e9ea2841cf29ba07dcb811aa87ddbc4980ef040a1ff27832318627ebb3b0f712737efde931ef9bbd9d5f6ab9cefbc1116c0e4aa98f102c653a744fa7765bf0e201201c780b7cb55d96eb59035fb855f6b0ed9a6f516142819a58964f80cf41e1cd8f74613f45490ff30bc342f25efe6f7649d83eb2f851ffb38d9af4275587e4f79cec26e6f051914431f6c2211ccfae197913670f92d9e8cc64f3e142f0233b66020f06031d8453ac2fd4801a3a545929558399b75d0cd140d6d989596928f37cae0835d9059639e7ac69cd19c45e08a249dcf5f13f3778c9a13f424254b3d2d0d1c2131b260aacb33548fa76703d5bb10fb0f59c287990475d9af7c8a7750b2e21b1b2c05c28c5934f29c428553eb59ec791be53094d557b579e461f53908c868dbccd49451d3a4edfe0ef591c1e4617b510a9d6ffa9bdb6d7307f5858ce06bc9473943b1f1954f50fa2b49ae44c9fc3b36602ef153d7ed55969be79b349297cf8454f62385ff"}) 567.170897ms ago: executing program 2 (id=1504): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000005000000040000000300000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000009a0400"/28], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000440)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfd, 0x4, 0x30, 0x19}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x3, 0x7d, 0x9, 0x58, 0xdb, 0x3, 0x1}, {0x70000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8000000, 0x3, 0x0, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0xd, 0x6, 0x3, 0x7, 0x9, 0x85, 0x4a, 0x83, 0xf7, 0x82}, {0x1000, 0x6000, 0x8, 0xa0, 0xb1, 0x4, 0x1, 0xd, 0x84, 0xfb, 0x1, 0xfd}, {0x2, 0x2, 0x4, 0x8, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xeeee0000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x9}, {0xd000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0xb000, 0x420a4, 0xa, 0x1, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000006, 0x40000000000ff]}) close_range(r0, r1, 0x2) rename(&(0x7f0000000600)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000740)='./file1\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000002000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x6) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x4800) fcntl$setpipe(r8, 0x407, 0xfffffffffffffffe) write(r6, 0x0, 0x0) remap_file_pages(&(0x7f00003bd000/0x4000)=nil, 0x4000, 0x0, 0x838, 0x10000) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) 337.839502ms ago: executing program 3 (id=1505): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001040)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xf31}}, {@journal_dev={'journal_dev', 0x3d, 0x623}}, {@nodelalloc}, {@minixdf}, {@sb={'sb', 0x3d, 0x7}}]}, 0x4, 0xbbe, &(0x7f0000001240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x1, 0x2, 0x1ed7, 0x2}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 80.021458ms ago: executing program 1 (id=1506): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 71.127608ms ago: executing program 1 (id=1507): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200002, &(0x7f0000000b00)={[{@noblock_validity}, {@auto_da_alloc}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80000001}}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@dioread_nolock}, {@nouid32}]}, 0x3, 0x589, &(0x7f0000001640)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7ff, @any, 0x3, 0x1}, 0xe) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) fallocate(r2, 0x10, 0x10bfe, 0x8002) 0s ago: executing program 1 (id=1508): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_pipe\x00', 0x800, 0x0) read(r2, &(0x7f0000000300)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r5, r0}, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000001300), 0x0, 0x10000, &(0x7f0000001380)={r6, r7+60000000}) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) read$FUSE(r11, &(0x7f00000013c0)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) capset(&(0x7f0000000040), 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) kernel console output (not intermixed with test programs): truncated to 1048576 [ 196.446390][ T4114] overlayfs: missing 'lowerdir' [ 196.488893][ T4116] overlayfs: failed to resolve './file0': -2 [ 196.637353][ T4125] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1198: missing EA_INODE flag [ 196.649242][ T4125] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1198: error while reading EA inode 2 err=-117 [ 196.661743][ T4125] EXT4-fs (loop6): 1 orphan inode deleted [ 196.667840][ T4125] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue [ 196.680670][ T24] audit: type=1400 audit(1786439813.194:873): avc: denied { map } for pid=4124 comm="syz.6.1198" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.710655][ T4125] EXT4-fs error (device loop6): ext4_get_max_inline_size:115: inode #15: comm syz.6.1198: can't get inode location 15 [ 196.723828][ T4125] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 196.733959][ T4125] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.1198: mark_inode_dirty error [ 196.745549][ T4125] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.1198: Invalid block bitmap block 0 in block_group 0 [ 196.759332][ T4125] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 196.769311][ T4125] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.1198: mark_inode_dirty error [ 196.781272][ T4125] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 196.791203][ T4125] EXT4-fs error (device loop6): ext4_truncate:4403: inode #15: comm syz.6.1198: mark_inode_dirty error [ 196.934580][ T4138] xt_hashlimit: size too large, truncated to 1048576 [ 197.044377][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.051671][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.083905][ T4140] device bridge_slave_1 left promiscuous mode [ 197.090448][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.101818][ T4140] device bridge_slave_0 left promiscuous mode [ 197.108577][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.157518][ T477] Bluetooth: hci1: command 0x1001 tx timeout [ 197.163843][ T4056] Bluetooth: hci1: sending frame failed (-49) [ 197.224376][ T4141] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 197.233547][ T4141] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.313250][ T303] Bluetooth: hci0: command 0x1001 tx timeout [ 197.319496][ T4056] Bluetooth: hci0: sending frame failed (-49) [ 197.330355][ T4151] FAULT_INJECTION: forcing a failure. [ 197.330355][ T4151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.343942][ T4151] CPU: 0 PID: 4151 Comm: syz.6.1206 Tainted: G W syzkaller #0 [ 197.352708][ T4151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.362938][ T4151] Call Trace: [ 197.366274][ T4151] __dump_stack+0x21/0x24 [ 197.370661][ T4151] dump_stack_lvl+0x1a7/0x208 [ 197.375363][ T4151] ? show_regs_print_info+0x18/0x18 [ 197.380580][ T4151] ? __kasan_slab_alloc+0xc9/0xe0 [ 197.385631][ T4151] ? slab_post_alloc_hook+0x5d/0x2f0 [ 197.390978][ T4151] ? kmem_cache_alloc+0x15a/0x2d0 [ 197.396014][ T4151] ? __alloc_skb+0x9e/0x520 [ 197.400527][ T4151] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 197.405894][ T4151] dump_stack+0x15/0x1c [ 197.410050][ T4151] should_fail+0x3ab/0x500 [ 197.414450][ T4151] should_fail_alloc_page+0x4f/0x60 [ 197.419629][ T4151] __alloc_pages_nodemask+0x11a/0x640 [ 197.424982][ T4151] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 197.430529][ T4151] kmalloc_order+0x4c/0x160 [ 197.435009][ T4151] ? slab_post_alloc_hook+0x7d/0x2f0 [ 197.440276][ T4151] kmalloc_order_trace+0x16/0x80 [ 197.445195][ T4151] __kmalloc_track_caller+0x1cc/0x310 [ 197.450568][ T4151] ? __alloc_skb+0x9e/0x520 [ 197.455083][ T4151] ? alloc_skb_with_frags+0xa3/0x560 [ 197.460379][ T4151] __alloc_skb+0xdc/0x520 [ 197.464725][ T4151] alloc_skb_with_frags+0xa3/0x560 [ 197.469853][ T4151] sock_alloc_send_pskb+0x87f/0x9a0 [ 197.475067][ T4151] ? __kernel_text_address+0xa0/0x100 [ 197.480456][ T4151] ? sock_kzfree_s+0x60/0x60 [ 197.485057][ T4151] ? stack_trace_save+0xa6/0xf0 [ 197.489995][ T4151] ? stack_trace_snprint+0xe0/0xe0 [ 197.495092][ T4151] tun_get_user+0xa2f/0x31c0 [ 197.499696][ T4151] ? __x64_sys_openat+0x136/0x160 [ 197.504708][ T4151] ? _kstrtoull+0x3bb/0x4c0 [ 197.509207][ T4151] ? tun_do_read+0x1cf0/0x1cf0 [ 197.513957][ T4151] ? kstrtouint_from_user+0x1c4/0x220 [ 197.519582][ T4151] ? memset+0x35/0x40 [ 197.523552][ T4151] ? __fsnotify_parent+0x6d2/0x7c0 [ 197.528749][ T4151] ? avc_has_extended_perms+0xa10/0xc90 [ 197.534296][ T4151] ? selinux_file_permission+0x2a5/0x510 [ 197.540041][ T4151] ? fsnotify_perm+0x66/0x4a0 [ 197.544711][ T4151] tun_chr_write_iter+0x1c1/0x270 [ 197.549968][ T4151] vfs_write+0x770/0xd70 [ 197.554199][ T4151] ? kernel_write+0x3c0/0x3c0 [ 197.558867][ T4151] ? __fget_files+0x2e1/0x340 [ 197.563674][ T4151] ? __fdget_pos+0x1f7/0x380 [ 197.568249][ T4151] ? ksys_write+0x70/0x260 [ 197.572668][ T4151] ksys_write+0x14a/0x260 [ 197.577007][ T4151] ? __ia32_sys_read+0x90/0x90 [ 197.581761][ T4151] ? debug_smp_processor_id+0x17/0x20 [ 197.587160][ T4151] __x64_sys_write+0x7b/0x90 [ 197.591784][ T4151] do_syscall_64+0x31/0x40 [ 197.596215][ T4151] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 197.602151][ T4151] RIP: 0033:0x7f089d64090e [ 197.606571][ T4151] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 197.626250][ T4151] RSP: 002b:00007f089c0d8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.634652][ T4151] RAX: ffffffffffffffda RBX: 00007f089c0d96c0 RCX: 00007f089d64090e [ 197.642624][ T4151] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 197.650577][ T4151] RBP: 00007f089c0d9090 R08: 0000000000000000 R09: 0000000000000000 [ 197.658622][ T4151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.666579][ T4151] R13: 00007f089d908038 R14: 00007f089d907fa0 R15: 00007ffeaa6a2368 [ 197.687161][ T4155] overlayfs: failed to resolve './file0': -2 [ 197.802159][ T4158] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1208: iget: bad i_size value: 38620345925642 [ 197.815073][ T4158] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1208: couldn't read orphan inode 15 (err -117) [ 197.827331][ T4158] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 198.010926][ T9] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 198.023709][ T9] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 198.036170][ T9] EXT4-fs (loop6): This should not happen!! Data will be lost [ 198.036170][ T9] [ 198.046040][ T9] EXT4-fs (loop6): Total free blocks count 0 [ 198.052043][ T9] EXT4-fs (loop6): Free/Dirty block details [ 198.058063][ T9] EXT4-fs (loop6): free_blocks=0 [ 198.063069][ T9] EXT4-fs (loop6): dirty_blocks=16000 [ 198.068713][ T9] EXT4-fs (loop6): Block reservation details [ 198.074768][ T9] EXT4-fs (loop6): i_reserved_data_blocks=16000 [ 198.142311][ T9] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 198.155057][ T9] EXT4-fs (loop6): This should not happen!! Data will be lost [ 198.155057][ T9] [ 198.182959][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 198.193324][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 198.201656][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 198.213575][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 198.223645][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 198.236647][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 198.247281][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 198.327525][ T4170] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1211'. [ 198.336542][ T4170] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1211'. [ 198.633189][ T303] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 198.953243][ T303] usb 7-1: device descriptor read/64, error -71 [ 199.337896][ T4178] Bluetooth: hci1: command 0x1009 tx timeout [ 199.393205][ T4178] Bluetooth: hci0: command 0x1009 tx timeout [ 199.583280][ T303] usb 7-1: device descriptor read/64, error -71 [ 199.863169][ T303] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 199.949295][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 199.957883][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 199.965858][ T4195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.153193][ T303] usb 7-1: device descriptor read/64, error -71 [ 200.253214][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 200.474267][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.481307][ T4199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.488864][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.495913][ T4199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.511578][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.519539][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 200.519565][ T4199] xt_hashlimit: size too large, truncated to 1048576 [ 200.528083][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.542659][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 200.551461][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.559744][ T303] usb 7-1: device descriptor read/64, error -71 [ 200.566721][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.575116][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.583574][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.600625][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.742001][ T4204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1221'. [ 200.811749][ T4206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 200.917461][ T303] usb usb7-port1: attempt power cycle [ 200.936887][ T4208] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1223'. [ 200.946253][ T4208] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1223'. [ 200.955699][ T4208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1223'. [ 200.979821][ T4212] FAULT_INJECTION: forcing a failure. [ 200.979821][ T4212] name failslab, interval 1, probability 0, space 0, times 0 [ 200.992688][ T4212] CPU: 0 PID: 4212 Comm: syz.0.1225 Tainted: G W syzkaller #0 [ 201.001790][ T4212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.011969][ T4212] Call Trace: [ 201.015260][ T4212] __dump_stack+0x21/0x24 [ 201.019612][ T4212] dump_stack_lvl+0x1a7/0x208 [ 201.024289][ T4212] ? show_regs_print_info+0x18/0x18 [ 201.029514][ T4212] dump_stack+0x15/0x1c [ 201.033836][ T4212] should_fail+0x3ab/0x500 [ 201.038239][ T4212] ? dst_alloc+0x176/0x4f0 [ 201.042672][ T4212] __should_failslab+0xa4/0xe0 [ 201.047430][ T4212] should_failslab+0x9/0x20 [ 201.051945][ T4212] kmem_cache_alloc+0x3d/0x2d0 [ 201.056701][ T4212] ? fib6_select_path+0x103/0x620 [ 201.061713][ T4212] dst_alloc+0x176/0x4f0 [ 201.066209][ T4212] ip6_pol_route+0x988/0x1170 [ 201.070984][ T4212] ? fib6_table_lookup+0x9e0/0x9e0 [ 201.076087][ T4212] ? stack_trace_save+0xa6/0xf0 [ 201.081115][ T4212] ip6_pol_route_input+0x56/0x80 [ 201.086138][ T4212] ? ip6_route_input_lookup+0xd0/0xd0 [ 201.091498][ T4212] fib6_rule_action+0x1c7/0x710 [ 201.096335][ T4212] fib_rules_lookup+0x466/0x8d0 [ 201.101203][ T4212] ? fib_rules_unregister+0x330/0x330 [ 201.106572][ T4212] ? unwind_get_return_address+0x4d/0x90 [ 201.112458][ T4212] fib6_rule_lookup+0x195/0x5d0 [ 201.117391][ T4212] ? ip6_route_input_lookup+0xd0/0xd0 [ 201.123326][ T4212] ? fib6_lookup+0x2c0/0x2c0 [ 201.127905][ T4212] ? ip6t_do_table+0x1301/0x14a0 [ 201.132841][ T4212] ? ip6_route_input_lookup+0xd0/0xd0 [ 201.138342][ T4212] ip6_route_input+0x647/0x860 [ 201.143135][ T4212] ? ip6_multipath_l3_keys+0x5c0/0x5c0 [ 201.148937][ T4212] ? inet6_ehashfn+0x500/0x500 [ 201.153694][ T4212] ? tcp_v6_early_demux+0x2b0/0x740 [ 201.158876][ T4212] ? tcp_v6_early_demux+0x452/0x740 [ 201.164090][ T4212] ip6_rcv_finish+0x155/0x360 [ 201.168777][ T4212] ipv6_rcv+0xf0/0x230 [ 201.172833][ T4212] ? do_syscall_64+0x31/0x40 [ 201.177411][ T4212] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 201.183468][ T4212] ? ip6_rcv_finish+0x360/0x360 [ 201.188545][ T4212] ? refcount_add+0x80/0x80 [ 201.193053][ T4212] ? ip6_rcv_finish+0x360/0x360 [ 201.197890][ T4212] __netif_receive_skb+0xc8/0x280 [ 201.202904][ T4212] netif_receive_skb+0x9b/0x3e0 [ 201.207758][ T4212] ? netif_receive_skb_core+0x100/0x100 [ 201.213310][ T4212] tun_rx_batched+0x600/0x750 [ 201.217989][ T4212] ? local_bh_enable+0x30/0x30 [ 201.222751][ T4212] ? __build_skb+0x1f8/0x300 [ 201.227335][ T4212] tun_get_user+0x270e/0x31c0 [ 201.232004][ T4212] ? tun_do_read+0x1cf0/0x1cf0 [ 201.236782][ T4212] ? file_has_perm+0x52d/0x700 [ 201.241636][ T4212] ? match_file+0x130/0x130 [ 201.246140][ T4212] ? memset+0x35/0x40 [ 201.250125][ T4212] ? __fsnotify_parent+0x6d2/0x7c0 [ 201.255319][ T4212] ? selinux_file_permission+0x3ef/0x510 [ 201.260941][ T4212] ? fsnotify_perm+0x66/0x4a0 [ 201.265615][ T4212] tun_chr_write_iter+0x1c1/0x270 [ 201.270833][ T4212] vfs_write+0x770/0xd70 [ 201.275068][ T4212] ? kernel_write+0x3c0/0x3c0 [ 201.279740][ T4212] ? __fget_files+0x2e1/0x340 [ 201.284516][ T4212] ? __fdget_pos+0x1f7/0x380 [ 201.289092][ T4212] ? ksys_write+0x70/0x260 [ 201.293492][ T4212] ksys_write+0x14a/0x260 [ 201.297938][ T4212] ? __ia32_sys_read+0x90/0x90 [ 201.302715][ T4212] ? debug_smp_processor_id+0x17/0x20 [ 201.308132][ T4212] __x64_sys_write+0x7b/0x90 [ 201.312894][ T4212] do_syscall_64+0x31/0x40 [ 201.317305][ T4212] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 201.323189][ T4212] RIP: 0033:0x7f0fde41c90e [ 201.327588][ T4212] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 201.347404][ T4212] RSP: 002b:00007f0fdceb4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.355898][ T4212] RAX: ffffffffffffffda RBX: 00007f0fdceb56c0 RCX: 00007f0fde41c90e [ 201.364959][ T4212] RDX: 0000000000000056 RSI: 0000200000000200 RDI: 00000000000000c8 [ 201.372931][ T4212] RBP: 00007f0fdceb5090 R08: 0000000000000000 R09: 0000000000000000 [ 201.380906][ T4212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.388876][ T4212] R13: 00007f0fde6e4038 R14: 00007f0fde6e3fa0 R15: 00007ffcc02fb298 [ 201.465100][ T4225] xt_hashlimit: size too large, truncated to 1048576 [ 201.510220][ T4229] input: syz0 as /devices/virtual/input/input9 [ 201.520075][ T24] audit: type=1400 audit(1786439818.024:874): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=1006 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.546646][ T24] audit: type=1400 audit(1786439818.024:875): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1006 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.633073][ T4232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1231'. [ 201.826785][ T24] audit: type=1400 audit(1786439818.024:876): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1006 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.852078][ T24] audit: type=1400 audit(1786439818.054:877): avc: denied { ioctl } for pid=4224 comm="syz.6.1230" path="/dev/usbmon6" dev="devtmpfs" ino=172 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 201.938380][ T4238] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1235: iget: bad i_size value: 38620345925642 [ 201.951283][ T4238] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1235: couldn't read orphan inode 15 (err -117) [ 201.963592][ T4238] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 202.099623][ T4243] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1235: bg 0: block 5: invalid block bitmap [ 202.113342][ T4243] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 202.125889][ T4243] EXT4-fs (loop6): This should not happen!! Data will be lost [ 202.125889][ T4243] [ 202.135813][ T4243] EXT4-fs (loop6): Total free blocks count 0 [ 202.142080][ T4243] EXT4-fs (loop6): Free/Dirty block details [ 202.148066][ T4243] EXT4-fs (loop6): free_blocks=0 [ 202.153114][ T4243] EXT4-fs (loop6): dirty_blocks=12608 [ 202.158744][ T4243] EXT4-fs (loop6): Block reservation details [ 202.164886][ T4243] EXT4-fs (loop6): i_reserved_data_blocks=12608 [ 202.182127][ T2058] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 202.194910][ T2058] EXT4-fs (loop6): This should not happen!! Data will be lost [ 202.194910][ T2058] [ 203.616568][ T4270] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 203.642176][ T4273] EXT4-fs warning (device loop5): dx_probe:806: inode #2: comm syz.5.1246: Unrecognised inode hash code 255 [ 203.653806][ T4273] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1246: Corrupt directory, running e2fsck is recommended [ 203.663239][ T284] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 203.667100][ T4273] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 203.682779][ T4273] EXT4-fs error (device loop5): ext4_iget_extra_inode:4692: inode #15: comm syz.5.1246: corrupted in-inode xattr [ 203.695050][ T4273] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1246: couldn't read orphan inode 15 (err -117) [ 203.707117][ T4273] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue [ 203.748855][ T24] audit: type=1400 audit(1786439820.254:878): avc: denied { name_bind } for pid=4269 comm="syz.8.1245" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 204.083266][ T284] usb 7-1: unable to get BOS descriptor or descriptor too short [ 204.092450][ T20] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 204.124000][ T24] audit: type=1400 audit(1786439820.634:879): avc: denied { execute } for pid=4279 comm="syz.4.1248" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 204.163284][ T284] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 204.333277][ T284] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 204.342395][ T284] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.350796][ T284] usb 7-1: Product: syz [ 204.355027][ T284] usb 7-1: Manufacturer: syz [ 204.359623][ T284] usb 7-1: SerialNumber: syz [ 204.503298][ T20] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.514456][ T20] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.544403][ T4282] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 204.624021][ T284] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 204.683286][ T20] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 204.692519][ T20] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 204.701200][ T20] usb 6-1: Product: syz [ 204.705716][ T20] usb 6-1: Manufacturer: syz [ 204.712802][ T4290] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1251'. [ 204.750569][ T4292] 9pnet: p9_errstr2errno: server reported unknown error ective_cpus [ 204.759264][ T20] hub 6-1:4.0: USB hub found [ 204.850207][ T24] audit: type=1400 audit(1786439821.354:880): avc: denied { create } for pid=4293 comm="syz.0.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 204.852889][ T4294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'. [ 204.870999][ T284] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 204.890286][ T4295] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 204.902424][ T4295] EXT4-fs (loop4): fragment/cluster size (32768) != block size (1024) [ 204.911110][ T284] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 204.926044][ T2058] Bluetooth: hci0: Frame reassembly failed (-84) [ 204.961236][ T4278] udc-core: couldn't find an available UDC or it's busy [ 204.968316][ T4278] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 204.989821][ T4300] Bluetooth: hci0: Frame reassembly failed (-84) [ 205.043235][ T20] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 205.363273][ T20] usb 6-1: USB disconnect, device number 13 [ 205.374863][ T4258] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 205.382709][ T4258] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 205.391271][ T4258] F2FS-fs (loop6): Unrecognized mount option "ÿÿÿ" or missing value [ 205.487690][ T24] audit: type=1400 audit(1786439821.994:881): avc: denied { write } for pid=4302 comm="syz.8.1255" path="socket:[47688]" dev="sockfs" ino=47688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 205.540078][ T24] audit: type=1326 audit(1786439822.044:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.8.1255" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6071d140d9 code=0x7ffc0000 [ 205.565210][ T24] audit: type=1326 audit(1786439822.044:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4302 comm="syz.8.1255" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6071d140d9 code=0x7ffc0000 [ 205.573483][ T284] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 205.607648][ T284] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 205.625444][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 205.641161][ T4312] xt_hashlimit: size too large, truncated to 1048576 [ 205.813591][ T4258] udc-core: couldn't find an available UDC or it's busy [ 205.830846][ T4258] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 205.843226][ T284] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 205.899337][ T284] usb 7-1: USB disconnect, device number 15 [ 205.999156][ T4314] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 206.053394][ T4327] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 206.074988][ T4331] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1260'. [ 206.174746][ T4314] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.197026][ T4327] EXT4-fs (loop8): 1 truncate cleaned up [ 206.203054][ T4327] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue [ 206.283676][ T2124] udevd[2124]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 206.323462][ T4336] exfat: Deprecated parameter 'utf8' [ 206.328962][ T4336] exfat: Deprecated parameter 'utf8' [ 206.347786][ T4336] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 206.394785][ T4340] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1265'. [ 206.614169][ T4342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1267'. [ 206.623186][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 206.684715][ T4346] overlayfs: failed to resolve './file1': -2 [ 206.844878][ T4349] F2FS-fs (loop5): invalid crc value [ 206.851348][ T4349] F2FS-fs (loop5): Mismatch valid blocks 2 vs. 5 [ 206.857904][ T4349] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 206.893196][ T25] usb 5-1: device descriptor read/64, error -71 [ 207.003212][ T357] Bluetooth: hci0: command 0x1003 tx timeout [ 207.009293][ T2228] Bluetooth: hci0: sending frame failed (-49) [ 207.013239][ T284] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 207.066814][ T4349] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x0f9fe206, utbl_chksum : 0xe619d30d) [ 207.081078][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 207.081089][ T24] audit: type=1400 audit(1786439823.584:911): avc: denied { append } for pid=4348 comm="syz.5.1270" path="/8/file0/cpuset.effective_cpus" dev="loop5" ino=1048859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.133179][ T24] audit: type=1400 audit(1786439823.614:912): avc: denied { lock } for pid=4348 comm="syz.5.1270" path="/8/file0/cpuset.effective_cpus" dev="loop5" ino=1048859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 207.176594][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 207.177606][ T24] audit: type=1400 audit(1786439823.684:913): avc: denied { write } for pid=4355 comm="syz.8.1272" path="socket:[47807]" dev="sockfs" ino=47807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.303203][ T25] usb 5-1: device descriptor read/64, error -71 [ 207.309763][ T4361] Bluetooth: hci1: Frame reassembly failed (-84) [ 207.331680][ T24] audit: type=1400 audit(1786439823.834:914): avc: denied { sys_admin } for pid=4362 comm="syz.5.1273" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 207.393527][ T284] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 207.414853][ T284] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.553260][ T284] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 207.562415][ T284] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 207.583185][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 207.583192][ T284] usb 7-1: Product: syz [ 207.583207][ T284] usb 7-1: Manufacturer: syz [ 207.653903][ T284] hub 7-1:4.0: USB hub found [ 207.873312][ T25] usb 5-1: device descriptor read/64, error -71 [ 207.953261][ T284] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 208.177009][ T4367] xt_hashlimit: size too large, truncated to 1048576 [ 208.263209][ T25] usb 5-1: device descriptor read/64, error -71 [ 208.283268][ T284] usb 7-1: USB disconnect, device number 16 [ 208.334440][ T4368] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 208.343463][ T4368] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.383428][ T25] usb usb5-port1: attempt power cycle [ 208.425799][ T4373] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 208.676504][ T4379] erofs: (device loop6): mounted with root inode @ nid 36. [ 208.684877][ T4379] overlayfs: failed to resolve './file1': -2 [ 208.776141][ T4382] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 208.787239][ T4382] EXT4-fs (loop6): 1 truncate cleaned up [ 208.792895][ T4382] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue [ 208.803191][ T25] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 208.963793][ T4387] EXT4-fs (loop6): Test dummy encryption mode enabled [ 208.972523][ T4387] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1279: inode has both inline data and extents flags [ 208.986978][ T4387] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1279: couldn't read orphan inode 15 (err -117) [ 208.999102][ T4387] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 209.010731][ T25] usb 5-1: device descriptor read/8, error -71 [ 209.073339][ T475] Bluetooth: hci0: command 0x1001 tx timeout [ 209.080046][ T4056] Bluetooth: hci0: sending frame failed (-49) [ 209.233456][ T284] Bluetooth: hci1: command 0x1003 tx timeout [ 209.239743][ T4056] Bluetooth: hci1: sending frame failed (-49) [ 209.283367][ T25] usb 5-1: device descriptor read/8, error -71 [ 209.338721][ T4393] overlayfs: failed to resolve './file1': -2 [ 209.743385][ T284] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 210.023217][ T636] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 210.030862][ T284] usb 6-1: device descriptor read/64, error -71 [ 210.613229][ T284] usb 6-1: device descriptor read/64, error -71 [ 210.783264][ T636] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 210.792379][ T636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.800661][ T636] usb 7-1: Product: 郂䙄⻾ຢá¨á…€æ…žç¾‹ï˜“á«ãŒè˜ªí‡­ä–¨ìš“빾쫢ࣴ㣗㮔팔篖鴅⼳캲跅늈漺崤ஞⓔ줆ꇄ῾è굅혺봊禱࿆ƛᾖî•ä¹³çˆ€&픾茬䋱㘳ڔá¬è­á–šá£¤â°›æ¦”è·ëºžï™¡ä†‚㦰鯻ç–࠙襂腷ì˜ì‘»í¥è­žæ²¶ìºîš›æ®žá¦¶ê•—夎໌ì盫㔣≒䎘⴦݈㇆瀔凲∟ᅫ䃫餙鼯 [ 210.830847][ T636] usb 7-1: Manufacturer: Ц [ 210.835416][ T636] usb 7-1: SerialNumber: Ð’ [ 210.893215][ T284] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 211.142976][ T4408] xt_hashlimit: size too large, truncated to 1048576 [ 211.164004][ T437] Bluetooth: hci0: command 0x1009 tx timeout [ 211.170123][ T284] usb 6-1: device descriptor read/64, error -71 [ 211.213230][ T636] usb 7-1: 1:1 : bogus bTerminalLink 116 [ 211.233454][ T636] usb 7-1: unit 6 not found! [ 211.238272][ T636] usb 7-1: unit 100 not found! [ 211.294460][ T4409] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 211.296949][ T636] usb 7-1: USB disconnect, device number 17 [ 211.306115][ T4409] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.338916][ T437] Bluetooth: hci1: command 0x1001 tx timeout [ 211.345127][ T4056] Bluetooth: hci1: sending frame failed (-49) [ 211.743257][ T284] usb 6-1: device descriptor read/64, error -71 [ 211.863228][ T284] usb usb6-port1: attempt power cycle [ 212.253960][ T4421] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 212.264804][ T4421] EXT4-fs (loop4): 1 truncate cleaned up [ 212.270447][ T4421] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue [ 212.283190][ T284] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 212.424547][ T4427] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 212.430963][ T4427] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 212.440165][ T4427] F2FS-fs (loop4): invalid crc value [ 212.446854][ T4427] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 212.467415][ T4427] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 212.474680][ T4427] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 212.748205][ T4438] FAULT_INJECTION: forcing a failure. [ 212.748205][ T4438] name failslab, interval 1, probability 0, space 0, times 0 [ 212.761159][ T4438] CPU: 0 PID: 4438 Comm: syz.4.1293 Tainted: G W syzkaller #0 [ 212.769924][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 212.779985][ T4438] Call Trace: [ 212.783294][ T4438] __dump_stack+0x21/0x24 [ 212.787649][ T4438] dump_stack_lvl+0x1a7/0x208 [ 212.792341][ T4438] ? show_regs_print_info+0x18/0x18 [ 212.797558][ T4438] dump_stack+0x15/0x1c [ 212.801729][ T4438] should_fail+0x3ab/0x500 [ 212.806168][ T4438] ? fat_parse_long+0x9a/0x820 [ 212.810981][ T4438] __should_failslab+0xa4/0xe0 [ 212.815754][ T4438] should_failslab+0x9/0x20 [ 212.820288][ T4438] kmem_cache_alloc+0x3d/0x2d0 [ 212.825125][ T4438] fat_parse_long+0x9a/0x820 [ 212.830176][ T4438] __fat_readdir+0x799/0x1760 [ 212.834875][ T4438] ? fsnotify+0x19ce/0x1a90 [ 212.839386][ T4438] ? fat_shortname2uni+0x7f0/0x7f0 [ 212.844498][ T4438] ? vfs_write+0xae4/0xd70 [ 212.848904][ T4438] fat_readdir+0x46/0x50 [ 212.853132][ T4438] iterate_dir+0x25c/0x560 [ 212.857533][ T4438] ? fat_parse_short+0x13e0/0x13e0 [ 212.862645][ T4438] __se_sys_getdents64+0xf2/0x250 [ 212.867667][ T4438] ? __x64_sys_getdents64+0x90/0x90 [ 212.872850][ T4438] ? ksys_write+0x1fa/0x260 [ 212.877336][ T4438] ? filldir+0x660/0x660 [ 212.881586][ T4438] ? __ia32_sys_read+0x90/0x90 [ 212.886348][ T4438] ? ____fput+0x15/0x20 [ 212.890692][ T4438] ? debug_smp_processor_id+0x17/0x20 [ 212.896156][ T4438] __x64_sys_getdents64+0x7b/0x90 [ 212.901177][ T4438] do_syscall_64+0x31/0x40 [ 212.905577][ T4438] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 212.911468][ T4438] RIP: 0033:0x7f2474fb30d9 [ 212.916041][ T4438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.935721][ T4438] RSP: 002b:00007f2473a0c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 212.944119][ T4438] RAX: ffffffffffffffda RBX: 00007f247523afa0 RCX: 00007f2474fb30d9 [ 212.952081][ T4438] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004 [ 212.960207][ T4438] RBP: 00007f2473a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 212.968168][ T4438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.976158][ T4438] R13: 00007f247523b038 R14: 00007f247523afa0 R15: 00007fffd347dd18 [ 212.985652][ T284] usb 6-1: device not accepting address 16, error -71 [ 213.238847][ T4444] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 213.373188][ T284] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 213.393267][ T636] Bluetooth: hci1: command 0x1009 tx timeout [ 213.523193][ T25] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 213.743253][ T284] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 213.752647][ T284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.760728][ T284] usb 6-1: Product: 郂䙄⻾ຢá¨á…€æ…žç¾‹ï˜“á«ãŒè˜ªí‡­ä–¨ìš“빾쫢ࣴ㣗㮔팔篖鴅⼳캲跅늈漺崤ஞⓔ줆ꇄ῾è굅혺봊禱࿆ƛᾖî•ä¹³çˆ€&픾茬䋱㘳ڔá¬è­á–šá£¤â°›æ¦”è·ëºžï™¡ä†‚㦰鯻ç–࠙襂腷ì˜ì‘»í¥è­žæ²¶ìºîš›æ®žá¦¶ê•—夎໌ì盫㔣≒䎘⴦݈㇆瀔凲∟ᅫ䃫餙鼯 [ 213.790567][ T284] usb 6-1: Manufacturer: Ц [ 213.795497][ T284] usb 6-1: SerialNumber: Ð’ [ 213.903228][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.913418][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 213.922299][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.932073][ T25] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 213.941113][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.985010][ T25] hub 7-1:1.0: bad descriptor, ignoring hub [ 213.990947][ T25] hub: probe of 7-1:1.0 failed with error -5 [ 213.997190][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 214.002476][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 214.007920][ T25] cdc_wdm: probe of 7-1:1.0 failed with error -22 [ 214.128971][ T4457] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1299: iget: bad i_size value: 38620345925642 [ 214.142930][ T4457] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1299: couldn't read orphan inode 15 (err -117) [ 214.155904][ T284] usb 6-1: 1:1 : bogus bTerminalLink 116 [ 214.161859][ T4457] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 214.176518][ T284] usb 6-1: unit 6 not found! [ 214.181426][ T284] usb 6-1: unit 100 not found! [ 214.236887][ T284] usb 6-1: USB disconnect, device number 17 [ 214.416981][ T4457] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1299: bg 0: block 5: invalid block bitmap [ 214.429545][ T4457] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 214.443533][ T4457] EXT4-fs (loop4): This should not happen!! Data will be lost [ 214.443533][ T4457] [ 214.453485][ T4457] EXT4-fs (loop4): Total free blocks count 0 [ 214.459519][ T4457] EXT4-fs (loop4): Free/Dirty block details [ 214.465540][ T4457] EXT4-fs (loop4): free_blocks=0 [ 214.470689][ T4457] EXT4-fs (loop4): dirty_blocks=9372 [ 214.476016][ T4457] EXT4-fs (loop4): Block reservation details [ 214.482118][ T4457] EXT4-fs (loop4): i_reserved_data_blocks=9372 [ 214.500168][ T2058] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 214.512922][ T2058] EXT4-fs (loop4): This should not happen!! Data will be lost [ 214.512922][ T2058] [ 214.614358][ T4468] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.625280][ T4468] EXT4-fs (loop4): 1 truncate cleaned up [ 214.630976][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue [ 214.719016][ T4482] netlink: 'syz.5.1305': attribute type 4 has an invalid length. [ 214.845511][ T4489] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 214.973255][ T284] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 215.088850][ T4493] xt_hashlimit: size too large, truncated to 1048576 [ 215.343265][ T284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.353814][ T284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 215.362801][ T284] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 215.371924][ T284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.653430][ T284] usb 5-1: string descriptor 0 read error: -71 [ 215.659694][ T284] uvcvideo: Found UVC 1.00 device (046d:0825) [ 215.666805][ T284] uvcvideo: No streaming interface found for terminal 2. [ 215.669583][ T284] usb 5-1: USB disconnect, device number 22 [ 215.692192][ T4502] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.703271][ T4502] EXT4-fs (loop5): 1 truncate cleaned up [ 215.709157][ T4502] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue [ 215.760968][ T4506] WARNING! power/level is deprecated; use power/control instead [ 216.033273][ T20] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 216.142757][ T4508] x_tables: duplicate entry at hook 3 [ 216.187313][ T4508] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x31f2d3eb, utbl_chksum : 0xe619d30d) [ 216.305344][ T24] audit: type=1400 audit(1786439832.814:915): avc: denied { mount } for pid=4515 comm="syz.4.1317" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 216.307714][ T4516] 9pnet: Insufficient options for proto=fd [ 216.327925][ T24] audit: type=1400 audit(1786439832.814:916): avc: denied { write } for pid=4515 comm="syz.4.1317" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 216.360582][ T24] audit: type=1400 audit(1786439832.864:917): avc: denied { unmount } for pid=3030 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 216.393309][ T25] usb 7-1: USB disconnect, device number 18 [ 216.413224][ T20] usb 6-1: config 1 has an invalid interface number: 48 but max is 2 [ 216.421521][ T20] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.431869][ T20] usb 6-1: config 1 has no interface number 2 [ 216.438023][ T20] usb 6-1: too many endpoints for config 1 interface 48 altsetting 80: 205, using maximum allowed: 30 [ 216.449003][ T20] usb 6-1: config 1 interface 48 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 205 [ 216.462253][ T20] usb 6-1: config 1 interface 48 has no altsetting 0 [ 216.623250][ T20] usb 6-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 216.632519][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.640600][ T20] usb 6-1: Product: syz [ 216.644799][ T20] usb 6-1: Manufacturer: syz [ 216.649386][ T20] usb 6-1: SerialNumber: syz [ 216.896233][ T4506] binder: 4505:4506 ioctl 89f0 200000000280 returned -22 [ 216.904084][ T4506] binder: 4505:4506 ioctl 89f8 200000000380 returned -22 [ 216.914040][ T4506] binder: 4505:4506 ioctl c00c620f 2000000003c0 returned -22 [ 217.063480][ T20] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 217.104375][ T20] usb 6-1: USB disconnect, device number 18 [ 217.222692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 217.235406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.247998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 217.256726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.265677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.267079][ T4526] xt_hashlimit: size too large, truncated to 1048576 [ 217.274086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.288758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.297167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.406488][ T4530] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 217.434315][ T4532] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 217.444503][ T4532] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.682075][ T4538] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 217.880406][ T4538] EXT4-fs (loop5): 1 truncate cleaned up [ 217.886149][ T4538] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,journal_ioprio=0x0000000000000004,max_batch_time=0x0000000000000003,,errors=continue [ 218.028789][ T4548] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 218.038309][ T4548] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,journal_dev=0x0000000000000f31,journal_dev=0x0000000000000623,nodelalloc,minixdf,sb=0x0000000000000007,,errors=continue [ 218.070260][ T4548] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 218.086253][ T4548] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1327'. [ 218.095710][ T4548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4548 comm=syz.8.1327 [ 218.194725][ T4555] FAT-fs (loop4): bogus sectors per cluster 0 [ 218.200931][ T4555] FAT-fs (loop4): Can't find a valid FAT filesystem [ 218.296268][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1329'. [ 218.632253][ T2036] EXT4-fs error (device loop8): ext4_ext_check_inode:500: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2305, max 4(4), depth 0(0) [ 218.650768][ T2036] EXT4-fs error (device loop8): ext4_ext_check_inode:500: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2305, max 4(4), depth 0(0) [ 218.760110][ T4577] xt_hashlimit: size too large, truncated to 1048576 [ 218.884262][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.891659][ T4580] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.899769][ T4579] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 218.909464][ T4580] device bridge_slave_0 entered promiscuous mode [ 218.921555][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.929110][ T4579] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.939819][ T4580] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.970153][ T4580] device bridge_slave_1 entered promiscuous mode [ 219.035695][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.042914][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.050222][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.057370][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.308119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.318503][ T4590] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 219.326682][ T4590] EXT4-fs (loop5): Test dummy encryption mode enabled [ 219.460338][ T4590] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 219.763446][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.783875][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.813604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.826082][ T4599] xt_hashlimit: size too large, truncated to 1048576 [ 219.844896][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.851951][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.873280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.883380][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.890442][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.963994][ T4580] device veth0_vlan entered promiscuous mode [ 219.982500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.001285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.014087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.033465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.046069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.058129][ T4595] F2FS-fs (loop4): invalid crc value [ 220.064193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.075351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.093805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.104046][ T4595] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 220.121478][ T4580] device veth1_macvtap entered promiscuous mode [ 220.135827][ T4595] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 220.144000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.183752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.184147][ T4613] EXT4-fs warning (device loop5): dx_probe:806: inode #2: comm syz.5.1347: Unrecognised inode hash code 255 [ 220.204190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.213059][ T4613] EXT4-fs warning (device loop5): dx_probe:946: inode #2: comm syz.5.1347: Corrupt directory, running e2fsck is recommended [ 220.224358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.235169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.252371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.254555][ T4613] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 220.262387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.277982][ T4595] attempt to access beyond end of device [ 220.277982][ T4595] loop4: rw=2049, want=45104, limit=40427 [ 220.278036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.298325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.308115][ T4613] EXT4-fs error (device loop5): ext4_iget_extra_inode:4692: inode #15: comm syz.5.1347: corrupted in-inode xattr [ 220.358513][ T4613] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1347: couldn't read orphan inode 15 (err -117) [ 220.380748][ T4613] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue [ 220.540928][ T4626] EXT4-fs (loop5): Test dummy encryption mode enabled [ 220.550934][ T4626] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1350: inode has both inline data and extents flags [ 220.560524][ T4634] FAULT_INJECTION: forcing a failure. [ 220.560524][ T4634] name failslab, interval 1, probability 0, space 0, times 0 [ 220.564552][ T4626] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1350: couldn't read orphan inode 15 (err -117) [ 220.584670][ T4634] CPU: 0 PID: 4634 Comm: syz.2.1353 Tainted: G W syzkaller #0 [ 220.589211][ T4626] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 220.597535][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.597540][ T4634] Call Trace: [ 220.597563][ T4634] __dump_stack+0x21/0x24 [ 220.597572][ T4634] dump_stack_lvl+0x1a7/0x208 [ 220.597582][ T4634] ? show_regs_print_info+0x18/0x18 [ 220.597591][ T4634] dump_stack+0x15/0x1c [ 220.597600][ T4634] should_fail+0x3ab/0x500 [ 220.597610][ T4634] ? ipv6_flowlabel_opt+0xa7a/0x1f30 [ 220.597620][ T4634] __should_failslab+0xa4/0xe0 [ 220.597629][ T4634] should_failslab+0x9/0x20 [ 220.597639][ T4634] kmem_cache_alloc_trace+0x3a/0x2e0 [ 220.597647][ T4634] ? __kasan_check_write+0x14/0x20 [ 220.597655][ T4634] ipv6_flowlabel_opt+0xa7a/0x1f30 [ 220.597666][ T4634] ? up_read+0x12/0x50 [ 220.597675][ T4634] ? ipv6_flowlabel_opt_get+0x580/0x580 [ 220.597684][ T4634] ? __kasan_check_write+0x14/0x20 [ 220.597695][ T4634] ? _raw_spin_lock_bh+0x94/0xf0 [ 220.597704][ T4634] ? _raw_spin_lock_irq+0xf0/0xf0 [ 220.597713][ T4634] ? proc_pident_lookup+0x1d5/0x280 [ 220.597722][ T4634] ? path_openat+0x145d/0x3040 [ 220.597730][ T4634] ? do_filp_open+0x1df/0x400 [ 220.597741][ T4634] ? __local_bh_enable_ip+0x53/0x80 [ 220.597752][ T4634] ? local_bh_enable+0x1f/0x30 [ 220.597761][ T4634] ? lock_sock_nested+0x217/0x2a0 [ 220.597769][ T4634] ? asm_exc_page_fault+0x1e/0x30 [ 220.597779][ T4634] ? sock_init_data+0xc0/0xc0 [ 220.597791][ T4634] ? copy_user_generic_unrolled+0x9e/0xc0 [ 220.597802][ T4634] ? _copy_from_user+0x95/0xd0 [ 220.597818][ T4634] ipv6_setsockopt+0x9ff/0x36f0 [ 220.597828][ T4634] ? ipv6_update_options+0x390/0x390 [ 220.597837][ T4634] ? 0xffffffffa001a000 [ 220.597846][ T4634] ? is_bpf_text_address+0x177/0x190 [ 220.597854][ T4634] ? __kernel_text_address+0xa0/0x100 [ 220.597863][ T4634] ? unwind_get_return_address+0x4d/0x90 [ 220.597871][ T4634] ? stack_trace_save+0xf0/0xf0 [ 220.597881][ T4634] ? arch_stack_walk+0xee/0x140 [ 220.597889][ T4634] ? stack_trace_save+0xa6/0xf0 [ 220.597906][ T4634] ? stack_trace_snprint+0xe0/0xe0 [ 220.799727][ T4634] ? kasan_set_track+0x5b/0x70 [ 220.804491][ T4634] ? kasan_set_track+0x4a/0x70 [ 220.809255][ T4634] ? kasan_set_free_info+0x23/0x40 [ 220.814380][ T4634] ? ____kasan_slab_free+0x125/0x160 [ 220.819771][ T4634] ? __kasan_slab_free+0x11/0x20 [ 220.824812][ T4634] ? slab_free_freelist_hook+0xc5/0x190 [ 220.830378][ T4634] ? kmem_cache_free+0x100/0x2d0 [ 220.835324][ T4634] ? putname+0xfe/0x150 [ 220.839491][ T4634] ? do_sys_openat2+0x68e/0x750 [ 220.844366][ T4634] ? __x64_sys_openat+0x136/0x160 [ 220.849403][ T4634] ? do_syscall_64+0x31/0x40 [ 220.853998][ T4634] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 220.860062][ T4634] ? _kstrtoull+0x3bb/0x4c0 [ 220.864554][ T4634] ? avc_has_perm+0x168/0x3d0 [ 220.869210][ T4634] ? memcpy+0x56/0x70 [ 220.873278][ T4634] ? avc_has_perm+0x27f/0x3d0 [ 220.877961][ T4634] ? avc_has_perm_noaudit+0x260/0x260 [ 220.883318][ T4634] tcp_setsockopt+0x22b/0x1d80 [ 220.888068][ T4634] ? tcp_sock_set_keepcnt+0xa0/0xa0 [ 220.893248][ T4634] ? __fget_files+0x2e1/0x340 [ 220.897909][ T4634] sock_common_setsockopt+0xa0/0xb0 [ 220.903093][ T4634] ? sock_common_recvmsg+0x1c0/0x1c0 [ 220.908367][ T4634] __sys_setsockopt+0x2fa/0x480 [ 220.913201][ T4634] ? __ia32_sys_recv+0xb0/0xb0 [ 220.917978][ T4634] ? ksys_write+0x1fa/0x260 [ 220.922500][ T4634] __x64_sys_setsockopt+0xbf/0xd0 [ 220.927522][ T4634] do_syscall_64+0x31/0x40 [ 220.932061][ T4634] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 220.937936][ T4634] RIP: 0033:0x7f71a1b240d9 [ 220.942339][ T4634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.961946][ T4634] RSP: 002b:00007f71a057d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 220.970449][ T4634] RAX: ffffffffffffffda RBX: 00007f71a1dabfa0 RCX: 00007f71a1b240d9 [ 220.978547][ T4634] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 220.986660][ T4634] RBP: 00007f71a057d090 R08: 0000000000000020 R09: 0000000000000000 [ 220.994644][ T4634] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.002794][ T4634] R13: 00007f71a1dac038 R14: 00007f71a1dabfa0 R15: 00007ffe35b00cb8 [ 221.148805][ T4643] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 221.158358][ T4643] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.449661][ T4645] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1354: bad orphan inode 11862016 [ 221.449727][ T24] audit: type=1400 audit(1786439837.954:918): avc: denied { read } for pid=4656 comm="syz.0.1359" name="control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 221.460732][ T4645] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 221.495012][ T4645] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.513980][ T24] audit: type=1400 audit(1786439837.994:919): avc: denied { open } for pid=4656 comm="syz.0.1359" path="/298/dev/mapper/control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 221.539095][ T24] audit: type=1400 audit(1786439837.994:920): avc: denied { ioctl } for pid=4656 comm="syz.0.1359" path="/298/dev/mapper/control" dev="devtmpfs" ino=260 ioctlcmd=0xfd0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 221.681296][ T4661] EXT4-fs (loop5): 1 truncate cleaned up [ 221.687146][ T4661] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro, [ 221.695648][ T24] audit: type=1400 audit(1786439838.204:921): avc: denied { mounton } for pid=4665 comm="syz.2.1362" path="/4/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/proc" dev="loop2" ino=1048863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 221.699997][ T4661] EXT4-fs error (device loop5): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz.5.1361: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 221.745640][ T4673] device bridge_slave_1 left promiscuous mode [ 221.766964][ T24] audit: type=1400 audit(1786439838.274:922): avc: denied { read write } for pid=4665 comm="syz.2.1362" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 221.770286][ T4661] EXT4-fs (loop5): Remounting filesystem read-only [ 221.790528][ T24] audit: type=1400 audit(1786439838.274:923): avc: denied { open } for pid=4665 comm="syz.2.1362" path="/4/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 221.797855][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.843638][ T24] audit: type=1400 audit(1786439838.274:924): avc: denied { ioctl } for pid=4665 comm="syz.2.1362" path="/4/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 221.896708][ T4673] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 221.923488][ T24] audit: type=1326 audit(1786439838.434:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4672 comm="syz.0.1365" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0fde45c0d9 code=0x0 [ 221.977643][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.001714][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 222.025427][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 222.053289][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 222.065061][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 222.072499][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 222.093414][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 222.298567][ T4700] FAULT_INJECTION: forcing a failure. [ 222.298567][ T4700] name failslab, interval 1, probability 0, space 0, times 0 [ 222.331904][ T4700] CPU: 0 PID: 4700 Comm: syz.0.1374 Tainted: G W syzkaller #0 [ 222.340694][ T4700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.350852][ T4700] Call Trace: [ 222.354150][ T4700] __dump_stack+0x21/0x24 [ 222.358488][ T4700] dump_stack_lvl+0x1a7/0x208 [ 222.363260][ T4700] ? thaw_kernel_threads+0x220/0x220 [ 222.368549][ T4700] ? show_regs_print_info+0x18/0x18 [ 222.373778][ T4700] ? _raw_spin_lock+0x94/0xf0 [ 222.378461][ T4700] ? _raw_spin_trylock_bh+0x150/0x150 [ 222.383838][ T4700] dump_stack+0x15/0x1c [ 222.387993][ T4700] should_fail+0x3ab/0x500 [ 222.392409][ T4700] ? __alloc_file+0x28/0x320 [ 222.397005][ T4700] __should_failslab+0xa4/0xe0 [ 222.401770][ T4700] should_failslab+0x9/0x20 [ 222.406290][ T4700] kmem_cache_alloc+0x3d/0x2d0 [ 222.411067][ T4700] __alloc_file+0x28/0x320 [ 222.415585][ T4700] alloc_empty_file+0x97/0x180 [ 222.420354][ T4700] alloc_file+0x59/0x580 [ 222.424627][ T4700] alloc_file_pseudo+0x180/0x200 [ 222.429582][ T4700] ? alloc_empty_file_noaccount+0x80/0x80 [ 222.435396][ T4700] ? _raw_spin_lock+0x94/0xf0 [ 222.440079][ T4700] ? _raw_spin_trylock_bh+0x150/0x150 [ 222.445458][ T4700] ? security_inode_alloc+0xc0/0x110 [ 222.450750][ T4700] sock_alloc_file+0xba/0x260 [ 222.455441][ T4700] do_accept+0x3bc/0x6a0 [ 222.459692][ T4700] ? __alloc_fd+0x570/0x570 [ 222.464199][ T4700] ? __ia32_sys_listen+0x290/0x290 [ 222.469318][ T4700] __sys_accept4+0x10d/0x180 [ 222.473909][ T4700] __x64_sys_accept4+0x9a/0xb0 [ 222.478771][ T4700] do_syscall_64+0x31/0x40 [ 222.483200][ T4700] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 222.489101][ T4700] RIP: 0033:0x7f0fde45c0d9 [ 222.493528][ T4700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.513243][ T4700] RSP: 002b:00007f0fdceb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 222.521674][ T4700] RAX: ffffffffffffffda RBX: 00007f0fde6e3fa0 RCX: 00007f0fde45c0d9 [ 222.529653][ T4700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 222.537715][ T4700] RBP: 00007f0fdceb5090 R08: 0000000000000000 R09: 0000000000000000 [ 222.545693][ T4700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.553669][ T4700] R13: 00007f0fde6e4038 R14: 00007f0fde6e3fa0 R15: 00007ffcc02fb298 [ 222.700541][ T4683] F2FS-fs (loop4): invalid crc value [ 222.714939][ T4683] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.738468][ T4683] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 222.746556][ T4683] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 222.775959][ T4717] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 223.034760][ T4737] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1385: missing EA_INODE flag [ 223.057669][ T4737] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1385: error while reading EA inode 2 err=-117 [ 223.078401][ T4743] EXT4-fs (loop4): Unrecognized mount option "fsuuid=7190b326-289d-3S8-0541-9024dÕb5" or missing value [ 223.086971][ T4737] EXT4-fs (loop6): 1 orphan inode deleted [ 223.096807][ T4737] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue [ 223.203392][ T4741] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 223.236384][ T4743] xt_hashlimit: size too large, truncated to 1048576 [ 223.390113][ T4746] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 223.645645][ T4753] EXT4-fs (loop2): Ignoring removed orlov option [ 223.712715][ T4753] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000008,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 223.971850][ T4768] EXT4-fs (loop2): Unrecognized mount option "fsuuid=7190b326-289d-3S8-0541-9024dÕb5" or missing value [ 224.119418][ T4768] xt_hashlimit: size too large, truncated to 1048576 [ 224.226932][ T4775] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 224.263179][ T25] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 224.322644][ T4778] xt_hashlimit: size too large, truncated to 1048576 [ 224.543760][ T4779] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 224.552801][ T4779] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.601233][ T4782] EXT4-fs (loop2): 1 truncate cleaned up [ 224.607009][ T4782] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro, [ 224.633582][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.653168][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.810876][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 224.831104][ T25] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 224.843483][ T24] audit: type=1400 audit(1786439841.294:926): avc: denied { search } for pid=4787 comm="syz.6.1397" name="/" dev="configfs" ino=13330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.934810][ T24] audit: type=1400 audit(1786439841.294:927): avc: denied { write } for pid=4787 comm="syz.6.1397" name="usb_gadget" dev="configfs" ino=13331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.967121][ T25] usb 5-1: Product: syz [ 224.972733][ T25] usb 5-1: Manufacturer: syz [ 225.013997][ T25] hub 5-1:4.0: USB hub found [ 225.068968][ T4797] exfat: Unknown parameter 'discard(fmask' [ 225.207180][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.214495][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.223743][ T4803] device bridge_slave_1 left promiscuous mode [ 225.229960][ T4803] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.237695][ T4803] device bridge_slave_0 left promiscuous mode [ 225.244060][ T4803] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.253204][ T25] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 225.274634][ T4805] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1402'. [ 225.579227][ T4808] xt_hashlimit: size too large, truncated to 1048576 [ 225.593259][ T25] usb 5-1: USB disconnect, device number 23 [ 225.684676][ T4809] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 225.705914][ T4809] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.931481][ T4814] overlayfs: failed to resolve './file0': -2 [ 226.004251][ T4818] xt_l2tp: wrong L2TP version: 0 [ 226.016990][ T4820] xt_hashlimit: size too large, truncated to 1048576 [ 226.164108][ T4823] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 226.173064][ T4823] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.253198][ T284] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 226.313232][ T487] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 226.405782][ T4830] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 226.413175][ T4830] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 226.422143][ T4830] F2FS-fs (loop4): invalid crc value [ 226.428367][ T4830] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 226.448645][ T4830] F2FS-fs (loop4): Start checkpoint disabled! [ 226.455964][ T4830] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 226.463093][ T4830] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 226.493228][ T284] usb 7-1: Using ep0 maxpacket: 16 [ 226.613270][ T284] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 226.673236][ T487] usb 6-1: config index 0 descriptor too short (expected 2075, got 27) [ 226.681777][ T487] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 226.689985][ T487] usb 6-1: config 0 has no interface number 0 [ 226.696193][ T487] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 226.706038][ T487] usb 6-1: config 0 interface 200 has no altsetting 0 [ 226.743230][ T635] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 226.773258][ T284] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 226.782427][ T284] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.790760][ T284] usb 7-1: Product: syz [ 226.794978][ T284] usb 7-1: Manufacturer: syz [ 226.799651][ T284] usb 7-1: SerialNumber: syz [ 226.804872][ T284] usb 7-1: config 0 descriptor?? [ 226.843781][ T284] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 226.851598][ T284] usb 7-1: Detected FT232RL [ 226.863256][ T487] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 226.872332][ T487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.880493][ T487] usb 6-1: Product: syz [ 226.884724][ T487] usb 6-1: Manufacturer: syz [ 226.889352][ T487] usb 6-1: SerialNumber: syz [ 226.895245][ T487] usb 6-1: config 0 descriptor?? [ 227.044235][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 227.044246][ T24] audit: type=1400 audit(1786439843.554:930): avc: denied { mounton } for pid=4815 comm="syz.6.1405" path="/80/file0" dev="ramfs" ino=49822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 227.072514][ T284] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 227.093227][ T284] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 227.113246][ T284] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 227.120285][ T284] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 227.129794][ T284] usb 7-1: USB disconnect, device number 19 [ 227.134511][ T4822] udc-core: couldn't find an available UDC or it's busy [ 227.138389][ T284] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 227.142771][ T4822] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 227.152756][ T284] ftdi_sio 7-1:0.0: device disconnected [ 227.165270][ T635] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.196196][ T4838] FAULT_INJECTION: forcing a failure. [ 227.196196][ T4838] name failslab, interval 1, probability 0, space 0, times 0 [ 227.208963][ T4838] CPU: 1 PID: 4838 Comm: syz.2.1413 Tainted: G W syzkaller #0 [ 227.217801][ T4838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.227844][ T4838] Call Trace: [ 227.231152][ T4838] __dump_stack+0x21/0x24 [ 227.235470][ T4838] dump_stack_lvl+0x1a7/0x208 [ 227.240220][ T4838] ? show_regs_print_info+0x18/0x18 [ 227.245404][ T4838] dump_stack+0x15/0x1c [ 227.249720][ T4838] should_fail+0x3ab/0x500 [ 227.254205][ T4838] ? __d_alloc+0x2d/0x690 [ 227.258529][ T4838] __should_failslab+0xa4/0xe0 [ 227.263375][ T4838] should_failslab+0x9/0x20 [ 227.267862][ T4838] kmem_cache_alloc+0x3d/0x2d0 [ 227.272629][ T4838] __d_alloc+0x2d/0x690 [ 227.276775][ T4838] d_alloc_pseudo+0x1d/0x70 [ 227.281263][ T4838] alloc_file_pseudo+0xe0/0x200 [ 227.286100][ T4838] ? alloc_empty_file_noaccount+0x80/0x80 [ 227.291810][ T4838] ? _raw_spin_lock+0x94/0xf0 [ 227.296478][ T4838] ? _raw_spin_trylock_bh+0x150/0x150 [ 227.301834][ T4838] ? security_inode_alloc+0xc0/0x110 [ 227.307112][ T4838] sock_alloc_file+0xba/0x260 [ 227.311863][ T4838] do_accept+0x3bc/0x6a0 [ 227.316089][ T4838] ? __alloc_fd+0x570/0x570 [ 227.320666][ T4838] ? __ia32_sys_listen+0x290/0x290 [ 227.325766][ T4838] __sys_accept4+0x10d/0x180 [ 227.330340][ T4838] __x64_sys_accept4+0x9a/0xb0 [ 227.335087][ T4838] do_syscall_64+0x31/0x40 [ 227.339580][ T4838] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 227.345480][ T4838] RIP: 0033:0x7f71a1b240d9 [ 227.349894][ T4838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.370226][ T4838] RSP: 002b:00007f71a057d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 227.378632][ T4838] RAX: ffffffffffffffda RBX: 00007f71a1dabfa0 RCX: 00007f71a1b240d9 [ 227.386595][ T4838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 227.394557][ T4838] RBP: 00007f71a057d090 R08: 0000000000000000 R09: 0000000000000000 [ 227.402518][ T4838] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 227.410603][ T4838] R13: 00007f71a1dac038 R14: 00007f71a1dabfa0 R15: 00007ffe35b00cb8 [ 227.434708][ T487] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input10 [ 227.445979][ T635] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 227.468151][ T487] usb 6-1: USB disconnect, device number 19 [ 227.613297][ T635] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 227.622507][ T635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.630576][ T635] usb 5-1: Product: syz [ 227.634864][ T635] usb 5-1: Manufacturer: syz [ 227.639497][ T635] usb 5-1: SerialNumber: syz [ 227.763216][ T357] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 227.863706][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.871288][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.878948][ T4848] device bridge_slave_0 entered promiscuous mode [ 227.886803][ T4830] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1410'. [ 227.896175][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.906538][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.914094][ T4848] device bridge_slave_1 entered promiscuous mode [ 227.951980][ T24] audit: type=1400 audit(1786439844.454:931): avc: denied { map } for pid=4858 comm="syz.5.1423" path="socket:[49933]" dev="sockfs" ino=49933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 227.959098][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.981988][ T4848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.989297][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.996450][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.017620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.025228][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.032648][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.051894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.060241][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.067308][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.074852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.083557][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.090620][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.102037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.111712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.126651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.139426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.147857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.156281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.165167][ T4848] device veth0_vlan entered promiscuous mode [ 228.177656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.187256][ T4848] device veth1_macvtap entered promiscuous mode [ 228.197622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.208088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.323218][ T357] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 228.332455][ T25] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 228.340355][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.348572][ T357] usb 3-1: Product: 郂䙄⻾ຢá¨á…€æ…žç¾‹ï˜“á«ãŒè˜ªí‡­ä–¨ìš“빾쫢ࣴ㣗㮔팔篖鴅⼳캲跅늈漺崤ஞⓔ줆ꇄ῾è굅혺봊禱࿆ƛᾖî•ä¹³çˆ€&픾茬䋱㘳ڔá¬è­á–šá£¤â°›æ¦”è·ëºžï™¡ä†‚㦰鯻ç–࠙襂腷ì˜ì‘»í¥è­žæ²¶ìºîš›æ®žá¦¶ê•—夎໌ì盫㔣≒䎘⴦݈㇆瀔凲∟ᅫ䃫餙鼯 [ 228.378884][ T357] usb 3-1: Manufacturer: Ц [ 228.383618][ T357] usb 3-1: SerialNumber: Ð’ [ 228.389706][ T2058] device veth1_macvtap left promiscuous mode [ 228.399768][ T2058] device veth0_vlan left promiscuous mode [ 228.485812][ T3030] attempt to access beyond end of device [ 228.485812][ T3030] loop4: rw=524288, want=45072, limit=40427 [ 228.503352][ T3030] attempt to access beyond end of device [ 228.503352][ T3030] loop4: rw=0, want=45072, limit=40427 [ 228.529151][ T9] attempt to access beyond end of device [ 228.529151][ T9] loop4: rw=2049, want=45112, limit=40427 [ 228.593284][ T635] usb 5-1: unit 4 not found! [ 228.597949][ T635] usb 5-1: unit 0 not found! [ 228.623163][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 228.649497][ T635] usb 5-1: USB disconnect, device number 24 [ 228.763501][ T357] usb 3-1: 1:1 : bogus bTerminalLink 116 [ 228.769246][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.780830][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.790812][ T357] usb 3-1: unit 6 not found! [ 228.795705][ T357] usb 3-1: unit 100 not found! [ 228.800718][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.814225][ T25] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.823291][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.836079][ T25] usb 6-1: config 0 descriptor?? [ 228.851856][ T357] usb 3-1: USB disconnect, device number 3 [ 228.868993][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.876433][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.883855][ T4874] device bridge_slave_0 entered promiscuous mode [ 228.892666][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.900004][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.907547][ T4874] device bridge_slave_1 entered promiscuous mode [ 228.946391][ T4874] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.953478][ T4874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.960872][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.967916][ T4874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.987743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.995857][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.004121][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.015119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.023486][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.030687][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.039827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.048218][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.055314][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.076369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.084951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.101477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.118841][ T4874] device veth0_vlan entered promiscuous mode [ 229.129356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.137689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.145625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.159924][ T4874] device veth1_macvtap entered promiscuous mode [ 229.168298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.169770][ T4861] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 229.184509][ T4861] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 229.192630][ T4861] System zones: 0-1, 15-15, 18-18, 34-34 [ 229.199165][ T4861] EXT4-fs (loop5): orphan cleanup on readonly fs [ 229.205676][ T4861] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 229.207256][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.215164][ T4861] EXT4-fs warning (device loop5): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 229.215180][ T4861] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 229.245202][ T4861] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1424: bad orphan inode 16 [ 229.247081][ T4882] EXT4-fs (loop9): 1 truncate cleaned up [ 229.255827][ T4861] ext4_test_bit(bit=15, block=18) = 1 [ 229.265438][ T4882] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,,errors=continue [ 229.269559][ T4861] is_bad_inode(inode)=0 [ 229.285554][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.287578][ T4861] NEXT_ORPHAN(inode)=0 [ 229.298141][ T4861] max_ino=32 [ 229.302861][ T4861] i_nlink=2 [ 229.310676][ T4861] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue [ 229.400257][ T4896] binder: 4895:4896 ioctl 89f0 200000000280 returned -22 [ 229.415387][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 229.424819][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.439818][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 229.449976][ T4892] xt_hashlimit: size too large, truncated to 1048576 [ 229.452546][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.466409][ T4898] xt_TPROXY: Can be used only with -p tcp or -p udp [ 229.466971][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.482365][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.491729][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.501085][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.523964][ T2058] device veth1_macvtap left promiscuous mode [ 229.534718][ T2058] device veth0_vlan left promiscuous mode [ 229.655232][ T25] microsoft 0003:045E:07DA.0009: item 0 4 0 11 parsing failed [ 229.673074][ T25] microsoft 0003:045E:07DA.0009: parse failed [ 229.700729][ T4899] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 229.710167][ T25] microsoft: probe of 0003:045E:07DA.0009 failed with error -22 [ 229.728931][ T4899] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.861538][ T437] usb 6-1: USB disconnect, device number 20 [ 229.920464][ T24] audit: type=1400 audit(1786439846.424:932): avc: denied { mac_admin } for pid=4905 comm="syz.9.1437" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.920822][ T4906] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 229.950949][ T24] audit: type=1400 audit(1786439846.454:933): avc: denied { relabelto } for pid=4905 comm="syz.9.1437" name="3" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 229.978215][ T24] audit: type=1400 audit(1786439846.454:934): avc: denied { associate } for pid=4905 comm="syz.9.1437" name="3" dev="tmpfs" ino=30 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 229.983870][ T284] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 230.004883][ T24] audit: type=1400 audit(1786439846.454:935): avc: denied { write } for pid=4848 comm="syz-executor" name="3" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 230.044164][ T24] audit: type=1400 audit(1786439846.454:936): avc: denied { remove_name } for pid=4848 comm="syz-executor" name="binderfs" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 230.085515][ T24] audit: type=1400 audit(1786439846.454:937): avc: denied { rmdir } for pid=4848 comm="syz-executor" name="3" dev="tmpfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 230.093715][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 230.111791][ T4913] xt_hashlimit: size too large, truncated to 1048576 [ 230.121495][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.135650][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 230.164117][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.175259][ T4917] syz.9.1440 (4917): /proc/4916/oom_adj is deprecated, please use /proc/4916/oom_score_adj instead. [ 230.188644][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.197450][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.213935][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.222174][ T2058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.230920][ T4914] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 230.240303][ T4914] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.391168][ T4924] netlink: 'syz.2.1442': attribute type 4 has an invalid length. [ 230.409175][ T4926] FAULT_INJECTION: forcing a failure. [ 230.409175][ T4926] name failslab, interval 1, probability 0, space 0, times 0 [ 230.422310][ T4926] CPU: 1 PID: 4926 Comm: syz.9.1443 Tainted: G W syzkaller #0 [ 230.431062][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.441110][ T4926] Call Trace: [ 230.444489][ T4926] __dump_stack+0x21/0x24 [ 230.448812][ T4926] dump_stack_lvl+0x1a7/0x208 [ 230.453559][ T4926] ? show_regs_print_info+0x18/0x18 [ 230.458835][ T4926] ? unwind_get_return_address+0x4d/0x90 [ 230.464458][ T4926] dump_stack+0x15/0x1c [ 230.468791][ T4926] should_fail+0x3ab/0x500 [ 230.473276][ T4926] ? __get_vm_area_node+0x113/0x450 [ 230.478568][ T4926] __should_failslab+0xa4/0xe0 [ 230.483389][ T4926] should_failslab+0x9/0x20 [ 230.488061][ T4926] kmem_cache_alloc_trace+0x3a/0x2e0 [ 230.493340][ T4926] __get_vm_area_node+0x113/0x450 [ 230.499071][ T4926] ? selinux_capable+0x2b6/0x3b0 [ 230.504005][ T4926] __vmalloc_node_range+0xe7/0x7a0 [ 230.509150][ T4926] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 230.514799][ T4926] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 230.520352][ T4926] __vmalloc+0x79/0x90 [ 230.524430][ T4926] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 230.529963][ T4926] bpf_prog_alloc_no_stats+0x3a/0x240 [ 230.536353][ T4926] bpf_prog_alloc+0x21/0x1f0 [ 230.540979][ T4926] bpf_prog_load+0x7ca/0x14e0 [ 230.545696][ T4926] ? map_freeze+0x330/0x330 [ 230.550268][ T4926] ? vfs_write+0xae4/0xd70 [ 230.554721][ T4926] ? selinux_bpf+0xc7/0xf0 [ 230.559147][ T4926] ? security_bpf+0x82/0xa0 [ 230.564180][ T4926] __se_sys_bpf+0x49a/0x740 [ 230.568689][ T4926] ? __x64_sys_bpf+0x90/0x90 [ 230.573375][ T4926] ? debug_smp_processor_id+0x17/0x20 [ 230.578735][ T4926] __x64_sys_bpf+0x7b/0x90 [ 230.583138][ T4926] do_syscall_64+0x31/0x40 [ 230.587599][ T4926] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.593475][ T4926] RIP: 0033:0x7f8e7693c0d9 [ 230.597880][ T4926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.617474][ T4926] RSP: 002b:00007f8e75395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.625876][ T4926] RAX: ffffffffffffffda RBX: 00007f8e76bc3fa0 RCX: 00007f8e7693c0d9 [ 230.633836][ T4926] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 230.641821][ T4926] RBP: 00007f8e75395090 R08: 0000000000000000 R09: 0000000000000000 [ 230.649785][ T4926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.658076][ T4926] R13: 00007f8e76bc4038 R14: 00007f8e76bc3fa0 R15: 00007ffff4ddcc68 [ 230.666775][ T4926] syz.9.1443: vmalloc: allocation failure: 4096 bytes, mode:0x100dc0(GFP_USER|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0 [ 230.681241][ T4926] CPU: 1 PID: 4926 Comm: syz.9.1443 Tainted: G W syzkaller #0 [ 230.681673][ T284] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.690006][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.690011][ T4926] Call Trace: [ 230.690033][ T4926] __dump_stack+0x21/0x24 [ 230.690050][ T4926] dump_stack_lvl+0x1a7/0x208 [ 230.719992][ T4926] ? show_regs_print_info+0x18/0x18 [ 230.725203][ T4926] dump_stack+0x15/0x1c [ 230.729372][ T4926] warn_alloc+0x1dc/0x200 [ 230.733711][ T4926] ? zone_watermark_ok_safe+0x290/0x290 [ 230.739267][ T4926] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 230.743617][ T4931] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.1446: missing EA_INODE flag [ 230.745253][ T4926] ? __get_vm_area_node+0x345/0x450 [ 230.756975][ T4931] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1446: error while reading EA inode 2 err=-117 [ 230.761914][ T4926] ? selinux_capable+0x2b6/0x3b0 [ 230.774736][ T4931] EXT4-fs (loop5): 1 orphan inode deleted [ 230.778976][ T4926] __vmalloc_node_range+0x272/0x7a0 [ 230.785535][ T4931] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue [ 230.789870][ T4926] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 230.805799][ T4926] __vmalloc+0x79/0x90 [ 230.809863][ T4926] ? bpf_prog_alloc_no_stats+0x3a/0x240 [ 230.815413][ T4926] bpf_prog_alloc_no_stats+0x3a/0x240 [ 230.820800][ T4926] bpf_prog_alloc+0x21/0x1f0 [ 230.825407][ T4926] bpf_prog_load+0x7ca/0x14e0 [ 230.830100][ T4926] ? map_freeze+0x330/0x330 [ 230.833400][ T635] Bluetooth: hci0: command 0x1003 tx timeout [ 230.834606][ T4926] ? vfs_write+0xae4/0xd70 [ 230.834618][ T4926] ? selinux_bpf+0xc7/0xf0 [ 230.834627][ T4926] ? security_bpf+0x82/0xa0 [ 230.834636][ T4926] __se_sys_bpf+0x49a/0x740 [ 230.834644][ T4926] ? __x64_sys_bpf+0x90/0x90 [ 230.834656][ T4926] ? debug_smp_processor_id+0x17/0x20 [ 230.834663][ T4926] __x64_sys_bpf+0x7b/0x90 [ 230.834670][ T4926] do_syscall_64+0x31/0x40 [ 230.834681][ T4926] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 230.834689][ T4926] RIP: 0033:0x7f8e7693c0d9 [ 230.834707][ T4926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.840723][ T40] Bluetooth: hci0: sending frame failed (-49) [ 230.845091][ T4926] RSP: 002b:00007f8e75395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.845105][ T4926] RAX: ffffffffffffffda RBX: 00007f8e76bc3fa0 RCX: 00007f8e7693c0d9 [ 230.845111][ T4926] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 230.845116][ T4926] RBP: 00007f8e75395090 R08: 0000000000000000 R09: 0000000000000000 [ 230.845121][ T4926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.845128][ T4926] R13: 00007f8e76bc4038 R14: 00007f8e76bc3fa0 R15: 00007ffff4ddcc68 [ 230.856134][ T4926] Mem-Info: [ 230.859289][ T284] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 230.864099][ T4926] active_anon:95 inactive_anon:25914 isolated_anon:0 [ 230.864099][ T4926] active_file:17843 inactive_file:8562 isolated_file:0 [ 230.864099][ T4926] unevictable:0 dirty:265 writeback:0 [ 230.864099][ T4926] slab_reclaimable:8326 slab_unreclaimable:75667 [ 230.864099][ T4926] mapped:31327 shmem:16741 pagetables:773 bounce:0 [ 230.864099][ T4926] free:1534059 free_pcp:1093 free_cma:0 [ 231.014505][ T4926] Node 0 active_anon:368kB inactive_anon:103660kB active_file:71388kB inactive_file:34272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125308kB dirty:1084kB writeback:0kB shmem:66964kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:5120kB all_unreclaimable? no [ 231.044068][ T4926] DMA32 free:2983636kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986548kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2912kB local_pcp:1444kB free_cma:0kB [ 231.072952][ T4926] lowmem_reserve[]: 0 3941 3941 [ 231.081690][ T4926] Normal free:3153500kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:304kB inactive_anon:103688kB active_file:71364kB inactive_file:34272kB unevictable:0kB writepending:1112kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:3172kB bounce:0kB free_pcp:1664kB local_pcp:872kB free_cma:0kB [ 231.098617][ T4935] EXT4-fs (loop2): 1 truncate cleaned up [ 231.113528][ T4926] lowmem_reserve[]: 0 0 0 [ 231.118157][ T284] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 231.122707][ T4926] DMA32: 7*4kB (UM) 3*8kB (M) 6*16kB (M) 8*32kB (UM) 9*64kB (UM) 6*128kB (UM) 6*256kB (UM) 5*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2983636kB [ 231.132009][ T284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.148263][ T4935] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,,errors=continue [ 231.156061][ T284] usb 2-1: Product: syz [ 231.156070][ T284] usb 2-1: Manufacturer: syz [ 231.156077][ T284] usb 2-1: SerialNumber: syz [ 231.160184][ T4926] Normal: 785*4kB (UME) 571*8kB (UME) 414*16kB (UME) 416*32kB (UME) 357*64kB (UME) 212*128kB (UME) 58*256kB (UME) 23*512kB (UME) 11*1024kB (UME) 3*2048kB (M) 740*4096kB (M) = 3152700kB [ 231.198673][ T4926] 43265 total pagecache pages [ 231.203624][ T4926] 107 pages in swap cache [ 231.207962][ T4926] Swap cache stats: add 19888, delete 19781, find 9262/9272 [ 231.215608][ T4926] Free swap = 123796kB [ 231.219893][ T4926] Total swap = 124996kB [ 231.224241][ T4926] 2097051 pages RAM [ 231.228161][ T4926] 0 pages HighMem/MovableOnly [ 231.232947][ T4926] 341386 pages reserved [ 231.235933][ T24] audit: type=1400 audit(1786439847.744:938): avc: denied { listen } for pid=4927 comm="syz.2.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.237508][ T4926] 0 pages cma reserved [ 231.286939][ T4935] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1445: bg 0: block 465: padding at end of block bitmap is not set [ 231.301443][ T4935] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 231.310374][ T4935] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1445: invalid indirect mapped block 234881024 (level 0) [ 231.340555][ T4942] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.1448: iget: bad i_size value: 38620345925642 [ 231.353525][ T4942] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1448: couldn't read orphan inode 15 (err -117) [ 231.365924][ T4942] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 231.399739][ T4901] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1436'. [ 231.488204][ T4955] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1448: bg 0: block 5: invalid block bitmap [ 231.501223][ T4955] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 231.514113][ T4955] EXT4-fs (loop9): This should not happen!! Data will be lost [ 231.514113][ T4955] [ 231.523829][ T4955] EXT4-fs (loop9): Total free blocks count 0 [ 231.529971][ T4955] EXT4-fs (loop9): Free/Dirty block details [ 231.535944][ T4955] EXT4-fs (loop9): free_blocks=0 [ 231.541036][ T4955] EXT4-fs (loop9): dirty_blocks=5084 [ 231.546378][ T4955] EXT4-fs (loop9): Block reservation details [ 231.552821][ T4955] EXT4-fs (loop9): i_reserved_data_blocks=5084 [ 231.572696][ T2058] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 231.585501][ T2058] EXT4-fs (loop9): This should not happen!! Data will be lost [ 231.585501][ T2058] [ 231.607213][ T4948] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 231.623235][ T4948] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 231.635499][ T4948] F2FS-fs (loop2): invalid crc value [ 231.641015][ T4948] F2FS-fs (loop2): invalid crc value [ 231.646506][ T4948] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 231.735154][ T4958] erofs: (device loop9): mounted with root inode @ nid 36. [ 231.746083][ T4958] erofs: (device loop9): find_target_block_classic: corrupted dir block 67108936 @ nid 36 [ 231.763037][ T4958] erofs: (device loop9): find_target_block_classic: corrupted dir block 67108936 @ nid 36 [ 231.889838][ T4963] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 231.972270][ T4966] overlayfs: failed to resolve './file0': -2 [ 232.023532][ T4968] exfat: Deprecated parameter 'utf8' [ 232.029042][ T4968] exfat: Deprecated parameter 'utf8' [ 232.043292][ T284] usb 2-1: unit 4 not found! [ 232.048001][ T284] usb 2-1: unit 0 not found! [ 232.107868][ T284] usb 2-1: USB disconnect, device number 6 [ 232.131336][ T4961] F2FS-fs (loop9): Invalid segment/section count (458783, 24 x 150994945) [ 232.141099][ T4968] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 232.153250][ T4961] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 232.153742][ T4961] F2FS-fs (loop9): invalid crc value [ 232.175781][ T4968] incfs: ino conflict with backing FS 1 [ 232.185338][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 232.185350][ T24] audit: type=1400 audit(1786439849.694:944): avc: denied { rename } for pid=4967 comm="syz.5.1458" name="file0" dev="incremental-fs" ino=1048882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.217322][ T4961] F2FS-fs (loop9): Found nat_bits in checkpoint [ 232.252878][ T4961] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 232.260199][ T4961] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 232.276210][ T24] audit: type=1400 audit(1786439849.784:945): avc: denied { setattr } for pid=4967 comm="syz.5.1458" name="TIPC" dev="sockfs" ino=50808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.301730][ T4961] 8021q: VLANs not supported on lo [ 232.382637][ T4979] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 232.398413][ T4979] F2FS-fs (loop2): invalid crc value [ 232.405013][ T4979] F2FS-fs (loop2): invalid crc value [ 232.410385][ T4979] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 232.523172][ T284] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.708679][ T4991] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.1463: iget: bad i_size value: 38620345925642 [ 232.724813][ T4991] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1463: couldn't read orphan inode 15 (err -117) [ 232.737915][ T4991] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue [ 232.773139][ T284] usb 2-1: Using ep0 maxpacket: 32 [ 232.857994][ T4994] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1463: bg 0: block 5: invalid block bitmap [ 232.874692][ T4994] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 232.887380][ T4994] EXT4-fs (loop9): This should not happen!! Data will be lost [ 232.887380][ T4994] [ 232.906973][ T4994] EXT4-fs (loop9): Total free blocks count 0 [ 232.913282][ T437] Bluetooth: hci0: command 0x1001 tx timeout [ 232.919313][ T40] Bluetooth: hci0: sending frame failed (-49) [ 232.943165][ T4994] EXT4-fs (loop9): Free/Dirty block details [ 232.963437][ T4994] EXT4-fs (loop9): free_blocks=0 [ 232.968586][ T4994] EXT4-fs (loop9): dirty_blocks=5284 [ 232.973239][ T284] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 232.983446][ T4994] EXT4-fs (loop9): Block reservation details [ 232.993614][ T284] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 233.003729][ T4994] EXT4-fs (loop9): i_reserved_data_blocks=5284 [ 233.024467][ T49] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 233.037275][ T49] EXT4-fs (loop9): This should not happen!! Data will be lost [ 233.037275][ T49] [ 233.163308][ T284] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.172371][ T284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.193169][ T284] usb 2-1: Product: syz [ 233.197359][ T284] usb 2-1: Manufacturer: syz [ 233.212218][ T284] usb 2-1: SerialNumber: syz [ 233.235444][ T4998] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.242672][ T4998] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.250639][ T4998] device bridge_slave_0 entered promiscuous mode [ 233.258113][ T4998] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.265513][ T4998] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.273051][ T4998] device bridge_slave_1 entered promiscuous mode [ 233.329099][ T4998] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.336193][ T4998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.343775][ T4998] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.350904][ T4998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.373573][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.381637][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.390044][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.400711][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.409019][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.416069][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.423228][ T635] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 233.431336][ T2058] device veth1_macvtap left promiscuous mode [ 233.447619][ T2058] device veth0_vlan left promiscuous mode [ 233.464256][ T4979] F2FS-fs (loop2): Found nat_bits in checkpoint [ 233.516192][ T4979] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 233.545628][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.554034][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.561079][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.568617][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.576797][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.588488][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.597039][ T284] cdc_ncm 2-1:1.0: bind() failure [ 233.603066][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.603954][ T284] cdc_ncm 2-1:1.1: bind() failure [ 233.611681][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.624150][ T284] usb 2-1: USB disconnect, device number 7 [ 233.630346][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.639126][ T4998] device veth0_vlan entered promiscuous mode [ 233.650924][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.660125][ T4998] device veth1_macvtap entered promiscuous mode [ 233.670433][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.680864][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.727476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.733751][ T5009] xt_hashlimit: size too large, truncated to 1048576 [ 233.746310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.770283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.781667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.790179][ T635] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.802340][ T635] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.903836][ T5010] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 233.923257][ T635] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 233.933972][ T5010] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.942607][ T635] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 233.958755][ T635] usb 10-1: Product: syz [ 233.963096][ T635] usb 10-1: Manufacturer: syz [ 234.006712][ T635] hub 10-1:4.0: USB hub found [ 234.090621][ T5015] EXT4-fs (loop7): Test dummy encryption mode enabled [ 234.116878][ T5015] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1468: inode has both inline data and extents flags [ 234.131987][ T5015] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1468: couldn't read orphan inode 15 (err -117) [ 234.161949][ T5015] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 234.285029][ T5042] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1475: iget: bad i_size value: 38620345925642 [ 234.298322][ T5042] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1475: couldn't read orphan inode 15 (err -117) [ 234.303317][ T635] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 234.319076][ T5042] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 234.434494][ T5042] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1475: bg 0: block 5: invalid block bitmap [ 234.463387][ T5042] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 234.485641][ T5042] EXT4-fs (loop2): This should not happen!! Data will be lost [ 234.485641][ T5042] [ 234.495486][ T477] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 234.513740][ T5042] EXT4-fs (loop2): Total free blocks count 0 [ 234.519757][ T5042] EXT4-fs (loop2): Free/Dirty block details [ 234.533055][ T5042] EXT4-fs (loop2): free_blocks=0 [ 234.539068][ T5042] EXT4-fs (loop2): dirty_blocks=4676 [ 234.544622][ T5042] EXT4-fs (loop2): Block reservation details [ 234.550748][ T5042] EXT4-fs (loop2): i_reserved_data_blocks=4676 [ 234.571011][ T2058] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 234.583921][ T2058] EXT4-fs (loop2): This should not happen!! Data will be lost [ 234.583921][ T2058] [ 234.633295][ T635] usb 10-1: USB disconnect, device number 8 [ 234.873397][ T477] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 234.881883][ T477] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 234.892670][ T477] usb 2-1: config 220 has no interface number 2 [ 234.899020][ T477] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 234.912222][ T477] usb 2-1: config 220 interface 0 has no altsetting 0 [ 234.919561][ T477] usb 2-1: config 220 interface 76 has no altsetting 0 [ 234.926690][ T477] usb 2-1: config 220 interface 1 has no altsetting 0 [ 235.003466][ T635] Bluetooth: hci0: command 0x1009 tx timeout [ 235.093252][ T477] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 235.112619][ T477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.121097][ T477] usb 2-1: Product: syz [ 235.125690][ T477] usb 2-1: Manufacturer: syz [ 235.161691][ T477] usb 2-1: SerialNumber: syz [ 235.483183][ T2309] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 235.523532][ T477] usb 2-1: selecting invalid altsetting 0 [ 235.529487][ T477] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 235.541712][ T477] uvcvideo: No valid video chain found. [ 235.558611][ T5068] FAULT_INJECTION: forcing a failure. [ 235.558611][ T5068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.571950][ T5068] CPU: 1 PID: 5068 Comm: syz.2.1484 Tainted: G W syzkaller #0 [ 235.580702][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.590776][ T5068] Call Trace: [ 235.594066][ T5068] __dump_stack+0x21/0x24 [ 235.598381][ T5068] dump_stack_lvl+0x1a7/0x208 [ 235.603064][ T5068] ? show_regs_print_info+0x18/0x18 [ 235.608259][ T5068] dump_stack+0x15/0x1c [ 235.612402][ T5068] should_fail+0x3ab/0x500 [ 235.616813][ T5068] should_fail_usercopy+0x1a/0x20 [ 235.622036][ T5068] _copy_from_iter+0x1cf/0xa10 [ 235.626888][ T5068] ? __check_object_size+0x2dd/0x3b0 [ 235.632246][ T5068] file_tty_write+0x4d8/0x8b0 [ 235.636963][ T5068] ? n_tty_read+0x1a40/0x1a40 [ 235.641648][ T5068] tty_write+0x3c/0x50 [ 235.645703][ T5068] vfs_write+0x770/0xd70 [ 235.649963][ T5068] ? kernel_write+0x3c0/0x3c0 [ 235.654655][ T5068] ? __fget_files+0x2e1/0x340 [ 235.659317][ T5068] ? __fdget_pos+0x1f7/0x380 [ 235.663917][ T5068] ? ksys_write+0x70/0x260 [ 235.668323][ T5068] ksys_write+0x14a/0x260 [ 235.672633][ T5068] ? __ia32_sys_read+0x90/0x90 [ 235.677387][ T5068] ? debug_smp_processor_id+0x17/0x20 [ 235.682743][ T5068] __x64_sys_write+0x7b/0x90 [ 235.687424][ T5068] do_syscall_64+0x31/0x40 [ 235.691993][ T5068] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 235.697929][ T5068] RIP: 0033:0x7f71a1b240d9 [ 235.702334][ T5068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.721931][ T5068] RSP: 002b:00007f71a057d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.730331][ T5068] RAX: ffffffffffffffda RBX: 00007f71a1dabfa0 RCX: 00007f71a1b240d9 [ 235.738404][ T5068] RDX: 0000000000001006 RSI: 0000200000000640 RDI: 0000000000000004 [ 235.746460][ T5068] RBP: 00007f71a057d090 R08: 0000000000000000 R09: 0000000000000000 [ 235.754453][ T5068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.762418][ T5068] R13: 00007f71a1dac038 R14: 00007f71a1dabfa0 R15: 00007ffe35b00cb8 [ 235.772677][ T477] usb 2-1: USB disconnect, device number 8 [ 235.933214][ T2309] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.944401][ T2309] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.077677][ T5079] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 236.099912][ T5079] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,journal_dev=0x0000000000000f31,journal_dev=0x0000000000000623,nodelalloc,minixdf,sb=0x0000000000000007,,errors=continue [ 236.123403][ T2309] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 236.131994][ T5079] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 236.138310][ T2309] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 236.155676][ T2309] usb 10-1: Product: syz [ 236.159939][ T2309] usb 10-1: Manufacturer: syz [ 236.204044][ T2309] hub 10-1:4.0: USB hub found [ 236.363211][ T284] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 236.503326][ T2309] hub 10-1:4.0: config failed, hub has too many ports! (err -19) [ 236.603206][ T284] usb 2-1: Using ep0 maxpacket: 32 [ 236.667975][ T5088] EXT4-fs (loop2): Test dummy encryption mode enabled [ 236.675703][ T4998] EXT4-fs error (device loop7): ext4_ext_check_inode:500: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2305, max 4(4), depth 0(0) [ 236.694422][ T5088] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1492: inode has both inline data and extents flags [ 236.707860][ T4998] EXT4-fs error (device loop7): ext4_ext_check_inode:500: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2305, max 4(4), depth 0(0) [ 236.723309][ T284] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 236.726103][ T5088] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1492: couldn't read orphan inode 15 (err -117) [ 236.738339][ T284] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 236.750911][ T5088] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 236.754966][ T284] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 236.775440][ T284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.785506][ T284] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 236.795390][ T284] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 236.808529][ T284] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 236.817909][ T284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.826811][ T284] usb 2-1: config 0 descriptor?? [ 236.953273][ T437] usb 10-1: USB disconnect, device number 9 [ 236.989484][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.996671][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.004042][ T5093] device bridge_slave_0 entered promiscuous mode [ 237.012771][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.019981][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.027678][ T5093] device bridge_slave_1 entered promiscuous mode [ 237.063754][ T5086] udc-core: couldn't find an available UDC or it's busy [ 237.065793][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.070729][ T5086] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 237.084523][ T284] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 237.085266][ T5093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.103137][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.107079][ T284] usb 2-1: USB disconnect, device number 9 [ 237.110204][ T5093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.125782][ T284] usblp0: removed [ 237.134820][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.142509][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.149921][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.160680][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.168984][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.176069][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.186463][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.194993][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.202017][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.213029][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 237.224324][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.238763][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.261285][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.269916][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.278005][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.286631][ T5093] device veth0_vlan entered promiscuous mode [ 237.300414][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.309847][ T5093] device veth1_macvtap entered promiscuous mode [ 237.319479][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 237.336753][ T5100] EXT4-fs (loop9): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue [ 237.360859][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.374077][ T2058] device bridge_slave_1 left promiscuous mode [ 237.380236][ T2058] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.410034][ T2058] device bridge_slave_0 left promiscuous mode [ 237.418860][ T2058] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.428031][ T2058] device veth1_macvtap left promiscuous mode [ 237.432096][ T5107] EXT4-fs (loop3): 1 truncate cleaned up [ 237.440116][ T2058] device veth0_vlan left promiscuous mode [ 237.440145][ T5107] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro, [ 237.553941][ T24] audit: type=1400 audit(1786439855.064:946): avc: denied { mounton } for pid=5113 comm="syz.2.1499" path="/38/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 237.557435][ T5114] FAT-fs (loop2): bogus sectors per cluster 0 [ 237.582265][ T5114] FAT-fs (loop2): Can't find a valid FAT filesystem [ 237.724452][ T5118] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1500: iget: bad i_size value: 38620345925642 [ 237.733675][ T5121] overlayfs: failed to resolve './file0': -2 [ 237.738131][ T5118] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1500: couldn't read orphan inode 15 (err -117) [ 237.755917][ T357] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 237.764821][ T5118] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 237.854254][ T5118] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1500: bg 0: block 5: invalid block bitmap [ 237.867017][ T5118] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 237.879666][ T5118] EXT4-fs (loop3): This should not happen!! Data will be lost [ 237.879666][ T5118] [ 237.889649][ T5118] EXT4-fs (loop3): Total free blocks count 0 [ 237.895755][ T5118] EXT4-fs (loop3): Free/Dirty block details [ 237.901712][ T5118] EXT4-fs (loop3): free_blocks=0 [ 237.906797][ T5118] EXT4-fs (loop3): dirty_blocks=5060 [ 237.912096][ T5118] EXT4-fs (loop3): Block reservation details [ 237.918154][ T5118] EXT4-fs (loop3): i_reserved_data_blocks=5060 [ 237.934766][ T5128] mmap: syz.2.1504 (5128) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 237.936227][ T49] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 237.959983][ T49] EXT4-fs (loop3): This should not happen!! Data will be lost [ 237.959983][ T49] [ 238.096210][ T5134] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 238.106261][ T5134] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,journal_dev=0x0000000000000f31,journal_dev=0x0000000000000623,nodelalloc,minixdf,sb=0x0000000000000007,,errors=continue [ 238.123229][ T357] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 238.136217][ T357] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 238.146661][ T357] usb 10-1: config 220 has no interface number 2 [ 238.148318][ T5134] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 238.153036][ T357] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 238.180569][ T357] usb 10-1: config 220 interface 0 has no altsetting 0 [ 238.187506][ T357] usb 10-1: config 220 interface 76 has no altsetting 0 [ 238.194502][ T357] usb 10-1: config 220 interface 1 has no altsetting 0 [ 238.326072][ T5142] ------------[ cut here ]------------ [ 238.331608][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 238.341861][ T5142] Modules linked in: [ 238.345776][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G W syzkaller #0 [ 238.353751][ T357] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 238.354545][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.363933][ T357] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.373734][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 238.373746][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 238.373753][ T5142] RSP: 0018:ffffc90001167800 EFLAGS: 00010002 [ 238.373766][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 238.373771][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 238.373779][ T5142] RBP: ffffc90001167978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 238.373786][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000061 [ 238.373794][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 238.373802][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 238.373808][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.373813][ T5142] CR2: 00007fdb02d81ff8 CR3: 000000010cf94000 CR4: 00000000003506b0 [ 238.373823][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.373828][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.373832][ T5142] Call Trace: [ 238.373847][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 238.373860][ T5142] ? __kasan_check_write+0x14/0x20 [ 238.374041][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 238.374060][ T5142] rb_buffer_peek+0x60/0x7a0 [ 238.517005][ T5142] ring_buffer_peek+0x183/0x360 [ 238.521929][ T5142] ? ring_buffer_iter_empty+0x370/0x370 [ 238.527459][ T5142] ? find_next_bit+0x80/0x100 [ 238.532122][ T5142] __find_next_entry+0x34d/0x6b0 [ 238.537046][ T5142] ? rb_advance_reader+0x39c/0x6b0 [ 238.542155][ T5142] ? trace_find_next_entry+0x370/0x370 [ 238.547709][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 238.553244][ T5142] ? print_trace_line+0x385/0x690 [ 238.558284][ T5142] tracing_read_pipe+0x3b8/0xab0 [ 238.563219][ T5142] ? s_show+0x320/0x320 [ 238.567362][ T5142] vfs_read+0x209/0xa50 [ 238.571503][ T5142] ? kernel_read+0x70/0x70 [ 238.575996][ T5142] ? __kasan_check_write+0x14/0x20 [ 238.581094][ T5142] ? mutex_lock+0x92/0xf0 [ 238.585416][ T5142] ? mutex_trylock+0xb0/0xb0 [ 238.590111][ T5142] ? __fget_files+0x2e1/0x340 [ 238.594891][ T5142] ? __fdget_pos+0x2d2/0x380 [ 238.599488][ T5142] ? ksys_read+0x70/0x260 [ 238.603799][ T5142] ksys_read+0x14a/0x260 [ 238.608027][ T5142] ? vfs_write+0xd70/0xd70 [ 238.612658][ T5142] ? __kasan_check_read+0x11/0x20 [ 238.617707][ T5142] __x64_sys_read+0x7b/0x90 [ 238.622201][ T5142] do_syscall_64+0x31/0x40 [ 238.626600][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 238.632478][ T5142] RIP: 0033:0x7fdb043290d9 [ 238.636903][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.656507][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.664912][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 238.672956][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 238.680914][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 238.688882][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.696839][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 238.704820][ T5142] ---[ end trace e943a626fc033f21 ]--- [ 238.710278][ T5142] ================================================================== [ 238.718350][ T5142] BUG: KASAN: use-after-free in rb_buffer_peek+0x71a/0x7a0 [ 238.725526][ T5142] Read of size 4 at addr ffff88813e2df071 by task syz.1.1508/5142 [ 238.733308][ T5142] [ 238.735629][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G W syzkaller #0 [ 238.744629][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.754667][ T5142] Call Trace: [ 238.757945][ T5142] __dump_stack+0x21/0x24 [ 238.762274][ T5142] dump_stack_lvl+0x1a7/0x208 [ 238.767227][ T5142] ? show_regs_print_info+0x18/0x18 [ 238.772411][ T5142] ? thaw_kernel_threads+0x220/0x220 [ 238.777812][ T5142] print_address_description+0x7f/0x2c0 [ 238.783793][ T5142] ? rb_buffer_peek+0x71a/0x7a0 [ 238.788633][ T5142] kasan_report+0x100/0x140 [ 238.793233][ T5142] ? rb_buffer_peek+0x71a/0x7a0 [ 238.798069][ T5142] __asan_report_load4_noabort+0x14/0x20 [ 238.803691][ T5142] rb_buffer_peek+0x71a/0x7a0 [ 238.808353][ T5142] ring_buffer_peek+0x183/0x360 [ 238.813196][ T5142] ? ring_buffer_iter_empty+0x370/0x370 [ 238.818756][ T5142] ? find_next_bit+0x80/0x100 [ 238.823422][ T5142] __find_next_entry+0x34d/0x6b0 [ 238.828358][ T5142] ? rb_advance_reader+0x39c/0x6b0 [ 238.833456][ T5142] ? trace_find_next_entry+0x370/0x370 [ 238.838905][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 238.844523][ T5142] ? print_trace_line+0x385/0x690 [ 238.849530][ T5142] tracing_read_pipe+0x3b8/0xab0 [ 238.854480][ T5142] ? s_show+0x320/0x320 [ 238.858623][ T5142] vfs_read+0x209/0xa50 [ 238.862764][ T5142] ? kernel_read+0x70/0x70 [ 238.867165][ T5142] ? __kasan_check_write+0x14/0x20 [ 238.872255][ T5142] ? mutex_lock+0x92/0xf0 [ 238.876568][ T5142] ? mutex_trylock+0xb0/0xb0 [ 238.881139][ T5142] ? __fget_files+0x2e1/0x340 [ 238.885798][ T5142] ? __fdget_pos+0x2d2/0x380 [ 238.890371][ T5142] ? ksys_read+0x70/0x260 [ 238.894689][ T5142] ksys_read+0x14a/0x260 [ 238.898916][ T5142] ? vfs_write+0xd70/0xd70 [ 238.903491][ T5142] ? __kasan_check_read+0x11/0x20 [ 238.908498][ T5142] __x64_sys_read+0x7b/0x90 [ 238.912988][ T5142] do_syscall_64+0x31/0x40 [ 238.917402][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 238.923278][ T5142] RIP: 0033:0x7fdb043290d9 [ 238.927676][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.947267][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.955667][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 238.963637][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 238.971660][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 238.979623][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.987635][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 238.995693][ T5142] [ 238.998004][ T5142] The buggy address belongs to the page: [ 239.003625][ T5142] page:ffffea0004f8b7c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x13e2df [ 239.013930][ T5142] flags: 0x4000000000000000() [ 239.018593][ T5142] raw: 4000000000000000 dead000000000100 dead000000000122 0000000000000000 [ 239.027162][ T5142] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 239.035854][ T5142] page dumped because: kasan: bad access detected [ 239.042248][ T5142] page_owner tracks the page as freed [ 239.047732][ T5142] page last allocated via order 0, migratetype Movable, gfp_mask 0x100cca(GFP_HIGHUSER_MOVABLE), pid 4961, ts 232096945675, free_ts 232640979865 [ 239.062579][ T5142] prep_new_page+0x176/0x190 [ 239.067154][ T5142] get_page_from_freelist+0x225f/0x23f0 [ 239.073256][ T5142] __alloc_pages_nodemask+0x29a/0x640 [ 239.079264][ T5142] shmem_alloc_page+0x1fd/0x380 [ 239.084324][ T5142] shmem_alloc_and_acct_page+0x3d3/0x840 [ 239.090461][ T5142] shmem_getpage_gfp+0x785/0x20f0 [ 239.095494][ T5142] shmem_write_begin+0xce/0x1b0 [ 239.100435][ T5142] generic_perform_write+0x2ce/0x540 [ 239.105706][ T5142] __generic_file_write_iter+0x24b/0x480 [ 239.111495][ T5142] generic_file_write_iter+0xa9/0x1d0 [ 239.116863][ T5142] vfs_write+0x770/0xd70 [ 239.121090][ T5142] ksys_write+0x14a/0x260 [ 239.125404][ T5142] __x64_sys_write+0x7b/0x90 [ 239.129985][ T5142] do_syscall_64+0x31/0x40 [ 239.134506][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 239.141059][ T5142] page last free stack trace: [ 239.145735][ T5142] free_unref_page_prepare+0x2b7/0x2d0 [ 239.151188][ T5142] free_unref_page_list+0x129/0x9c0 [ 239.156393][ T5142] release_pages+0xe41/0xe90 [ 239.160968][ T5142] __pagevec_release+0x71/0xe0 [ 239.165749][ T5142] shmem_undo_range+0x741/0x1740 [ 239.170686][ T5142] shmem_evict_inode+0x1dc/0x970 [ 239.175693][ T5142] evict+0x4a9/0x940 [ 239.179600][ T5142] iput+0x654/0x7e0 [ 239.183505][ T5142] dentry_unlink_inode+0x2d5/0x390 [ 239.188601][ T5142] __dentry_kill+0x45b/0x660 [ 239.193175][ T5142] dentry_kill+0xc0/0x2a0 [ 239.197485][ T5142] dput+0x42/0x80 [ 239.201106][ T5142] __fput+0x4bd/0x730 [ 239.205068][ T5142] ____fput+0x15/0x20 [ 239.209114][ T5142] task_work_run+0x127/0x190 [ 239.213745][ T5142] exit_to_user_mode_loop+0xcb/0xe0 [ 239.218922][ T5142] [ 239.221231][ T5142] Memory state around the buggy address: [ 239.227218][ T5142] ffff88813e2def00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 239.235263][ T5142] ffff88813e2def80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 239.243402][ T5142] >ffff88813e2df000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 239.251621][ T5142] ^ [ 239.259324][ T5142] ffff88813e2df080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 239.267542][ T5142] ffff88813e2df100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 239.275581][ T5142] ================================================================== [ 239.283624][ T5142] Disabling lock debugging due to kernel taint [ 239.290095][ T357] usb 10-1: Product: syz [ 239.294494][ T357] usb 10-1: Manufacturer: syz [ 239.299280][ T357] usb 10-1: SerialNumber: syz [ 239.303918][ T24] audit: type=1400 audit(1786439856.804:947): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 239.307865][ T5142] ------------[ cut here ]------------ [ 239.331115][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 239.341331][ T5142] Modules linked in: [ 239.345320][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 239.354063][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.364114][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 239.369908][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 239.389715][ T5142] RSP: 0018:ffffc90001167940 EFLAGS: 00010002 [ 239.395801][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 239.403773][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 239.411752][ T5142] RBP: ffffc90001167ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 239.419714][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000061 [ 239.427744][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 239.435828][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 239.444745][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.451327][ T5142] CR2: 00007efc7cd73acb CR3: 000000010cf94000 CR4: 00000000003506a0 [ 239.459289][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.467252][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.475212][ T5142] Call Trace: [ 239.478581][ T5142] ? trace_seq_printf+0x201/0x330 [ 239.483595][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 239.489219][ T5142] ? __kasan_check_write+0x14/0x20 [ 239.494353][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 239.499026][ T5142] rb_buffer_peek+0x60/0x7a0 [ 239.503606][ T5142] ring_buffer_consume+0x1b2/0x350 [ 239.508712][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 239.514246][ T5142] ? print_trace_line+0x385/0x690 [ 239.519350][ T5142] tracing_read_pipe+0x599/0xab0 [ 239.524277][ T5142] ? s_show+0x320/0x320 [ 239.528435][ T5142] vfs_read+0x209/0xa50 [ 239.532579][ T5142] ? kernel_read+0x70/0x70 [ 239.536982][ T5142] ? __kasan_check_write+0x14/0x20 [ 239.542087][ T5142] ? mutex_lock+0x92/0xf0 [ 239.546499][ T5142] ? mutex_trylock+0xb0/0xb0 [ 239.551077][ T5142] ? __fget_files+0x2e1/0x340 [ 239.555740][ T5142] ? __fdget_pos+0x2d2/0x380 [ 239.560316][ T5142] ? ksys_read+0x70/0x260 [ 239.564634][ T5142] ksys_read+0x14a/0x260 [ 239.568860][ T5142] ? vfs_write+0xd70/0xd70 [ 239.573264][ T5142] ? __kasan_check_read+0x11/0x20 [ 239.578303][ T5142] __x64_sys_read+0x7b/0x90 [ 239.582795][ T5142] do_syscall_64+0x31/0x40 [ 239.587340][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 239.593219][ T5142] RIP: 0033:0x7fdb043290d9 [ 239.597624][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.617218][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.625673][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 239.633747][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 239.641909][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 239.649864][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.657820][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 239.665781][ T5142] ---[ end trace e943a626fc033f22 ]--- [ 239.671252][ T5142] ------------[ cut here ]------------ [ 239.676707][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 239.686914][ T5142] Modules linked in: [ 239.690802][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 239.699556][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.709606][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 239.715391][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 239.735067][ T5142] RSP: 0018:ffffc90001167960 EFLAGS: 00010006 [ 239.741119][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 239.749079][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 239.757036][ T5142] RBP: ffffc90001167ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 239.765079][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000061 [ 239.773129][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 239.781355][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 239.790293][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.796931][ T5142] CR2: 00007efc7cd73acb CR3: 000000010cf94000 CR4: 00000000003506a0 [ 239.804893][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.812854][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.820810][ T5142] Call Trace: [ 239.824097][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 239.829760][ T5142] ? __kasan_check_write+0x14/0x20 [ 239.834863][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 239.839532][ T5142] rb_advance_reader+0x2b/0x6b0 [ 239.844377][ T5142] ring_buffer_consume+0x1e6/0x350 [ 239.849520][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 239.855057][ T5142] ? print_trace_line+0x385/0x690 [ 239.860171][ T5142] tracing_read_pipe+0x599/0xab0 [ 239.865102][ T5142] ? s_show+0x320/0x320 [ 239.869255][ T5142] vfs_read+0x209/0xa50 [ 239.873397][ T5142] ? kernel_read+0x70/0x70 [ 239.877802][ T5142] ? __kasan_check_write+0x14/0x20 [ 239.883075][ T5142] ? mutex_lock+0x92/0xf0 [ 239.887394][ T5142] ? mutex_trylock+0xb0/0xb0 [ 239.891985][ T5142] ? __fget_files+0x2e1/0x340 [ 239.896656][ T5142] ? __fdget_pos+0x2d2/0x380 [ 239.901234][ T5142] ? ksys_read+0x70/0x260 [ 239.905551][ T5142] ksys_read+0x14a/0x260 [ 239.909781][ T5142] ? vfs_write+0xd70/0xd70 [ 239.914184][ T5142] ? __kasan_check_read+0x11/0x20 [ 239.919201][ T5142] __x64_sys_read+0x7b/0x90 [ 239.923730][ T5142] do_syscall_64+0x31/0x40 [ 239.928170][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 239.934045][ T5142] RIP: 0033:0x7fdb043290d9 [ 239.938470][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.958328][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.966730][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 239.974693][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 239.982659][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 239.990626][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.998938][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 240.006908][ T5142] ---[ end trace e943a626fc033f23 ]--- [ 240.027319][ T24] audit: type=1400 audit(1786439856.804:948): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.029282][ T5142] ------------[ cut here ]------------ [ 240.049346][ T24] audit: type=1400 audit(1786439856.804:949): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.054213][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 240.054216][ T5142] Modules linked in: [ 240.054244][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 240.054259][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.075995][ T24] audit: type=1400 audit(1786439856.804:950): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.085730][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 240.085740][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 240.085746][ T5142] RSP: 0018:ffffc90001167800 EFLAGS: 00010002 [ 240.085757][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 240.085772][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 240.090019][ T24] audit: type=1400 audit(1786439856.804:951): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.098386][ T5142] RBP: ffffc90001167978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 240.098393][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000065 [ 240.098399][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 240.098407][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 240.098414][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.098420][ T5142] CR2: 00007f71a1d752f8 CR3: 000000010cf94000 CR4: 00000000003506b0 [ 240.098430][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.098436][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.098439][ T5142] Call Trace: [ 240.098467][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 240.109164][ T24] audit: type=1400 audit(1786439856.804:952): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.129080][ T5142] ? __switch_to_asm+0x3a/0x60 [ 240.129096][ T5142] ? __kasan_check_write+0x14/0x20 [ 240.129107][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 240.129116][ T5142] rb_buffer_peek+0x60/0x7a0 [ 240.129126][ T5142] ring_buffer_peek+0x183/0x360 [ 240.129135][ T5142] ? ring_buffer_iter_empty+0x370/0x370 [ 240.129143][ T5142] ? preempt_schedule+0xbc/0xd0 [ 240.129153][ T5142] ? find_next_bit+0x80/0x100 [ 240.129163][ T5142] __find_next_entry+0x34d/0x6b0 [ 240.129171][ T5142] ? preempt_schedule_thunk+0x16/0x18 [ 240.129189][ T5142] ? trace_find_next_entry+0x370/0x370 [ 240.135600][ T24] audit: type=1400 audit(1786439856.804:953): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.154590][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 240.154600][ T5142] ? print_trace_line+0x385/0x690 [ 240.154609][ T5142] tracing_read_pipe+0x3b8/0xab0 [ 240.154618][ T5142] ? s_show+0x320/0x320 [ 240.154627][ T5142] vfs_read+0x209/0xa50 [ 240.154636][ T5142] ? kernel_read+0x70/0x70 [ 240.154654][ T5142] ? __kasan_check_write+0x14/0x20 [ 240.402696][ T5142] ? mutex_lock+0x92/0xf0 [ 240.407100][ T5142] ? mutex_trylock+0xb0/0xb0 [ 240.411680][ T5142] ? __fget_files+0x2e1/0x340 [ 240.416344][ T5142] ? __fdget_pos+0x2d2/0x380 [ 240.421094][ T5142] ? ksys_read+0x70/0x260 [ 240.425419][ T5142] ksys_read+0x14a/0x260 [ 240.429652][ T5142] ? vfs_write+0xd70/0xd70 [ 240.434144][ T5142] ? __kasan_check_read+0x11/0x20 [ 240.439174][ T5142] __x64_sys_read+0x7b/0x90 [ 240.443669][ T5142] do_syscall_64+0x31/0x40 [ 240.448075][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 240.453959][ T5142] RIP: 0033:0x7fdb043290d9 [ 240.458375][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.478053][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.486467][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 240.494599][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 240.502730][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 240.510863][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.518907][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 240.526888][ T5142] ---[ end trace e943a626fc033f24 ]--- [ 240.545957][ T5093] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2305, max 4(4), depth 0(0) [ 240.553453][ T5142] ------------[ cut here ]------------ [ 240.564571][ T5093] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2305, max 4(4), depth 0(0) [ 240.569614][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 240.569618][ T5142] Modules linked in: [ 240.569640][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 240.610330][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.620603][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 240.626396][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 240.645989][ T5142] RSP: 0018:ffffc90001167940 EFLAGS: 00010006 [ 240.652043][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 240.660001][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 240.667957][ T5142] RBP: ffffc90001167ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 240.675918][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000065 [ 240.683876][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 240.691835][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 240.700749][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.707313][ T5142] CR2: 00007f0fde6ad2f8 CR3: 000000010cf94000 CR4: 00000000003506a0 [ 240.715270][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.723231][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.731186][ T5142] Call Trace: [ 240.734469][ T5142] ? trace_seq_printf+0x201/0x330 [ 240.739479][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 240.745096][ T5142] ? __kasan_check_write+0x14/0x20 [ 240.750193][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 240.754858][ T5142] rb_buffer_peek+0x60/0x7a0 [ 240.759437][ T5142] ring_buffer_consume+0x1b2/0x350 [ 240.764592][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 240.770125][ T5142] ? print_trace_line+0x385/0x690 [ 240.775141][ T5142] tracing_read_pipe+0x599/0xab0 [ 240.780081][ T5142] ? s_show+0x320/0x320 [ 240.784220][ T5142] vfs_read+0x209/0xa50 [ 240.788363][ T5142] ? kernel_read+0x70/0x70 [ 240.792766][ T5142] ? __kasan_check_write+0x14/0x20 [ 240.798385][ T5142] ? mutex_lock+0x92/0xf0 [ 240.802698][ T5142] ? mutex_trylock+0xb0/0xb0 [ 240.807293][ T5142] ? __fget_files+0x2e1/0x340 [ 240.811957][ T5142] ? __fdget_pos+0x2d2/0x380 [ 240.816530][ T5142] ? ksys_read+0x70/0x260 [ 240.820841][ T5142] ksys_read+0x14a/0x260 [ 240.825071][ T5142] ? vfs_write+0xd70/0xd70 [ 240.829481][ T5142] ? __kasan_check_read+0x11/0x20 [ 240.834486][ T5142] __x64_sys_read+0x7b/0x90 [ 240.838974][ T5142] do_syscall_64+0x31/0x40 [ 240.843476][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 240.849349][ T5142] RIP: 0033:0x7fdb043290d9 [ 240.853747][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.873343][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.881875][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 240.889845][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 240.897807][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 240.905769][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.913729][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 240.921719][ T5142] ---[ end trace e943a626fc033f25 ]--- [ 240.927198][ T5142] ------------[ cut here ]------------ [ 240.932650][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 240.942868][ T5142] Modules linked in: [ 240.946764][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 240.955509][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.965564][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 240.971353][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 240.991033][ T5142] RSP: 0018:ffffc90001167960 EFLAGS: 00010006 [ 240.997115][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 241.005073][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 241.013031][ T5142] RBP: ffffc90001167ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 241.020988][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000065 [ 241.028947][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 241.036911][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 241.045835][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.052402][ T5142] CR2: 00007f0fde6ad2f8 CR3: 000000010cf94000 CR4: 00000000003506a0 [ 241.060362][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.068326][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.076281][ T5142] Call Trace: [ 241.079564][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 241.085180][ T5142] ? __kasan_check_write+0x14/0x20 [ 241.090276][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 241.094938][ T5142] rb_advance_reader+0x2b/0x6b0 [ 241.099775][ T5142] ring_buffer_consume+0x1e6/0x350 [ 241.104872][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 241.110579][ T5142] ? print_trace_line+0x385/0x690 [ 241.115590][ T5142] tracing_read_pipe+0x599/0xab0 [ 241.120509][ T5142] ? s_show+0x320/0x320 [ 241.124648][ T5142] vfs_read+0x209/0xa50 [ 241.128792][ T5142] ? kernel_read+0x70/0x70 [ 241.133191][ T5142] ? __kasan_check_write+0x14/0x20 [ 241.138290][ T5142] ? mutex_lock+0x92/0xf0 [ 241.142604][ T5142] ? mutex_trylock+0xb0/0xb0 [ 241.147174][ T5142] ? __fget_files+0x2e1/0x340 [ 241.151836][ T5142] ? __fdget_pos+0x2d2/0x380 [ 241.156406][ T5142] ? ksys_read+0x70/0x260 [ 241.160721][ T5142] ksys_read+0x14a/0x260 [ 241.164952][ T5142] ? vfs_write+0xd70/0xd70 [ 241.169353][ T5142] ? __kasan_check_read+0x11/0x20 [ 241.174360][ T5142] __x64_sys_read+0x7b/0x90 [ 241.178849][ T5142] do_syscall_64+0x31/0x40 [ 241.183254][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 241.189131][ T5142] RIP: 0033:0x7fdb043290d9 [ 241.193535][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.213122][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.221542][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 241.229583][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 241.237541][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 241.245499][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.253459][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 241.261440][ T5142] ---[ end trace e943a626fc033f26 ]--- [ 241.275150][ T5142] ------------[ cut here ]------------ [ 241.280656][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 241.290881][ T5142] Modules linked in: [ 241.294774][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 241.303567][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.313617][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 241.319430][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 241.339028][ T5142] RSP: 0018:ffffc90001167800 EFLAGS: 00010002 [ 241.345207][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 241.353165][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 241.361459][ T5142] RBP: ffffc90001167978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 241.369464][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000069 [ 241.377424][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 241.385385][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 241.394306][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.400899][ T5142] CR2: 00007fdb02d3fff8 CR3: 000000010cf94000 CR4: 00000000003506a0 [ 241.408858][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.416818][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.424794][ T5142] Call Trace: [ 241.428086][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 241.433788][ T5142] ? __switch_to_asm+0x3a/0x60 [ 241.438543][ T5142] ? __kasan_check_write+0x14/0x20 [ 241.443657][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 241.448324][ T5142] rb_buffer_peek+0x60/0x7a0 [ 241.452926][ T5142] ring_buffer_peek+0x183/0x360 [ 241.457787][ T5142] ? ring_buffer_iter_empty+0x370/0x370 [ 241.463327][ T5142] ? preempt_schedule+0xbc/0xd0 [ 241.468168][ T5142] ? find_next_bit+0x80/0x100 [ 241.472854][ T5142] __find_next_entry+0x34d/0x6b0 [ 241.477814][ T5142] ? preempt_schedule_thunk+0x16/0x18 [ 241.483179][ T5142] ? trace_find_next_entry+0x370/0x370 [ 241.488622][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 241.494152][ T5142] ? print_trace_line+0x385/0x690 [ 241.499162][ T5142] tracing_read_pipe+0x3b8/0xab0 [ 241.504083][ T5142] ? s_show+0x320/0x320 [ 241.508233][ T5142] vfs_read+0x209/0xa50 [ 241.512379][ T5142] ? kernel_read+0x70/0x70 [ 241.516786][ T5142] ? __kasan_check_write+0x14/0x20 [ 241.521883][ T5142] ? mutex_lock+0x92/0xf0 [ 241.526197][ T5142] ? mutex_trylock+0xb0/0xb0 [ 241.530776][ T5142] ? __fget_files+0x2e1/0x340 [ 241.535435][ T5142] ? __fdget_pos+0x2d2/0x380 [ 241.540009][ T5142] ? ksys_read+0x70/0x260 [ 241.544534][ T5142] ksys_read+0x14a/0x260 [ 241.548875][ T5142] ? vfs_write+0xd70/0xd70 [ 241.553274][ T5142] ? __kasan_check_read+0x11/0x20 [ 241.558281][ T5142] __x64_sys_read+0x7b/0x90 [ 241.562793][ T5142] do_syscall_64+0x31/0x40 [ 241.567191][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 241.573070][ T5142] RIP: 0033:0x7fdb043290d9 [ 241.577559][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.597152][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.605559][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 241.613517][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 241.621472][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 241.629521][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.637490][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 241.645450][ T5142] ---[ end trace e943a626fc033f27 ]--- [ 241.652713][ T5142] ------------[ cut here ]------------ [ 241.658293][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 241.668508][ T5142] Modules linked in: [ 241.672398][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 241.681136][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.691195][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 241.696985][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 241.716616][ T5142] RSP: 0018:ffffc90001167940 EFLAGS: 00010002 [ 241.722897][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 241.730950][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 241.738914][ T5142] RBP: ffffc90001167ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 241.746875][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000069 [ 241.754968][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 241.763105][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 241.772025][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.778592][ T5142] CR2: 0000200000001340 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 241.786553][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.794511][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.802493][ T5142] Call Trace: [ 241.805879][ T5142] ? trace_seq_printf+0x201/0x330 [ 241.811161][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 241.817051][ T5142] ? __kasan_check_write+0x14/0x20 [ 241.822151][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 241.826826][ T5142] rb_buffer_peek+0x60/0x7a0 [ 241.831468][ T5142] ring_buffer_consume+0x1b2/0x350 [ 241.836692][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 241.842429][ T5142] ? print_trace_line+0x385/0x690 [ 241.847467][ T5142] tracing_read_pipe+0x599/0xab0 [ 241.852399][ T5142] ? s_show+0x320/0x320 [ 241.856555][ T5142] vfs_read+0x209/0xa50 [ 241.860692][ T5142] ? kernel_read+0x70/0x70 [ 241.865090][ T5142] ? __kasan_check_write+0x14/0x20 [ 241.870186][ T5142] ? mutex_lock+0x92/0xf0 [ 241.874495][ T5142] ? mutex_trylock+0xb0/0xb0 [ 241.879109][ T5142] ? __fget_files+0x2e1/0x340 [ 241.883768][ T5142] ? __fdget_pos+0x2d2/0x380 [ 241.888429][ T5142] ? ksys_read+0x70/0x260 [ 241.892745][ T5142] ksys_read+0x14a/0x260 [ 241.896970][ T5142] ? vfs_write+0xd70/0xd70 [ 241.901376][ T5142] ? __kasan_check_read+0x11/0x20 [ 241.906388][ T5142] __x64_sys_read+0x7b/0x90 [ 241.910876][ T5142] do_syscall_64+0x31/0x40 [ 241.915277][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 241.921152][ T5142] RIP: 0033:0x7fdb043290d9 [ 241.925573][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.945167][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.953574][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 241.961544][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 241.969507][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 241.977470][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.985429][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 241.993391][ T5142] ---[ end trace e943a626fc033f28 ]--- [ 241.998879][ T5142] ------------[ cut here ]------------ [ 242.005043][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 242.015347][ T5142] Modules linked in: [ 242.019506][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 242.028266][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.038509][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 242.044400][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 242.064024][ T5142] RSP: 0018:ffffc90001167960 EFLAGS: 00010006 [ 242.070077][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 242.078031][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 242.085986][ T5142] RBP: ffffc90001167ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 242.094044][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000069 [ 242.102367][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 242.110323][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 242.119243][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.125810][ T5142] CR2: 0000200000001340 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 242.133767][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.141905][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.149861][ T5142] Call Trace: [ 242.153150][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 242.158773][ T5142] ? __kasan_check_write+0x14/0x20 [ 242.163877][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 242.168537][ T5142] rb_advance_reader+0x2b/0x6b0 [ 242.173389][ T5142] ring_buffer_consume+0x1e6/0x350 [ 242.178513][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 242.184046][ T5142] ? print_trace_line+0x385/0x690 [ 242.189082][ T5142] tracing_read_pipe+0x599/0xab0 [ 242.194003][ T5142] ? s_show+0x320/0x320 [ 242.198174][ T5142] vfs_read+0x209/0xa50 [ 242.202319][ T5142] ? kernel_read+0x70/0x70 [ 242.206718][ T5142] ? __kasan_check_write+0x14/0x20 [ 242.211899][ T5142] ? mutex_lock+0x92/0xf0 [ 242.216234][ T5142] ? mutex_trylock+0xb0/0xb0 [ 242.220977][ T5142] ? __fget_files+0x2e1/0x340 [ 242.225643][ T5142] ? __fdget_pos+0x2d2/0x380 [ 242.230310][ T5142] ? ksys_read+0x70/0x260 [ 242.234622][ T5142] ksys_read+0x14a/0x260 [ 242.238856][ T5142] ? vfs_write+0xd70/0xd70 [ 242.243274][ T5142] ? __kasan_check_read+0x11/0x20 [ 242.248462][ T5142] __x64_sys_read+0x7b/0x90 [ 242.252949][ T5142] do_syscall_64+0x31/0x40 [ 242.257349][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 242.263229][ T5142] RIP: 0033:0x7fdb043290d9 [ 242.267804][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.287401][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.295819][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 242.303774][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 242.311728][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 242.319681][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.327638][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 242.335596][ T5142] ---[ end trace e943a626fc033f29 ]--- [ 242.341983][ T5142] ------------[ cut here ]------------ [ 242.347503][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 242.358160][ T5142] Modules linked in: [ 242.362051][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 242.370792][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.380841][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 242.386625][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 242.406397][ T5142] RSP: 0018:ffffc90001167800 EFLAGS: 00010006 [ 242.412450][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 242.420407][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 242.428371][ T5142] RBP: ffffc90001167978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 242.436327][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e00006d [ 242.444285][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 242.452260][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 242.461174][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.467742][ T5142] CR2: 00007fdb043767c0 CR3: 000000010cf94000 CR4: 00000000003526a0 [ 242.475705][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.483751][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.491822][ T5142] Call Trace: [ 242.495107][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 242.500729][ T5142] ? __switch_to_asm+0x3a/0x60 [ 242.505512][ T5142] ? __kasan_check_write+0x14/0x20 [ 242.510608][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 242.515277][ T5142] rb_buffer_peek+0x60/0x7a0 [ 242.520180][ T5142] ring_buffer_peek+0x183/0x360 [ 242.525023][ T5142] ? ring_buffer_iter_empty+0x370/0x370 [ 242.530662][ T5142] ? preempt_schedule+0xbc/0xd0 [ 242.535501][ T5142] ? find_next_bit+0x80/0x100 [ 242.540163][ T5142] __find_next_entry+0x34d/0x6b0 [ 242.545086][ T5142] ? preempt_schedule_thunk+0x16/0x18 [ 242.550458][ T5142] ? trace_find_next_entry+0x370/0x370 [ 242.555915][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 242.561450][ T5142] ? print_trace_line+0x385/0x690 [ 242.566459][ T5142] tracing_read_pipe+0x3b8/0xab0 [ 242.571401][ T5142] ? s_show+0x320/0x320 [ 242.575540][ T5142] vfs_read+0x209/0xa50 [ 242.579743][ T5142] ? kernel_read+0x70/0x70 [ 242.584146][ T5142] ? __kasan_check_write+0x14/0x20 [ 242.589241][ T5142] ? mutex_lock+0x92/0xf0 [ 242.593563][ T5142] ? mutex_trylock+0xb0/0xb0 [ 242.598141][ T5142] ? __fget_files+0x2e1/0x340 [ 242.602805][ T5142] ? __fdget_pos+0x2d2/0x380 [ 242.607377][ T5142] ? ksys_read+0x70/0x260 [ 242.611691][ T5142] ksys_read+0x14a/0x260 [ 242.615916][ T5142] ? vfs_write+0xd70/0xd70 [ 242.620320][ T5142] ? __kasan_check_read+0x11/0x20 [ 242.625331][ T5142] __x64_sys_read+0x7b/0x90 [ 242.629820][ T5142] do_syscall_64+0x31/0x40 [ 242.634223][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 242.640536][ T5142] RIP: 0033:0x7fdb043290d9 [ 242.644977][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.664578][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.673079][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 242.681039][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 242.689085][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 242.697128][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.705107][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 242.713165][ T5142] ---[ end trace e943a626fc033f2a ]--- [ 242.728631][ T5142] ------------[ cut here ]------------ [ 242.733320][ T357] usb 10-1: selecting invalid altsetting 0 [ 242.734125][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 242.739979][ T357] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 242.750157][ T5142] Modules linked in: [ 242.750178][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 242.750184][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.750201][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 242.750212][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 242.750218][ T5142] RSP: 0018:ffffc90001167940 EFLAGS: 00010002 [ 242.750232][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 242.750247][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 242.827194][ T5142] RBP: ffffc90001167ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 242.835722][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e00006d [ 242.843686][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 242.851648][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 242.860599][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.867186][ T5142] CR2: 000055558c026908 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 242.875152][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.883111][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.891078][ T5142] Call Trace: [ 242.894365][ T5142] ? trace_seq_printf+0x201/0x330 [ 242.899372][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 242.904988][ T5142] ? __kasan_check_write+0x14/0x20 [ 242.910085][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 242.914749][ T5142] rb_buffer_peek+0x60/0x7a0 [ 242.919680][ T5142] ring_buffer_consume+0x1b2/0x350 [ 242.924777][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 242.930423][ T5142] ? print_trace_line+0x385/0x690 [ 242.935450][ T5142] tracing_read_pipe+0x599/0xab0 [ 242.940396][ T5142] ? s_show+0x320/0x320 [ 242.944538][ T5142] vfs_read+0x209/0xa50 [ 242.948870][ T5142] ? kernel_read+0x70/0x70 [ 242.953365][ T5142] ? __kasan_check_write+0x14/0x20 [ 242.958489][ T5142] ? mutex_lock+0x92/0xf0 [ 242.962802][ T5142] ? mutex_trylock+0xb0/0xb0 [ 242.967375][ T5142] ? __fget_files+0x2e1/0x340 [ 242.972039][ T5142] ? __fdget_pos+0x2d2/0x380 [ 242.977075][ T5142] ? ksys_read+0x70/0x260 [ 242.981497][ T5142] ksys_read+0x14a/0x260 [ 242.985726][ T5142] ? vfs_write+0xd70/0xd70 [ 242.990126][ T5142] ? __kasan_check_read+0x11/0x20 [ 242.995248][ T5142] __x64_sys_read+0x7b/0x90 [ 242.999912][ T5142] do_syscall_64+0x31/0x40 [ 243.004598][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 243.010504][ T5142] RIP: 0033:0x7fdb043290d9 [ 243.014932][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.034630][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.043122][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 243.051089][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 243.059057][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 243.067024][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.074985][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 243.082946][ T5142] ---[ end trace e943a626fc033f2b ]--- [ 243.088429][ T5142] ------------[ cut here ]------------ [ 243.093998][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 243.104296][ T5142] Modules linked in: [ 243.108200][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 243.116960][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.127012][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 243.132799][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 243.152661][ T5142] RSP: 0018:ffffc90001167960 EFLAGS: 00010006 [ 243.158738][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 243.166788][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 243.175440][ T5142] RBP: ffffc90001167ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 243.183494][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e00006d [ 243.191454][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 243.199452][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 243.208377][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.214947][ T5142] CR2: 000055558c026908 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 243.222909][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.231001][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.239141][ T5142] Call Trace: [ 243.242473][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 243.248095][ T5142] ? __kasan_check_write+0x14/0x20 [ 243.253194][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 243.257866][ T5142] rb_advance_reader+0x2b/0x6b0 [ 243.262723][ T5142] ring_buffer_consume+0x1e6/0x350 [ 243.267841][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 243.273397][ T5142] ? print_trace_line+0x385/0x690 [ 243.278412][ T5142] tracing_read_pipe+0x599/0xab0 [ 243.283339][ T5142] ? s_show+0x320/0x320 [ 243.287483][ T5142] vfs_read+0x209/0xa50 [ 243.291625][ T5142] ? kernel_read+0x70/0x70 [ 243.296031][ T5142] ? __kasan_check_write+0x14/0x20 [ 243.301129][ T5142] ? mutex_lock+0x92/0xf0 [ 243.305444][ T5142] ? mutex_trylock+0xb0/0xb0 [ 243.310021][ T5142] ? __fget_files+0x2e1/0x340 [ 243.314687][ T5142] ? __fdget_pos+0x2d2/0x380 [ 243.319266][ T5142] ? ksys_read+0x70/0x260 [ 243.323584][ T5142] ksys_read+0x14a/0x260 [ 243.327815][ T5142] ? vfs_write+0xd70/0xd70 [ 243.332220][ T5142] ? __kasan_check_read+0x11/0x20 [ 243.337233][ T5142] __x64_sys_read+0x7b/0x90 [ 243.341726][ T5142] do_syscall_64+0x31/0x40 [ 243.346135][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 243.352116][ T5142] RIP: 0033:0x7fdb043290d9 [ 243.356522][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.376127][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.384535][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 243.392498][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 243.400462][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 243.408426][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.416480][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 243.424629][ T5142] ---[ end trace e943a626fc033f2c ]--- [ 243.430542][ T357] uvcvideo: No valid video chain found. [ 243.435185][ T5142] ------------[ cut here ]------------ [ 243.441558][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 243.451784][ T5142] Modules linked in: [ 243.455768][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 243.464511][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.474573][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 243.480454][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 243.500356][ T5142] RSP: 0018:ffffc90001167800 EFLAGS: 00010002 [ 243.506413][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 243.514377][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 243.522334][ T5142] RBP: ffffc90001167978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 243.530300][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000071 [ 243.538258][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 243.546245][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 243.555159][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.561732][ T5142] CR2: 000055558c026908 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 243.569705][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.577861][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.585816][ T5142] Call Trace: [ 243.589099][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 243.594714][ T5142] ? __switch_to_asm+0x3a/0x60 [ 243.599463][ T5142] ? __kasan_check_write+0x14/0x20 [ 243.604566][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 243.609227][ T5142] rb_buffer_peek+0x60/0x7a0 [ 243.613814][ T5142] ring_buffer_peek+0x183/0x360 [ 243.618649][ T5142] ? ring_buffer_iter_empty+0x370/0x370 [ 243.624183][ T5142] ? preempt_schedule+0xbc/0xd0 [ 243.629020][ T5142] ? find_next_bit+0x80/0x100 [ 243.633684][ T5142] __find_next_entry+0x34d/0x6b0 [ 243.638706][ T5142] ? preempt_schedule_thunk+0x16/0x18 [ 243.644063][ T5142] ? trace_find_next_entry+0x370/0x370 [ 243.649540][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 243.655102][ T5142] ? print_trace_line+0x385/0x690 [ 243.660111][ T5142] tracing_read_pipe+0x3b8/0xab0 [ 243.665031][ T5142] ? s_show+0x320/0x320 [ 243.669180][ T5142] vfs_read+0x209/0xa50 [ 243.673322][ T5142] ? kernel_read+0x70/0x70 [ 243.677723][ T5142] ? __kasan_check_write+0x14/0x20 [ 243.682822][ T5142] ? mutex_lock+0x92/0xf0 [ 243.687157][ T5142] ? mutex_trylock+0xb0/0xb0 [ 243.691752][ T5142] ? __fget_files+0x2e1/0x340 [ 243.696505][ T5142] ? __fdget_pos+0x2d2/0x380 [ 243.701082][ T5142] ? ksys_read+0x70/0x260 [ 243.705393][ T5142] ksys_read+0x14a/0x260 [ 243.709623][ T5142] ? vfs_write+0xd70/0xd70 [ 243.714030][ T5142] ? __kasan_check_read+0x11/0x20 [ 243.719042][ T5142] __x64_sys_read+0x7b/0x90 [ 243.723533][ T5142] do_syscall_64+0x31/0x40 [ 243.727937][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 243.733815][ T5142] RIP: 0033:0x7fdb043290d9 [ 243.738216][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.757937][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.766453][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 243.774412][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 243.782371][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 243.790327][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.798286][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 243.806254][ T5142] ---[ end trace e943a626fc033f2d ]--- [ 243.817012][ T5142] ------------[ cut here ]------------ [ 243.822512][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 243.832727][ T5142] Modules linked in: [ 243.836651][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 243.845403][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.855465][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 243.861256][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 243.880858][ T5142] RSP: 0018:ffffc90001167940 EFLAGS: 00010002 [ 243.886917][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 243.894991][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 243.902973][ T5142] RBP: ffffc90001167ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 243.910934][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000071 [ 243.918887][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 243.926851][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 243.935766][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.942451][ T5142] CR2: 00007f8e76b8d2f8 CR3: 000000010cf94000 CR4: 00000000003526a0 [ 243.950423][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.958582][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.966537][ T5142] Call Trace: [ 243.969850][ T5142] ? trace_seq_printf+0x201/0x330 [ 243.974880][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 243.980516][ T5142] ? __kasan_check_write+0x14/0x20 [ 243.985619][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 243.990281][ T5142] rb_buffer_peek+0x60/0x7a0 [ 243.994866][ T5142] ring_buffer_consume+0x1b2/0x350 [ 243.999972][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 244.005521][ T5142] ? print_trace_line+0x385/0x690 [ 244.010573][ T5142] tracing_read_pipe+0x599/0xab0 [ 244.015529][ T5142] ? s_show+0x320/0x320 [ 244.019673][ T5142] vfs_read+0x209/0xa50 [ 244.023813][ T5142] ? kernel_read+0x70/0x70 [ 244.028336][ T5142] ? __kasan_check_write+0x14/0x20 [ 244.033448][ T5142] ? mutex_lock+0x92/0xf0 [ 244.037767][ T5142] ? mutex_trylock+0xb0/0xb0 [ 244.042435][ T5142] ? __fget_files+0x2e1/0x340 [ 244.047100][ T5142] ? __fdget_pos+0x2d2/0x380 [ 244.051677][ T5142] ? ksys_read+0x70/0x260 [ 244.056017][ T5142] ksys_read+0x14a/0x260 [ 244.060243][ T5142] ? vfs_write+0xd70/0xd70 [ 244.064644][ T5142] ? __kasan_check_read+0x11/0x20 [ 244.069661][ T5142] __x64_sys_read+0x7b/0x90 [ 244.074172][ T5142] do_syscall_64+0x31/0x40 [ 244.078602][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 244.084610][ T5142] RIP: 0033:0x7fdb043290d9 [ 244.089021][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.108821][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.117231][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 244.125214][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 244.133342][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 244.141304][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.149264][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 244.157228][ T5142] ---[ end trace e943a626fc033f2e ]--- [ 244.162703][ T5142] ------------[ cut here ]------------ [ 244.168156][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 244.178373][ T5142] Modules linked in: [ 244.182266][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 244.191005][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.201087][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 244.206881][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 244.226566][ T5142] RSP: 0018:ffffc90001167960 EFLAGS: 00010006 [ 244.232633][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 244.240860][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 244.248924][ T5142] RBP: ffffc90001167ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 244.256887][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000071 [ 244.264847][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 244.272894][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 244.281810][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.288385][ T5142] CR2: 00007f8e76b8d2f8 CR3: 000000010cf94000 CR4: 00000000003526a0 [ 244.296361][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.304415][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.312401][ T5142] Call Trace: [ 244.315688][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 244.321308][ T5142] ? __kasan_check_write+0x14/0x20 [ 244.326434][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 244.331094][ T5142] rb_advance_reader+0x2b/0x6b0 [ 244.335932][ T5142] ring_buffer_consume+0x1e6/0x350 [ 244.341030][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 244.346567][ T5142] ? print_trace_line+0x385/0x690 [ 244.351840][ T5142] tracing_read_pipe+0x599/0xab0 [ 244.356849][ T5142] ? s_show+0x320/0x320 [ 244.361193][ T5142] vfs_read+0x209/0xa50 [ 244.365338][ T5142] ? kernel_read+0x70/0x70 [ 244.369745][ T5142] ? __kasan_check_write+0x14/0x20 [ 244.374839][ T5142] ? mutex_lock+0x92/0xf0 [ 244.379150][ T5142] ? mutex_trylock+0xb0/0xb0 [ 244.383742][ T5142] ? __fget_files+0x2e1/0x340 [ 244.388429][ T5142] ? __fdget_pos+0x2d2/0x380 [ 244.393178][ T5142] ? ksys_read+0x70/0x260 [ 244.397491][ T5142] ksys_read+0x14a/0x260 [ 244.401719][ T5142] ? vfs_write+0xd70/0xd70 [ 244.406126][ T5142] ? __kasan_check_read+0x11/0x20 [ 244.411134][ T5142] __x64_sys_read+0x7b/0x90 [ 244.415710][ T5142] do_syscall_64+0x31/0x40 [ 244.420115][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 244.426027][ T5142] RIP: 0033:0x7fdb043290d9 [ 244.430441][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.450123][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.458526][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 244.466505][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 244.474593][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 244.482557][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.490524][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 244.498485][ T5142] ---[ end trace e943a626fc033f2f ]--- [ 244.505125][ T5142] ------------[ cut here ]------------ [ 244.510619][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 244.514787][ T357] usb 10-1: USB disconnect, device number 10 [ 244.521683][ T5142] Modules linked in: [ 244.531900][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 244.540646][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.551477][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 244.557327][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 244.577094][ T5142] RSP: 0018:ffffc90001167800 EFLAGS: 00010012 [ 244.583147][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 244.591104][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 244.599067][ T5142] RBP: ffffc90001167978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 244.607027][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000075 [ 244.615010][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 244.622970][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 244.631917][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.638490][ T5142] CR2: 000055558c026908 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 244.646540][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.654500][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.662474][ T5142] Call Trace: [ 244.665759][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 244.671377][ T5142] ? __switch_to_asm+0x3a/0x60 [ 244.676135][ T5142] ? __kasan_check_write+0x14/0x20 [ 244.681233][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 244.685896][ T5142] rb_buffer_peek+0x60/0x7a0 [ 244.690473][ T5142] ring_buffer_peek+0x183/0x360 [ 244.695308][ T5142] ? ring_buffer_iter_empty+0x370/0x370 [ 244.700835][ T5142] ? preempt_schedule+0xbc/0xd0 [ 244.705672][ T5142] ? find_next_bit+0x80/0x100 [ 244.710347][ T5142] __find_next_entry+0x34d/0x6b0 [ 244.715269][ T5142] ? preempt_schedule_thunk+0x16/0x18 [ 244.721151][ T5142] ? trace_find_next_entry+0x370/0x370 [ 244.726594][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 244.732561][ T5142] ? print_trace_line+0x385/0x690 [ 244.737570][ T5142] tracing_read_pipe+0x3b8/0xab0 [ 244.742494][ T5142] ? s_show+0x320/0x320 [ 244.746635][ T5142] vfs_read+0x209/0xa50 [ 244.750772][ T5142] ? kernel_read+0x70/0x70 [ 244.755174][ T5142] ? __kasan_check_write+0x14/0x20 [ 244.760304][ T5142] ? mutex_lock+0x92/0xf0 [ 244.764729][ T5142] ? mutex_trylock+0xb0/0xb0 [ 244.769390][ T5142] ? __fget_files+0x2e1/0x340 [ 244.774054][ T5142] ? __fdget_pos+0x2d2/0x380 [ 244.778627][ T5142] ? ksys_read+0x70/0x260 [ 244.782937][ T5142] ksys_read+0x14a/0x260 [ 244.787163][ T5142] ? vfs_write+0xd70/0xd70 [ 244.791565][ T5142] ? __kasan_check_read+0x11/0x20 [ 244.796575][ T5142] __x64_sys_read+0x7b/0x90 [ 244.801067][ T5142] do_syscall_64+0x31/0x40 [ 244.805470][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 244.811431][ T5142] RIP: 0033:0x7fdb043290d9 [ 244.815830][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.835422][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.843821][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 244.851778][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 244.859735][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 244.867692][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.875651][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 244.883612][ T5142] ---[ end trace e943a626fc033f30 ]--- [ 244.896952][ T5142] ------------[ cut here ]------------ [ 244.902447][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 244.912691][ T5142] Modules linked in: [ 244.916594][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 244.925447][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.935503][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 244.941298][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 244.960903][ T5142] RSP: 0018:ffffc90001167940 EFLAGS: 00010006 [ 244.967176][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 244.975141][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 244.983246][ T5142] RBP: ffffc90001167ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 244.991211][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000075 [ 244.999172][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 245.007133][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 245.016045][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.022611][ T5142] CR2: 00007f8e76b8d2f8 CR3: 000000010cf94000 CR4: 00000000003526a0 [ 245.030717][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.038750][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.046758][ T5142] Call Trace: [ 245.050036][ T5142] ? trace_seq_printf+0x201/0x330 [ 245.055112][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 245.060818][ T5142] ? __kasan_check_write+0x14/0x20 [ 245.065995][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 245.070843][ T5142] rb_buffer_peek+0x60/0x7a0 [ 245.075422][ T5142] ring_buffer_consume+0x1b2/0x350 [ 245.080565][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 245.086094][ T5142] ? print_trace_line+0x385/0x690 [ 245.091154][ T5142] tracing_read_pipe+0x599/0xab0 [ 245.096099][ T5142] ? s_show+0x320/0x320 [ 245.100280][ T5142] vfs_read+0x209/0xa50 [ 245.104420][ T5142] ? kernel_read+0x70/0x70 [ 245.108971][ T5142] ? __kasan_check_write+0x14/0x20 [ 245.114095][ T5142] ? mutex_lock+0x92/0xf0 [ 245.118442][ T5142] ? mutex_trylock+0xb0/0xb0 [ 245.123029][ T5142] ? __fget_files+0x2e1/0x340 [ 245.127688][ T5142] ? __fdget_pos+0x2d2/0x380 [ 245.132262][ T5142] ? ksys_read+0x70/0x260 [ 245.136579][ T5142] ksys_read+0x14a/0x260 [ 245.141030][ T5142] ? vfs_write+0xd70/0xd70 [ 245.145516][ T5142] ? __kasan_check_read+0x11/0x20 [ 245.150541][ T5142] __x64_sys_read+0x7b/0x90 [ 245.155264][ T5142] do_syscall_64+0x31/0x40 [ 245.159673][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 245.165565][ T5142] RIP: 0033:0x7fdb043290d9 [ 245.169975][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.189746][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.198147][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 245.206125][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 245.214217][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 245.222179][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.230154][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 245.238202][ T5142] ---[ end trace e943a626fc033f31 ]--- [ 245.243665][ T5142] ------------[ cut here ]------------ [ 245.249113][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 245.259320][ T5142] Modules linked in: [ 245.263201][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 245.271934][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.282015][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 245.287813][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 245.307424][ T5142] RSP: 0018:ffffc90001167960 EFLAGS: 00010006 [ 245.313475][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 245.321516][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 245.329479][ T5142] RBP: ffffc90001167ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 245.337466][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000075 [ 245.345449][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 245.353497][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 245.362412][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.369002][ T5142] CR2: 00007f8e76b8d2f8 CR3: 000000010cf94000 CR4: 00000000003526a0 [ 245.377050][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.385021][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.392997][ T5142] Call Trace: [ 245.396282][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 245.401906][ T5142] ? __kasan_check_write+0x14/0x20 [ 245.407005][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 245.411690][ T5142] rb_advance_reader+0x2b/0x6b0 [ 245.416536][ T5142] ring_buffer_consume+0x1e6/0x350 [ 245.421633][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 245.427182][ T5142] ? print_trace_line+0x385/0x690 [ 245.432209][ T5142] tracing_read_pipe+0x599/0xab0 [ 245.437141][ T5142] ? s_show+0x320/0x320 [ 245.441303][ T5142] vfs_read+0x209/0xa50 [ 245.445881][ T5142] ? kernel_read+0x70/0x70 [ 245.450306][ T5142] ? __kasan_check_write+0x14/0x20 [ 245.455416][ T5142] ? mutex_lock+0x92/0xf0 [ 245.459732][ T5142] ? mutex_trylock+0xb0/0xb0 [ 245.464426][ T5142] ? __fget_files+0x2e1/0x340 [ 245.469194][ T5142] ? __fdget_pos+0x2d2/0x380 [ 245.473767][ T5142] ? ksys_read+0x70/0x260 [ 245.478083][ T5142] ksys_read+0x14a/0x260 [ 245.482307][ T5142] ? vfs_write+0xd70/0xd70 [ 245.486798][ T5142] ? __kasan_check_read+0x11/0x20 [ 245.491807][ T5142] __x64_sys_read+0x7b/0x90 [ 245.496312][ T5142] do_syscall_64+0x31/0x40 [ 245.500716][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 245.506631][ T5142] RIP: 0033:0x7fdb043290d9 [ 245.511036][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.530636][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.539039][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 245.546997][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 245.554958][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 245.562913][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.570876][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 245.578841][ T5142] ---[ end trace e943a626fc033f32 ]--- [ 245.584900][ T5142] ------------[ cut here ]------------ [ 245.590412][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 245.600725][ T5142] Modules linked in: [ 245.604609][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 245.613340][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.623536][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 245.629420][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 245.649560][ T5142] RSP: 0018:ffffc90001167800 EFLAGS: 00010002 [ 245.655611][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 245.663566][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 245.671564][ T5142] RBP: ffffc90001167978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 245.679552][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000079 [ 245.687507][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 245.695487][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 245.704504][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 245.711088][ T5142] CR2: 00005555676ca4e8 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 245.719041][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 245.727012][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 245.734971][ T5142] Call Trace: [ 245.738255][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 245.743867][ T5142] ? __switch_to_asm+0x3a/0x60 [ 245.748618][ T5142] ? __kasan_check_write+0x14/0x20 [ 245.753726][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 245.758399][ T5142] rb_buffer_peek+0x60/0x7a0 [ 245.763094][ T5142] ring_buffer_peek+0x183/0x360 [ 245.767949][ T5142] ? ring_buffer_iter_empty+0x370/0x370 [ 245.773491][ T5142] ? preempt_schedule+0xbc/0xd0 [ 245.778323][ T5142] ? find_next_bit+0x80/0x100 [ 245.782978][ T5142] __find_next_entry+0x34d/0x6b0 [ 245.787977][ T5142] ? preempt_schedule_thunk+0x16/0x18 [ 245.793353][ T5142] ? trace_find_next_entry+0x370/0x370 [ 245.798805][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 245.804334][ T5142] ? print_trace_line+0x385/0x690 [ 245.809449][ T5142] tracing_read_pipe+0x3b8/0xab0 [ 245.814367][ T5142] ? s_show+0x320/0x320 [ 245.818499][ T5142] vfs_read+0x209/0xa50 [ 245.822648][ T5142] ? kernel_read+0x70/0x70 [ 245.827059][ T5142] ? __kasan_check_write+0x14/0x20 [ 245.832162][ T5142] ? mutex_lock+0x92/0xf0 [ 245.836475][ T5142] ? mutex_trylock+0xb0/0xb0 [ 245.841045][ T5142] ? __fget_files+0x2e1/0x340 [ 245.845814][ T5142] ? __fdget_pos+0x2d2/0x380 [ 245.850586][ T5142] ? ksys_read+0x70/0x260 [ 245.854996][ T5142] ksys_read+0x14a/0x260 [ 245.859216][ T5142] ? vfs_write+0xd70/0xd70 [ 245.863610][ T5142] ? __kasan_check_read+0x11/0x20 [ 245.868635][ T5142] __x64_sys_read+0x7b/0x90 [ 245.873140][ T5142] do_syscall_64+0x31/0x40 [ 245.877542][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 245.883423][ T5142] RIP: 0033:0x7fdb043290d9 [ 245.887833][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.907794][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.916195][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 245.924151][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 245.932131][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 245.940084][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.948131][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 245.956117][ T5142] ---[ end trace e943a626fc033f33 ]--- [ 245.966870][ T5142] ------------[ cut here ]------------ [ 245.972372][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 245.982608][ T5142] Modules linked in: [ 245.986535][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 245.995291][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.005376][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 246.011185][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 246.030797][ T5142] RSP: 0018:ffffc90001167940 EFLAGS: 00010006 [ 246.036871][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 246.044845][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 246.052820][ T5142] RBP: ffffc90001167ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 246.060791][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000079 [ 246.069071][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 246.077053][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 246.085977][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.092907][ T5142] CR2: 00005555676ca4e8 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 246.100904][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.109032][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.117051][ T5142] Call Trace: [ 246.120382][ T5142] ? trace_seq_printf+0x201/0x330 [ 246.125501][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 246.131220][ T5142] ? __kasan_check_write+0x14/0x20 [ 246.136336][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 246.141019][ T5142] rb_buffer_peek+0x60/0x7a0 [ 246.145700][ T5142] ring_buffer_consume+0x1b2/0x350 [ 246.150939][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 246.156487][ T5142] ? print_trace_line+0x385/0x690 [ 246.161551][ T5142] tracing_read_pipe+0x599/0xab0 [ 246.166497][ T5142] ? s_show+0x320/0x320 [ 246.170649][ T5142] vfs_read+0x209/0xa50 [ 246.174825][ T5142] ? kernel_read+0x70/0x70 [ 246.179241][ T5142] ? __kasan_check_write+0x14/0x20 [ 246.184348][ T5142] ? mutex_lock+0x92/0xf0 [ 246.188683][ T5142] ? mutex_trylock+0xb0/0xb0 [ 246.193270][ T5142] ? __fget_files+0x2e1/0x340 [ 246.197948][ T5142] ? __fdget_pos+0x2d2/0x380 [ 246.202547][ T5142] ? ksys_read+0x70/0x260 [ 246.206876][ T5142] ksys_read+0x14a/0x260 [ 246.211115][ T5142] ? vfs_write+0xd70/0xd70 [ 246.215551][ T5142] ? __kasan_check_read+0x11/0x20 [ 246.220574][ T5142] __x64_sys_read+0x7b/0x90 [ 246.225083][ T5142] do_syscall_64+0x31/0x40 [ 246.229497][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 246.235387][ T5142] RIP: 0033:0x7fdb043290d9 [ 246.239819][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.259426][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.267870][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 246.275839][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 246.283828][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 246.291796][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.299804][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 246.307786][ T5142] ---[ end trace e943a626fc033f34 ]--- [ 246.313284][ T5142] ------------[ cut here ]------------ [ 246.318751][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 246.328981][ T5142] Modules linked in: [ 246.332892][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 246.341640][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.351808][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 246.357617][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 246.377398][ T5142] RSP: 0018:ffffc90001167960 EFLAGS: 00010002 [ 246.383473][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 246.391545][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 246.399517][ T5142] RBP: ffffc90001167ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 246.407591][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000079 [ 246.415571][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 246.423723][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 246.432660][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.439251][ T5142] CR2: 00005555676ca4e8 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 246.447277][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.455255][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.463235][ T5142] Call Trace: [ 246.466623][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 246.472255][ T5142] ? __kasan_check_write+0x14/0x20 [ 246.477374][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 246.482063][ T5142] rb_advance_reader+0x2b/0x6b0 [ 246.486918][ T5142] ring_buffer_consume+0x1e6/0x350 [ 246.492032][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 246.497578][ T5142] ? print_trace_line+0x385/0x690 [ 246.502615][ T5142] tracing_read_pipe+0x599/0xab0 [ 246.507559][ T5142] ? s_show+0x320/0x320 [ 246.511723][ T5142] vfs_read+0x209/0xa50 [ 246.516141][ T5142] ? kernel_read+0x70/0x70 [ 246.520559][ T5142] ? __kasan_check_write+0x14/0x20 [ 246.525673][ T5142] ? mutex_lock+0x92/0xf0 [ 246.530303][ T5142] ? mutex_trylock+0xb0/0xb0 [ 246.534900][ T5142] ? __fget_files+0x2e1/0x340 [ 246.539583][ T5142] ? __fdget_pos+0x2d2/0x380 [ 246.544187][ T5142] ? ksys_read+0x70/0x260 [ 246.548520][ T5142] ksys_read+0x14a/0x260 [ 246.552762][ T5142] ? vfs_write+0xd70/0xd70 [ 246.557181][ T5142] ? __kasan_check_read+0x11/0x20 [ 246.562212][ T5142] __x64_sys_read+0x7b/0x90 [ 246.566725][ T5142] do_syscall_64+0x31/0x40 [ 246.571144][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 246.577036][ T5142] RIP: 0033:0x7fdb043290d9 [ 246.581451][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.601258][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.609676][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 246.617652][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 246.625638][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 246.633615][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.641594][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 246.649571][ T5142] ---[ end trace e943a626fc033f35 ]--- [ 246.655468][ T5142] ------------[ cut here ]------------ [ 246.660936][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 246.671149][ T5142] Modules linked in: [ 246.675039][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 246.683783][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.693845][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 246.699658][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 246.719686][ T5142] RSP: 0018:ffffc90001167800 EFLAGS: 00010002 [ 246.725739][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 246.733724][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 246.741682][ T5142] RBP: ffffc90001167978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 246.749642][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e00007d [ 246.757605][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 246.765570][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 246.774504][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.781072][ T5142] CR2: 00005555676ca4e8 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 246.789203][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.797161][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.805147][ T5142] Call Trace: [ 246.808428][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 246.814046][ T5142] ? __switch_to_asm+0x3a/0x60 [ 246.818793][ T5142] ? __kasan_check_write+0x14/0x20 [ 246.823896][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 246.828990][ T5142] rb_buffer_peek+0x60/0x7a0 [ 246.833568][ T5142] ring_buffer_peek+0x183/0x360 [ 246.838406][ T5142] ? ring_buffer_iter_empty+0x370/0x370 [ 246.843939][ T5142] ? preempt_schedule+0xbc/0xd0 [ 246.848774][ T5142] ? find_next_bit+0x80/0x100 [ 246.853521][ T5142] __find_next_entry+0x34d/0x6b0 [ 246.858531][ T5142] ? preempt_schedule_thunk+0x16/0x18 [ 246.863913][ T5142] ? trace_find_next_entry+0x370/0x370 [ 246.869354][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 246.874882][ T5142] ? print_trace_line+0x385/0x690 [ 246.879889][ T5142] tracing_read_pipe+0x3b8/0xab0 [ 246.884808][ T5142] ? s_show+0x320/0x320 [ 246.889037][ T5142] vfs_read+0x209/0xa50 [ 246.893176][ T5142] ? kernel_read+0x70/0x70 [ 246.897665][ T5142] ? __kasan_check_write+0x14/0x20 [ 246.902778][ T5142] ? mutex_lock+0x92/0xf0 [ 246.907089][ T5142] ? mutex_trylock+0xb0/0xb0 [ 246.911661][ T5142] ? __fget_files+0x2e1/0x340 [ 246.916321][ T5142] ? __fdget_pos+0x2d2/0x380 [ 246.921052][ T5142] ? ksys_read+0x70/0x260 [ 246.925403][ T5142] ksys_read+0x14a/0x260 [ 246.929634][ T5142] ? vfs_write+0xd70/0xd70 [ 246.934165][ T5142] ? __kasan_check_read+0x11/0x20 [ 246.939181][ T5142] __x64_sys_read+0x7b/0x90 [ 246.943672][ T5142] do_syscall_64+0x31/0x40 [ 246.948074][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 246.954135][ T5142] RIP: 0033:0x7fdb043290d9 [ 246.958539][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.978145][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.986548][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 246.994508][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 247.002463][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 247.010440][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.018440][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 247.026635][ T5142] ---[ end trace e943a626fc033f36 ]--- [ 247.032783][ T5142] ------------[ cut here ]------------ [ 247.038278][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 247.048520][ T5142] Modules linked in: [ 247.052466][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 247.061219][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.071286][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 247.077092][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 247.096789][ T5142] RSP: 0018:ffffc90001167940 EFLAGS: 00010006 [ 247.102892][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 247.110869][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 247.118845][ T5142] RBP: ffffc90001167ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 247.126910][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e00007d [ 247.134885][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 247.142872][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 247.151907][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.158488][ T5142] CR2: 00007f4f2f63b860 CR3: 000000010cf94000 CR4: 00000000003526a0 [ 247.166463][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.174443][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.182413][ T5142] Call Trace: [ 247.185750][ T5142] ? trace_seq_printf+0x201/0x330 [ 247.190780][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 247.196504][ T5142] ? __kasan_check_write+0x14/0x20 [ 247.201619][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 247.206298][ T5142] rb_buffer_peek+0x60/0x7a0 [ 247.210890][ T5142] ring_buffer_consume+0x1b2/0x350 [ 247.216103][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 247.221650][ T5142] ? print_trace_line+0x385/0x690 [ 247.226678][ T5142] tracing_read_pipe+0x599/0xab0 [ 247.231627][ T5142] ? s_show+0x320/0x320 [ 247.235795][ T5142] vfs_read+0x209/0xa50 [ 247.239972][ T5142] ? kernel_read+0x70/0x70 [ 247.244387][ T5142] ? __kasan_check_write+0x14/0x20 [ 247.249775][ T5142] ? mutex_lock+0x92/0xf0 [ 247.254281][ T5142] ? mutex_trylock+0xb0/0xb0 [ 247.258890][ T5142] ? __fget_files+0x2e1/0x340 [ 247.263590][ T5142] ? __fdget_pos+0x2d2/0x380 [ 247.268320][ T5142] ? ksys_read+0x70/0x260 [ 247.272652][ T5142] ksys_read+0x14a/0x260 [ 247.277438][ T5142] ? vfs_write+0xd70/0xd70 [ 247.281863][ T5142] ? __kasan_check_read+0x11/0x20 [ 247.286980][ T5142] __x64_sys_read+0x7b/0x90 [ 247.291485][ T5142] do_syscall_64+0x31/0x40 [ 247.296074][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 247.301964][ T5142] RIP: 0033:0x7fdb043290d9 [ 247.306379][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.325987][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.334664][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 247.342637][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 247.350607][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 247.358575][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.366555][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 247.374527][ T5142] ---[ end trace e943a626fc033f37 ]--- [ 247.380022][ T5142] ------------[ cut here ]------------ [ 247.385501][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 247.395725][ T5142] Modules linked in: [ 247.399801][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 247.408637][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.418758][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 247.424574][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 247.444267][ T5142] RSP: 0018:ffffc90001167960 EFLAGS: 00010006 [ 247.450340][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 247.458311][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 247.466281][ T5142] RBP: ffffc90001167ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 247.474472][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e00007d [ 247.482453][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 247.490433][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 247.499359][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.505952][ T5142] CR2: 00007f4f2f63b860 CR3: 000000010cf94000 CR4: 00000000003526a0 [ 247.513924][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.521901][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.529864][ T5142] Call Trace: [ 247.533161][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 247.538799][ T5142] ? __kasan_check_write+0x14/0x20 [ 247.543912][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 247.548591][ T5142] rb_advance_reader+0x2b/0x6b0 [ 247.553472][ T5142] ring_buffer_consume+0x1e6/0x350 [ 247.558576][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 247.564124][ T5142] ? print_trace_line+0x385/0x690 [ 247.569145][ T5142] tracing_read_pipe+0x599/0xab0 [ 247.574113][ T5142] ? s_show+0x320/0x320 [ 247.578286][ T5142] vfs_read+0x209/0xa50 [ 247.582436][ T5142] ? kernel_read+0x70/0x70 [ 247.586849][ T5142] ? __kasan_check_write+0x14/0x20 [ 247.591957][ T5142] ? mutex_lock+0x92/0xf0 [ 247.596373][ T5142] ? mutex_trylock+0xb0/0xb0 [ 247.601005][ T5142] ? __fget_files+0x2e1/0x340 [ 247.605727][ T5142] ? __fdget_pos+0x2d2/0x380 [ 247.610476][ T5142] ? ksys_read+0x70/0x260 [ 247.614810][ T5142] ksys_read+0x14a/0x260 [ 247.619059][ T5142] ? vfs_write+0xd70/0xd70 [ 247.623480][ T5142] ? __kasan_check_read+0x11/0x20 [ 247.628503][ T5142] __x64_sys_read+0x7b/0x90 [ 247.633048][ T5142] do_syscall_64+0x31/0x40 [ 247.637469][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 247.643369][ T5142] RIP: 0033:0x7fdb043290d9 [ 247.647787][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.667571][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.675991][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 247.684053][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 247.692036][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 247.700043][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.708019][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 247.716063][ T5142] ---[ end trace e943a626fc033f38 ]--- [ 247.722557][ T5142] ------------[ cut here ]------------ [ 247.728065][ T5142] WARNING: CPU: 1 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 247.738384][ T5142] Modules linked in: [ 247.742296][ T5142] CPU: 1 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 247.751234][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.761322][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 247.767231][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 247.786852][ T5142] RSP: 0018:ffffc90001167800 EFLAGS: 00010002 [ 247.792928][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 247.800906][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 247.808988][ T5142] RBP: ffffc90001167978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 247.817049][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000081 [ 247.825027][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 247.833004][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 247.841936][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.848524][ T5142] CR2: 00007f4f2f63b860 CR3: 000000010cf94000 CR4: 00000000003526a0 [ 247.856674][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.864650][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.872686][ T5142] Call Trace: [ 247.876000][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 247.881639][ T5142] ? __switch_to_asm+0x3a/0x60 [ 247.886413][ T5142] ? __kasan_check_write+0x14/0x20 [ 247.891561][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 247.896243][ T5142] rb_buffer_peek+0x60/0x7a0 [ 247.900838][ T5142] ring_buffer_peek+0x183/0x360 [ 247.905776][ T5142] ? ring_buffer_iter_empty+0x370/0x370 [ 247.911327][ T5142] ? preempt_schedule+0xbc/0xd0 [ 247.916276][ T5142] ? find_next_bit+0x80/0x100 [ 247.920977][ T5142] __find_next_entry+0x34d/0x6b0 [ 247.925931][ T5142] ? preempt_schedule_thunk+0x16/0x18 [ 247.931314][ T5142] ? trace_find_next_entry+0x370/0x370 [ 247.936771][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 247.942319][ T5142] ? print_trace_line+0x385/0x690 [ 247.947552][ T5142] tracing_read_pipe+0x3b8/0xab0 [ 247.952519][ T5142] ? s_show+0x320/0x320 [ 247.956686][ T5142] vfs_read+0x209/0xa50 [ 247.960848][ T5142] ? kernel_read+0x70/0x70 [ 247.965292][ T5142] ? __kasan_check_write+0x14/0x20 [ 247.970406][ T5142] ? mutex_lock+0x92/0xf0 [ 247.974744][ T5142] ? mutex_trylock+0xb0/0xb0 [ 247.979331][ T5142] ? __fget_files+0x2e1/0x340 [ 247.984012][ T5142] ? __fdget_pos+0x2d2/0x380 [ 247.988604][ T5142] ? ksys_read+0x70/0x260 [ 247.992932][ T5142] ksys_read+0x14a/0x260 [ 247.997189][ T5142] ? vfs_write+0xd70/0xd70 [ 248.001740][ T5142] ? __kasan_check_read+0x11/0x20 [ 248.006774][ T5142] __x64_sys_read+0x7b/0x90 [ 248.011280][ T5142] do_syscall_64+0x31/0x40 [ 248.015697][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 248.021583][ T5142] RIP: 0033:0x7fdb043290d9 [ 248.026000][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.045616][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.054052][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 248.062063][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 248.070038][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 248.078279][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.086345][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 248.094322][ T5142] ---[ end trace e943a626fc033f39 ]--- [ 248.100505][ T5142] ------------[ cut here ]------------ [ 248.106010][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 248.116327][ T5142] Modules linked in: [ 248.120243][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 248.128998][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.139124][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 248.144932][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 248.164541][ T5142] RSP: 0018:ffffc90001167940 EFLAGS: 00010002 [ 248.170609][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 248.178719][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 248.186693][ T5142] RBP: ffffc90001167ab8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 248.194676][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000081 [ 248.202653][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 248.210632][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 248.219648][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.226234][ T5142] CR2: 00005555676ca4e8 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 248.234209][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 248.242180][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 248.250160][ T5142] Call Trace: [ 248.253465][ T5142] ? trace_seq_printf+0x201/0x330 [ 248.258494][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 248.264136][ T5142] ? __kasan_check_write+0x14/0x20 [ 248.269248][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 248.273926][ T5142] rb_buffer_peek+0x60/0x7a0 [ 248.278519][ T5142] ring_buffer_consume+0x1b2/0x350 [ 248.283637][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 248.289181][ T5142] ? print_trace_line+0x385/0x690 [ 248.294207][ T5142] tracing_read_pipe+0x599/0xab0 [ 248.299155][ T5142] ? s_show+0x320/0x320 [ 248.303398][ T5142] vfs_read+0x209/0xa50 [ 248.307596][ T5142] ? kernel_read+0x70/0x70 [ 248.312015][ T5142] ? __kasan_check_write+0x14/0x20 [ 248.317650][ T5142] ? mutex_lock+0x92/0xf0 [ 248.321975][ T5142] ? mutex_trylock+0xb0/0xb0 [ 248.326566][ T5142] ? __fget_files+0x2e1/0x340 [ 248.331246][ T5142] ? __fdget_pos+0x2d2/0x380 [ 248.335834][ T5142] ? ksys_read+0x70/0x260 [ 248.340168][ T5142] ksys_read+0x14a/0x260 [ 248.344418][ T5142] ? vfs_write+0xd70/0xd70 [ 248.348837][ T5142] ? __kasan_check_read+0x11/0x20 [ 248.353867][ T5142] __x64_sys_read+0x7b/0x90 [ 248.358374][ T5142] do_syscall_64+0x31/0x40 [ 248.362788][ T5142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 248.368685][ T5142] RIP: 0033:0x7fdb043290d9 [ 248.373120][ T5142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.392910][ T5142] RSP: 002b:00007fdb02d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.401366][ T5142] RAX: ffffffffffffffda RBX: 00007fdb045b0fa0 RCX: 00007fdb043290d9 [ 248.409341][ T5142] RDX: 0000000000001000 RSI: 0000200000000300 RDI: 0000000000000005 [ 248.417398][ T5142] RBP: 00007fdb043c0024 R08: 0000000000000000 R09: 0000000000000000 [ 248.425369][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.433344][ T5142] R13: 00007fdb045b1038 R14: 00007fdb045b0fa0 R15: 00007fff695d0088 [ 248.441483][ T5142] ---[ end trace e943a626fc033f3a ]--- [ 248.446981][ T5142] ------------[ cut here ]------------ [ 248.452450][ T5142] WARNING: CPU: 0 PID: 5142 at kernel/trace/ring_buffer.c:4349 rb_get_reader_page+0xa78/0xbf0 [ 248.462698][ T5142] Modules linked in: [ 248.467229][ T5142] CPU: 0 PID: 5142 Comm: syz.1.1508 Tainted: G B W syzkaller #0 [ 248.475985][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.486055][ T5142] RIP: 0010:rb_get_reader_page+0xa78/0xbf0 [ 248.491864][ T5142] Code: 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 fd 27 38 00 48 8b 1b 48 8d 7b 08 be 04 00 00 00 e8 ec 29 38 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 75 91 e8 89 b2 fd ff e9 45 fe ff ff e8 7f [ 248.511474][ T5142] RSP: 0018:ffffc90001167960 EFLAGS: 00010006 [ 248.517558][ T5142] RAX: 1ffff11020030201 RBX: ffff888100052600 RCX: ffffffff8166f344 [ 248.525620][ T5142] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 248.533597][ T5142] RBP: ffffc90001167ac8 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 248.541572][ T5142] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: 000000003e000081 [ 248.549611][ T5142] R13: 1ffff11020057c13 R14: 1ffff11020057c16 R15: dffffc0000000000 [ 248.557592][ T5142] FS: 00007fdb02d826c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 248.566522][ T5142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.573104][ T5142] CR2: 00005555676ca4e8 CR3: 000000010cf94000 CR4: 00000000003526b0 [ 248.581075][ T5142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 248.589214][ T5142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 248.597655][ T5142] Call Trace: [ 248.601052][ T5142] ? ring_buffer_read_page+0x1210/0x1210 [ 248.606880][ T5142] ? __kasan_check_write+0x14/0x20 [ 248.612006][ T5142] ? _raw_spin_lock+0x94/0xf0 [ 248.616800][ T5142] rb_advance_reader+0x2b/0x6b0 [ 248.621766][ T5142] ring_buffer_consume+0x1e6/0x350 [ 248.627296][ T5142] ? ring_buffer_iter_dropped+0x60/0x60 [ 248.632855][ T5142] ? print_trace_line+0x385/0x690 [ 248.637877][ T5142] tracing_read_pipe+0x599/0xab0 [ 248.642816][ T5142] ? s_show+0x320/0x320 [ 248.646965][ T5142] vfs_read+0x209/0xa50 [ 248.651114][ T5142] ? kernel_read+0x70/0x70 [ 248.655614][ T5142] ? __kasan_check_write+0x14/0x20 [ 248.660719][ T5142] ? mutex_lock+0x92/0xf0 [ 248.665065][ T5142] ? mutex_trylock+0xb0/0xb0 [ 248.669652][ T5142] ? __fget_files+0x2e1/0x340 [ 248.674334][ T5142] ? __fdget_pos+0x2d2/0x380 [ 248.678920][ T5142] ? ksys_read+0x70/0x260 [ 248.683251][ T5142] ksys_read+0x14a/0x260