last executing test programs: 37.957302791s ago: executing program 4 (id=67): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) pipe2$watch_queue(0x0, 0x80) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)="11a398f6f9e8edfd3e18914d0e5823bf2c74f24375ccd8e8f34b2733bbc4279ca8dc45175a8a941f6555637fe198379462c16ce8b89c2b720e65a4a8371aeabb53b58796d4e9b302fa6a0e5be98db20e09216e1e20d7730be454747544bff73e2ce62f88048d9e517a3dbf215dd428f3888aaa5a42656e9d921a48ac8ca227ef4fd0c65a60072b307861e4dc2077e905e518b628a5d21989f62d92a1b92673e42a02aee48b9436e32012cd1da630ed71", 0xb0}, {&(0x7f00000014c0)="6fa7ad45c22c1910258597ee3c21bd7d5d8e3d22bf05baa4f3ac79f1cabddbb6de2242b18636bdc213a41bbd5b99be9e82364b3b841e5b14e4c42e58dcc928e4cd0c5902d389509a73084dcc776436a540a2eb703f7610ce04546a2a42f430cf011f81753cd6d7867936a7dcfc6cb0e5362bde459e914a78c2de9594f0f0021a3b75368d5b0e461597fb6730afad84f16c45f856be6a612c8e233768a763bbe54eef3d3da2a52f46cb7fa5", 0xab}, {&(0x7f0000001580)="1f74c0ad85d7985e2cbc4d1f426ae771fad3dc05eea9b175a5230a463587bdd569007b2df3b94f6e1cef3a06fff52a83379d97cfcb46535cda7b84418c1fd6b1d72008d4dd46f51977079dcd7f0032c0da9f7128ca30051a1531d6fe6041251d5a844a2481c5446e7a7a84e31d3324de9ae3d3d5f63ef379321781e518d19a6aaabbbd140520e62738bdf1b0bc6af2ef50884a7e7778beb97a897115faa90a9605acc284d1016cac5a4e8b4288ba5e7fde1e4be06804c1159c52f07970c07820611f2b12", 0xc4}, {&(0x7f0000001680)="7624bbea55e5301248d8822b720f213bf29b70d5e57ce3c2f5f2add5f26550afbc60222f826f8dc7dbc2ab26d1b4cf5401cae0cf8fe8e7794afcb1de37dc3b7bbb377c5424a3652f45b662e98d856ecae48560771147de13c4b6122d679a0d0f06d92405a27dc9e97e4252b8175965c7b513c42754f0ba49df0ace728183ce41bd6a356511f39b28f820f541e047e82b4a8dec4b5dc5bd2d19ef62a3ffc61cab42da368fab2653c9afc8b4c6b0921f575eb72607260b0c83f5a5f444da0026b7545d0e38f8cf1db7b321d3618f2d8e1614b9d9771823a195f49d3514deb45b99d18697", 0xe3}, {&(0x7f0000001780)="6c03", 0x2}, {&(0x7f00000017c0)="5470ca942d86bc80d32230c4db1bfd3cad8903270a7cba8ffe696b3b7e53d63f426ec47f66a1383860061241cad0e75bb877ad933f97068034033d58aceadabfb92ef438d9ff56d32a7c4fe7f2fd80024e1241f34564d0cf3439b92adcaa1afdd15fad18125241b1b3fc019fd1e02aec8ec8d324", 0x74}], 0x6}}, {{&(0x7f00000018c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002900)=[{&(0x7f0000001900)="f51c551c70206dd32d776d70ae97b16e17d029e2a1e75ebc981d05c459bdafbf2674700336b40b15c45f476ce1a3c7b7e0475806da0c8dc8ac2f28edcc6791a878925066e47dc432e42933af43e2b969e28d744ef22c061b358fbb933dc31021548391d0e14fc417a6cf8fd42aa73ed623a78d1b57a6f71856616f930f5ddf0eba75ae035d9590e328895dd48c98d6350e02a7004063f15655a375ffd112a3c8f6a13c933b75173b05a5290f9453478eaba69e5f2ae81d7005301a5931d92ff06c4cb92078952fad48eeb1979c448b2f61e5344ee216b336ad67d01bcce3b7160209e2b6c048a5fa314b3dca4610ca8f918e360e2b06982d13e8aa62565f9de90e169b85322dbaf0682dc1c2b3e4ecb3a3b17c784bf390fa9a083919977f4c81c2199b09b130d04636e21ab7a3919aeb3be1abed585a5770440915aa566e293582c5ccb87eec536cdb70e53a1a33029fb87f6b756b87fa8e1c626b85685b3c1f3198a03975461dc064159a8905bf47de6211edc735f243603f9eef84150aef26026e347a67b56cb5467051d2360e24fcb9fd50e59208bce3add751119b3d2bf58d6cbacd08676ffdd94b486a43ac13ca7f4bfe4bcc334534f3b9c6fc702481d6a4bf6077d6420cbe06f9ce4f6e108e8a893dd351501a989bb0973125ec0c0e1f5de7a1b42204477712c8640cc955e6df217ec372b52ab4e07885227c0cb4d549f532c76e6e3219d9f7e4cf051bce0c3028a51d1cba366b139d5307807be2d9258da30850a3c84277ec98893c67a9c13fc727e96b3eebeafa22e0fd1888033eb2fd8e225da1555bf742253402391e414d35972215f78b938b3bf04fd7c17e28f7bc0d9bdc95d85b28058ad3191d1aca53f05a7a4221d403b5de69d9f447b57e6d52d315237b410708bf870bd128ddc2cf6d5a750f86f57d18e46e5d1d3ac8b79c8e0a633562563ba00ce18795f455a70e8201bbadfa0e82a48d94df852d53cd674e101bdf9b914beb04828df0a3aefaa47d32dbb71ecd5b631f758cddad4e1f4900384030e7e1fdc0250d6cbebec2421c2205e8e218135a9d1a88c7351e6d1ddc805d12ffe7cc65ba85a295b6d0544380f09491f2578ca21e0a123e01de4abe797de2c695b1e9e3b3024eeaa3c406123a0ac1f2ea6756ffefdfbdb4551f1ec0c348a9dea9b3e3e51c4560ab43295392d041339c4e6339836fdfec888b61d6085064d11d5443b27bfbb8fdb202bbae32cca83886e7cf25d3f6303fa36a99699b8c6d8b642c73f11b3a97f8207c85e2a0b94efec16e7ed3b14c12d532613f511345953a12f3fcda625889c9a878513c676f1bfa7fcebc5de457037866f0f03074d8a6233a31f317cfe6b9271ee444743130793bd751d2def18b89f407a2fb92d4fd12b2ac436c8a82a1d37048c3ecd14ad946501ed339a4c4ab98771f07fbeab7cf89dcd3f049871134e863f20ae131379c277ea8de332c0159734c9e05da512ae740500b6834644aa917d862ac116dd548b6503417b04985944b3374d6b0d3266f21ac7614efaece12b743ca7dab05fee1420c1b94d368c35ea168dcb8f8fe9c880208a20b807c137a54aef1a3596e0731f681edd78aaec5184ec07d2ee595d4bf6fb08929af129dbf8eba7b0b145aa963b357f6a2175eeb3e1b9511a980c4949e47715b62c3dacaf47247d76b80819f48ddb74f0a7e8f659e49d8a16af67933247db6d615a71885eae1d691840aba84653320665c06f7ccae50931b669ac2e284048e5f5392dae7b11294c52f80bd62425788c23339eaa36710308e828ba46dd8e3a98680297444d18c200c135ca2f839d1448acdffcc2c9ec8c7e8205daf9986ad435e44707e1705db003c41b4d5f6a81a1c082a3690c76a1ea4b60ffa30b6d680f7811cf8ae0aaaa2b7f13399f2ef4875098f8e28494ce99a7f79e9eac8e27e3f550b036139224900361ead0c3b7f8c1c94fafa97239a1d8d92afd0ee18e78414bd179fc16e62c76739644235f7d0de81619af080af027c7d42109a2ad41ef20c9200aa85fc7a319ec6d83afc1394d5d2e4bfbf9c4649aae0fbd2394189d1031afa0c92bcfa8a1e9bfbdb5d192945dc5c039da63a7a0eb62a85412beda647f1f1984cd94d213164a77010a1483b7c3083c6fddd274427f98645f604809303f77c6a7bbe0d9b422d31b9a8dfbff31388d3627842de0ecc4749f310fc44d17b9e5d0c757de5ceb3e6c6e6ac2c958fe012c1859430226109a1f9e2a337d489d3095bc75f75b5b9329ada6767a3e14509fd279ecabac0bd59a221c1bfed1d50c2782548fad9163a7e354c8d895b1b22650afce8343f2f629395959e3cf9ff3723bfdd28fd2f5ee2ccb1f6ef3fc13ec3609dd448d4c7e94602adfbdb1014155b67f18af776899e4ec2b9c047c0bba028b561fe2826d412495b1c997b7ed039999b97de74f03f3bb0c19e58d29e2ca749bac88507d297418113d9de192ac0f2ede8b58ce52d4db9d83a9c71a59155859609fb49e83a643739604cf9b81a9065dcd9c4a2df29c1b7f2389a405eb077861fdce0afcc74f94e72398b05d2249f59f317903eaa771f5b63f9ae1edb771ab7c837afbfc3687c75b17c0379e24c47ef7714e4a020d9270b09121c36bf1123f537cb2b911dfa985f582042cb69eaf2474e1deda6ad1ff42f058ee5c22ed51c90158a93bdaf15f9a542d846fd35ade70bb4a8134d5b2ca4bd47686e95d2e0f0cff6e03ddbe55333c0264ceb56adff3af1f599e1955665cd75f3f1a565ed0fa90704a3dcfb19869fd3eb385c383a30aa8483a6f5b60a2c870e35925b52b8298b0cb825b82bd96f8762d5cd4e3108a38c448ecdce859da79305a3497a12425b5fb8c2cc6a1727d5adfcbb55b8df8140bb29a488168d4992c060b26aff13d2f216a3fab2aba9619ec508019c19951297f2005823f6dbbb5e31f4d990d587e02f3dc89ecf7394dc51b29a691a23345f0665c1feba28470c9db59ea61624748a8395826ca898aa9efe006b320398622dc392b6f92f47960ddc0834a28651fb7448a9e55bd7f1501ef0fd02fc4dd8d8d32a19ed0bb4e79f332dfbc858299f2da9614377ebc66a98e28c4f05c7e962513809b57aa2003b043b5a08ecf2c02752bd50e07ffbf2c1805f11258acf96136624da2cfac97dc825f5f29cd9512084eac2964ccde98da3ddea495ceaa1ca27fa8fb228c32f7802e12809cd6a2e87c43e71c9e150a52ca2175a6590d908514456235671ba20b456618db174fcbe7516ff9f3ce1e4df05873fb31ea509bbce047b91a32baf3f91912099a0da75c9a0f5ec343f3e3bba20a9fead52a0b207b26feeb1a1222bb1545b59c1290a8bd4058bc8c5b58cfccbf903108270d4eefef30fdc8e1ae9715b314a78d35fb5f3a4cc43f713a44ab292d9de130a062a7a6e2d8b232013a19cfceb169bc73e4b61fcaa6bb350eee2e124bb73ab07afa2ac455ba2817af051ba8bd0678a7209975818e41f21625cffec45ce9259ffd3b9610d358c903caf982e9de8986ea053402a18b459413c406a42845c3a783bef98dfb2981db998a9a20075fddbff098e07a3521060f9da80821fa36d54e8345cc9f3b619de723dabbbd6ea87c1f87c27db84caadb73165cc5e765efcaf70e72d855f341bae513049c0648bd4bb926b3a2ddb9c1720bda41dafe4d5f8bd6a8f2103b04318d1fd8fc184cd0989a646a5405843fc82c5b149115ae5f71b6b832f6e26c5e18de50d0981df3085e1874da342d18659fe06e2cfa4bee42407daac179967b78fbd62568e05a5a2d589b59a723cfb030b43b56c535ddc406b7080f2ec7ad8b47c1fdfcbbab5afe09c4d037f48bd4d49c269cf2c050f73be63247b05887274ca5cb1464de5f512f91b8d649f3507085be75e3000d8e695f3058e38b75e9d563d77f18d2c6b552e76f66cfc6da536b7f00851c6c71bdb208dc6df96bd8b5894cf8db56198038ffa251fdf728f423d49bcb4dd6c9bc21d2bb6c8ab082109a1b1aa1ade14db0c92c627f32721a5638406d77fb80670e87c16aaf12fb2a6dbc724cfa5c411b070cde0df5cd8dae6745c8b3238085642c771112afaaba000ab361a619540d9e808bbcc7a994e7cf935a46be53bf78c8449ea65be350c213a6c494c8d545e799785fb54fe75b527744df10f315784aa9695cd4160c37f8762ed12ee02b67a31670e75898d94c7ca411bf606adba08e8a48046b17ada9f5d85f01dac4c3cd2455d47ef81cfefae9c4f643e6518979fa859f12fa7a5d2f9a16fa65f827689738250147a8392df1b2900f6a9ff53e8e3a4dd1b4e3753316917041d47e2fc4babd341b86d96ac5d2e6a08c622b1acb3acd6c4f5037b3ff3b1387163fc9e56f1406da84b5b4cc89f6119a8754accca5e731f501c76d44a842e9f5c94fb63b8709d729e1a8a7d8ca7cc2ebc35e36b77e005beeb30f3ec844cb0c00e433d50424c167a93ee8247fcb1bba31c2886bae40f4c723fb566312a7749be6426ba039f01e949bdce0a4ef193f19e8c759a24e9a4751b1db535df29f6331fb69650a1524928823957199b4be96ac52da24556ea857b2c7b78685a81a8004bf9b042bce73a9f15f2255f76365c61ed01c8c1a4054a42b4140205d3a5d6ca5ab3e8ccf6f5d6f9f5365f97d27d2e879314aba1638db93edfd6aef0bbee035f0e167bcf5d7b72c7af5e93ca2ed3a035e95fc16a90a5651bd7d9502b2bf9d1d834f37b3aec0d5dfaf9bcba07fd97cd57506d786b5785b52241468fe14e5257d8197746cc8744bbeca08ba64bedcab7809c44934ceb6c0a36648e7a3b17436c3d89b915c9b3f82c429ec27b2b180b63be40034c8cf9041fb8b13db1193910a7baddacbeda31d4c324287fd17b8d245199ef21e82c9183580759313ae5b4402046977a549a69caadb5268ceb95143c02d01a93132182d95aa06b49aa694395f6896b7163bca7eb2b5e64343644e2f4cf25f9809e1b27f7dfc7235edc8b1eab437e9c594a154ef863c4da390f5703495afd3ea7a4f7fd4d79808f8b04a1f796fcb6ea802799a41908eba5ee4b387d50b6cda12a0c817c18845b6b30a445450973febbda7c6eb7cc78aa791fc8d2fa1ba86d289932e15383ad0654ebeb61add0916ec7f7cdfae1e1f8387356c112732d6d81d80f21451f702860cabbd9dd9e1f34ce85b98b75483717dd771cfb10e77572d64650dbc77667a5030793c6f76b0cbd9b30a4ffeae2eb458d61fc98fde2d972c16252f78aa48f48e27545f5a5c61253f1f5831c4ce50120caa673bbb7715c0c4f02cc5ebf124acf6ba1577fd71961edc2df5dd16363ceefd53359ccf265f5519aa593f81da1b7389e9d199a676e5a3d8e8a203ba1bb28e02885f2692b7db29de20a12f36ffef26e7fe28f6eef81fa7c7ab3d4f8464a4676fcbae6a49fece000c2e38dc67d84299534661e56a6b9265002c7526cc968b7b7994d91901b7ca26b61ff849b2073020f2cbf7b259c77d0e50221106528d62a7ca33db382bedfdc572483729830889b20d80e22467c01778d7c9754de7fc19237d7bf5d8607b13f541e2d47241c1bad52efb6c847270ab94ea6cac18bc8d5d4619fbfc19bc38e38640d09a80f5770980d87d3f0dee64f3ab18b39a91f7ecf607ce96d1b90e3707d92ef3589d008b8ef38855920aed3fbdd9a9608179611b83f8c6e2d1d8298e27d202dc62be9cb678387a112e57306030caf2e47636d29f164db601d6e95288cc0f32cb0724ccc2513303a5abfd71d6b9ef8345c5fad5d39aba8950ccd25832b83cb960e", 0x1000}], 0x1, &(0x7f0000002a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x38, 0x0, 0x7, {[@end, @ssrr={0x89, 0xf, 0x23, [@private=0xa010100, @empty, @multicast2]}, @generic={0x88, 0x4, "6901"}, @lsrr={0x83, 0x13, 0xb6, [@private=0xa010102, @loopback, @private=0xa010101, @loopback]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xef}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}], 0xd0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=[@ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x57, 0x3, 0xf, [{@loopback, 0x1}, {@loopback, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote}]}, @noop, @cipso={0x86, 0x9, 0x0, [{0x7, 0x3, "99"}]}, @lsrr={0x83, 0x7, 0xb7, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0xc, 0x2a, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @rr={0x7, 0xb, 0x43, [@private=0xa010101, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0xe6, 0x1, 0x3, [{@private=0xa010100, 0x7}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x5}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x90}}], 0x3, 0x840) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 37.877569593s ago: executing program 4 (id=68): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'ip6_vti0\x00', {}, 0x7}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000074f000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x82, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x6, 0x8, 0xfffffb9a, 0xfffffffc, 0x7, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x9f, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0xfffffff8, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x10000006, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x10, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0xffffffff, 0x5, 0x801, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x1ff, 0xb, 0x6, 0x2, 0x1, 0x1, 0x6, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0x6, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x3, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x880, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0xa, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x1d], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x10001, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0xfff, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x2000008, 0x8a8, 0x2, 0x40, 0x7, 0x0, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0x7ff, 0xf, 0x133, 0x6]}, 0x45c) 36.993304201s ago: executing program 4 (id=73): r0 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e1f, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0xff, @remote}, 'ip6gretap0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3a, 0x0, &(0x7f00007d0000)) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0582ee182141976d58", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r3, 0x4) (async, rerun: 32) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x5, @mcast1, 0x5}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000002440)={0x0, 0x4, 0x4, 0x50}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000002340)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@loopback, 0x4e24, 0x7, 0x4e22, 0x0, 0xa, 0x20, 0x20, 0x0, r6, r7}, {0xffff, 0x7, 0xb, 0x9, 0x3, 0x9, 0x80, 0x7}, {0x5, 0x3, 0x3, 0x6e9}, 0x318, 0x6e6bb7, 0x2, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x3507, 0x3, 0x0, 0x5, 0xffff, 0x5, 0x7}}, 0xe8) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000140)="937f6eeba25805e1dda888d93c5bf4a0165b420b342c0ed4226c89d48bb97f255df2ac816c6564de97cfdb33ccded58d48c4e89c15", 0x35) 36.954956683s ago: executing program 4 (id=74): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) 36.953912523s ago: executing program 4 (id=75): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "3020ec", 0x18, 0x3a, 0x1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @ndisc_na={0x88, 0x0, 0x0, 0x1, '\x00', @remote}}}}}}, 0x0) 36.628977533s ago: executing program 4 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc9) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000090000000400000003"], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001100010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x51, &(0x7f0000000480)={0x0, 0x32}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r2, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r2, &(0x7f0000000080), 0x20000000}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0xd0f, 0x7, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x6, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0x17, "761a27f0cb8f5dcab23334"}, 0xd, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r7 = dup(r6) mlockall(0x7) munlockall() syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffff57745a77aaaa1104060001080006040001ffffffffffffe0000001ffffffffffffac1e0001"], 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x1010000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, 'trans=fd,'}}]}}) 22.002832258s ago: executing program 1 (id=187): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)="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", 0x21d, 0x0, 0x0, 0x1c) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) 21.394822168s ago: executing program 32 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc9) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000090000000400000003"], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001100010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x51, &(0x7f0000000480)={0x0, 0x32}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r2, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r2, &(0x7f0000000080), 0x20000000}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0xd0f, 0x7, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x6, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@ng={0x4, 0x17, "761a27f0cb8f5dcab23334"}, 0xd, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r7 = dup(r6) mlockall(0x7) munlockall() syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffff57745a77aaaa1104060001080006040001ffffffffffffe0000001ffffffffffffac1e0001"], 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000b80), 0x1010000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, 'trans=fd,'}}]}}) 21.199935635s ago: executing program 1 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@bridge_setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x20c05}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}]}}}]}, 0x3c}}, 0x0) 21.108426197s ago: executing program 1 (id=197): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0xdb, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20004804) 21.056392559s ago: executing program 1 (id=198): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='./bus\x00', 0x10000, &(0x7f00000000c0)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x1}}, {@allow_utime={'allow_utime', 0x3d, 0x7ff}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@namecase}, {@umask={'umask', 0x3d, 0x75}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}]}, 0x1, 0x1535, &(0x7f0000002c00)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x180c002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x6000) mkdirat(0xffffffffffffff9c, 0x0, 0x61) r0 = syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000000)='./bus\x00') linkat(r0, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0x7}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@access_any}], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) fsetxattr$security_selinux(r6, &(0x7f00000001c0), &(0x7f0000000240)='system_u:object_r:cert_t:s0\x00', 0x1c, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 20.154118948s ago: executing program 1 (id=202): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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", @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x100000000, 0xa4080) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000a00)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x38}, 0x10) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 32) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async, rerun: 32) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r5, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r7, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) ioperm(0x9, 0x6, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) (async) r9 = fsopen(&(0x7f0000001340)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 19.918165835s ago: executing program 1 (id=203): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1000c0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x80) (async) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x1, 'gre0\x00'}) (async) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) (async) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000240)={0x3, 0x0, [{0x9cb, 0x0, 0x1}, {0x2f0, 0x0, 0x40}, {0x8ba, 0x0, 0x7}]}) (async) fsetxattr$security_capability(r0, &(0x7f0000000280), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x85a1, 0x3}]}, 0x14, 0x1) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz0\x00', {0xfa, 0xa, 0x8000, 0x7}, 0x8, [0x6, 0x2800, 0x9, 0xff, 0x7e, 0x2200, 0x7fffffff, 0x2, 0x7fff, 0x200, 0x7, 0x80, 0x1, 0x3, 0x0, 0x1, 0x7, 0x3, 0xfffffff8, 0x6, 0x9, 0xc000, 0x0, 0x6, 0x7, 0x2, 0x3, 0x1, 0x12, 0x3, 0x1, 0xf24f, 0x7, 0x4, 0xc37, 0x1000, 0x80000000, 0x3, 0x0, 0xb8e, 0xc, 0x0, 0x80000000, 0x0, 0x5, 0x5, 0x6, 0xe3d, 0x9, 0xfffff387, 0x10001, 0x3, 0x1000, 0x5, 0x1, 0x8000, 0x7, 0x800, 0x7f, 0x1, 0x1000, 0x8, 0x8, 0x2], [0x5, 0x5, 0x50, 0x3, 0x2, 0x1, 0x7fff, 0x80000000, 0x8, 0x4, 0x1, 0x9, 0x8, 0x9, 0x5, 0x5, 0x800, 0x3, 0x3, 0x9, 0xe, 0x8, 0x7fffffff, 0x101, 0x7, 0x8, 0x8, 0x5, 0x3, 0x8001, 0x9, 0xfffffff1, 0x2, 0x2, 0x7, 0x9, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x3, 0x8001, 0x10000, 0x7075, 0x81, 0x1ff, 0xdc7f, 0x9, 0x2, 0xe1d, 0x5, 0x6, 0xfffffff1, 0x80, 0x6, 0x2, 0xff, 0xffffffe3, 0x9, 0x4, 0x1ff, 0x8, 0xfffffffe], [0xfdce, 0x7fb, 0x5, 0x2, 0x4, 0x5, 0x9, 0x3, 0x400000, 0xfff, 0x80000000, 0x7, 0xfffffffc, 0x3ff, 0xc7b, 0x4, 0x7, 0x401, 0x3, 0x6e, 0x0, 0x0, 0x2, 0x3, 0x40, 0x5, 0x9, 0x0, 0x3, 0x8fe9, 0x7, 0x7f, 0x0, 0x9, 0xfffffffb, 0x8, 0x4, 0x1, 0x9, 0x39d3, 0xa, 0x6, 0x800, 0x9, 0x3, 0x0, 0x34e1, 0x3, 0x7, 0xfffffe00, 0x0, 0x8, 0xff, 0x401, 0xfffffffe, 0x2, 0x200, 0x5, 0x4, 0x28, 0xb2, 0xb, 0x4, 0x7fff], [0x1cc, 0x8, 0x0, 0x6, 0xfffffff9, 0x3ff, 0x8, 0x1, 0x1, 0x400, 0x2, 0x6, 0x68a, 0x8, 0x6, 0x6, 0xd, 0xfff, 0x55, 0x7e729227, 0x1, 0x0, 0x6, 0x1ff, 0x9, 0xe, 0x0, 0xa9, 0x6, 0x9, 0x8, 0xfffffffe, 0x101, 0x0, 0x33, 0x5, 0x80000000, 0xb5, 0x137, 0xf8, 0x40, 0xe0, 0x5, 0x38e3, 0x5, 0xfff, 0x80, 0x7, 0x4, 0x671, 0x0, 0x6, 0x2cb, 0xff80, 0x5, 0xd377, 0x4, 0xc4, 0x98, 0x0, 0xfef1, 0x2, 0xb, 0x7]}, 0x45c) (async, rerun: 64) r3 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x20f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0xff, "", [{{0x9, 0x4, 0x0, 0x19, 0x1, 0x3, 0x1, 0x7, 0xd8, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0xd35}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x55, 0x40, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x80, 0xf, 0x9}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x250, 0x4, 0xb2, 0x81, 0x10, 0xf3}, 0x53, &(0x7f0000000800)={0x5, 0xf, 0x53, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "88549b64b3b0d589fa47a6eb3c5c05bc"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0xe, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x5, 0xf00, 0xfffb, [0xff3fc0]}, @ssp_cap={0x20, 0x10, 0xa, 0xb, 0x5, 0x6, 0xf, 0x7, [0xc00f, 0xff000f, 0xfff0, 0x14000, 0x0]}]}, 0x8, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x44b}}, {0xed, &(0x7f00000008c0)=@string={0xed, 0x3, "5cf256e9fac486f34e6ebdedb0f609feb1ab5e0eb11cc917af8dbef9c374c3778bab9fe795c51fd5abe6289245aa0b8288f1ce4b246dd9a66fe006cee9ee73de4d26f2d4c8b3697b450e4826d3a840493d2ec5207f7f96d83b725cc0c862626dd08ddefdcb91126796be47a130a9af9e3d11d3fbdf78fcb97763337e3b1520b2fd6aebf7f4f4226f209f3edc5dd499cc6fcd35f554620761ec2dfe51a32a0d6d7ce683f08dbc6d931fcf91224760df62b1d59e878f99d42caee5f4cb4d2a28e4b86c1467c5373efc89ef5bdd7b66cfdf74622b06425430375c398f6fa066f5bf092e2c7fbb6dfe794eecb7"}}, {0x53, &(0x7f00000009c0)=@string={0x53, 0x3, "58d784620551382c27897b7ba298c916bc5d8796bfbe9267503e78cf2236293d7f1898ce5b220de2cbf9aa8b24e5762525bdd7ee47166ec7e10cf289357f4d15fc760e5c877805f81fcdf152385911c6b6"}}, {0xa6, &(0x7f0000000a40)=@string={0xa6, 0x3, "c7398af42e460a16b9b3a81e43b9274321da481320fe7dd3a4b7f6fd3aa33d1169ac4b0072df3361321c0909b3938313f422b8b4f54f7baf4c23f4a9e03d7b5d6429e45b8e38723c0a5719feea5b3dcded255b0f72f7ef9c17ae7521650cc22a95d19f6a661ab553ed07debe4206e1ca9678f9ca98dccef84df38835de2fb892a095a0901e5be1c1b377a97077919b8bfc05fcdf904dd5809bc33831c3bd47b7ede3e9ef"}}, {0x83, &(0x7f0000000b00)=@string={0x83, 0x3, "6deed83b4a8871272c2c6e75b0a4df105a728be79ac1bb29c2463f671cc86c8fd56eb5c74a7f80ebac31f5930791743aa0d4cfe49c104379c61fadf5449f140c0225c3aeebfb1e2160c1b812a4c93a6599a9c786997bc96010e707486622493f0c8c8c8bdaf58108b5e6173d77008313cdc72f051099a32108a7ce9781deec2eca"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x2001}}, {0x8, &(0x7f0000000c00)=@string={0x8, 0x3, "c4fb8e30d9f7"}}, {0x92, &(0x7f0000000c40)=@string={0x92, 0x3, "b5527a19d814f8649b1de1c05957a67d9aaf889fca3ecf543b95065b2a7e356725dd2f058057a1a11dbb1ec34458f8b34f2b2c41aa2baadadcc3db7db64f75ae4b2103ad5ca9df9088e07dffa2fc91c547b22b970a9d4e18f451da1dd6d32aa7da62888f7f1f741d7fcf293354348fa7fef8b39b1af445d61d2c6a728d7a5b5521cd79ffe499bf8e4542c626703ad43d"}}]}) (rerun: 64) syz_usb_control_io$hid(r3, &(0x7f0000000f80)={0x24, &(0x7f0000000d80)={0x40, 0x22, 0x68, {0x68, 0x23, "e74622ea2e7f83636ff0a16fb34446c81686cdf657092ed40fb572f7e5cddd177ad98e5e3b07fe5cc7c1b057019e0afb811a993c0e90c3e1c5e2082349ea1370b43f9b1d3655b54723b93c0a46489ddff5c52fea73c8410c02d2a4f0d4727f98e0c85df513d1"}}, &(0x7f0000000e00)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "eaf10ba411daf21ed133c555ed563ad2200ed8c4df684fd85532fd9a45abbf0ed29c79204c2151e0c96ac1a09a8fc27a3b5532568d3c96edf52b1cba10240e9ac0592841cf34f7d0145ed5df038fc92396a57203c20f90c1eff8dc50668ee574f0d21402173075b5db2ee7146f6c40e2c955f5b3c023486db95facf1d27f577a6b389d5b03981078dd63576a133b131af870b36d74cbe9e0642891482ed14631646ecbffcfeae34b1fc9bfcc59e30bb3d9a076028e7f0469b7e68522fd377c"}}, &(0x7f0000000f00)={0x0, 0x22, 0x2a, {[@global=@item_4={0x3, 0x1, 0x7, "ecacde6c"}, @local=@item_4={0x3, 0x2, 0x7, "60d8a32b"}, @global=@item_4={0x3, 0x1, 0x2, "935c6071"}, @main=@item_012={0x2, 0x0, 0x9, "efe3"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x7, "e8cd46e8"}, @main=@item_4={0x3, 0x0, 0xb, "873ed7ad"}, @main=@item_4={0x3, 0x0, 0xa, "8dc85a71"}, @global=@item_012={0x2, 0x1, 0x3, "f0b9"}, @main=@item_4={0x3, 0x0, 0xb, "c9144021"}]}}, &(0x7f0000000f40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe8, 0x7, 0x1, {0x22, 0xfe5}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000fc0)={0x0, 0x14, 0x36, "a521e001cd7317943c6fcd5036a7ef1a84be5fb0f4b9586eec37e713dd10acbeb765990cd5862e7c1de3234ba8195b0b492d885f6a02"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001080)={0x20, 0x1, 0x72, "ae8e03b28c6fc5f6fea054fccf4e2340c58b192e7205dc5c0879fcd5a911e7dbd3c5f03bebe92c9aa42c1ef251d97e4a9f1034a1571a2232415035ab6f6625b23ce70e8c760b8cfddd357cd6e877489ec51d061462ea2d5703ab7b8608870b26e9b6dd7bae8135851049bf598185833b6c46"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x6}}) (async, rerun: 64) r4 = fsopen(&(0x7f0000001180)='mqueue\x00', 0x0) (rerun: 64) r5 = fsmount(r4, 0x1, 0x4a) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f00000011c0), &(0x7f0000001200)=0x4) (async, rerun: 32) r6 = openat$cgroup_ro(r0, &(0x7f0000001240)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async, rerun: 32) syz_clone(0x8008000, &(0x7f0000001280)="37181de632f5adecee0dd2325d76efc39f334e4d94dbebf601185b53f3578009182d4defc7b13674b61ec17a7429cec57f0bcc837108c098ec700e605dfd144530a850b8fb366e019539355f92fd9653585a7fd632e4e9312f9cfc5794dfc601a41df52d69861fd4ccbbe771a093f14b03640e1e0d311b90096f", 0x7a, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="9e145fdc8d8562cdfcd3b853c32b74d0dd98c2090bc4f2afd72f0c8acb168f7d4573b1c9e5") (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000001440)={0x14, &(0x7f00000013c0)={0x40, 0x24, 0x2f, {0x2f, 0x23, "72e465a272b1e056e4c36e7bf324dff811a758d5ea0510ff51ec5bee68941e074eb3ee595481c167933f882df7"}}, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000001600)={0x34, &(0x7f0000001480)={0x0, 0x0, 0x17, "c2aa8dfdd3969e0f62ae363cb33d7caddb23b8aaaf8d66"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x92}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000001580)={0x40, 0xa0, 0x4, 0x8d4}, &(0x7f00000015c0)={0xc0, 0xa2, 0x2f, "88f6404cdc4ef75f09b27d2345296b6af0e363407d0ecb6bc27c4b83ebacce497e3b5a16616071ade794ca4c27688b"}}) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3b) (rerun: 64) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000001640)={0x1ff, 0x800, 0x1}) (async) ioctl$TCSBRKP(r6, 0x5425, 0x2) (async) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000001680)) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000016c0)={0x1, 0x0, @pic={0x3, 0xc3, 0x98, 0x0, 0x8, 0x5d, 0x3, 0x3, 0xe, 0x9, 0xf7, 0x7f, 0x6, 0x9, 0x40, 0xe}}) (async, rerun: 32) syz_usb_control_io(r3, &(0x7f0000001a80)={0x2c, &(0x7f0000001900)={0x0, 0x3b, 0x6e, {0x6e, 0x9, "7ef7eee82c9b3a16b46c8d692876c47b880284e0637e789898bd56506db88d512311e135e15e28125e8cf1a7074eb38992b14bbd801c8f76ba4deb53fe95a94c3b992b95a4b9392a4e38e7abb2fbb2628c688e2b16e90888be374ab4d2ba068319c5d9eb73a67a64ba194a74"}}, &(0x7f0000001980)={0x0, 0x3, 0x15, @string={0x15, 0x3, "7560c7b948c20931ade3ca03154944de2b20b8"}}, &(0x7f00000019c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "3951d341f600aed2e75a92ea60466c89"}]}}, &(0x7f0000001a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x11, 0xe0, 0x5, 0x8, "12b315d7", "f3e2406f"}}, &(0x7f0000001a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0xc, 0x5, 0x2, 0x9, 0x4}}}, &(0x7f0000001f00)={0x84, &(0x7f0000001ac0)={0x20, 0x14, 0x3b, "c75817adc4274e72d67a4ebc0e14cb406f1c0f801e74374240a27be5ff32d826171bc3a5dbb4402864263c8b130bdf7667ab2f2c1c80cdf3d76a61"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001bc0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001c00)={0x20, 0x0, 0x8, {0x160, 0x80, [0xf00]}}, &(0x7f0000001c40)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001c80)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000001cc0)={0x40, 0xb, 0x2, "72a4"}, &(0x7f0000001d00)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000001d40)={0x40, 0x13, 0x6}, &(0x7f0000001d80)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001dc0)={0x40, 0x19, 0x2, "fdab"}, &(0x7f0000001e00)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000001e40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001e80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001ec0)={0x40, 0x21, 0x1, 0xc6}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r5) accept$nfc_llcp(r6, &(0x7f0000002000), &(0x7f0000002080)=0x60) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002100), r6) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x3c, r8, 0x100, 0xa00, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x3c}}, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000002580)={0x14, &(0x7f0000002400)={0x20, 0x22, 0x102, {0x102, 0x10, "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"}}, &(0x7f0000002540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, &(0x7f0000002800)={0x44, &(0x7f00000025c0)={0x20, 0x0, 0x77, "b76ba54fb51cc4ed2039910c12abd0123a697dcaa540d9c245f232ff64e2b9809cb8f8695154546b76bb9ec19f99e445171dd3bd96883224ff1bbbb2e28c82b103c9c5e02c4cfe7ebf6eb42b48230dcd1efff38d77f02eda0291e269ab72acdddddc9d3d0f4f34bb1554b188c9fa0a6dee903eb4c3ffc5"}, &(0x7f0000002640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000026c0)={0x20, 0x81, 0x3, "bf49af"}, &(0x7f0000002700)={0x20, 0x82, 0x3, 'y0p'}, &(0x7f0000002740)={0x20, 0x83, 0x3, "849587"}, &(0x7f0000002780)={0x20, 0x84, 0x1, "f8"}, &(0x7f00000027c0)={0x20, 0x85, 0x3, "9f7285"}}) 19.886928736s ago: executing program 33 (id=203): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1000c0, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x80) (async) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x1, 'gre0\x00'}) (async) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil) (async) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000000240)={0x3, 0x0, [{0x9cb, 0x0, 0x1}, {0x2f0, 0x0, 0x40}, {0x8ba, 0x0, 0x7}]}) (async) fsetxattr$security_capability(r0, &(0x7f0000000280), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x85a1, 0x3}]}, 0x14, 0x1) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz0\x00', {0xfa, 0xa, 0x8000, 0x7}, 0x8, [0x6, 0x2800, 0x9, 0xff, 0x7e, 0x2200, 0x7fffffff, 0x2, 0x7fff, 0x200, 0x7, 0x80, 0x1, 0x3, 0x0, 0x1, 0x7, 0x3, 0xfffffff8, 0x6, 0x9, 0xc000, 0x0, 0x6, 0x7, 0x2, 0x3, 0x1, 0x12, 0x3, 0x1, 0xf24f, 0x7, 0x4, 0xc37, 0x1000, 0x80000000, 0x3, 0x0, 0xb8e, 0xc, 0x0, 0x80000000, 0x0, 0x5, 0x5, 0x6, 0xe3d, 0x9, 0xfffff387, 0x10001, 0x3, 0x1000, 0x5, 0x1, 0x8000, 0x7, 0x800, 0x7f, 0x1, 0x1000, 0x8, 0x8, 0x2], [0x5, 0x5, 0x50, 0x3, 0x2, 0x1, 0x7fff, 0x80000000, 0x8, 0x4, 0x1, 0x9, 0x8, 0x9, 0x5, 0x5, 0x800, 0x3, 0x3, 0x9, 0xe, 0x8, 0x7fffffff, 0x101, 0x7, 0x8, 0x8, 0x5, 0x3, 0x8001, 0x9, 0xfffffff1, 0x2, 0x2, 0x7, 0x9, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x3, 0x8001, 0x10000, 0x7075, 0x81, 0x1ff, 0xdc7f, 0x9, 0x2, 0xe1d, 0x5, 0x6, 0xfffffff1, 0x80, 0x6, 0x2, 0xff, 0xffffffe3, 0x9, 0x4, 0x1ff, 0x8, 0xfffffffe], [0xfdce, 0x7fb, 0x5, 0x2, 0x4, 0x5, 0x9, 0x3, 0x400000, 0xfff, 0x80000000, 0x7, 0xfffffffc, 0x3ff, 0xc7b, 0x4, 0x7, 0x401, 0x3, 0x6e, 0x0, 0x0, 0x2, 0x3, 0x40, 0x5, 0x9, 0x0, 0x3, 0x8fe9, 0x7, 0x7f, 0x0, 0x9, 0xfffffffb, 0x8, 0x4, 0x1, 0x9, 0x39d3, 0xa, 0x6, 0x800, 0x9, 0x3, 0x0, 0x34e1, 0x3, 0x7, 0xfffffe00, 0x0, 0x8, 0xff, 0x401, 0xfffffffe, 0x2, 0x200, 0x5, 0x4, 0x28, 0xb2, 0xb, 0x4, 0x7fff], [0x1cc, 0x8, 0x0, 0x6, 0xfffffff9, 0x3ff, 0x8, 0x1, 0x1, 0x400, 0x2, 0x6, 0x68a, 0x8, 0x6, 0x6, 0xd, 0xfff, 0x55, 0x7e729227, 0x1, 0x0, 0x6, 0x1ff, 0x9, 0xe, 0x0, 0xa9, 0x6, 0x9, 0x8, 0xfffffffe, 0x101, 0x0, 0x33, 0x5, 0x80000000, 0xb5, 0x137, 0xf8, 0x40, 0xe0, 0x5, 0x38e3, 0x5, 0xfff, 0x80, 0x7, 0x4, 0x671, 0x0, 0x6, 0x2cb, 0xff80, 0x5, 0xd377, 0x4, 0xc4, 0x98, 0x0, 0xfef1, 0x2, 0xb, 0x7]}, 0x45c) (async, rerun: 64) r3 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x20f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0xff, "", [{{0x9, 0x4, 0x0, 0x19, 0x1, 0x3, 0x1, 0x7, 0xd8, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0xd35}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x55, 0x40, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x80, 0xf, 0x9}}]}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x250, 0x4, 0xb2, 0x81, 0x10, 0xf3}, 0x53, &(0x7f0000000800)={0x5, 0xf, 0x53, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "88549b64b3b0d589fa47a6eb3c5c05bc"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0xe, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x5, 0xf00, 0xfffb, [0xff3fc0]}, @ssp_cap={0x20, 0x10, 0xa, 0xb, 0x5, 0x6, 0xf, 0x7, [0xc00f, 0xff000f, 0xfff0, 0x14000, 0x0]}]}, 0x8, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x44b}}, {0xed, &(0x7f00000008c0)=@string={0xed, 0x3, "5cf256e9fac486f34e6ebdedb0f609feb1ab5e0eb11cc917af8dbef9c374c3778bab9fe795c51fd5abe6289245aa0b8288f1ce4b246dd9a66fe006cee9ee73de4d26f2d4c8b3697b450e4826d3a840493d2ec5207f7f96d83b725cc0c862626dd08ddefdcb91126796be47a130a9af9e3d11d3fbdf78fcb97763337e3b1520b2fd6aebf7f4f4226f209f3edc5dd499cc6fcd35f554620761ec2dfe51a32a0d6d7ce683f08dbc6d931fcf91224760df62b1d59e878f99d42caee5f4cb4d2a28e4b86c1467c5373efc89ef5bdd7b66cfdf74622b06425430375c398f6fa066f5bf092e2c7fbb6dfe794eecb7"}}, {0x53, &(0x7f00000009c0)=@string={0x53, 0x3, "58d784620551382c27897b7ba298c916bc5d8796bfbe9267503e78cf2236293d7f1898ce5b220de2cbf9aa8b24e5762525bdd7ee47166ec7e10cf289357f4d15fc760e5c877805f81fcdf152385911c6b6"}}, {0xa6, &(0x7f0000000a40)=@string={0xa6, 0x3, "c7398af42e460a16b9b3a81e43b9274321da481320fe7dd3a4b7f6fd3aa33d1169ac4b0072df3361321c0909b3938313f422b8b4f54f7baf4c23f4a9e03d7b5d6429e45b8e38723c0a5719feea5b3dcded255b0f72f7ef9c17ae7521650cc22a95d19f6a661ab553ed07debe4206e1ca9678f9ca98dccef84df38835de2fb892a095a0901e5be1c1b377a97077919b8bfc05fcdf904dd5809bc33831c3bd47b7ede3e9ef"}}, {0x83, &(0x7f0000000b00)=@string={0x83, 0x3, "6deed83b4a8871272c2c6e75b0a4df105a728be79ac1bb29c2463f671cc86c8fd56eb5c74a7f80ebac31f5930791743aa0d4cfe49c104379c61fadf5449f140c0225c3aeebfb1e2160c1b812a4c93a6599a9c786997bc96010e707486622493f0c8c8c8bdaf58108b5e6173d77008313cdc72f051099a32108a7ce9781deec2eca"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x2001}}, {0x8, &(0x7f0000000c00)=@string={0x8, 0x3, "c4fb8e30d9f7"}}, {0x92, &(0x7f0000000c40)=@string={0x92, 0x3, "b5527a19d814f8649b1de1c05957a67d9aaf889fca3ecf543b95065b2a7e356725dd2f058057a1a11dbb1ec34458f8b34f2b2c41aa2baadadcc3db7db64f75ae4b2103ad5ca9df9088e07dffa2fc91c547b22b970a9d4e18f451da1dd6d32aa7da62888f7f1f741d7fcf293354348fa7fef8b39b1af445d61d2c6a728d7a5b5521cd79ffe499bf8e4542c626703ad43d"}}]}) (rerun: 64) syz_usb_control_io$hid(r3, &(0x7f0000000f80)={0x24, &(0x7f0000000d80)={0x40, 0x22, 0x68, {0x68, 0x23, "e74622ea2e7f83636ff0a16fb34446c81686cdf657092ed40fb572f7e5cddd177ad98e5e3b07fe5cc7c1b057019e0afb811a993c0e90c3e1c5e2082349ea1370b43f9b1d3655b54723b93c0a46489ddff5c52fea73c8410c02d2a4f0d4727f98e0c85df513d1"}}, &(0x7f0000000e00)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "eaf10ba411daf21ed133c555ed563ad2200ed8c4df684fd85532fd9a45abbf0ed29c79204c2151e0c96ac1a09a8fc27a3b5532568d3c96edf52b1cba10240e9ac0592841cf34f7d0145ed5df038fc92396a57203c20f90c1eff8dc50668ee574f0d21402173075b5db2ee7146f6c40e2c955f5b3c023486db95facf1d27f577a6b389d5b03981078dd63576a133b131af870b36d74cbe9e0642891482ed14631646ecbffcfeae34b1fc9bfcc59e30bb3d9a076028e7f0469b7e68522fd377c"}}, &(0x7f0000000f00)={0x0, 0x22, 0x2a, {[@global=@item_4={0x3, 0x1, 0x7, "ecacde6c"}, @local=@item_4={0x3, 0x2, 0x7, "60d8a32b"}, @global=@item_4={0x3, 0x1, 0x2, "935c6071"}, @main=@item_012={0x2, 0x0, 0x9, "efe3"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x7, "e8cd46e8"}, @main=@item_4={0x3, 0x0, 0xb, "873ed7ad"}, @main=@item_4={0x3, 0x0, 0xa, "8dc85a71"}, @global=@item_012={0x2, 0x1, 0x3, "f0b9"}, @main=@item_4={0x3, 0x0, 0xb, "c9144021"}]}}, &(0x7f0000000f40)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe8, 0x7, 0x1, {0x22, 0xfe5}}}}, &(0x7f0000001140)={0x2c, &(0x7f0000000fc0)={0x0, 0x14, 0x36, "a521e001cd7317943c6fcd5036a7ef1a84be5fb0f4b9586eec37e713dd10acbeb765990cd5862e7c1de3234ba8195b0b492d885f6a02"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001080)={0x20, 0x1, 0x72, "ae8e03b28c6fc5f6fea054fccf4e2340c58b192e7205dc5c0879fcd5a911e7dbd3c5f03bebe92c9aa42c1ef251d97e4a9f1034a1571a2232415035ab6f6625b23ce70e8c760b8cfddd357cd6e877489ec51d061462ea2d5703ab7b8608870b26e9b6dd7bae8135851049bf598185833b6c46"}, &(0x7f0000001100)={0x20, 0x3, 0x1, 0x6}}) (async, rerun: 64) r4 = fsopen(&(0x7f0000001180)='mqueue\x00', 0x0) (rerun: 64) r5 = fsmount(r4, 0x1, 0x4a) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f00000011c0), &(0x7f0000001200)=0x4) (async, rerun: 32) r6 = openat$cgroup_ro(r0, &(0x7f0000001240)='blkio.bfq.io_queued\x00', 0x0, 0x0) (async, rerun: 32) syz_clone(0x8008000, &(0x7f0000001280)="37181de632f5adecee0dd2325d76efc39f334e4d94dbebf601185b53f3578009182d4defc7b13674b61ec17a7429cec57f0bcc837108c098ec700e605dfd144530a850b8fb366e019539355f92fd9653585a7fd632e4e9312f9cfc5794dfc601a41df52d69861fd4ccbbe771a093f14b03640e1e0d311b90096f", 0x7a, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="9e145fdc8d8562cdfcd3b853c32b74d0dd98c2090bc4f2afd72f0c8acb168f7d4573b1c9e5") (async) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000001440)={0x14, &(0x7f00000013c0)={0x40, 0x24, 0x2f, {0x2f, 0x23, "72e465a272b1e056e4c36e7bf324dff811a758d5ea0510ff51ec5bee68941e074eb3ee595481c167933f882df7"}}, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, &(0x7f0000001600)={0x34, &(0x7f0000001480)={0x0, 0x0, 0x17, "c2aa8dfdd3969e0f62ae363cb33d7caddb23b8aaaf8d66"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x92}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001540)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000001580)={0x40, 0xa0, 0x4, 0x8d4}, &(0x7f00000015c0)={0xc0, 0xa2, 0x2f, "88f6404cdc4ef75f09b27d2345296b6af0e363407d0ecb6bc27c4b83ebacce497e3b5a16616071ade794ca4c27688b"}}) (async, rerun: 64) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3b) (rerun: 64) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000001640)={0x1ff, 0x800, 0x1}) (async) ioctl$TCSBRKP(r6, 0x5425, 0x2) (async) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000001680)) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f00000016c0)={0x1, 0x0, @pic={0x3, 0xc3, 0x98, 0x0, 0x8, 0x5d, 0x3, 0x3, 0xe, 0x9, 0xf7, 0x7f, 0x6, 0x9, 0x40, 0xe}}) (async, rerun: 32) syz_usb_control_io(r3, &(0x7f0000001a80)={0x2c, &(0x7f0000001900)={0x0, 0x3b, 0x6e, {0x6e, 0x9, "7ef7eee82c9b3a16b46c8d692876c47b880284e0637e789898bd56506db88d512311e135e15e28125e8cf1a7074eb38992b14bbd801c8f76ba4deb53fe95a94c3b992b95a4b9392a4e38e7abb2fbb2628c688e2b16e90888be374ab4d2ba068319c5d9eb73a67a64ba194a74"}}, &(0x7f0000001980)={0x0, 0x3, 0x15, @string={0x15, 0x3, "7560c7b948c20931ade3ca03154944de2b20b8"}}, &(0x7f00000019c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "3951d341f600aed2e75a92ea60466c89"}]}}, &(0x7f0000001a00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x11, 0xe0, 0x5, 0x8, "12b315d7", "f3e2406f"}}, &(0x7f0000001a40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x4, 0xc, 0x5, 0x2, 0x9, 0x4}}}, &(0x7f0000001f00)={0x84, &(0x7f0000001ac0)={0x20, 0x14, 0x3b, "c75817adc4274e72d67a4ebc0e14cb406f1c0f801e74374240a27be5ff32d826171bc3a5dbb4402864263c8b130bdf7667ab2f2c1c80cdf3d76a61"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001bc0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001c00)={0x20, 0x0, 0x8, {0x160, 0x80, [0xf00]}}, &(0x7f0000001c40)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000001c80)={0x40, 0x9, 0x1, 0xc}, &(0x7f0000001cc0)={0x40, 0xb, 0x2, "72a4"}, &(0x7f0000001d00)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000001d40)={0x40, 0x13, 0x6}, &(0x7f0000001d80)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000001dc0)={0x40, 0x19, 0x2, "fdab"}, &(0x7f0000001e00)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000001e40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001e80)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000001ec0)={0x40, 0x21, 0x1, 0xc6}}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001fc0), r5) accept$nfc_llcp(r6, &(0x7f0000002000), &(0x7f0000002080)=0x60) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002100), r6) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x3c, r8, 0x100, 0xa00, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x3c}}, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000002580)={0x14, &(0x7f0000002400)={0x20, 0x22, 0x102, {0x102, 0x10, "bf8565312d9ed834d48e2fd62882a6ab6cd20386ab6a910ab2d6a0c748d40f5a330513a61d386767369ff4162169a014d4f40e1d507acfef69d87410defe099f7c7d298ef6aad13c429221d0c911727b22069b39f32490016f50d3bf977b39f6209452af016cca252e3f3fdb11264923c3b3e9ed7840cfe2c311e69e83e7b84b7b1a21d8e825508b4891072e700b929f870f9180880a324c4f485d08fe1ef0a36e52ec310588073b26fdfc3244e47efce02d133bc27ee9dd9adc2348107d8ece1ab04ac306f7af539045491914b8e9e89d56229f8e8dd8650417576dee43b489ca7e717a5b1f53add4d5df93f4bad0876f6f9f09a53bf272a844e73c711d5d9e"}}, &(0x7f0000002540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3401}}}, &(0x7f0000002800)={0x44, &(0x7f00000025c0)={0x20, 0x0, 0x77, "b76ba54fb51cc4ed2039910c12abd0123a697dcaa540d9c245f232ff64e2b9809cb8f8695154546b76bb9ec19f99e445171dd3bd96883224ff1bbbb2e28c82b103c9c5e02c4cfe7ebf6eb42b48230dcd1efff38d77f02eda0291e269ab72acdddddc9d3d0f4f34bb1554b188c9fa0a6dee903eb4c3ffc5"}, &(0x7f0000002640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000002680)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000026c0)={0x20, 0x81, 0x3, "bf49af"}, &(0x7f0000002700)={0x20, 0x82, 0x3, 'y0p'}, &(0x7f0000002740)={0x20, 0x83, 0x3, "849587"}, &(0x7f0000002780)={0x20, 0x84, 0x1, "f8"}, &(0x7f00000027c0)={0x20, 0x85, 0x3, "9f7285"}}) 5.846725093s ago: executing program 2 (id=326): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101402, 0x95) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0x6c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3a8}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611077000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 5.835651004s ago: executing program 2 (id=327): syz_usb_connect(0x0, 0x36, &(0x7f00000024c0)={{0x12, 0x1, 0x200, 0xf9, 0x29, 0x71, 0x8, 0xfe6, 0x8101, 0xc2d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x7, 0xa0, 0x6e, "", [{{0x9, 0x4, 0x18, 0x8, 0x2, 0xca, 0x95, 0xe, 0x1, [], [{{0x9, 0x5, 0x5, 0x3, 0x3ff, 0x3, 0x81, 0xa0}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x8, 0x9, 0x5a}}]}}]}}]}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x3f, 0x151a, &(0x7f0000001a40)="$eJzs3AvYTdX2MPAx5pxLL0k7yX2OORY7uUySJJeERJIkSZJbQpIkSUi85JaEJOSe5B6SW0ju91vuSXIkSRISEub36HQ+p9M5X+f8T9/f/3/e8Xue9Zhjrz3GHst4n73XWs+732/aDahUp3KFWswM/xb88z+pAJACAL0B4GoAiACgeObimQEHQ3qNqf/ei4g/1oOTL3cH4nKS+adtMv+0Teaftsn80zaZf9om80/bZP5pm8xfiLRs85Qc18iWdrf/vvv/IPf//8eRz///IAcLj/xibeHr2v8LKTL/tE3mn7bJ/NM2mX+aov72AZl/WnP+V5HM/z9cBFD+/7Fb5p+2yfyFSMv+S/eNS1z++9ay/THb5f75E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRNpwJlxgA+Mv6cvclhBBCCCGEEEKIP0644nJ3IIQQQgghhBBCiP//EBRoMBBBOrgCUiA9ZIArISNcBZngakjANZAZroUscB1khWyQHXJATsgFucECgQOGGPJAXkjC9ZAPboD8UAAKQiHwUBiKwI1QFG6CYnAzFIdboATcCiWhFJSGMnAblIXboRyUhwpwB1SEO6ESVIa7oArcDVXhHqgG90J1uA9qwP1QEx6AWvAg1IaHoA48DHXhEagH9aEBNIRG/6X8F6ATvAidoQukQlfoBi9Bd+gBPaEX9IaXoQ+8An3hVegH/WEAvAYD4XUYBG/AYBgCQ+FNGAbDYQSMhFEwGsbAWzAW3oZx8A6MhwkwESbBZJgCU+FdmAbTYQa8BzPhfZgFs2EOzIV58AHMhwWwED6ERfARLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNsho9hC2yFbbAddsBO2AWfwG74FPbAZ7AXPv8X80//TX57BARUqNCgwXSYDlMwBTNgBsyIGTETZsIEJjAzZsYsmAWzYlbMjtkxJ+bE3JgbCQkZGfNgHkxiEvNhPsyP+bEgFkSPHotgESyKN2ExLIbFsTiWwBJYEkthKSyDZbAslsVyWA4rYAWsiBWxElbCu/AuvBurYlWshtWwOlbHGlgDa2JNrIW1sDbWxjpYB+tiXayH9bABNsBG2AgbY2Nsgk2wGTbD5tgcW2ALbIktsRW2wtbYGttgG2yLbbEdtsP22AE74Av4Ar6IL2IXrKi6Yjfsht2xO/bEXtgLX8Y++Aq+gq9iP+yPA/A1fA1fx0F4CgfjEByKQ7GsGo4jcCSyGo1jcAyOxbE4DsfheJyAE3ASTsYpOBWn4jScjtPxPZyJ7+P7OBtn41ych/NwPi7AhbgQF+FpXIxLcCkuw+W4ApfjKlyNq3AtrsO1uAE34CbchB/jx7gVt+J23I47cSd+gp/gp/gp9sO9uBf34T7cj/vxAB7Ag3gQD+EhPIyH8QgewaN4FI/hcTyBx/EknsRTeBrP4Bk8i2fxHD6X86vaOwus6QfqIqOMSqfSqRSVojKoDCqjyqgyqUwqoRIqs8qssqgsKqvKqrKr7Cqnyqlyq9yKFClWscqj8qikSqp8Kp/Kr/Krgqqg8sqrIqqIKqqKqmKqmCqublEl1K2qpCqlmvoyqowqq5r5cqq8qqAqqIrqTlVJVVaVVRVVRVVVVVU1VU1VV9VVDXW/qqm6Yk98UF2cTB3VH+uqAVhP1VcNVEP1Oj6qGqtB2EQ1Vc3U42oIDsYWqrFvqZ5SrdQIbK2eUSPxWdVWjcZ26nnVXnVQHdULqpNq4jun++UtUE3C7qqH6ql6qWl4p7o4sUrqVdVP9VcD1GtqLr6uBqk31GA1RA1Vb6phargaoUaqUWq0GqPeUmPV22qcekeNVxPURDVJTVZT1FT1rpqmpqsZ6j01U72vZqnZao6aq+apD9R8tUAtVB+qReojtVgtUUvVMrVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZfay2qK1qm9qudqidapf6RO1Wn6o96jO1V32u9qk/qf3qC3VAfakOqq/UIfW1Oqy+UUfUt+qo+k4dU8fVCfW9Oql+UKfUaXVG/ajOqp/UOXVeXVBBgUattNZGRzqdvkKn6PQ6g75SZ9RX6Uz6ap3Q1+jM+lqdRV+ns+psOrvOoXPqXDq3tpq006xjnUfn1Ul9vc6nb9D5dQFdUBfSXhfWRfSNuqi+SRfTN+vi+hZdQt+qS+pSurQuo2/TZfXtupwuryvoO3RFfaeupCvru3QVfbeuqu/R1fS9urq+T9fQ9+ua+gFdSz+oa+uHdB39sK6rH9H1dH3dQDfUjfSjurF+TDfRTXUz/bhurp/QLfSTuqV+SrfST+vW+hndRj+r2+rndDv9vG6vO+iO+ry+oIPurLvoVN1Vd9Mv6e66h+6pe+ne+mXdR7+i++pXdT/dXw/Qr+mB+nU9SL+hB+sheqh+Uw/Tw/UIPVKP0qP1GP2WHqvf1uP0O3q8nqAn6kl6sp6ie/5SacY/kf/238nv+/Orb9Kb9cd6i96qt+nteofeqXfpXXq33q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/p4/pH/b0+qX/Qp/RpfVr/qM/qs/rcL/8HYNAoo40xkUlnrjApJr3JYK40Gc1VJpO52iTMNSazudZkMdeZrCabyW5ymJwml8ltrCHjDJvY5DF5TdJcb/KZG0x+U8AUNIWMN4VNEXPjv53/e/01Mo1MY9PYNDFNTDPTzDQ3zU0L08K0NC1NK9PKtDatTRvTxrQ1bU070860N+1NR9PRdDKdTGfT2aSaVNPNvGS6mx6mp+llepuXTR/Tx/Q1fU0/088MMAPMQDPQDDKDzGAz2Aw1Q80wM8yMMCPMKDPKjDFjzFgz1owz48x4M95MNBPNZDPZTDVTzTQzzcwwM8xMM9PMMrPMHDPHzDPzzHwz3yw0C80is8gsNkvMErPMLDMrzAqzyqwya8was86sMxvMBrPYbDabzRazxWwz28wOs8PsMrvMbrPb7DF7zF6z1+wz+8x+s98cMAfMQXPQHDKHzGFz2BwxR8xRc9QcM8fMCXPCnDQnzSlzypwxZ8xZc9acM+fMBXPh4mlfpCIVmchE6aJ0UUqUEmWIMkQZo4xRpihTlIgSUeYoc5Qlui7KGmWLskc5opxRrigVbESRiziKozxR3igZXR/li26I8kcFooJRochHhaMi0Y1R0eimqFh0c1Q8uiUqEd0alYxKRaWjMtFtUdno9qhcVD6qEN0RVYzujCpFlaO7oirR3VHV6J6oWnRvVD26L6oR3R/VjB6IakUPRrWjh6I60cNR3eiRqF5UP2oQNYwa/aH1QziV7THf2Xaxqbar7WZfst1tD9vT9rK97cu2j33F9rWv2n62vx1gX7MD7et2kH3DDrZD7FD7ph1mh9sRdqQdZUfbMfYtO9a+bcfZd+x4O8FOtJPsZDvFTrXv2ml2up1h37Mz7ft2lp1t59i5dp79wM63C+xC+6FdZD+yi+0Su9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9Fuspvtx3aL3Wq32e12h91pd9lP7G77qd1jP7N77ed2n/2T3W+/sAfsl/ag/coesl/bw/Ybe8R+a4/a7+wxe9yesN/bk/YHe8qetmfsj/as/cmes+ftBRsuntxf/HgnQ4bSUTpKoRTKQBkoI2WkTJSJEpSgzJSZslAWykpZKTtlp5yUk3JTbrqIiSkP5aEkJSkf5aP8lJ8KUkHy5KkIFaGiVJSKUTEqTsWpBJWgklSSSlNpuo1uo9vpdipP5ekOuoPupDupMlWmKlSFqlJVqkbVqDpVpxpUg2pSTapFtag21aY6VIfqUl2qR/WoATWgRtSIGlNjakJNqBk1o+bUnFpQC2pJLakVtaLW1JraUBtqS22pHbWj9tSeOlJH6kSdqDN1plRKpW7UjbpTd+pJPak39aY+1If6Ul/qR/1oAA2ggTSQBtEgGkxDaCi9ScNoOI2gkTSKRtMYGkNjaSyNo3E0nsbTRJpIk2kyTaWpNI2m0QyaQTNpJs2iWTSH5tA8mkfzaT4tpIW0iBbRYlpMS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaAtto220g3bQLtpFu2k37aE9tJf20j7aR/tpPx2gA3SQDtIhOkSH6TAdoSN0lI7SMTpGJ+gEnaSTdIpO0Rk6Q2fpJzpH5+kCBUpxCjK4K11Gd5XL5K52KS69uxhHAHAxzu5yuJwul8vtrMvqsv0qJudcflfAFXSFnHeFXRF342/ikq6UK+3KuNtcWXe7K/ebuIq721V197hq7l5X2d31q7i6u8/VcA+7mu4RV8vVd7VdQ1fHPezqukdcPVffNXANXXP3hGvhnnQt3VOulXv6N/F8t8CtdmvcWrfO7XafujPuR3fYfePOup9cZ9fF9XYvuz7uFdfXver6uf6/iYe6N90wN9yNcCPdKDf6N/FEN8lNdlPcVPeum+am/yae5z5wM91CN8vNdnPc3J/jiz0tdB+6Re4jt9gtcUvdMrfcrXAr3ar/2+syt8FtdJvcLveJ2+K2um1uu9vhdv4cXzyOPe4zt9d97g65r91+94U74I64g+6rn+OLx3fEfeuOuu/cMXfcnXDfu5PuB3fKnf75+C8e+/fuvLvgggNGVqzZcMTp+ApO4fScga/kjHwVZ+KrOcHXcGa+lrPwdZyVs3F2zsE5ORfnZsvEjpljzsN5OcnXcz6+gfNzAS7IhdhzYS7CN3JRvomL8c1cnG/hEnwrl+RSXJrL8G1clm/nclyeK/AdXDEErsSV+S6uwndzVb6Hq/G9XJ3v4xp8P9fkB7gWP8i1+SGuww9zXX6E63F9bsANuRE/yo35MW7CTbkZP87N+QluwU9yS36KW/HT3Jqf4Tb8LLfl57gdP8/tuQN35Be4E7/InbkLp3JX7sYvcXfuwT25F/fml7kPv8J9+VXux/15AL/GA/l1HsRv8GAewkP5TR7Gw3kEj+RRPJrH8Fs8lt/mcfwOj+cJPJEn8WSewlP5XZ7G03kGv8cz+X2exbN5Ds/lefwBz+cFvJA/5EX8ES/mJbyUl/FyXsEreRWv5jW8ltfxet7AG3kTb+aPeQtv5W28nXfwTt7Fn/Bu/pT38Ge8lz/nffwn3s9f8AH+kg/yV3yIv+bD/A0f4W/5KH/Hx/g4n+Dv+ST/wKf4NJ/hH/ks/8Tn+Dxf4MAQY6xiHZs4itPFV8Qpcfo4Q3xlnDG+Ks4UXx0n4mvizPG1cZb4ujhrnC3OHueIc8a54tyxjSl2McdxnCfOGyfj6+N88Q1x/rhAXDAuFPu4cFwkvjEuGt8UF4tvjovHt8Ql4lvjknGp+OF7y8S3xWXj2+Nycfm4QnxHXDG+M64UV47viqvEd8dV43viavG9cbH4vrhGfH9cM34grhU/GNeOH4rrxA/HdeNH4npx/bhB3DBuFD8aN44fi5vETeNm8eNx8/iJuEX8ZNwyfipuFT/9u/tT465xt/il+KU4hHv0nOTc5LzkB8n5yQXJhckPk4uSHyUXJ5cklyaXJZcnVyRXJlclVyfXJNcm1yXXJzckNyY3JUOofAV49Mrrv3ydxqf49D6Dv9Jn9Ff5TP5qn/DX+Mz+Wp/FX+ez+mw+u8/hc/pcPre3nrzz7GOfx+f1SX+9z+dv8Pl9AV/QF/LeF/ZFfEPfyDfyjf1jvolv6pv5x/3j/gn/hH/SP+mf8q380761f8a38c/6tv45/5x/3rf3HXzHq1/wnfyLvrPv4lN9qu/mu/nuvrvv6Xv63r637+P7+L6+r+/n+/kBfoAf6Af6QX6QH+wH+6F+qB/mh/kRfoQf5Uf5MX6MH+vH+nF+nB/vx/uJfqKf7Cf7qX6qn+an+Rl+hp+Zf6af5Wf5OX6On+fn+fl+vl/oF/pFfpFf7Bf7pX6pX+6X+5V+pV/tV/u1fq1f79f7jX6j3+w3+y1+i9/mt/kdfoff5Xf53X633+P3+L1+r9/n9/n9fr8/4L/0B/1X/pD/2h/23/gj/lt/1H/nj/nj/oT/3p/0P/hT/rQ/43/0Z/1P/pw/7y/44Mck3kqMTbydGJd4JzE+MSExMTEpMTkxJTE18W5iWmJ6YkbivcTMxPuJWYnZiTmJuYl5iQ8S8xMLEgsTHyYWJT5KLE4sSSxNLEssT6xIhJBrSxzyhLwhGa4P+cINIX8oEAqGQsGHwqFIuDEUDTeFYuHmUDzcEkqEW0PJUCqUDo+EeqF+aBAahkbh0dA4PBaahKahWXg8NA9PhBbhydAyPBVahadD6/BMaBOeDW3Dc6FdeD60Dx1Cx/BC6BReDJ1Dl5AauoZu4aXQPfQIPUOv0Du8HPqEV0Lf8GroF/qHAeG1MDC8HgaFN8LgMCQMDW+GYWF4GBFGhlFhdBgT3gpjw9thXHgnjA8TwsQwKUwOU8LU8G6YFqaHGeG9MDO8H2aF2WFOmBvmhQ/C/LAgLAwfhkXho7A4LAlLw7KwPKwIK8OqsDqsCWvDurA+bAgbw6awOXwctoStYVvYHnaEnWFX+CTsDp+GPeGzsDd8HvaFP4X94YtwIHwZDoavwqHwdTgcvglHwrfhaPguHAvHw4nwfTgZfginwulwJvwYzoafwrlwPlyQ76wJIYQQQvxT9O/s7/p3HksHAOqXdTcAuGprjoN/W3N91j+ve6iczRMA8FSXdg/+ZatYMTU19ZfnLtYQ5Z0NAIlf1/9LvASawRPQEppC0b/bXw/V4Sz/Tv3kLQAZ/ionBS7Fl+rf9A/qP/r40Pkl4jOZf10/+uv6swHy572Ukx4uxZfqF/sH9bM1/p3+038xBqDJX+VkhEvxpfpF4DF4Glr+6plCCCGEEEIIIcSf9VCl21y6/nT/8Po8p7mUcwVcin/v+lwIIYQQQgghhBCX37MdOj75aMuWTdv8cwv85b7Av5Yli392kQ7+R7Qhi/+1ixT4gwr+/nvHefmNayGEEEIIIf5XuXTSf7k7EUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQggh0q7/jj9LdrmPUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjc/k8AAAD//3jlOqI=") setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 4.146399918s ago: executing program 0 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000040)='\x19\x06\xfa\xb2\xa9', 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x81, 0x1b, "0062ba7d820700000d0000efffffffff086304"}) r3 = syz_open_pts(r2, 0x80) dup3(r3, r2, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="05031600d3fc140000", 0x9, 0x24004004, &(0x7f00000000c0)={0x11, 0x11, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8008, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) 4.06983644s ago: executing program 3 (id=346): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@textreal={0x8, &(0x7f0000000380)="b84b0d8ee8627a4c0f01c32636820822baf80c66b8e4efa58b66efbafc0c66ed66b95103000066b80000000066ba000000000f300f01cb0f38016800f20f1bd1f00fc709", 0x44}], 0x1, 0x28, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x1204, 0x8}, 0x10}, 0x38) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@bridge_setlink={0x44, 0x10, 0x1, 0x70bd2d, 0x0, {0x7, 0x0, 0x0, r3, 0x20c05}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}]}, 0x44}}, 0x0) 3.970889363s ago: executing program 3 (id=348): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x700, 0x2500, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7d, 0x2f, 0x0, @empty, @private}}}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000000)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@prjquota}, {@grpjquota}, {@bh}, {@delalloc}, {@jqfmt_vfsv0}]}, 0x1, 0xbe0, &(0x7f0000004a80)="$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") sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4001400", @ANYRES16=r2, @ANYBLOB="10002cbd7000fedbdf250400000040000180080003000300000008000100", @ANYRES32=r1, @ANYBLOB="0800030000000000080003000000000008000300010000001400020076657468315f746f5f6261746164760048000180140002006e696376663000000000000000000000140002007665746831000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="1400020070696d726567300000000000000000001c0001800800030003000000080003000100000008000300010000003c0001801400020076657468305f766c616e000000000000080003000300000008000100", @ANYRES32=r1, @ANYBLOB="1400020070696d72656731000000000000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) 3.550609667s ago: executing program 6 (id=349): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000180)={[{@noblock_validity}, {@grpquota}, {@nodiscard}, {@nombcache}]}, 0x26, 0x75d, &(0x7f0000001300)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x28, 0x801, 0x0) syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5523, &(0x7f0000006840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r0, 0x0, 0x1d, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) getcwd(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xa1808, &(0x7f00000011c0)={[{@nouser_xattr}, {@init_itable_val={'init_itable', 0x3d, 0xffffffff}}, {@minixdf}, {@jqfmt_vfsv1}, {@sysvgroups}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@errors_remount}, {@data_journal}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@minixdf}, {@nobh}, {@dax}], [{@fowner_gt}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0xdf, 0x475, &(0x7f0000000780)="$eJzs289vFFUcAPDvTLeAgGxFREGQKpo0/mhpQeVgYjSaeNDERA94rG0hyEINrYmQRqsxeDQk3o1HE/8CT56MejLxikcTQ0KUmIheXDO7M6VddssubNna/XySoe/NvHk/dubNvn2PCaBvDWf/JBHbI+JSRJTr0ZUJhut/rl1dmPr76sJUEtXqG78ntXR/XV2YquaK87bleY6kEeknSV5IDC7Pdu7c+VOTlcrM2Tw+Nn/63bG5c+efOnl68sTMiZkzE0ePHjk8/uwzE083qfWvFztq5ED+d+8Hs/v2vPLWxdemjl18+4evs/ru3l8/lLWjozzbMJw1/I/6Z9N47LFuF9Zj/1avtzMp9bo2tCvrGqW8c16KcgzE9YtXjpc/7mnlgDWVPbM3tz68WAU2sCR6XQOgN4ov+uz3b7HdoaHHunDlhfoPoKzd1/KtfqQUaZ5mcA3LH46IY4v/fJFt0TAPUW0ybwAAcLu+zcY/TzYb/6Wxe1m6Hfna0FBE3BMROyPi3ojYFRH3RdTS3h8RD3RY/nBD/MbxZ3r5lhrWpmz891y+trVy/FeM/mJoII/dXWv/YHL8ZGXmUP6ZjMTg5iw+3izzIouXfv6sVfnLx3/ZlpVfjAXzTC6X6hN0W4o905Pzk90alF75KGJvqVn7k6WVgCQi9kTE3s6y3lEETj7+1b5WiW7e/lV0YZ2p+mWRycJiNLS/kKy+Pjm2JSozh8aKu+JGP/504fVW5d9W+7sgu/5bV97/DSnKfybL12vnlg48324ZF375tOVvylL79/+S7P7flLxZW7PelO97f3J+/ux4xKbk1Vp8xf6J6+cW8SJ91v6Rg837/878nKz9D0ZEdhPvj4iHIuJAfu0ejohHIuLgKu3//sVH32l1bD1c/+mmz7+l+39o5fXvPDBw6rtvWpXf3vPvSC00ku+pPf9uonV1isdotufY3K1+bgAAAPB/kkbE9kjS0aVwmo6O1v8P/67YmlZm5+afOD773pnp+jsCQzGYFjNd5WXzoePJYp5jPT6RzxUXxw/n88afD9xVi49OzVame9x26HfbWvT/zG8Dva4dsOa8rwX9q7H/pz2qB3Dn+f6H/qX/Q/+6of97IEDfaNbdP2yIWwuAjaha7vgUE4SwYRjuQ//S/6F/6f/Ql27nvf61CpRWeXtfoMeBrRFRC0S6LuqzbgIH1lFvKnWhd/f4wQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAl/wUAAP//xgL2dQ==") socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0xf1, 0x1, 0x7, 0x0, 0x4, 0x2, 0x1ff}, &(0x7f0000000080)={0x8, 0x7f, 0x8, 0x26, 0x6, 0x5, 0x0, 0x8}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x2044d0, &(0x7f00000000c0)={[{@sysvgroups}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4b5, &(0x7f0000000d00)="$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") 3.450929409s ago: executing program 3 (id=350): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000140), 0x0}, 0x20) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e26}, 0x54) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) pipe(&(0x7f0000000080)) 3.272994145s ago: executing program 0 (id=351): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r4, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0xa, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x4b4c, 0x0) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x13, r0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x40100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) write$binfmt_elf32(r8, &(0x7f0000000b80)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0x5, 0xa, 0x100000001, 0x2, 0x6, 0x7, 0x349, 0x38, 0x25, 0x4, 0x2b, 0x20, 0x1, 0x7ec, 0x8, 0x5}, [{0x6, 0x3, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x3}], "", ['\x00']}, 0x158) 2.901842497s ago: executing program 0 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0xa04080, &(0x7f0000000000)={[{@dioread_lock}, {@grpquota}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x3d9, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0x4}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, r3, 0x17b93}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.674817264s ago: executing program 0 (id=353): mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000001c0)={0xd5, 0x1, 0xffff, 0x3eb, 0x7b, "203c002007000000000780fffffffff200", 0x6, 0x5}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) getpid() ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002a40)={'sit0\x00', &(0x7f0000002940)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x9, 0xf, {{0x5, 0x4, 0x1, 0x28, 0x14, 0x65, 0x0, 0x18, 0x2b, 0x0, @empty, @remote}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000002900)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x840) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 2.653371525s ago: executing program 2 (id=354): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40040) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008090}, 0x54) (async) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000000)={0x0, 0x4, "ebb700", 0x0, 0xfd}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="07012cbd7000fedbdf251f000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) sendmsg$IEEE802154_LLSEC_LIST_KEY(r3, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8008}, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x16042004}, 0x21, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x200, 0x70bd2b, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x5) (async) sendmsg$NLBL_CIPSOV4_C_LIST(r3, 0x0, 0x1) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async, rerun: 32) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) (async, rerun: 32) r7 = gettid() (async, rerun: 64) r8 = getpid() (rerun: 64) rt_tgsigqueueinfo(r8, r7, 0xb, &(0x7f0000000000)={0x2a, 0x0, 0x4}) read$FUSE(r2, &(0x7f0000000700)={0x2020}, 0x2020) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) 2.513397209s ago: executing program 3 (id=355): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x5) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0xff7f000000000000, 0x3fc}, 0x0, r2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800010025bd7000000100000200040000000000080006000100000008000500", @ANYRES32=r4, @ANYBLOB="436e7c49ef7cd83515fa9de61eab92b105dee227468f51cde19fdcd99901f7b8eacbdb6aa67bd7c072102af3405fd6acf300e92259b456f9ffd270"], 0x28}, 0x1, 0x0, 0x0, 0x20004011}, 0x20040080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45}}) 2.410795113s ago: executing program 3 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10003, 0x4, 0x40000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) waitid$P_PIDFD(0x2, r4, 0x0, 0x8, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) futex(0x0, 0xb, 0x1, 0x0, 0xfffffffffffffffd, 0x5) syz_usb_connect(0x2, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xb0, 0x6e, 0xd4, 0x20, 0x1371, 0x9022, 0xe4ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x68, 0x5c, 0x80, 0x1}}]}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.407984573s ago: executing program 0 (id=357): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x6c, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20302, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x8}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) pwritev(r0, &(0x7f0000002540)=[{&(0x7f0000000040)="c863f786", 0x4}, {0x0}], 0x2, 0x7, 0x3) syz_open_pts(r0, 0x4040) 2.397573403s ago: executing program 2 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x34, r1, 0x1, 0x4070bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=@bridge_setlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x20c05}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}]}, 0x44}}, 0x0) 2.336214175s ago: executing program 2 (id=359): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000140), 0x0}, 0x20) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e26}, 0x54) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) pipe(&(0x7f0000000080)) 1.722985195s ago: executing program 6 (id=360): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002700)={0x2, 0x0, [{0xd000, 0x1000, &(0x7f0000001600)=""/4096}, {0xb000, 0xf4, &(0x7f0000002600)=""/244}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0xb68c}, {0x60}, {0x2}, {0x6, 0x0, 0x0, 0x2}]}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x800000f0}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, 0x0, 0x0}, 0x20) 1.514697491s ago: executing program 0 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000040)='\x19\x06\xfa\xb2\xa9', 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000400)={0x1, 0x4, 0x0, 0x81, 0x1b, "0062ba7d820700000d0000efffffffff086304"}) r3 = syz_open_pts(r2, 0x80) dup3(r3, r2, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="05031600d3fc140000004788031c", 0xe, 0x24004004, &(0x7f00000000c0)={0x11, 0x11, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8008, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) 1.514307431s ago: executing program 5 (id=362): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = open(&(0x7f0000000100)='./file0\x00', 0x100, 0x100) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.origin\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000080)={0xc, 0x3ec1, 0x9}) 1.434805464s ago: executing program 2 (id=363): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioperm(0x0, 0x7, 0x1) socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x52) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001080)={0x24, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000680)={0x24, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16], 0x0, 0x0}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000000000401c36750a00000000db17098224000106000000090400000903000000002100100001222900090581030000000000a75175b117b3bae933"], 0x0) 1.385795935s ago: executing program 6 (id=364): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) (async) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0x2020) (async) ptrace$poke(0x5, r0, &(0x7f0000000000), 0xfffffffffffffffc) (async) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4562c067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0xfe1f}, {&(0x7f0000000340)="860e53d00d3fa38ce1c3d4651692cfc8ccb9ebe852740d7d563f1439f4bb11f91bb26565ba26e858ab4260f31c449665997468f56275b8ca55522597f3171117356b8abd022b93afc8519d1f113a3dba88a782ba22a5e78f898d7cdbb4f0e5b84f04e8e3067b65873a58afe7bf15e820ea64fd3f767984ccf0cb8501a0bbda49ef1cdc029e05d68e430188e4ca0e831818dd5bf216cd6404ba29ae2e5bf9890c32173312c2975ea67b1a9e2ce427", 0xae}, {&(0x7f0000000500)="d56de5ba8a4f881f5b01e515f60cdbf21a90bde77d26edf8d3570376d0a4f46420830b06c1de7af3049ee6df712258a6e93a3fd943481feda1e804f0a5f81a0367c8c46d63a7fdbc603b7917ca1dfe09fff34c82dacc452bb5fee485e6d2ff2419a80dc36db4cae3fc4b74408f0c6399ef651daca9ee8cd64cdc73feebb8db14ab2085edb50f5788e4ac5219d315e1faacd873659101a580ccf2df1b90db2b27d520dde308f76002293c5efcf6c31d6d908ce8ac41f75425d2109c67b77bc7001097ce55830cd98a95eaa52d7195f561ff2b9d04efc75e0db5e0e8616d6e", 0xde}, {&(0x7f0000000600)="42beb1f8d6610a3e48dae55432a54d0078b1c9d1e0e6e808e36de1d7f7af9ac01ddb6b3321b1f1ccfc07165de8da57124fca263649f3ad8e44452492015c1fd517b6434940301f41886116a7aac8eae279d3cb1732b3d751ef9a11bbb6d3cb44e33cf132d9172e2aea791a94abdec42d13ecdf2a43be7cb08388b5467f2ebf785e94a32c121c1ac48717b51bcd538beb9803ff4dfacd26f8ba933951338834020061955f18ee013371704fa47ab3e6de3a611b7127906e46aef2d935fe5c", 0xbe}], 0x4) 1.100835075s ago: executing program 6 (id=365): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r7, &(0x7f0000000140), 0x0}, 0x20) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e26}, 0x54) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) pipe(&(0x7f0000000080)) 733.651666ms ago: executing program 6 (id=366): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000080)='bpf_lsm_inode_permission\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000020c0)=@newtaction={0x14, 0x30, 0x301, 0x0, 0xfffffffb}, 0x14}, 0x1, 0x0, 0x0, 0x80d1}, 0x1800) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) mprotect(&(0x7f0000d7a000/0x4000)=nil, 0x4000, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x22000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071102800000000001f150000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r4}, 0x94) r7 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0xd3, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xb, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) listen(r8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="cfd4ad263f3306a8ea54ba78c6ed3359ab7185e3b21651a051ea8f9e1b01b9e93e354d8ac56a14f976a129e9f21777ba1ec2f63e09b53c07722c34b202d7b0a812644257381841c5d6", @ANYRESHEX=r8, @ANYBLOB=',\x00']) pipe(&(0x7f00000045c0)) r12 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r12, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) 725.894746ms ago: executing program 3 (id=367): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c0, 0x250, 0x1a8, 0xfeffffff, 0x0, 0xa8, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x7}, [@common=@inet=@length={{0x28}, {0x7ff, 0x9}}, @common=@ah={{0x30}, {[0x0, 0x4]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x260, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x2, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0x9, 0x0, 0xa}, {0x0, 0x20000000000, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x4d5, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x1, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x1, 0xfff3}, {0xd, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r10 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f0000000440)={0xc000, 0x7000, 0xff, 0x4}) ppoll(&(0x7f0000000000)=[{r0, 0x8000}, {r0, 0x10}, {r2, 0x100}, {r3, 0xc010}], 0x4, &(0x7f0000000040), &(0x7f0000000080)={[0x3]}, 0x8) ioctl$KVM_GET_FPU(r10, 0x81a0ae8c, &(0x7f0000000500)) 564.064621ms ago: executing program 5 (id=368): mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000001c0)={0xd5, 0x1, 0xffff, 0x3eb, 0x7b, "203c002007000000000780fffffffff200", 0x6, 0x5}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002a40)={'sit0\x00', &(0x7f0000002940)={'syztnl0\x00', 0x0, 0x80, 0x10, 0x9, 0xf, {{0x5, 0x4, 0x1, 0x28, 0x14, 0x65, 0x0, 0x18, 0x2b, 0x0, @empty, @remote}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000002900)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x840) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000100)={{[0x8, 0x1020, 0x400, 0x2c]}, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000000)=[{{@align=0xf9f0ed4, {0x28, 0x10, 0x8}}, 0x8, 0x0, '(,%\x00'}, {{@align=0x2, {0x3, 0x6, 0x48, 0x100000001}}, 0x1ff, 0x0, '/selinux/load\x00'}, {{@_ha_fsid={[0x6, 0x800]}, {0x775, 0x9, 0x8001, 0x2}}, 0x3, 0x0, '*\xfc\x00'}, {{@_ha_fsid={[0x684, 0x65ad]}, {0x6, 0x3, 0x2, 0xf51}}, 0x3, 0x0, '(\x00'}]}) 544.249482ms ago: executing program 6 (id=369): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/571], 0x25, 0x55a8, &(0x7f00000014c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x10) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010288233340"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file1\x00', 0x42, 0x2c) 533.238373ms ago: executing program 5 (id=370): pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f0000000000)=[{}], 0x1, 0x6e, 0x0, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x4000000, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0xd) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capset(0x0, &(0x7f0000000700)={0x7, 0x794, 0xd, 0x8, 0x8001, 0x6}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000280)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c19e3117334cca522f61c0000006800e97800000000000000000a00"], 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 118.167706ms ago: executing program 5 (id=371): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(r1, &(0x7f0000000180)='./file7\x00', 0x1) (async) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) fspick(0xffffffffffffff9c, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) (async) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file7\x00') syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="5bb65d3f2511bbbbbbbbbbbb080046380060006500000311907800000000e00000018c0200004e204e20004890780300000001000000ba464fc59852bbe9b9dabb2cf45014bae16de95106aec6cb33d364da6fd643f4524c16d1fa06be97bc6fe642139a521adf44a45108527f4a"], 0x0) 54.450638ms ago: executing program 5 (id=372): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1000, 0x20000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@RTM_NEWNSID={0x1c, 0x58, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2e01813f6f54f946}, 0x8000) 0s ago: executing program 5 (id=373): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000140), 0x0}, 0x20) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e26}, 0x54) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) pipe(&(0x7f0000000080)) kernel console output (not intermixed with test programs): error -117 [ 31.261829][ T420] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000080,data_err=ignore,grpid,discard,norecovery,grpjquota=.test_dummy_encryption=v1,sysvgroups,jqfmt=vfsv1,grpid,,,errors=continue [ 31.291337][ T383] F2FS-fs (loop0): fault_injection options not supported [ 31.303263][ T383] F2FS-fs (loop0): fault_type options not supported [ 31.314155][ T383] F2FS-fs (loop0): invalid crc value [ 31.322437][ T383] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.355588][ T430] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,grpquota,nodiscard,nombcache,,errors=continue [ 31.362179][ T383] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.370461][ T430] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.494334][ T383] attempt to access beyond end of device [ 31.494334][ T383] loop0: rw=2049, want=45104, limit=40427 [ 31.681330][ T447] SELinux: failed to load policy [ 31.696827][ T442] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.728703][ T442] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,nombcache,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x0000000000000090,user_xattr,noinit_itable,,errors=continue [ 31.764466][ T442] EXT4-fs error (device loop4): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 31.807247][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.909932][ T456] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.31: bg 0: block 337: padding at end of block bitmap is not set [ 31.927337][ T456] incfs: Can't find or create .index dir in ./file0 [ 31.935019][ T456] incfs: mount failed -117 [ 32.084205][ T453] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.127248][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 32.169254][ T463] EXT4-fs (loop3): Ignoring removed orlov option [ 32.175893][ T463] EXT4-fs (loop3): Ignoring removed oldalloc option [ 32.187381][ T463] EXT4-fs (loop3): Ignoring removed oldalloc option [ 32.194419][ T463] EXT4-fs (loop3): invalid inodes per group: 11943200 [ 32.194419][ T463] [ 32.247240][ T20] usb 1-1: config 0 has no interfaces? [ 32.328975][ T20] usb 1-1: config 0 has no interfaces? [ 32.372534][ T468] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 32.382023][ T468] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 32.402206][ T468] EXT4-fs error (device loop4): ext4_get_journal_inode:5247: inode #32: comm syz.4.42: iget: special inode unallocated [ 32.415935][ T468] EXT4-fs (loop4): no journal found [ 32.427210][ T20] usb 1-1: config 0 has no interfaces? [ 32.507252][ T20] usb 1-1: string descriptor 0 read error: -71 [ 32.513864][ T20] usb 1-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 32.523682][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.536981][ T20] usb 1-1: config 0 descriptor?? [ 32.558021][ T20] usb 1-1: can't set config #0, error -71 [ 32.566836][ T20] usb 1-1: USB disconnect, device number 2 [ 33.085712][ T493] xt_hashlimit: size too large, truncated to 1048576 [ 33.113364][ T492] SELinux: ebitmap: map size 2705653824 does not match my size 64 (high bit was 1694503936) [ 33.120636][ T15] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 33.138832][ T492] SELinux: failed to load policy [ 33.528157][ T317] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.543899][ T504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.51'. [ 33.562670][ T15] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 33.737739][ T15] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 33.752385][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.817719][ T24] kauditd_printk_skb: 61 callbacks suppressed [ 33.817739][ T24] audit: type=1400 audit(1778920072.430:227): avc: denied { setopt } for pid=512 comm="syz.2.54" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.851997][ T514] Zero length message leads to an empty skb [ 33.870779][ T15] usb 4-1: Product: syz [ 33.880036][ T15] usb 4-1: Manufacturer: syz [ 33.886672][ T15] usb 4-1: SerialNumber: syz [ 33.926701][ T518] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 33.937645][ T317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.950336][ T317] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 33.963352][ T24] audit: type=1326 audit(1778920072.460:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=495 comm="syz.1.50" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38974e5aeb code=0x7ffc0000 [ 34.032399][ T518] SELinux: failed to load policy [ 34.063138][ T24] audit: type=1400 audit(1778920072.460:229): avc: denied { ioctl } for pid=512 comm="syz.2.54" path="socket:[16232]" dev="sockfs" ino=16232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.098091][ T317] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 34.111300][ T317] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 34.135184][ T24] audit: type=1400 audit(1778920072.460:230): avc: denied { create } for pid=512 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.159746][ T24] audit: type=1400 audit(1778920072.460:231): avc: denied { ioctl } for pid=512 comm="syz.2.54" path="socket:[16239]" dev="sockfs" ino=16239 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.163502][ T317] usb 2-1: Manufacturer: syz [ 34.201263][ T300] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.210975][ T24] audit: type=1400 audit(1778920072.460:232): avc: denied { bind } for pid=512 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.215453][ T317] usb 2-1: config 0 descriptor?? [ 34.234002][ T24] audit: type=1326 audit(1778920072.470:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=495 comm="syz.1.50" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38974e5aeb code=0x7ffc0000 [ 34.265753][ T24] audit: type=1326 audit(1778920072.490:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=495 comm="syz.1.50" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38974e5aeb code=0x7ffc0000 [ 34.303503][ T524] exfat: Deprecated parameter 'utf8' [ 34.310405][ T24] audit: type=1326 audit(1778920072.510:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=495 comm="syz.1.50" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38974e5aeb code=0x7ffc0000 [ 34.336292][ T24] audit: type=1326 audit(1778920072.530:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=495 comm="syz.1.50" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38974e5aeb code=0x7ffc0000 [ 34.401957][ T524] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 34.438027][ T15] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 34.469069][ T532] SELinux: failed to load policy [ 34.488096][ T534] xt_hashlimit: size too large, truncated to 1048576 [ 34.527265][ T300] usb 3-1: device descriptor read/64, error -71 [ 34.664435][ T540] EXT4-fs (loop4): Test dummy encryption mode enabled [ 34.673594][ T540] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 34.689888][ T540] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.709089][ T540] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 34.818300][ T543] F2FS-fs (loop0): invalid crc value [ 34.830530][ T554] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 34.844132][ T543] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 34.844231][ T554] SELinux: failed to load policy [ 34.859713][ T543] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 34.888876][ T543] F2FS-fs (loop0): Start checkpoint disabled! [ 34.897047][ T543] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 34.927506][ T300] usb 3-1: device descriptor read/64, error -71 [ 35.176052][ T564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.70'. [ 35.197362][ T300] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.218548][ T564] netlink: 8724 bytes leftover after parsing attributes in process `syz.0.70'. [ 35.459745][ T568] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.477175][ T300] usb 3-1: device descriptor read/64, error -71 [ 35.506136][ T568] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 35.538586][ T568] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.612878][ T568] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 35.650047][ T15] usb 2-1: USB disconnect, device number 2 [ 35.812262][ T588] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 35.815593][ T52] usb 4-1: USB disconnect, device number 2 [ 35.829704][ T589] xt_hashlimit: size too large, truncated to 1048576 [ 35.836976][ T52] usblp0: removed [ 35.847424][ T588] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 35.875501][ T591] netlink: 'syz.3.77': attribute type 3 has an invalid length. [ 35.877216][ T300] usb 3-1: device descriptor read/64, error -71 [ 35.944233][ T596] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 35.958246][ T596] SELinux: failed to load policy [ 36.027217][ T300] usb usb3-port1: attempt power cycle [ 36.045160][ T604] syz.3.82 uses obsolete (PF_INET,SOCK_PACKET) [ 36.133530][ T608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 36.192523][ T610] netem: invalid attributes len -24 [ 36.199459][ T610] netem: change failed [ 36.448539][ T633] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 36.461255][ T633] SELinux: failed to load policy [ 36.487630][ T300] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.698006][ T300] usb 3-1: device descriptor read/8, error -71 [ 36.967785][ T300] usb 3-1: device descriptor read/8, error -71 [ 37.117228][ T52] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.193111][ T656] xt_hashlimit: size too large, truncated to 1048576 [ 37.387199][ T52] usb 4-1: device descriptor read/64, error -71 [ 37.406284][ T662] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿônÝ–¡ÅŒô…WæÞ\—eMc!¿€päâCb äíçi¥·k' [ 37.528185][ T662] loop0: p1 p2 p3 < p5 p6 p7 > [ 37.535022][ T662] loop0: p2 size 16775168 extends beyond EOD, truncated [ 37.543746][ T662] loop0: p5 start 4294970168 is beyond EOD, truncated [ 37.618026][ T510] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 37.693157][ T669] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 37.722189][ T669] SELinux: failed to load policy [ 37.760897][ T675] 9pnet: Insufficient options for proto=fd [ 37.834432][ T52] usb 4-1: device descriptor read/64, error -71 [ 38.107674][ T510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.127221][ T52] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.135044][ T510] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.145325][ T510] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.159097][ T510] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.170307][ T510] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.186140][ T510] usb 2-1: config 0 descriptor?? [ 38.427235][ T52] usb 4-1: device descriptor read/64, error -71 [ 38.437919][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 38.650847][ T701] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 38.660344][ T701] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.801099][ T705] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 38.814419][ T705] SELinux: failed to load policy [ 38.847228][ T52] usb 4-1: device descriptor read/64, error -71 [ 38.967246][ T52] usb usb4-port1: attempt power cycle [ 39.118711][ T715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.116'. [ 39.167239][ T652] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.387241][ T52] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.417224][ T290] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.537318][ T652] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.547848][ T652] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 39.557088][ T652] usb 1-1: config 1 has no interface number 0 [ 39.563576][ T52] usb 4-1: device descriptor read/8, error -71 [ 39.570408][ T652] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.582056][ T652] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 39.591501][ T652] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.677284][ T290] usb 3-1: Using ep0 maxpacket: 32 [ 39.757304][ T652] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.770812][ T652] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.780086][ T652] usb 1-1: Product: syz [ 39.784311][ T652] usb 1-1: Manufacturer: syz [ 39.792438][ T652] usb 1-1: SerialNumber: syz [ 39.847294][ T52] usb 4-1: device descriptor read/8, error -71 [ 39.847437][ T290] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.876306][ T24] kauditd_printk_skb: 85 callbacks suppressed [ 39.876314][ T24] audit: type=1400 audit(1778920078.480:322): avc: denied { read } for pid=716 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.903656][ T24] audit: type=1400 audit(1778920078.500:323): avc: denied { create } for pid=718 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 40.089086][ T24] audit: type=1400 audit(1778920078.700:324): avc: denied { getopt } for pid=724 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.109274][ T24] audit: type=1400 audit(1778920078.700:325): avc: denied { write } for pid=724 comm="syz.3.120" name="mcfilter" dev="proc" ino=4026532314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 40.127408][ T290] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 40.143614][ T290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.152277][ T290] usb 3-1: Product: syz [ 40.157539][ T290] usb 3-1: Manufacturer: syz [ 40.162600][ T290] usb 3-1: SerialNumber: syz [ 40.365015][ T24] audit: type=1400 audit(1778920078.970:326): avc: denied { bind } for pid=728 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.391300][ T731] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 40.402625][ T731] SELinux: failed to load policy [ 40.427233][ T52] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.467212][ T510] usbhid 2-1:0.0: can't add hid device: -71 [ 40.474029][ T510] usbhid: probe of 2-1:0.0 failed with error -71 [ 40.483563][ T510] usb 2-1: USB disconnect, device number 3 [ 40.531946][ T52] usb 4-1: Using ep0 maxpacket: 16 [ 40.629717][ T24] audit: type=1400 audit(1778920079.240:327): avc: denied { setattr } for pid=714 comm="syz.2.116" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.682123][ T24] audit: type=1400 audit(1778920079.280:328): avc: denied { remount } for pid=714 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.717842][ T52] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 40.730596][ T652] cdc_ncm 1-1:1.1: bind() failure [ 40.743484][ T52] usb 4-1: config 0 has no interface number 0 [ 40.751923][ T52] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.765015][ T52] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.776855][ T52] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 40.786955][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.798279][ T52] usb 4-1: config 0 descriptor?? [ 40.919884][ T519] usb 1-1: USB disconnect, device number 3 [ 41.197257][ T739] FAULT_INJECTION: forcing a failure. [ 41.197257][ T739] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.214768][ T739] CPU: 0 PID: 739 Comm: syz.2.126 Not tainted syzkaller #0 [ 41.224256][ T739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 41.237223][ T739] Call Trace: [ 41.242207][ T739] __dump_stack+0x21/0x24 [ 41.246720][ T739] dump_stack_lvl+0x1a7/0x208 [ 41.252404][ T739] ? show_regs_print_info+0x18/0x18 [ 41.259096][ T739] ? path_openat+0x2970/0x31c0 [ 41.265330][ T739] dump_stack+0x15/0x1c [ 41.269933][ T739] should_fail+0x3c1/0x510 [ 41.275544][ T739] should_fail_usercopy+0x1a/0x20 [ 41.281337][ T739] _copy_from_user+0x20/0xd0 [ 41.286810][ T739] __copy_msghdr_from_user+0xc9/0x630 [ 41.293442][ T739] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 41.300229][ T739] ? __fsnotify_parent+0x6d2/0x7c0 [ 41.306600][ T739] ___sys_sendmsg+0x19a/0x2e0 [ 41.313213][ T739] ? __sys_sendmsg+0x280/0x280 [ 41.318777][ T739] ? rw_verify_area+0x1c0/0x360 [ 41.325107][ T739] ? __fdget+0x1a1/0x230 [ 41.329950][ T739] __x64_sys_sendmsg+0x1f9/0x2c0 [ 41.336839][ T739] ? fput+0x1a/0x20 [ 41.341584][ T739] ? ___sys_sendmsg+0x2e0/0x2e0 [ 41.346617][ T739] ? debug_smp_processor_id+0x17/0x20 [ 41.353844][ T739] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 41.361291][ T739] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 41.369740][ T739] do_syscall_64+0x31/0x40 [ 41.375882][ T739] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.383112][ T739] RIP: 0033:0x7fe53686de59 [ 41.390280][ T739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.414810][ T739] RSP: 002b:00007fe5352c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.425087][ T739] RAX: ffffffffffffffda RBX: 00007fe536ae6fa0 RCX: 00007fe53686de59 [ 41.434423][ T739] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 41.445308][ T739] RBP: 00007fe5352c8090 R08: 0000000000000000 R09: 0000000000000000 [ 41.455285][ T739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.464617][ T739] R13: 00007fe536ae7038 R14: 00007fe536ae6fa0 R15: 00007ffcbfb939f8 [ 41.516090][ T290] usb 3-1: unit 0 not found! [ 41.574698][ T24] audit: type=1400 audit(1778920080.180:329): avc: denied { relabelfrom } for pid=745 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.597554][ T24] audit: type=1400 audit(1778920080.180:330): avc: denied { relabelto } for pid=745 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.619200][ T290] usb 3-1: USB disconnect, device number 6 [ 41.621291][ T24] audit: type=1400 audit(1778920080.180:331): avc: denied { write } for pid=745 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.650954][ T52] uclogic 0003:28BD:0071.0001: pen parameters not found [ 41.664567][ T52] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 41.837269][ T519] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 41.858506][ T652] usb 4-1: USB disconnect, device number 6 [ 42.117206][ T519] usb 2-1: device descriptor read/64, error -71 [ 42.247288][ T698] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.438017][ T757] attempt to access beyond end of device [ 42.438017][ T757] loop3: rw=2049, want=250, limit=128 [ 42.453856][ T756] attempt to access beyond end of device [ 42.453856][ T756] loop3: rw=524288, want=250, limit=128 [ 42.455176][ T760] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 42.466888][ T756] attempt to access beyond end of device [ 42.466888][ T756] loop3: rw=0, want=146, limit=128 [ 42.483722][ T760] SELinux: failed to load policy [ 42.495403][ T756] attempt to access beyond end of device [ 42.495403][ T756] loop3: rw=0, want=146, limit=128 [ 42.515509][ T757] attempt to access beyond end of device [ 42.515509][ T757] loop3: rw=0, want=146, limit=128 [ 42.533316][ T757] attempt to access beyond end of device [ 42.533316][ T757] loop3: rw=0, want=146, limit=128 [ 42.547965][ T519] usb 2-1: device descriptor read/64, error -71 [ 42.555621][ T757] attempt to access beyond end of device [ 42.555621][ T757] loop3: rw=0, want=146, limit=128 [ 42.572915][ T756] attempt to access beyond end of device [ 42.572915][ T756] loop3: rw=0, want=154, limit=128 [ 42.577365][ T757] attempt to access beyond end of device [ 42.577365][ T757] loop3: rw=0, want=146, limit=128 [ 42.590033][ T756] attempt to access beyond end of device [ 42.590033][ T756] loop3: rw=0, want=154, limit=128 [ 42.677324][ T698] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.817168][ T519] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 43.117929][ T698] usb 1-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 43.134571][ T698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.145944][ T698] usb 1-1: Product: syz [ 43.150770][ T698] usb 1-1: Manufacturer: syz [ 43.156761][ T698] usb 1-1: SerialNumber: syz [ 43.394266][ T781] FAULT_INJECTION: forcing a failure. [ 43.394266][ T781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.411128][ T781] CPU: 0 PID: 781 Comm: syz.2.140 Not tainted syzkaller #0 [ 43.420085][ T781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 43.433151][ T781] Call Trace: [ 43.436792][ T781] __dump_stack+0x21/0x24 [ 43.444193][ T781] dump_stack_lvl+0x1a7/0x208 [ 43.450606][ T781] ? show_regs_print_info+0x18/0x18 [ 43.457461][ T781] ? path_openat+0x2970/0x31c0 [ 43.462705][ T781] dump_stack+0x15/0x1c [ 43.467624][ T781] should_fail+0x3c1/0x510 [ 43.473482][ T781] should_fail_usercopy+0x1a/0x20 [ 43.479899][ T781] _copy_from_user+0x20/0xd0 [ 43.485579][ T781] iovec_from_user+0x1bc/0x2f0 [ 43.492003][ T781] ? __copy_msghdr_from_user+0x329/0x630 [ 43.498965][ T781] __import_iovec+0x71/0x390 [ 43.504007][ T781] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 43.511792][ T781] import_iovec+0x7c/0xb0 [ 43.516620][ T781] ___sys_sendmsg+0x1fd/0x2e0 [ 43.522108][ T781] ? __sys_sendmsg+0x280/0x280 [ 43.528113][ T781] ? rw_verify_area+0x1c0/0x360 [ 43.534083][ T781] ? __fdget+0x1a1/0x230 [ 43.539227][ T781] __x64_sys_sendmsg+0x1f9/0x2c0 [ 43.545088][ T781] ? fput+0x1a/0x20 [ 43.549152][ T781] ? ___sys_sendmsg+0x2e0/0x2e0 [ 43.555264][ T781] ? debug_smp_processor_id+0x17/0x20 [ 43.561696][ T781] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 43.568984][ T781] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 43.578144][ T781] do_syscall_64+0x31/0x40 [ 43.583246][ T781] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.589826][ T781] RIP: 0033:0x7fe53686de59 [ 43.595105][ T781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.622555][ T781] RSP: 002b:00007fe5352c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.634020][ T781] RAX: ffffffffffffffda RBX: 00007fe536ae6fa0 RCX: 00007fe53686de59 [ 43.645700][ T781] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 43.655637][ T781] RBP: 00007fe5352c8090 R08: 0000000000000000 R09: 0000000000000000 [ 43.665632][ T781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.676708][ T781] R13: 00007fe536ae7038 R14: 00007fe536ae6fa0 R15: 00007ffcbfb939f8 [ 43.721522][ T782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=782 comm=syz.0.131 [ 43.757323][ T519] usb 2-1: device descriptor read/64, error -71 [ 43.766804][ T786] exfat: Deprecated parameter 'utf8' [ 43.777771][ T786] exfat: Deprecated parameter 'namecase' [ 43.785707][ T786] exfat: Deprecated parameter 'namecase' [ 43.794261][ T786] exfat: Deprecated parameter 'utf8' [ 43.842287][ T786] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 43.849972][ T791] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.143: missing EA_INODE flag [ 43.876513][ T791] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.143: error while reading EA inode 2 err=-117 [ 43.877473][ T698] usb 1-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 43.895660][ T791] EXT4-fs (loop3): 1 orphan inode deleted [ 43.914012][ T791] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue [ 43.947228][ T698] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 43.975231][ T698] usb 1-1: USB disconnect, device number 4 [ 43.989686][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.117906][ T797] loop2: p1 < > p3 < p5 p6 > [ 44.128395][ T797] loop2: p5 size 131072 extends beyond EOD, truncated [ 44.139105][ T797] loop2: p6 start 2164271104 is beyond EOD, truncated [ 44.157207][ T519] usb 2-1: device descriptor read/64, error -71 [ 44.181199][ T800] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 44.191094][ T800] SELinux: failed to load policy [ 44.227259][ T290] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 44.277365][ T519] usb usb2-port1: attempt power cycle [ 44.290896][ T802] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 44.301437][ T802] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.305388][ T311] udevd[311]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 44.327495][ T302] udevd[302]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 44.329055][ T802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 44.343457][ T310] udevd[310]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 44.354468][ T802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 44.395045][ T809] xt_hashlimit: size too large, truncated to 1048576 [ 44.455313][ T811] netlink: 'syz.2.149': attribute type 5 has an invalid length. [ 44.637292][ T290] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.932007][ T290] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 45.018884][ T821] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 45.030161][ T821] ext4 filesystem being mounted at /38/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.045817][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 45.045828][ T24] audit: type=1400 audit(1778920083.650:337): avc: denied { map } for pid=820 comm="syz.2.152" path="/dev/loop2" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.070736][ T310] udevd[310]: incorrect ext4 checksum on /dev/loop2 [ 45.127755][ T821] EXT4-fs warning (device loop2): dx_probe:806: inode #2: comm syz.2.152: Unrecognised inode hash code 20 [ 45.189111][ T821] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.152: Corrupt directory, running e2fsck is recommended [ 45.208240][ T821] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.152: corrupted xattr block 33 [ 45.281290][ T821] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 45.294051][ T821] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.152: corrupted xattr block 33 [ 45.296798][ T290] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 45.309685][ T821] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 45.319963][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.330705][ T24] audit: type=1400 audit(1778920083.940:338): avc: denied { read } for pid=820 comm="syz.2.152" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 45.339398][ T290] usb 4-1: SerialNumber: syz [ 45.371699][ T821] EXT4-fs warning (device loop2): dx_probe:806: inode #2: comm syz.2.152: Unrecognised inode hash code 20 [ 45.388061][ T821] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.152: Corrupt directory, running e2fsck is recommended [ 45.404297][ T821] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.152: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18 [ 45.469077][ T290] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 45.488170][ T832] FAULT_INJECTION: forcing a failure. [ 45.488170][ T832] name failslab, interval 1, probability 0, space 0, times 1 [ 45.493993][ T290] usb-storage 4-1:1.0: USB Mass Storage device detected [ 45.504785][ T832] CPU: 1 PID: 832 Comm: syz.0.154 Not tainted syzkaller #0 [ 45.521225][ T832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 45.528183][ T290] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 45.533432][ T832] Call Trace: [ 45.533455][ T832] __dump_stack+0x21/0x24 [ 45.533464][ T832] dump_stack_lvl+0x1a7/0x208 [ 45.533473][ T832] ? thaw_kernel_threads+0x220/0x220 [ 45.533495][ T832] ? show_regs_print_info+0x18/0x18 [ 45.545427][ T290] scsi host1: usb-storage 4-1:1.0 [ 45.547634][ T832] ? __local_bh_enable_ip+0x53/0x80 [ 45.547645][ T832] ? release_sock+0x15b/0x1b0 [ 45.547665][ T832] dump_stack+0x15/0x1c [ 45.594739][ T832] should_fail+0x3c1/0x510 [ 45.601998][ T832] ? __alloc_skb+0x9e/0x520 [ 45.608134][ T832] __should_failslab+0xa4/0xe0 [ 45.615299][ T832] should_failslab+0x9/0x20 [ 45.620263][ T832] kmem_cache_alloc+0x3d/0x2d0 [ 45.626316][ T832] __alloc_skb+0x9e/0x520 [ 45.630919][ T832] ? netlink_autobind+0x155/0x190 [ 45.637036][ T832] netlink_sendmsg+0x605/0xb50 [ 45.643210][ T832] ? netlink_getsockopt+0x530/0x530 [ 45.648939][ T832] ? kasan_set_track+0x5b/0x70 [ 45.655596][ T832] ? slab_free_freelist_hook+0xc5/0x190 [ 45.663030][ T832] ? security_socket_sendmsg+0x82/0xa0 [ 45.669335][ T832] ? netlink_getsockopt+0x530/0x530 [ 45.676659][ T832] ____sys_sendmsg+0x5b7/0x8f0 [ 45.683446][ T832] ? __sys_sendmsg_sock+0x40/0x40 [ 45.689693][ T832] ? import_iovec+0x7c/0xb0 [ 45.695785][ T832] ___sys_sendmsg+0x236/0x2e0 [ 45.703067][ T832] ? __sys_sendmsg+0x280/0x280 [ 45.708283][ T832] ? rw_verify_area+0x1c0/0x360 [ 45.713952][ T832] ? __fdget+0x1a1/0x230 [ 45.719868][ T832] __x64_sys_sendmsg+0x1f9/0x2c0 [ 45.725669][ T832] ? fput+0x1a/0x20 [ 45.730210][ T832] ? ___sys_sendmsg+0x2e0/0x2e0 [ 45.735679][ T832] ? debug_smp_processor_id+0x17/0x20 [ 45.741918][ T832] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 45.748744][ T832] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 45.755618][ T832] do_syscall_64+0x31/0x40 [ 45.760819][ T832] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.764732][ T290] usb 4-1: USB disconnect, device number 7 [ 45.768248][ T832] RIP: 0033:0x7fa5ecd19e59 [ 45.768259][ T832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.768264][ T832] RSP: 002b:00007fa5eb774028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.768275][ T832] RAX: ffffffffffffffda RBX: 00007fa5ecf92fa0 RCX: 00007fa5ecd19e59 [ 45.768280][ T832] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 45.768285][ T832] RBP: 00007fa5eb774090 R08: 0000000000000000 R09: 0000000000000000 [ 45.768300][ T832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.864948][ T832] R13: 00007fa5ecf93038 R14: 00007fa5ecf92fa0 R15: 00007ffec5049388 [ 45.878315][ T24] audit: type=1400 audit(1778920084.330:339): avc: denied { write } for pid=790 comm="syz.3.143" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.931346][ T840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'. [ 45.937794][ T24] audit: type=1400 audit(1778920084.330:340): avc: denied { add_name } for pid=790 comm="syz.3.143" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.973653][ T24] audit: type=1400 audit(1778920084.330:341): avc: denied { setattr } for pid=790 comm="syz.3.143" path="/29/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.016063][ T24] audit: type=1400 audit(1778920084.330:342): avc: denied { remove_name } for pid=790 comm="syz.3.143" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.047669][ T24] audit: type=1400 audit(1778920084.330:343): avc: denied { rename } for pid=790 comm="syz.3.143" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.081745][ T24] audit: type=1400 audit(1778920084.330:344): avc: denied { reparent } for pid=790 comm="syz.3.143" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.108833][ T24] audit: type=1400 audit(1778920084.330:345): avc: denied { remove_name } for pid=790 comm="syz.3.143" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.143096][ T24] audit: type=1400 audit(1778920084.330:346): avc: denied { rmdir } for pid=790 comm="syz.3.143" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.446409][ T852] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 46.475315][ T852] SELinux: failed to load policy [ 46.566849][ T857] FAULT_INJECTION: forcing a failure. [ 46.566849][ T857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.585547][ T857] CPU: 0 PID: 857 Comm: syz.3.160 Not tainted syzkaller #0 [ 46.594352][ T857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 46.605575][ T857] Call Trace: [ 46.609661][ T857] __dump_stack+0x21/0x24 [ 46.615341][ T857] dump_stack_lvl+0x1a7/0x208 [ 46.621659][ T857] ? thaw_kernel_threads+0x220/0x220 [ 46.628128][ T857] ? vsnprintf+0x189c/0x1990 [ 46.634453][ T857] ? show_regs_print_info+0x18/0x18 [ 46.640139][ T857] dump_stack+0x15/0x1c [ 46.645102][ T857] should_fail+0x3c1/0x510 [ 46.650164][ T857] should_fail_usercopy+0x1a/0x20 [ 46.655776][ T857] _copy_to_user+0x20/0x90 [ 46.660794][ T857] simple_read_from_buffer+0xe9/0x160 [ 46.667314][ T857] proc_fail_nth_read+0x1a6/0x220 [ 46.673499][ T857] ? proc_fault_inject_write+0x310/0x310 [ 46.681619][ T857] ? rw_verify_area+0x1c0/0x360 [ 46.687268][ T857] ? proc_fault_inject_write+0x310/0x310 [ 46.694432][ T857] vfs_read+0x209/0xa60 [ 46.698939][ T857] ? kernel_read+0x70/0x70 [ 46.703853][ T857] ? __kasan_check_write+0x14/0x20 [ 46.709777][ T857] ? mutex_lock+0x92/0xf0 [ 46.715061][ T857] ? mutex_trylock+0xa0/0xa0 [ 46.720130][ T857] ? __fget_files+0x2c4/0x320 [ 46.725320][ T857] ? __fdget_pos+0x2d2/0x380 [ 46.731346][ T857] ? ksys_read+0x71/0x250 [ 46.737138][ T857] ksys_read+0x149/0x250 [ 46.742460][ T857] ? vfs_write+0xdc0/0xdc0 [ 46.750001][ T857] ? ____fput+0x15/0x20 [ 46.754753][ T857] ? debug_smp_processor_id+0x17/0x20 [ 46.762027][ T857] __x64_sys_read+0x7b/0x90 [ 46.768221][ T857] do_syscall_64+0x31/0x40 [ 46.773218][ T857] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.779878][ T857] RIP: 0033:0x7f399d80468e [ 46.785204][ T857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 46.808924][ T857] RSP: 002b:00007f399c29dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.820057][ T857] RAX: ffffffffffffffda RBX: 00007f399c29e6c0 RCX: 00007f399d80468e [ 46.829613][ T857] RDX: 000000000000000f RSI: 00007f399c29e0a0 RDI: 0000000000000004 [ 46.838742][ T857] RBP: 00007f399c29e090 R08: 0000000000000000 R09: 0000000000000000 [ 46.848191][ T857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.857192][ T857] R13: 00007f399dabd038 R14: 00007f399dabcfa0 R15: 00007ffd955bc298 [ 46.895460][ T317] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 47.261714][ T519] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 47.677066][ T317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.692040][ T317] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.770821][ T883] FAULT_INJECTION: forcing a failure. [ 47.770821][ T883] name failslab, interval 1, probability 0, space 0, times 0 [ 47.787302][ T317] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 47.787508][ T883] CPU: 1 PID: 883 Comm: syz.1.167 Not tainted syzkaller #0 [ 47.797994][ T317] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 47.806424][ T883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 47.806428][ T883] Call Trace: [ 47.806453][ T883] __dump_stack+0x21/0x24 [ 47.806472][ T883] dump_stack_lvl+0x1a7/0x208 [ 47.816592][ T317] usb 1-1: Manufacturer: syz [ 47.830336][ T883] ? thaw_kernel_threads+0x220/0x220 [ 47.830347][ T883] ? show_regs_print_info+0x18/0x18 [ 47.830355][ T883] dump_stack+0x15/0x1c [ 47.830363][ T883] should_fail+0x3c1/0x510 [ 47.830371][ T883] ? netlink_sendmsg+0x605/0xb50 [ 47.830380][ T883] __should_failslab+0xa4/0xe0 [ 47.830389][ T883] should_failslab+0x9/0x20 [ 47.830395][ T883] __kmalloc_track_caller+0x5f/0x320 [ 47.830404][ T883] ? kmem_cache_alloc+0x162/0x2d0 [ 47.830414][ T883] ? __alloc_skb+0x9e/0x520 [ 47.830421][ T883] ? netlink_sendmsg+0x605/0xb50 [ 47.830429][ T883] __alloc_skb+0xdc/0x520 [ 47.830446][ T883] ? netlink_autobind+0x155/0x190 [ 47.842055][ T317] usb 1-1: config 0 descriptor?? [ 47.849334][ T883] netlink_sendmsg+0x605/0xb50 [ 47.849345][ T883] ? netlink_getsockopt+0x530/0x530 [ 47.849353][ T883] ? kasan_set_track+0x5b/0x70 [ 47.849361][ T883] ? slab_free_freelist_hook+0xc5/0x190 [ 47.849369][ T883] ? security_socket_sendmsg+0x82/0xa0 [ 47.849376][ T883] ? netlink_getsockopt+0x530/0x530 [ 47.849385][ T883] ____sys_sendmsg+0x5b7/0x8f0 [ 47.849393][ T883] ? __sys_sendmsg_sock+0x40/0x40 [ 47.849403][ T883] ? import_iovec+0x7c/0xb0 [ 47.849410][ T883] ___sys_sendmsg+0x236/0x2e0 [ 47.849427][ T883] ? __sys_sendmsg+0x280/0x280 [ 47.888990][ T317] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 47.891450][ T883] ? rw_verify_area+0x1c0/0x360 [ 47.891472][ T883] ? __fdget+0x1a1/0x230 [ 48.062447][ T883] __x64_sys_sendmsg+0x1f9/0x2c0 [ 48.068289][ T883] ? fput+0x1a/0x20 [ 48.072585][ T883] ? ___sys_sendmsg+0x2e0/0x2e0 [ 48.079197][ T883] ? debug_smp_processor_id+0x17/0x20 [ 48.086076][ T883] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 48.093728][ T883] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 48.100868][ T883] do_syscall_64+0x31/0x40 [ 48.106238][ T883] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.107266][ T519] usb 3-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 48.114383][ T883] RIP: 0033:0x7f38974e5e59 [ 48.114395][ T883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.114412][ T883] RSP: 002b:00007f3895f40028 EFLAGS: 00000246 [ 48.124586][ T519] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.129245][ T883] ORIG_RAX: 000000000000002e [ 48.129252][ T883] RAX: ffffffffffffffda RBX: 00007f389775efa0 RCX: 00007f38974e5e59 [ 48.129257][ T883] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 48.129263][ T883] RBP: 00007f3895f40090 R08: 0000000000000000 R09: 0000000000000000 [ 48.129267][ T883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.129272][ T883] R13: 00007f389775f038 R14: 00007f389775efa0 R15: 00007ffdecd6e6f8 [ 48.262799][ T519] usb 3-1: Product: à Œ [ 48.267341][ T519] usb 3-1: Manufacturer: Ó¿ [ 48.272479][ T519] usb 3-1: SerialNumber: ч [ 48.285442][ T887] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 48.295488][ T887] SELinux: failed to load policy [ 48.517206][ T52] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.610332][ T889] F2FS-fs (loop3): invalid crc value [ 48.619727][ T889] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.647977][ T889] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 48.657289][ T889] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 48.738610][ T855] udc-core: couldn't find an available UDC or it's busy [ 48.749397][ T855] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.761372][ T855] udc-core: couldn't find an available UDC or it's busy [ 48.770991][ T855] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.787210][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 48.864505][ T889] F2FS-fs (loop3): Start checkpoint disabled! [ 48.917319][ T52] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 48.937184][ T52] usb 2-1: config 0 has no interface number 0 [ 49.117327][ T52] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 49.129354][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.140228][ T52] usb 2-1: Product: syz [ 49.146253][ T52] usb 2-1: Manufacturer: syz [ 49.153957][ T52] usb 2-1: SerialNumber: syz [ 49.164541][ T698] usb 1-1: USB disconnect, device number 5 [ 49.233863][ T52] usb 2-1: config 0 descriptor?? [ 49.332541][ T519] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 49.335378][ T52] smsc95xx v2.0.0 [ 49.345002][ T519] usb 3-1: USB disconnect, device number 7 [ 49.386086][ T905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 49.818179][ T52] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 49.836591][ T52] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 49.850763][ T929] EXT4-fs (loop3): Ignoring removed bh option [ 49.861431][ T929] EXT4-fs (loop3): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 49.862639][ T930] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 49.904495][ T930] SELinux: failed to load policy [ 50.147198][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 50.147207][ T24] audit: type=1400 audit(1778920088.750:397): avc: denied { read write } for pid=928 comm="syz.3.181" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.198050][ T24] audit: type=1400 audit(1778920088.800:398): avc: denied { open } for pid=928 comm="syz.3.181" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.235062][ T24] audit: type=1400 audit(1778920088.810:399): avc: denied { ioctl } for pid=928 comm="syz.3.181" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.275891][ T24] audit: type=1326 audit(1778920088.840:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz.2.182" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53686de59 code=0x7ffc0000 [ 50.310310][ T885] netlink: 288 bytes leftover after parsing attributes in process `syz.1.168'. [ 50.312087][ T24] audit: type=1326 audit(1778920088.840:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz.2.182" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53686de59 code=0x7ffc0000 [ 50.354764][ T24] audit: type=1326 audit(1778920088.920:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz.2.182" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fe53686de59 code=0x7ffc0000 [ 50.392603][ T24] audit: type=1326 audit(1778920088.920:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz.2.182" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53686de59 code=0x7ffc0000 [ 50.426060][ T24] audit: type=1326 audit(1778920088.920:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz.2.182" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53686de59 code=0x7ffc0000 [ 50.427613][ T934] tipc: Started in network mode [ 50.466176][ T24] audit: type=1326 audit(1778920088.920:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz.2.182" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe53682e68e code=0x7ffc0000 [ 50.473820][ T941] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.512326][ T934] tipc: Own node identity 7f000001, cluster identity 4711 [ 50.543204][ T24] audit: type=1326 audit(1778920088.920:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz.2.182" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe53686daeb code=0x7ffc0000 [ 50.545153][ T934] tipc: Enabled bearer , priority 10 [ 50.580417][ T941] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 50.602913][ T941] System zones: 0-2, 18-18, 34-34 [ 50.611960][ T317] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 50.640323][ T941] EXT4-fs error (device loop3): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 50.662935][ T941] EXT4-fs (loop3): Remounting filesystem read-only [ 50.667284][ T52] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71 [ 50.674200][ T941] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 50.703546][ T941] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #16: comm syz.3.183: mark_inode_dirty error [ 50.708915][ T52] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 50.725509][ T941] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 50.750136][ T941] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #16: comm syz.3.183: mark_inode_dirty error [ 50.757076][ T52] usb 2-1: USB disconnect, device number 7 [ 50.768698][ T941] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 50.787647][ T941] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 50.798303][ T941] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 50.815156][ T941] EXT4-fs error (device loop3): ext4_truncate:4403: inode #16: comm syz.3.183: mark_inode_dirty error [ 50.831399][ T941] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3106: error 27 [ 50.843765][ T941] EXT4-fs (loop3): 1 truncate cleaned up [ 50.848419][ T959] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 50.852646][ T941] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,debug, [ 50.876724][ T959] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.892020][ T941] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.899595][ T959] SELinux: duplicate or incompatible mount options [ 51.007196][ T317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.020046][ T317] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.137259][ T317] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.149256][ T317] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 51.399541][ T317] usb 3-1: Manufacturer: syz [ 51.435441][ T317] usb 3-1: config 0 descriptor?? [ 51.470892][ T972] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 51.477716][ T317] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 51.500270][ T972] SELinux: failed to load policy [ 51.653095][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.662491][ T973] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.671057][ T973] device bridge_slave_0 entered promiscuous mode [ 51.681863][ T317] tipc: 32-bit node address hash set to 100007f [ 51.690369][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.702552][ T973] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.996794][ T973] device bridge_slave_1 entered promiscuous mode [ 52.007391][ T989] exfat: Deprecated parameter 'utf8' [ 52.183801][ T989] exfat: Deprecated parameter 'namecase' [ 52.292408][ T989] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 52.346917][ T973] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.355882][ T989] incfs: ino conflict with backing FS 1 [ 52.360135][ T973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.360248][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.386126][ T973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.399630][ T989] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 52.413885][ T989] overlayfs: './file0' not a directory [ 52.416222][ T996] SELinux: ebitmap: map size 2705653824 does not match my size 64 (high bit was 1694503936) [ 52.443506][ T996] SELinux: failed to load policy [ 52.482307][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.502760][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.513630][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.524407][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.539197][ T1002] SELinux: Context system_u:object_r:cert_t:s0 is not valid (left unmapped). [ 52.554039][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.565060][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.575159][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.589818][ T973] device veth0_vlan entered promiscuous mode [ 52.606186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.614213][ T1001] EXT4-fs (loop0): Unrecognized mount option "measure" or missing value [ 52.617744][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.639121][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.704656][ T973] device veth1_macvtap entered promiscuous mode [ 52.717868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.813600][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.831021][ T52] usb 3-1: USB disconnect, device number 8 [ 52.836390][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.921192][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.931167][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.947843][ T626] tipc: Disabling bearer [ 52.949014][ T1011] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 52.966603][ T626] tipc: Left network mode [ 53.048710][ T1011] SELinux: failed to load policy [ 53.048892][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.081878][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.095144][ T1014] device bridge_slave_0 entered promiscuous mode [ 53.105215][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.114120][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.122831][ T1014] device bridge_slave_1 entered promiscuous mode [ 53.148210][ T1023] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.184248][ T1023] EXT4-fs (loop2): 1 truncate cleaned up [ 53.205249][ T1023] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000010000,,errors=continue [ 53.248764][ T1023] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.208: bg 0: block 465: padding at end of block bitmap is not set [ 53.288535][ T1023] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 53.343180][ T1023] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.343180][ T1023] [ 53.362390][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.370632][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.380287][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.390045][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.417444][ T1023] EXT4-fs (loop2): Total free blocks count 0 [ 53.425966][ T1023] EXT4-fs (loop2): Free/Dirty block details [ 53.452134][ T1023] EXT4-fs (loop2): free_blocks=0 [ 53.459406][ T1023] EXT4-fs (loop2): dirty_blocks=65 [ 53.467214][ T1023] EXT4-fs (loop2): Block reservation details [ 53.484731][ T1023] EXT4-fs (loop2): i_reserved_data_blocks=65 [ 53.516414][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.532375][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 63 with error 28 [ 53.555458][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.555514][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 53.555514][ T9] [ 53.578985][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.607914][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.618741][ T1038] exfat: Deprecated parameter 'utf8' [ 53.618981][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.626063][ T1038] exfat: Deprecated parameter 'namecase' [ 53.636253][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.636945][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.645843][ T1038] exfat: Deprecated parameter 'namecase' [ 53.673853][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.683505][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.703708][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.718040][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.729090][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.752965][ T1038] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 53.766018][ T1014] device veth0_vlan entered promiscuous mode [ 53.784011][ T1014] device veth1_macvtap entered promiscuous mode [ 53.847370][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.864934][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.877058][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.888368][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.902406][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.914649][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.940385][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.008464][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.092621][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.136021][ T1055] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 54.164178][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.175588][ T1055] EXT4-fs error (device loop0): ext4_get_journal_inode:5247: inode #32: comm syz.0.216: iget: special inode unallocated [ 54.176059][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.192224][ T1055] EXT4-fs (loop0): no journal found [ 54.204661][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.219376][ T1055] EXT4-fs (loop0): can't get journal size [ 54.221339][ T1036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.236357][ T1055] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.216: iget: special inode unallocated [ 54.257709][ T1055] EXT4-fs (loop0): failed to initialize system zone (-117) [ 54.266717][ T626] device bridge_slave_1 left promiscuous mode [ 54.276431][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.286053][ T626] device bridge_slave_0 left promiscuous mode [ 54.287257][ T290] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 54.293693][ T626] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.307572][ T1055] EXT4-fs (loop0): mount failed [ 54.321698][ T626] device veth1_macvtap left promiscuous mode [ 54.330705][ T626] device veth0_vlan left promiscuous mode [ 54.337615][ T1064] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 54.355109][ T1064] SELinux: failed to load policy [ 54.515662][ T1071] exfat: Deprecated parameter 'utf8' [ 54.525703][ T1071] exfat: Deprecated parameter 'utf8' [ 54.534942][ T1071] exfat: Deprecated parameter 'utf8' [ 54.548391][ T1071] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 54.566043][ T1086] FAULT_INJECTION: forcing a failure. [ 54.566043][ T1086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.583693][ T1086] CPU: 1 PID: 1086 Comm: syz.6.224 Not tainted syzkaller #0 [ 54.594387][ T1086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 54.607979][ T1086] Call Trace: [ 54.613370][ T1086] __dump_stack+0x21/0x24 [ 54.618814][ T1086] dump_stack_lvl+0x1a7/0x208 [ 54.624862][ T1086] ? show_regs_print_info+0x18/0x18 [ 54.630560][ T1086] ? path_openat+0x2970/0x31c0 [ 54.637987][ T1086] dump_stack+0x15/0x1c [ 54.642708][ T1086] should_fail+0x3c1/0x510 [ 54.649926][ T1086] should_fail_usercopy+0x1a/0x20 [ 54.656872][ T1086] _copy_from_user+0x20/0xd0 [ 54.666433][ T1086] iovec_from_user+0x1bc/0x2f0 [ 54.677184][ T1086] ? __copy_msghdr_from_user+0x329/0x630 [ 54.686416][ T1086] __import_iovec+0x71/0x390 [ 54.693524][ T1086] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 54.697785][ T290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 54.703490][ T1086] import_iovec+0x7c/0xb0 [ 54.703503][ T1086] ___sys_sendmsg+0x1fd/0x2e0 [ 54.703523][ T1086] ? __sys_sendmsg+0x280/0x280 [ 54.717446][ T290] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 54.721817][ T1086] ? rw_verify_area+0x1c0/0x360 [ 54.721833][ T1086] ? __fdget+0x1a1/0x230 [ 54.721843][ T1086] __x64_sys_sendmsg+0x1f9/0x2c0 [ 54.721851][ T1086] ? fput+0x1a/0x20 [ 54.721859][ T1086] ? ___sys_sendmsg+0x2e0/0x2e0 [ 54.721871][ T1086] ? debug_smp_processor_id+0x17/0x20 [ 54.721881][ T1086] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 54.721891][ T1086] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 54.721899][ T1086] do_syscall_64+0x31/0x40 [ 54.721910][ T1086] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.721918][ T1086] RIP: 0033:0x7fe886885e59 [ 54.721929][ T1086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.721935][ T1086] RSP: 002b:00007fe8852e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.721949][ T1086] RAX: ffffffffffffffda RBX: 00007fe886afefa0 RCX: 00007fe886885e59 [ 54.721954][ T1086] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 54.721961][ T1086] RBP: 00007fe8852e0090 R08: 0000000000000000 R09: 0000000000000000 [ 54.721967][ T1086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.721974][ T1086] R13: 00007fe886aff038 R14: 00007fe886afefa0 R15: 00007fff1f566db8 [ 54.823511][ T1083] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,grpquota,nodiscard,nombcache,,errors=continue [ 54.823572][ T1083] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.039630][ T290] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 55.072829][ T290] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 55.076332][ T1103] SELinux: ebitmap: truncated map [ 55.091975][ T290] usb 4-1: Manufacturer: syz [ 55.102866][ T1103] SELinux: failed to load policy [ 55.106019][ T290] usb 4-1: config 0 descriptor?? [ 55.457828][ T290] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 55.702574][ T1112] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.223: bg 0: block 337: padding at end of block bitmap is not set [ 55.734489][ T1112] incfs: Can't find or create .index dir in ./file0 [ 55.744983][ T1112] incfs: mount failed -117 [ 55.838077][ T24] kauditd_printk_skb: 1678 callbacks suppressed [ 55.838092][ T24] audit: type=1326 audit(1778920094.450:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1041 comm="syz.3.214" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f399d843aeb code=0x7ffc0000 [ 55.880847][ T1114] capability: warning: `syz.2.232' uses deprecated v2 capabilities in a way that may be insecure [ 55.903023][ T24] audit: type=1400 audit(1778920094.510:2086): avc: denied { getopt } for pid=1113 comm="syz.2.232" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.961339][ T290] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.990481][ T1114] device wg0 entered promiscuous mode [ 56.014217][ T1119] FAULT_INJECTION: forcing a failure. [ 56.014217][ T1119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.032322][ T1119] CPU: 0 PID: 1119 Comm: syz.6.234 Not tainted syzkaller #0 [ 56.043934][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 56.058180][ T1119] Call Trace: [ 56.062769][ T1119] __dump_stack+0x21/0x24 [ 56.069348][ T1119] dump_stack_lvl+0x1a7/0x208 [ 56.079572][ T1119] ? show_regs_print_info+0x18/0x18 [ 56.085558][ T1119] ? path_openat+0x2970/0x31c0 [ 56.090686][ T1119] dump_stack+0x15/0x1c [ 56.096560][ T1119] should_fail+0x3c1/0x510 [ 56.103588][ T1119] should_fail_usercopy+0x1a/0x20 [ 56.110710][ T1119] _copy_from_user+0x20/0xd0 [ 56.118900][ T1119] __copy_msghdr_from_user+0xc9/0x630 [ 56.127058][ T1119] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 56.134438][ T1119] ? __fsnotify_parent+0x6d2/0x7c0 [ 56.142857][ T1119] ___sys_sendmsg+0x19a/0x2e0 [ 56.149300][ T1119] ? __sys_sendmsg+0x280/0x280 [ 56.158794][ T1119] ? rw_verify_area+0x1c0/0x360 [ 56.167061][ T1119] ? __fdget+0x1a1/0x230 [ 56.172075][ T1119] __x64_sys_sendmsg+0x1f9/0x2c0 [ 56.182375][ T1119] ? fput+0x1a/0x20 [ 56.187128][ T1119] ? ___sys_sendmsg+0x2e0/0x2e0 [ 56.192293][ T1119] ? debug_smp_processor_id+0x17/0x20 [ 56.202855][ T1119] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 56.209914][ T1119] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 56.221903][ T1119] do_syscall_64+0x31/0x40 [ 56.227310][ T1119] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.236199][ T1119] RIP: 0033:0x7fe886885e59 [ 56.242677][ T1119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.286571][ T1119] RSP: 002b:00007fe8852e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.301226][ T1119] RAX: ffffffffffffffda RBX: 00007fe886afefa0 RCX: 00007fe886885e59 [ 56.310298][ T1119] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000006 [ 56.325521][ T1119] RBP: 00007fe8852e0090 R08: 0000000000000000 R09: 0000000000000000 [ 56.339253][ T1119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.351265][ T1119] R13: 00007fe886aff038 R14: 00007fe886afefa0 R15: 00007fff1f566db8 [ 56.368299][ T509] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 56.438099][ T1121] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 56.456664][ T24] audit: type=1400 audit(1778920095.060:2087): avc: denied { rename } for pid=1120 comm="syz.0.235" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.478652][ T1129] cgroup: none used incorrectly [ 56.490844][ T1127] 9pnet: Insufficient options for proto=fd [ 56.516819][ T24] audit: type=1400 audit(1778920095.060:2088): avc: denied { unlink } for pid=1120 comm="syz.0.235" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.526018][ T1131] FAULT_INJECTION: forcing a failure. [ 56.526018][ T1131] name failslab, interval 1, probability 0, space 0, times 0 [ 56.544914][ T290] usb 6-1: Using ep0 maxpacket: 32 [ 56.564142][ T1131] CPU: 1 PID: 1131 Comm: syz.6.238 Not tainted syzkaller #0 [ 56.583284][ T1131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 56.596490][ T1131] Call Trace: [ 56.601872][ T1131] __dump_stack+0x21/0x24 [ 56.609719][ T1131] dump_stack_lvl+0x1a7/0x208 [ 56.618018][ T1131] ? thaw_kernel_threads+0x220/0x220 [ 56.625750][ T1131] ? show_regs_print_info+0x18/0x18 [ 56.632645][ T1131] ? __local_bh_enable_ip+0x53/0x80 [ 56.640227][ T1131] ? release_sock+0x15b/0x1b0 [ 56.647387][ T1131] dump_stack+0x15/0x1c [ 56.654236][ T1131] should_fail+0x3c1/0x510 [ 56.663309][ T1131] ? __alloc_skb+0x9e/0x520 [ 56.676599][ T1131] __should_failslab+0xa4/0xe0 [ 56.687213][ T1131] should_failslab+0x9/0x20 [ 56.693592][ T1131] kmem_cache_alloc+0x3d/0x2d0 [ 56.701171][ T1131] __alloc_skb+0x9e/0x520 [ 56.706918][ T1131] ? netlink_autobind+0x155/0x190 [ 56.713499][ T1131] netlink_sendmsg+0x605/0xb50 [ 56.720684][ T1131] ? netlink_getsockopt+0x530/0x530 [ 56.726296][ T1131] ? kasan_set_track+0x5b/0x70 [ 56.733202][ T1131] ? slab_free_freelist_hook+0xc5/0x190 [ 56.742899][ T1131] ? security_socket_sendmsg+0x82/0xa0 [ 56.750649][ T1131] ? netlink_getsockopt+0x530/0x530 [ 56.757492][ T290] usb 6-1: unable to get BOS descriptor or descriptor too short [ 56.757580][ T1131] ____sys_sendmsg+0x5b7/0x8f0 [ 56.774481][ T1131] ? __sys_sendmsg_sock+0x40/0x40 [ 56.783836][ T1131] ? import_iovec+0x7c/0xb0 [ 56.791293][ T1131] ___sys_sendmsg+0x236/0x2e0 [ 56.797404][ T1131] ? __sys_sendmsg+0x280/0x280 [ 56.804614][ T1131] ? rw_verify_area+0x1c0/0x360 [ 56.813829][ T1131] ? __fdget+0x1a1/0x230 [ 56.820000][ T1131] __x64_sys_sendmsg+0x1f9/0x2c0 [ 56.826840][ T1131] ? fput+0x1a/0x20 [ 56.832090][ T1131] ? ___sys_sendmsg+0x2e0/0x2e0 [ 56.837541][ T290] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 56.838716][ T1131] ? debug_smp_processor_id+0x17/0x20 [ 56.865312][ T1131] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 56.875840][ T1131] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 56.885019][ T1131] do_syscall_64+0x31/0x40 [ 56.890681][ T1131] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.902482][ T1131] RIP: 0033:0x7fe886885e59 [ 56.910168][ T1131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.939186][ T1131] RSP: 002b:00007fe8852e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.956713][ T1131] RAX: ffffffffffffffda RBX: 00007fe886afefa0 RCX: 00007fe886885e59 [ 56.967914][ T1131] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 56.977941][ T1131] RBP: 00007fe8852e0090 R08: 0000000000000000 R09: 0000000000000000 [ 56.991798][ T1131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.003074][ T1131] R13: 00007fe886aff038 R14: 00007fe886afefa0 R15: 00007fff1f566db8 [ 57.018832][ T519] usb 4-1: USB disconnect, device number 8 [ 57.053515][ T290] usb 6-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice= 0.40 [ 57.068737][ T1138] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 57.086015][ T290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.099594][ T290] usb 6-1: Product: syz [ 57.105112][ T1138] SELinux: failed to load policy [ 57.113860][ T290] usb 6-1: Manufacturer: syz [ 57.121008][ T290] usb 6-1: SerialNumber: syz [ 57.133690][ T1134] SELinux: failed to load policy [ 57.187193][ T509] usb 3-1: device descriptor read/64, error -71 [ 57.607155][ T509] usb 3-1: device descriptor read/64, error -71 [ 57.684625][ T1160] FAULT_INJECTION: forcing a failure. [ 57.684625][ T1160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.737234][ T290] usb 6-1: unit 2 not found! [ 57.746031][ T1160] CPU: 1 PID: 1160 Comm: syz.6.247 Not tainted syzkaller #0 [ 57.757391][ T1160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 57.769094][ T1160] Call Trace: [ 57.769318][ T1162] handle_bad_sector: 126 callbacks suppressed [ 57.769330][ T1162] attempt to access beyond end of device [ 57.769330][ T1162] loop3: rw=2049, want=250, limit=128 [ 57.773044][ T1160] __dump_stack+0x21/0x24 [ 57.785453][ T290] usb 6-1: USB disconnect, device number 2 [ 57.797079][ T1160] dump_stack_lvl+0x1a7/0x208 [ 57.797099][ T1160] ? show_regs_print_info+0x18/0x18 [ 57.797110][ T1160] ? path_openat+0x2970/0x31c0 [ 57.797119][ T1160] dump_stack+0x15/0x1c [ 57.797127][ T1160] should_fail+0x3c1/0x510 [ 57.797135][ T1160] should_fail_usercopy+0x1a/0x20 [ 57.797144][ T1160] _copy_from_user+0x20/0xd0 [ 57.797152][ T1160] iovec_from_user+0x1bc/0x2f0 [ 57.797161][ T1160] ? __copy_msghdr_from_user+0x329/0x630 [ 57.797169][ T1160] __import_iovec+0x71/0x390 [ 57.797177][ T1160] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 57.797187][ T1160] import_iovec+0x7c/0xb0 [ 57.797194][ T1160] ___sys_sendmsg+0x1fd/0x2e0 [ 57.797203][ T1160] ? __sys_sendmsg+0x280/0x280 [ 57.797210][ T1160] ? rw_verify_area+0x1c0/0x360 [ 57.797222][ T1160] ? __fdget+0x1a1/0x230 [ 57.797229][ T1160] __x64_sys_sendmsg+0x1f9/0x2c0 [ 57.797237][ T1160] ? fput+0x1a/0x20 [ 57.797244][ T1160] ? ___sys_sendmsg+0x2e0/0x2e0 [ 57.797254][ T1160] ? debug_smp_processor_id+0x17/0x20 [ 57.797265][ T1160] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 57.797285][ T1160] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 57.842035][ T24] audit: type=1400 audit(1778920096.410:2089): avc: denied { connect } for pid=1161 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.848538][ T1160] do_syscall_64+0x31/0x40 [ 57.848551][ T1160] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 57.848560][ T1160] RIP: 0033:0x7fe886885e59 [ 57.848570][ T1160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.848576][ T1160] RSP: 002b:00007fe8852e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.848588][ T1160] RAX: ffffffffffffffda RBX: 00007fe886afefa0 RCX: 00007fe886885e59 [ 57.848594][ T1160] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000006 [ 57.848599][ T1160] RBP: 00007fe8852e0090 R08: 0000000000000000 R09: 0000000000000000 [ 57.848604][ T1160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.848610][ T1160] R13: 00007fe886aff038 R14: 00007fe886afefa0 R15: 00007fff1f566db8 [ 57.997171][ T509] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 58.007667][ T1161] attempt to access beyond end of device [ 58.007667][ T1161] loop3: rw=524288, want=250, limit=128 [ 58.123744][ T1162] attempt to access beyond end of device [ 58.123744][ T1162] loop3: rw=0, want=154, limit=128 [ 58.139817][ T1162] attempt to access beyond end of device [ 58.139817][ T1162] loop3: rw=0, want=154, limit=128 [ 58.145061][ T1156] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12 [ 58.165557][ T1156] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 58.182514][ T1162] attempt to access beyond end of device [ 58.182514][ T1162] loop3: rw=2049, want=146, limit=128 [ 58.193138][ T1156] F2FS-fs (loop5): invalid crc value [ 58.217787][ T1156] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 58.234699][ T1173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.250'. [ 58.259789][ T1156] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 58.271962][ T1156] F2FS-fs (loop5): Start checkpoint disabled! [ 58.290334][ T24] audit: type=1400 audit(1778920096.900:2090): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.294470][ T1173] device veth0_to_batadv entered promiscuous mode [ 58.324430][ T509] usb 3-1: device descriptor read/64, error -71 [ 58.345599][ T1156] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 58.358957][ T1156] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 58.373212][ T24] audit: type=1400 audit(1778920096.980:2091): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.409723][ T24] audit: type=1400 audit(1778920096.980:2092): avc: denied { read } for pid=134 comm="dhcpcd" name="n32" dev="tmpfs" ino=2080 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.451494][ T24] audit: type=1400 audit(1778920096.980:2093): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=2080 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.464660][ T1156] 9pnet: p9_fd_create_unix (1156): problem connecting socket: ./bus: -111 [ 58.487312][ T24] audit: type=1400 audit(1778920096.980:2094): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=2080 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.529368][ T626] attempt to access beyond end of device [ 58.529368][ T626] loop5: rw=2049, want=45104, limit=40427 [ 58.545060][ T1181] SELinux: ebitmap: truncated map [ 58.566068][ T1181] SELinux: failed to load policy [ 58.669341][ T1191] FAULT_INJECTION: forcing a failure. [ 58.669341][ T1191] name failslab, interval 1, probability 0, space 0, times 0 [ 58.686122][ T1191] CPU: 1 PID: 1191 Comm: syz.5.254 Not tainted syzkaller #0 [ 58.697864][ T1191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 58.710799][ T1191] Call Trace: [ 58.715216][ T1191] __dump_stack+0x21/0x24 [ 58.720783][ T1191] dump_stack_lvl+0x1a7/0x208 [ 58.726695][ T1191] ? thaw_kernel_threads+0x220/0x220 [ 58.734049][ T1191] ? show_regs_print_info+0x18/0x18 [ 58.743555][ T1191] dump_stack+0x15/0x1c [ 58.748986][ T1191] should_fail+0x3c1/0x510 [ 58.758348][ T1191] ? netlink_sendmsg+0x605/0xb50 [ 58.765879][ T1191] __should_failslab+0xa4/0xe0 [ 58.772561][ T1191] should_failslab+0x9/0x20 [ 58.779447][ T1191] __kmalloc_track_caller+0x5f/0x320 [ 58.786349][ T1191] ? kmem_cache_alloc+0x162/0x2d0 [ 58.794669][ T1191] ? __alloc_skb+0x9e/0x520 [ 58.801949][ T1191] ? netlink_sendmsg+0x605/0xb50 [ 58.808291][ T1191] __alloc_skb+0xdc/0x520 [ 58.814539][ T1191] ? netlink_autobind+0x155/0x190 [ 58.821469][ T1191] netlink_sendmsg+0x605/0xb50 [ 58.826868][ T1191] ? netlink_getsockopt+0x530/0x530 [ 58.837482][ T1191] ? kasan_set_track+0x5b/0x70 [ 58.844121][ T1191] ? slab_free_freelist_hook+0xc5/0x190 [ 58.859578][ T1191] ? security_socket_sendmsg+0x82/0xa0 [ 58.866733][ T1191] ? netlink_getsockopt+0x530/0x530 [ 58.877674][ T1191] ____sys_sendmsg+0x5b7/0x8f0 [ 58.888149][ T1191] ? __sys_sendmsg_sock+0x40/0x40 [ 58.901013][ T1191] ? import_iovec+0x7c/0xb0 [ 58.906792][ T1191] ___sys_sendmsg+0x236/0x2e0 [ 58.915294][ T1191] ? __sys_sendmsg+0x280/0x280 [ 58.925229][ T1191] ? rw_verify_area+0x1c0/0x360 [ 58.930889][ T1191] ? __fdget+0x1a1/0x230 [ 58.944189][ T1191] __x64_sys_sendmsg+0x1f9/0x2c0 [ 58.955743][ T1191] ? fput+0x1a/0x20 [ 58.964846][ T1191] ? ___sys_sendmsg+0x2e0/0x2e0 [ 58.972749][ T1191] ? debug_smp_processor_id+0x17/0x20 [ 58.982814][ T1191] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 58.989868][ T1191] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 58.997761][ T1191] do_syscall_64+0x31/0x40 [ 59.007394][ T1191] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 59.021019][ T1191] RIP: 0033:0x7fb2a1cffe59 [ 59.025808][ T1191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.058812][ T1191] RSP: 002b:00007fb2a075a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.068414][ T1191] RAX: ffffffffffffffda RBX: 00007fb2a1f78fa0 RCX: 00007fb2a1cffe59 [ 59.081673][ T1191] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 59.090379][ T1191] RBP: 00007fb2a075a090 R08: 0000000000000000 R09: 0000000000000000 [ 59.102588][ T1191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.113432][ T1191] R13: 00007fb2a1f79038 R14: 00007fb2a1f78fa0 R15: 00007ffcb840acd8 [ 59.132940][ T509] usb 3-1: device descriptor read/64, error -71 [ 59.235713][ T1206] fuse: Bad value for 'max_read' [ 59.260431][ T509] usb usb3-port1: attempt power cycle [ 59.286474][ T1208] erofs: (device loop0): mounted with root inode @ nid 36. [ 59.287263][ T510] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.317050][ T1216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.267'. [ 59.335337][ T1214] SELinux: ebitmap start bit (16777343) is not a multiple of the map unit size (64) [ 59.350531][ T1214] SELinux: failed to load policy [ 59.369328][ T1221] netlink: 'syz.3.269': attribute type 4 has an invalid length. [ 59.385612][ T1221] netlink: 'syz.3.269': attribute type 4 has an invalid length. [ 59.408166][ T1221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 59.430211][ T1221] netlink: 'syz.3.269': attribute type 4 has an invalid length. [ 59.587236][ T510] usb 7-1: Using ep0 maxpacket: 16 [ 59.884716][ T1233] FAULT_INJECTION: forcing a failure. [ 59.884716][ T1233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.905384][ T1233] CPU: 1 PID: 1233 Comm: syz.0.272 Not tainted syzkaller #0 [ 59.916366][ T1233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 59.928337][ T1233] Call Trace: [ 59.934417][ T1233] __dump_stack+0x21/0x24 [ 59.944809][ T1233] dump_stack_lvl+0x1a7/0x208 [ 59.952804][ T1233] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 59.963246][ T1233] ? show_regs_print_info+0x18/0x18 [ 59.970734][ T1233] dump_stack+0x15/0x1c [ 59.977970][ T1233] should_fail+0x3c1/0x510 [ 59.987764][ T1233] should_fail_usercopy+0x1a/0x20 [ 59.996973][ T1233] _copy_from_iter_full+0x1ac/0x750 [ 60.003637][ T1233] ? __check_object_size+0x2f4/0x3c0 [ 60.010689][ T1233] netlink_sendmsg+0x6fb/0xb50 [ 60.016180][ T1233] ? netlink_getsockopt+0x530/0x530 [ 60.023907][ T1233] ? security_socket_sendmsg+0x82/0xa0 [ 60.031790][ T1233] ? netlink_getsockopt+0x530/0x530 [ 60.038955][ T1233] ____sys_sendmsg+0x5b7/0x8f0 [ 60.044935][ T1233] ? __sys_sendmsg_sock+0x40/0x40 [ 60.054170][ T1233] ? import_iovec+0x7c/0xb0 [ 60.063653][ T1233] ___sys_sendmsg+0x236/0x2e0 [ 60.069910][ T1233] ? __sys_sendmsg+0x280/0x280 [ 60.078186][ T1233] ? rcu_read_unlock_special+0x17c/0x430 [ 60.086288][ T1233] ? __fdget+0x1a1/0x230 [ 60.092158][ T1233] __x64_sys_sendmsg+0x1f9/0x2c0 [ 60.099223][ T1233] ? __kasan_check_write+0x14/0x20 [ 60.105789][ T1233] ? ___sys_sendmsg+0x2e0/0x2e0 [ 60.113479][ T1233] ? __kasan_check_read+0x11/0x20 [ 60.122745][ T1233] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 60.130508][ T1233] do_syscall_64+0x31/0x40 [ 60.137057][ T1233] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.144969][ T1233] RIP: 0033:0x7fa5ecd19e59 [ 60.151759][ T1233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.184988][ T1233] RSP: 002b:00007fa5eb774028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.197221][ T1233] RAX: ffffffffffffffda RBX: 00007fa5ecf92fa0 RCX: 00007fa5ecd19e59 [ 60.207419][ T1233] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 60.219703][ T1233] RBP: 00007fa5eb774090 R08: 0000000000000000 R09: 0000000000000000 [ 60.229423][ T1233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.245114][ T1233] R13: 00007fa5ecf93038 R14: 00007fa5ecf92fa0 R15: 00007ffec5049388 [ 60.267594][ T510] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.282527][ T510] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.449943][ T510] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.467797][ T1270] FAULT_INJECTION: forcing a failure. [ 60.467797][ T1270] name failslab, interval 1, probability 0, space 0, times 0 [ 60.480697][ T510] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.494298][ T510] usb 7-1: Product: syz [ 60.497016][ T1272] FAULT_INJECTION: forcing a failure. [ 60.497016][ T1272] name failslab, interval 1, probability 0, space 0, times 0 [ 60.500765][ T510] usb 7-1: Manufacturer: syz [ 60.521243][ T1270] CPU: 1 PID: 1270 Comm: syz.5.283 Not tainted syzkaller #0 [ 60.530060][ T1270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 60.544009][ T1270] Call Trace: [ 60.547932][ T1270] __dump_stack+0x21/0x24 [ 60.556038][ T1270] dump_stack_lvl+0x1a7/0x208 [ 60.562310][ T1270] ? thaw_kernel_threads+0x220/0x220 [ 60.569081][ T1270] ? show_regs_print_info+0x18/0x18 [ 60.575509][ T1270] dump_stack+0x15/0x1c [ 60.581378][ T1270] should_fail+0x3c1/0x510 [ 60.587887][ T1270] ? netlink_sendmsg+0x605/0xb50 [ 60.594978][ T1270] __should_failslab+0xa4/0xe0 [ 60.601193][ T1270] should_failslab+0x9/0x20 [ 60.606648][ T1270] __kmalloc_track_caller+0x5f/0x320 [ 60.614004][ T1270] ? kmem_cache_alloc+0x162/0x2d0 [ 60.619958][ T1270] ? __alloc_skb+0x9e/0x520 [ 60.625983][ T1270] ? netlink_sendmsg+0x605/0xb50 [ 60.632062][ T1270] __alloc_skb+0xdc/0x520 [ 60.637981][ T1270] ? security_socket_getpeersec_dgram+0x93/0xb0 [ 60.646299][ T1270] netlink_sendmsg+0x605/0xb50 [ 60.657543][ T1270] ? netlink_getsockopt+0x530/0x530 [ 60.663688][ T1270] ? kasan_set_track+0x5b/0x70 [ 60.673183][ T1270] ? slab_free_freelist_hook+0xc5/0x190 [ 60.680199][ T1270] ? security_socket_sendmsg+0x82/0xa0 [ 60.686767][ T1270] ? netlink_getsockopt+0x530/0x530 [ 60.693480][ T1270] ____sys_sendmsg+0x5b7/0x8f0 [ 60.701938][ T1270] ? __sys_sendmsg_sock+0x40/0x40 [ 60.709621][ T1270] ? import_iovec+0x7c/0xb0 [ 60.715938][ T1270] ___sys_sendmsg+0x236/0x2e0 [ 60.721481][ T1270] ? __sys_sendmsg+0x280/0x280 [ 60.726991][ T1270] ? rw_verify_area+0x1c0/0x360 [ 60.734457][ T1270] ? __fdget+0x1a1/0x230 [ 60.742457][ T1270] __x64_sys_sendmsg+0x1f9/0x2c0 [ 60.749735][ T1270] ? fput+0x1a/0x20 [ 60.756576][ T1270] ? ___sys_sendmsg+0x2e0/0x2e0 [ 60.764146][ T1270] ? debug_smp_processor_id+0x17/0x20 [ 60.773377][ T1270] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 60.777184][ T5] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 60.781217][ T1270] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 60.781229][ T1270] do_syscall_64+0x31/0x40 [ 60.781242][ T1270] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.781251][ T1270] RIP: 0033:0x7fb2a1cffe59 [ 60.781275][ T1270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.853039][ T1270] RSP: 002b:00007fb2a075a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.867004][ T1270] RAX: ffffffffffffffda RBX: 00007fb2a1f78fa0 RCX: 00007fb2a1cffe59 [ 60.878847][ T1270] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000006 [ 60.890442][ T1270] RBP: 00007fb2a075a090 R08: 0000000000000000 R09: 0000000000000000 [ 60.903300][ T1270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.913589][ T1270] R13: 00007fb2a1f79038 R14: 00007fb2a1f78fa0 R15: 00007ffcb840acd8 [ 60.923736][ T1272] CPU: 0 PID: 1272 Comm: syz.3.285 Not tainted syzkaller #0 [ 60.924171][ T510] usb 7-1: SerialNumber: syz [ 60.932213][ T1272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 60.932218][ T1272] Call Trace: [ 60.932242][ T1272] __dump_stack+0x21/0x24 [ 60.932251][ T1272] dump_stack_lvl+0x1a7/0x208 [ 60.932261][ T1272] ? show_regs_print_info+0x18/0x18 [ 60.932271][ T1272] dump_stack+0x15/0x1c [ 60.932290][ T1272] should_fail+0x3c1/0x510 [ 60.989863][ T1272] ? rtnl_newlink+0x14b/0x18f0 [ 60.996896][ T1272] __should_failslab+0xa4/0xe0 [ 61.003044][ T1272] should_failslab+0x9/0x20 [ 61.008560][ T1272] kmem_cache_alloc_trace+0x3a/0x2e0 [ 61.015020][ T1272] rtnl_newlink+0x14b/0x18f0 [ 61.021072][ T1272] ? __kasan_check_write+0x14/0x20 [ 61.026881][ T1272] ? __switch_to+0x508/0x1020 [ 61.033509][ T1272] ? rtnl_setlink+0x480/0x480 [ 61.039295][ T1272] ? __kasan_check_read+0x11/0x20 [ 61.045035][ T1272] ? psi_group_change+0x7d3/0xe40 [ 61.050511][ T1272] ? compat_start_thread+0x80/0x80 [ 61.057360][ T1272] ? pick_next_task_fair+0x812/0xa40 [ 61.063107][ T1272] ? native_set_ldt+0x370/0x370 [ 61.069746][ T1272] ? _raw_spin_unlock_irq+0x4e/0x70 [ 61.076387][ T1272] ? finish_task_switch+0x12e/0x5a0 [ 61.082876][ T1272] ? switch_mm_irqs_off+0x75f/0x990 [ 61.090358][ T1272] ? __switch_to_asm+0x34/0x60 [ 61.098181][ T1272] ? __schedule+0xb5b/0x1320 [ 61.103344][ T1272] ? __kasan_check_write+0x14/0x20 [ 61.109843][ T1272] ? _raw_spin_lock+0x94/0xf0 [ 61.116384][ T1272] ? _raw_spin_trylock_bh+0x150/0x150 [ 61.125110][ T1272] ? __mutex_lock+0x85f/0xc60 [ 61.131345][ T1272] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 61.139845][ T1272] ? cap_capable+0x19c/0x220 [ 61.146619][ T1272] ? __mutex_lock_slowpath+0xe/0x10 [ 61.152294][ T1272] ? mutex_lock+0xdb/0xf0 [ 61.157726][ T1272] ? mutex_trylock+0xa0/0xa0 [ 61.165655][ T1272] ? ns_capable+0x8c/0xf0 [ 61.171825][ T1272] ? netlink_net_capable+0x125/0x160 [ 61.178269][ T1272] ? rtnl_setlink+0x480/0x480 [ 61.186765][ T1272] rtnetlink_rcv_msg+0xa31/0xcc0 [ 61.192805][ T1272] ? rtnetlink_bind+0x80/0x80 [ 61.198353][ T1272] ? arch_stack_walk+0xee/0x140 [ 61.205431][ T1272] ? stack_trace_save+0xa6/0xf0 [ 61.212346][ T1272] ? stack_trace_snprint+0xf0/0xf0 [ 61.218921][ T1272] ? avc_has_perm+0x168/0x3d0 [ 61.225362][ T1272] ? memcpy+0x56/0x70 [ 61.230135][ T1272] ? avc_has_perm+0x27f/0x3d0 [ 61.237766][ T1272] ? __kasan_slab_alloc+0xbd/0xf0 [ 61.244274][ T1272] ? slab_post_alloc_hook+0x5d/0x2f0 [ 61.250606][ T1272] ? avc_has_perm_noaudit+0x260/0x260 [ 61.257351][ T1272] ? selinux_nlmsg_lookup+0x3de/0x4a0 [ 61.265005][ T1272] netlink_rcv_skb+0x1f5/0x440 [ 61.274243][ T1272] ? rtnetlink_bind+0x80/0x80 [ 61.281341][ T1272] ? netlink_ack+0xb70/0xb70 [ 61.288233][ T1272] ? __netlink_lookup+0x387/0x3b0 [ 61.296273][ T1272] rtnetlink_rcv+0x1c/0x20 [ 61.302589][ T1272] netlink_unicast+0x876/0xa40 [ 61.308906][ T1272] netlink_sendmsg+0x89c/0xb50 [ 61.316320][ T1272] ? netlink_getsockopt+0x530/0x530 [ 61.325283][ T1272] ? kasan_set_track+0x5b/0x70 [ 61.330838][ T1272] ? slab_free_freelist_hook+0xc5/0x190 [ 61.337597][ T1272] ? security_socket_sendmsg+0x82/0xa0 [ 61.344192][ T1272] ? netlink_getsockopt+0x530/0x530 [ 61.352566][ T1272] ____sys_sendmsg+0x5b7/0x8f0 [ 61.359385][ T1272] ? __sys_sendmsg_sock+0x40/0x40 [ 61.367946][ T1272] ? import_iovec+0x7c/0xb0 [ 61.373247][ T1272] ___sys_sendmsg+0x236/0x2e0 [ 61.378321][ T1272] ? __sys_sendmsg+0x280/0x280 [ 61.385488][ T1272] ? rw_verify_area+0x1c0/0x360 [ 61.391709][ T1272] ? __fdget+0x1a1/0x230 [ 61.396841][ T1272] __x64_sys_sendmsg+0x1f9/0x2c0 [ 61.403297][ T1272] ? fput+0x1a/0x20 [ 61.407274][ T1272] ? ___sys_sendmsg+0x2e0/0x2e0 [ 61.413082][ T1272] ? debug_smp_processor_id+0x17/0x20 [ 61.418797][ T1272] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 61.424955][ T1272] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 61.430687][ T1272] do_syscall_64+0x31/0x40 [ 61.436309][ T1272] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 61.444903][ T1272] RIP: 0033:0x7f399d843e59 [ 61.449945][ T1272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.473436][ T1272] RSP: 002b:00007f399c29e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.483483][ T1272] RAX: ffffffffffffffda RBX: 00007f399dabcfa0 RCX: 00007f399d843e59 [ 61.492523][ T1272] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 61.502936][ T1272] RBP: 00007f399c29e090 R08: 0000000000000000 R09: 0000000000000000 [ 61.512327][ T1272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.522518][ T1272] R13: 00007f399dabd038 R14: 00007f399dabcfa0 R15: 00007ffd955bc298 [ 61.542433][ T1273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 61.578614][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 61.578625][ T24] audit: type=1400 audit(1778920100.190:2108): avc: denied { create } for pid=1279 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 61.660694][ T1289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.291'. [ 61.677833][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 61.685652][ T1291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=1291 comm=syz.5.288 [ 61.717476][ T510] usb 7-1: 0:2 : does not exist [ 61.802196][ T510] usb 7-1: USB disconnect, device number 2 [ 61.943872][ T1291] EXT4-fs (loop5): Unrecognized mount option "euid=00000000000000000000" or missing value [ 61.967757][ T1291] xt_hashlimit: size too large, truncated to 1048576 [ 62.007476][ T1295] SELinux: failed to load policy [ 62.027326][ T5] usb 1-1: unable to get BOS descriptor or descriptor too short [ 62.061055][ T1298] FAULT_INJECTION: forcing a failure. [ 62.061055][ T1298] name failslab, interval 1, probability 0, space 0, times 0 [ 62.077551][ T1298] CPU: 1 PID: 1298 Comm: syz.6.293 Not tainted syzkaller #0 [ 62.086232][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.097470][ T1298] Call Trace: [ 62.101238][ T1298] __dump_stack+0x21/0x24 [ 62.106280][ T1298] dump_stack_lvl+0x1a7/0x208 [ 62.111649][ T1298] ? thaw_kernel_threads+0x220/0x220 [ 62.118172][ T1298] ? show_regs_print_info+0x18/0x18 [ 62.127068][ T1298] ? stack_trace_save+0xa6/0xf0 [ 62.132295][ T1298] dump_stack+0x15/0x1c [ 62.137136][ T1298] should_fail+0x3c1/0x510 [ 62.142806][ T1298] ? __get_vm_area_node+0x113/0x450 [ 62.148735][ T1298] __should_failslab+0xa4/0xe0 [ 62.155243][ T1298] should_failslab+0x9/0x20 [ 62.161693][ T1298] kmem_cache_alloc_trace+0x3a/0x2e0 [ 62.171116][ T1298] ? memcpy+0x56/0x70 [ 62.175695][ T1298] __get_vm_area_node+0x113/0x450 [ 62.183946][ T1298] __vmalloc_node_range+0xe0/0x790 [ 62.191584][ T1298] ? sel_write_load+0x2dd/0x5c0 [ 62.199175][ T1298] ? __kasan_check_write+0x14/0x20 [ 62.207663][ T1298] ? mutex_lock+0x92/0xf0 [ 62.213287][ T1298] ? sel_write_load+0x2dd/0x5c0 [ 62.221068][ T1298] vmalloc+0x78/0x90 [ 62.226123][ T1298] ? sel_write_load+0x2dd/0x5c0 [ 62.233132][ T1298] sel_write_load+0x2dd/0x5c0 [ 62.240860][ T1298] ? sel_make_dir+0x280/0x280 [ 62.246177][ T1298] ? rw_verify_area+0x1c0/0x360 [ 62.253343][ T1298] ? sel_make_dir+0x280/0x280 [ 62.257274][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.258736][ T1298] vfs_write+0x338/0xdc0 [ 62.272245][ T5] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.276906][ T1298] ? kernel_write+0x3c0/0x3c0 [ 62.276919][ T1298] ? __kasan_check_write+0x14/0x20 [ 62.276938][ T1298] ? mutex_lock+0x92/0xf0 [ 62.310769][ T1298] ? mutex_trylock+0xa0/0xa0 [ 62.318723][ T1298] ? __fget_files+0x2c4/0x320 [ 62.325177][ T1298] ? __fdget_pos+0x2d2/0x380 [ 62.332011][ T1298] ? ksys_write+0x71/0x250 [ 62.338518][ T1298] ksys_write+0x149/0x250 [ 62.344608][ T1298] ? __ia32_sys_read+0x90/0x90 [ 62.351998][ T1298] ? debug_smp_processor_id+0x17/0x20 [ 62.361380][ T1298] __x64_sys_write+0x7b/0x90 [ 62.367448][ T1298] do_syscall_64+0x31/0x40 [ 62.376466][ T1298] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 62.384785][ T1298] RIP: 0033:0x7fe886885e59 [ 62.391275][ T1298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.418547][ T1298] RSP: 002b:00007fe8852e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.428681][ T1298] RAX: ffffffffffffffda RBX: 00007fe886afefa0 RCX: 00007fe886885e59 [ 62.439397][ T1298] RDX: 000000000000fd44 RSI: 0000200000000000 RDI: 0000000000000003 [ 62.449189][ T1298] RBP: 00007fe8852e0090 R08: 0000000000000000 R09: 0000000000000000 [ 62.467556][ T1298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.482595][ T1298] R13: 00007fe886aff038 R14: 00007fe886afefa0 R15: 00007fff1f566db8 [ 62.505530][ T1298] syz.6.293: vmalloc: allocation failure: 64836 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset= [ 62.505558][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.546329][ T1298] syz6,mems_allowed=0 [ 62.556423][ T1298] CPU: 1 PID: 1298 Comm: syz.6.293 Not tainted syzkaller #0 [ 62.565221][ T1298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 62.577292][ T1298] Call Trace: [ 62.580831][ T1298] __dump_stack+0x21/0x24 [ 62.585540][ T1298] dump_stack_lvl+0x1a7/0x208 [ 62.592007][ T1298] ? show_regs_print_info+0x18/0x18 [ 62.599003][ T1298] dump_stack+0x15/0x1c [ 62.604320][ T1298] warn_alloc+0x1dc/0x200 [ 62.610773][ T1298] ? __get_vm_area_node+0x113/0x450 [ 62.619130][ T1298] ? zone_watermark_ok_safe+0x250/0x250 [ 62.626630][ T1298] ? memcpy+0x56/0x70 [ 62.630848][ T1298] ? __get_vm_area_node+0x345/0x450 [ 62.638727][ T1298] __vmalloc_node_range+0x27d/0x790 [ 62.645084][ T1298] ? __kasan_check_write+0x14/0x20 [ 62.651176][ T1298] ? mutex_lock+0x92/0xf0 [ 62.658004][ T1298] ? sel_write_load+0x2dd/0x5c0 [ 62.663540][ T1298] vmalloc+0x78/0x90 [ 62.668946][ T1298] ? sel_write_load+0x2dd/0x5c0 [ 62.677360][ T5] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 62.678145][ T1298] sel_write_load+0x2dd/0x5c0 [ 62.689528][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.695430][ T1298] ? sel_make_dir+0x280/0x280 [ 62.706200][ T5] usb 1-1: Product: syz [ 62.710296][ T1298] ? rw_verify_area+0x1c0/0x360 [ 62.710306][ T1298] ? sel_make_dir+0x280/0x280 [ 62.710314][ T1298] vfs_write+0x338/0xdc0 [ 62.710323][ T1298] ? kernel_write+0x3c0/0x3c0 [ 62.710343][ T1298] ? __kasan_check_write+0x14/0x20 [ 62.715117][ T5] usb 1-1: Manufacturer: syz [ 62.719943][ T1298] ? mutex_lock+0x92/0xf0 [ 62.719952][ T1298] ? mutex_trylock+0xa0/0xa0 [ 62.719962][ T1298] ? __fget_files+0x2c4/0x320 [ 62.719970][ T1298] ? __fdget_pos+0x2d2/0x380 [ 62.719978][ T1298] ? ksys_write+0x71/0x250 [ 62.719996][ T1298] ksys_write+0x149/0x250 [ 62.725871][ T5] usb 1-1: SerialNumber: syz [ 62.732094][ T1298] ? __ia32_sys_read+0x90/0x90 [ 62.732107][ T1298] ? debug_smp_processor_id+0x17/0x20 [ 62.732115][ T1298] __x64_sys_write+0x7b/0x90 [ 62.732122][ T1298] do_syscall_64+0x31/0x40 [ 62.732134][ T1298] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 62.732142][ T1298] RIP: 0033:0x7fe886885e59 [ 62.732162][ T1298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.864189][ T1298] RSP: 002b:00007fe8852e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.875485][ T1298] RAX: ffffffffffffffda RBX: 00007fe886afefa0 RCX: 00007fe886885e59 [ 62.886635][ T1298] RDX: 000000000000fd44 RSI: 0000200000000000 RDI: 0000000000000003 [ 62.898492][ T1298] RBP: 00007fe8852e0090 R08: 0000000000000000 R09: 0000000000000000 [ 62.908791][ T1298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.922237][ T1298] R13: 00007fe886aff038 R14: 00007fe886afefa0 R15: 00007fff1f566db8 [ 62.935743][ T1298] Mem-Info: [ 62.942320][ T1298] active_anon:54 inactive_anon:8408 isolated_anon:0 [ 62.942320][ T1298] active_file:4906 inactive_file:4162 isolated_file:0 [ 62.942320][ T1298] unevictable:0 dirty:532 writeback:0 [ 62.942320][ T1298] slab_reclaimable:7633 slab_unreclaimable:75086 [ 62.942320][ T1298] mapped:35212 shmem:258 pagetables:692 bounce:0 [ 62.942320][ T1298] free:1556429 free_pcp:1433 free_cma:0 [ 62.997297][ T1298] Node 0 active_anon:216kB inactive_anon:33632kB active_file:19624kB inactive_file:16648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140848kB dirty:2128kB writeback:0kB shmem:1032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4512kB all_unreclaimable? no [ 63.007665][ T1268] netlink: 'syz.0.279': attribute type 13 has an invalid length. [ 63.060962][ T1268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 63.069741][ T1298] DMA32 free:2983636kB min:62644kB low:78304kB high:93964kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2986532kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:2896kB local_pcp:1480kB free_cma:0kB [ 63.111551][ T1298] lowmem_reserve[]: 0 3941 3941 [ 63.114028][ T1309] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 63.120232][ T1298] Normal free:3240160kB min:84808kB low:106008kB high:127208kB reserved_highatomic:0KB active_anon:216kB inactive_anon:35732kB active_file:19624kB inactive_file:16648kB unevictable:0kB writepending:2128kB present:5242880kB managed:4036112kB mlocked:0kB pagetables:2916kB bounce:0kB free_pcp:1648kB local_pcp:1336kB free_cma:0kB [ 63.130514][ T1316] EXT4-fs (loop3): Test dummy encryption mode enabled [ 63.169577][ T1309] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.175534][ T1298] lowmem_reserve[]: 0 0 0 [ 63.198228][ T1298] DMA32: 7*4kB (UM) 7*8kB (M) 2*16kB (M) 7*32kB (UM) 8*64kB (UM) 7*128kB (UM) 6*256kB (UM) 5*512kB (M) 4*1024kB (UM) 4*2048kB (UM) 724*4096kB (M) = 2983636kB [ 63.218663][ T1298] Normal: 20*4kB (UME) 314*8kB (ME) 302*16kB (ME) 130*32kB (UME) 116*64kB (UME) 82*128kB (UME) 23*256kB (UME) 20*512kB (UME) 19*1024kB (ME) 12*2048kB (UME) 769*4096kB (M) = 3239488kB [ 63.249667][ T1298] 9825 total pagecache pages [ 63.256786][ T1298] 0 pages in swap cache [ 63.261990][ T1298] Swap cache stats: add 4, delete 4, find 3/3 [ 63.263930][ T1316] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 63.271466][ T1298] Free swap = 124728kB [ 63.282837][ T1298] Total swap = 124996kB [ 63.287570][ T1298] 2097051 pages RAM [ 63.292303][ T1298] 0 pages HighMem/MovableOnly [ 63.296344][ T1316] System zones: [ 63.298218][ T1298] 341390 pages reserved [ 63.298223][ T1298] 0 pages cma reserved [ 63.298482][ T1311] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.304448][ T1316] 0-5 [ 63.323409][ T1311] SELinux: failed to load policy [ 63.336223][ T1316] [ 63.340435][ T1316] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 63.346769][ T1325] SELinux: policydb magic number 0x1b does not match expected magic number 0xf97cff8c [ 63.383606][ T1309] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.297: corrupted xattr block 33 [ 63.384589][ T1325] SELinux: failed to load policy [ 63.397599][ T1309] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 63.421993][ T1309] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.297: corrupted xattr block 33 [ 63.450704][ T1324] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 63.479682][ T1325] device vlan2 entered promiscuous mode [ 63.486232][ T1325] device syz_tun entered promiscuous mode [ 63.511164][ T1309] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 63.512014][ T1324] netlink: 20 bytes leftover after parsing attributes in process `syz.6.299'. [ 63.528783][ T24] audit: type=1400 audit(1778920102.140:2109): avc: denied { write } for pid=1308 comm="syz.5.297" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.557255][ T1309] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.297: corrupted xattr block 33 [ 63.586344][ T1309] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.297: corrupted xattr block 33 [ 63.746908][ T1309] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 63.775286][ T1309] Quota error (device loop5): find_tree_dqentry: Getting block too big (33554437 >= 6) [ 63.802783][ T1309] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 63.818371][ T1309] EXT4-fs error (device loop5): ext4_acquire_dquot:6230: comm syz.5.297: Failed to acquire dquot type 0 [ 63.999616][ T1340] process 'syz.2.301' launched './file2' with NULL argv: empty string added [ 64.063358][ T24] audit: type=1400 audit(1778920102.670:2110): avc: denied { create } for pid=1342 comm="syz.5.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 64.117381][ T5] usb 1-1: 0:1 : does not exist [ 64.124421][ T5] usb 1-1: unit 5 not found! [ 64.190127][ T24] audit: type=1400 audit(1778920102.710:2111): avc: denied { accept } for pid=1345 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.205413][ T5] usb 1-1: USB disconnect, device number 6 [ 64.283286][ T1343] SELinux: failed to load policy [ 65.096446][ T1370] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 65.099434][ T1360] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.384951][ T1370] SELinux: failed to load policy [ 65.537224][ T5] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.545680][ T1377] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.314: bad orphan inode 11862016 [ 65.558640][ T1377] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 65.570620][ T1377] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.588608][ T1390] netlink: 'syz.0.317': attribute type 30 has an invalid length. [ 65.607298][ T1360] usb 6-1: Using ep0 maxpacket: 8 [ 65.686286][ T24] audit: type=1400 audit(1778920104.290:2112): avc: denied { execute_no_trans } for pid=1379 comm="syz.2.315" path="/64/file0" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.881105][ T1395] SELinux: failed to load policy [ 65.927281][ T1360] usb 6-1: config 2 has an invalid interface number: 65 but max is 0 [ 65.937805][ T1360] usb 6-1: config 2 has no interface number 0 [ 65.951004][ T1360] usb 6-1: config 2 interface 65 has no altsetting 0 [ 65.977332][ T5] usb 7-1: Using ep0 maxpacket: 32 [ 66.327775][ T1360] usb 6-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=73.6f [ 66.341689][ T5] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 66.355171][ T5] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 66.367560][ T1360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.380610][ T1360] usb 6-1: Product: syz [ 66.386850][ T5] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 66.397695][ T1360] usb 6-1: Manufacturer: syz [ 66.402738][ T1360] usb 6-1: SerialNumber: syz [ 66.409274][ T5] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 66.422951][ T5] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 66.439663][ T5] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 66.459791][ T5] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 66.475245][ T5] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.503644][ T5] usb 7-1: config 0 descriptor?? [ 66.572102][ T1405] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 66.849812][ T5] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 66.887860][ T5] usb 7-1: USB disconnect, device number 3 [ 66.894367][ T1417] SELinux: failed to load policy [ 66.907613][ T1360] ums-freecom 6-1:2.65: USB Mass Storage device detected [ 66.921572][ T1413] EXT4-fs: failed to create workqueue [ 66.921628][ T5] usblp0: removed [ 66.928503][ T1413] EXT4-fs (loop3): mount failed [ 66.975946][ T1360] usb 6-1: USB disconnect, device number 3 [ 67.007944][ T1435] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 67.019034][ T1435] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 67.028716][ T1433] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,grpquota,nodiscard,nombcache,,errors=continue [ 67.033858][ T1435] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 67.060051][ T1433] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.067624][ T1435] EXT4-fs error (device loop3): ext4_get_journal_inode:5247: inode #5: comm syz.3.330: unexpected bad inode w/o EXT4_IGET_BAD [ 67.091156][ T1435] EXT4-fs (loop3): no journal found [ 67.098305][ T1435] EXT4-fs (loop3): can't get journal size [ 67.106151][ T1435] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,grpjquota=./file0,,errors=continue [ 67.197290][ T698] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 67.270800][ T1447] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 67.281377][ T1447] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev loop3, type ext4) errno=-22 [ 67.382837][ T24] audit: type=1400 audit(1778920105.990:2113): avc: denied { listen } for pid=1450 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.409468][ T5] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.644154][ T698] usb 3-1: Using ep0 maxpacket: 8 [ 67.686978][ T1458] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.329: bg 0: block 337: padding at end of block bitmap is not set [ 67.708108][ T1458] incfs: Can't find or create .index dir in ./file0 [ 67.717217][ T1458] incfs: mount failed -117 [ 68.330866][ T698] usb 3-1: config 7 has an invalid interface number: 24 but max is 0 [ 68.357389][ T698] usb 3-1: config 7 has no interface number 0 [ 68.365994][ T698] usb 3-1: config 7 interface 24 has no altsetting 0 [ 68.486906][ T1472] SELinux: policydb magic number 0xf97cff03 does not match expected magic number 0xf97cff8c [ 68.517621][ T1472] SELinux: failed to load policy [ 68.570583][ T24] audit: type=1400 audit(1778920107.180:2114): avc: denied { lock } for pid=1475 comm="syz.6.341" path="socket:[19957]" dev="sockfs" ino=19957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.634815][ T1484] capability: warning: `syz.6.344' uses 32-bit capabilities (legacy support in use) [ 68.646200][ T698] usb 3-1: New USB device found, idVendor=0fe6, idProduct=8101, bcdDevice=c2.d8 [ 68.658049][ T24] audit: type=1400 audit(1778920107.260:2115): avc: denied { getopt } for pid=1485 comm="syz.3.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.708246][ T698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.739360][ T698] usb 3-1: Product: syz [ 68.744079][ T698] usb 3-1: Manufacturer: syz [ 68.752894][ T24] audit: type=1400 audit(1778920107.320:2116): avc: denied { write } for pid=1483 comm="syz.6.344" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 68.795207][ T1496] EXT4-fs (loop3): Ignoring removed bh option [ 68.836141][ T1496] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 68.866169][ T698] usb 3-1: SerialNumber: syz [ 68.872337][ T1496] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 69.216637][ T1422] netlink: 'syz.2.327': attribute type 4 has an invalid length. [ 69.330493][ T1422] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.422424][ T1422] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 69.435000][ T1422] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xaa2dc89a, utbl_chksum : 0xe619d30d) [ 69.568789][ T698] dm9601: probe of 3-1:7.24 failed with error -22 [ 69.598949][ T698] usb 3-1: USB disconnect, device number 12 [ 69.620505][ T1502] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,grpquota,nodiscard,nombcache,,errors=continue [ 69.700806][ T1468] F2FS-fs (loop5): invalid crc value [ 69.725660][ T24] audit: type=1400 audit(1778920108.330:2117): avc: denied { read } for pid=1516 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.729009][ T1502] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.809833][ T1468] F2FS-fs (loop5): Found nat_bits in checkpoint [ 69.816569][ T24] audit: type=1400 audit(1778920108.330:2118): avc: denied { open } for pid=1516 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.900740][ T1523] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,grpquota,,errors=continue [ 69.903458][ T24] audit: type=1400 audit(1778920108.330:2119): avc: denied { getattr } for pid=1516 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.949623][ T24] audit: type=1400 audit(1778920108.490:2120): avc: denied { write } for pid=1515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.953295][ T1468] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 69.979700][ T24] audit: type=1400 audit(1778920108.490:2121): avc: denied { add_name } for pid=1515 comm="dhcpcd-run-hook" name="resolv.conf.veth0_to_batadv.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.018702][ T24] audit: type=1400 audit(1778920108.490:2122): avc: denied { create } for pid=1515 comm="dhcpcd-run-hook" name="resolv.conf.veth0_to_batadv.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.027681][ T1468] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 70.307580][ T1544] SELinux: failed to load policy [ 70.648676][ T1560] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.349: bg 0: block 337: padding at end of block bitmap is not set [ 70.751346][ T1560] incfs: Can't find or create .index dir in ./file0 [ 70.759612][ T1560] incfs: mount failed -117 [ 71.077201][ T5] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 71.196734][ T281] ------------[ cut here ]------------ [ 71.205626][ T281] WARNING: CPU: 1 PID: 281 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 71.222393][ T281] Modules linked in: [ 71.236842][ T281] CPU: 1 PID: 281 Comm: syz-executor Not tainted syzkaller #0 [ 71.287304][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 71.324246][ T281] RIP: 0010:drop_nlink+0xc5/0x110 [ 71.348223][ T281] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 13 f1 f1 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 6c b7 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 71.387242][ T281] RSP: 0018:ffffc90000b27cd0 EFLAGS: 00010293 [ 71.407174][ T281] RAX: ffffffff81ad4af5 RBX: ffff888138540b40 RCX: ffff888125d24f00 [ 71.437226][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 71.464379][ T281] RBP: ffffc90000b27cf8 R08: 0000000000000003 R09: 0000000000000004 [ 71.477189][ T5] usb 4-1: unable to get BOS descriptor or descriptor too short [ 71.477846][ T281] R10: dffffc0000000000 R11: fffff52000164f88 R12: dffffc0000000000 [ 71.527998][ T281] R13: 1ffff110270a8171 R14: ffff888138540b88 R15: 0000000000000000 [ 71.541605][ T281] FS: 000055558bf2f500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 71.552516][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.560957][ T281] CR2: 0000200000801000 CR3: 0000000125cd4000 CR4: 00000000003506b0 [ 71.571317][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.582347][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.599386][ T281] Call Trace: [ 71.603943][ T281] shmem_rmdir+0x5b/0x90 [ 71.617227][ T5] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 71.637197][ T5] usb 4-1: can't read configurations, error -71 [ 71.657525][ T281] vfs_rmdir+0x1b3/0x3e0 [ 71.677257][ T281] incfs_kill_sb+0xfe/0x210 [ 71.677590][ T20] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 71.682569][ T281] deactivate_locked_super+0xa0/0x100 [ 71.717362][ T281] deactivate_super+0xaf/0xe0 [ 71.724093][ T281] cleanup_mnt+0x45b/0x510 [ 71.737799][ T281] __cleanup_mnt+0x19/0x20 [ 71.744142][ T281] task_work_run+0x127/0x190 [ 71.756250][ T281] exit_to_user_mode_loop+0xcb/0xe0 [ 71.787933][ T281] exit_to_user_mode_prepare+0x76/0xa0 [ 71.794431][ T281] syscall_exit_to_user_mode+0x1d/0x40 [ 71.927158][ T281] do_syscall_64+0x3d/0x40 [ 71.937428][ T281] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 71.955780][ T281] RIP: 0033:0x7fa5ecd18f77 [ 71.976067][ T281] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.007301][ T281] RSP: 002b:00007ffec5047508 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 72.037492][ T281] RAX: 0000000000000000 RBX: 0000000000000065 RCX: 00007fa5ecd18f77 [ 72.077389][ T281] RDX: 0000000000000200 RSI: 00007ffec50486b0 RDI: 00000000ffffff9c [ 72.097324][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.104403][ T281] RBP: 00007fa5ecdaf1ca R08: 00000000000106c0 R09: 0000000000000001 [ 72.122743][ T281] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffec50486b0 [ 72.147589][ T1591] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 72.163420][ T281] R13: 00007fa5ecdaf1ca R14: 0000000000011602 R15: 00007ffec5049780 [ 72.166993][ T1591] SELinux: failed to load policy [ 72.173294][ T281] ---[ end trace cdd9a81385a54fd2 ]--- [ 72.187469][ T281] ------------[ cut here ]------------ [ 72.195625][ T281] WARNING: CPU: 0 PID: 281 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 72.221775][ T281] Modules linked in: [ 72.227223][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.238382][ T281] CPU: 1 PID: 281 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.251507][ T20] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 72.260337][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 72.271376][ T20] usb 3-1: Manufacturer: syz [ 72.277661][ T20] usb 3-1: config 0 descriptor?? [ 72.285279][ T281] RIP: 0010:drop_nlink+0xc5/0x110 [ 72.286349][ T1596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.370'. [ 72.292392][ T281] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 13 f1 f1 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 6c b7 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 72.326296][ T281] RSP: 0018:ffffc90000b27cd0 EFLAGS: 00010293 [ 72.333592][ T281] RAX: ffffffff81ad4af5 RBX: ffff8881385436c0 RCX: ffff888125d24f00 [ 72.343747][ T20] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 72.353561][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 72.364776][ T281] RBP: ffffc90000b27cf8 R08: 0000000000000003 R09: 0000000000000004 [ 72.377468][ T281] R10: dffffc0000000000 R11: fffff52000164f88 R12: dffffc0000000000 [ 72.386995][ T281] R13: 1ffff110270a86e1 R14: ffff888138543708 R15: 0000000000000000 [ 72.397943][ T1593] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 72.407233][ T281] FS: 000055558bf2f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 72.415191][ T1593] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 72.426702][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.428418][ T1593] F2FS-fs (loop6): invalid crc value [ 72.442748][ T281] CR2: 00007fb2a0717ff8 CR3: 0000000125cd4000 CR4: 00000000003526a0 [ 72.452324][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.462359][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.470839][ T281] Call Trace: [ 72.476223][ T281] shmem_rmdir+0x5b/0x90 [ 72.481779][ T281] vfs_rmdir+0x1b3/0x3e0 [ 72.481834][ T1593] F2FS-fs (loop6): Found nat_bits in checkpoint [ 72.486801][ T281] incfs_kill_sb+0x18a/0x210 [ 72.499543][ T281] deactivate_locked_super+0xa0/0x100 [ 72.505999][ T281] deactivate_super+0xaf/0xe0 [ 72.513308][ T281] cleanup_mnt+0x45b/0x510 [ 72.523424][ T281] __cleanup_mnt+0x19/0x20 [ 72.528258][ T281] task_work_run+0x127/0x190 [ 72.538344][ T281] exit_to_user_mode_loop+0xcb/0xe0 [ 72.546494][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 72.546505][ T24] audit: type=1326 audit(1778920111.150:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1568 comm="syz.2.363" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe53686de59 code=0x7ffc0000 [ 72.569338][ T281] exit_to_user_mode_prepare+0x76/0xa0 [ 72.590619][ T281] syscall_exit_to_user_mode+0x1d/0x40 [ 72.598613][ T281] do_syscall_64+0x3d/0x40 [ 72.598622][ T1593] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 72.598636][ T1593] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 72.604178][ T281] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 72.604187][ T281] RIP: 0033:0x7fa5ecd18f77 [ 72.604199][ T281] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.604215][ T281] RSP: 002b:00007ffec5047508 EFLAGS: 00000207 [ 72.631809][ T24] audit: type=1326 audit(1778920111.200:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1568 comm="syz.2.363" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe53686daeb code=0x7ffc0000 [ 72.640910][ T281] ORIG_RAX: 0000000000000107 [ 72.664533][ T24] audit: type=1400 audit(1778920111.270:2172): avc: denied { name_bind } for pid=1604 comm="syz.5.371" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 72.718663][ T281] RAX: 0000000000000000 RBX: 0000000000000065 RCX: 00007fa5ecd18f77 [ 72.740817][ T281] RDX: 0000000000000200 RSI: 00007ffec50486b0 RDI: 00000000ffffff9c [ 72.751067][ T281] RBP: 00007fa5ecdaf1ca R08: 00000000000106c0 R09: 0000000000000001 [ 72.760485][ T281] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffec50486b0 [ 72.770148][ T281] R13: 00007fa5ecdaf1ca R14: 0000000000011602 R15: 00007ffec5049780 [ 72.781554][ T281] ---[ end trace cdd9a81385a54fd3 ]--- [ 72.789505][ T281] list_del corruption. prev->next should be ffff888110202e60, but was ffff8881102025e0 [ 72.803865][ T281] ------------[ cut here ]------------ [ 72.812301][ T281] kernel BUG at lib/list_debug.c:61! [ 72.820886][ T281] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 72.829014][ T281] CPU: 0 PID: 281 Comm: syz-executor Tainted: G W syzkaller #0 [ 72.838820][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 72.851960][ T281] RIP: 0010:__list_del_entry_valid+0x10c/0x120 [ 72.859957][ T281] Code: 48 89 de e8 76 be 38 02 0f 0b 48 c7 c7 a0 89 40 85 48 89 de e8 65 be 38 02 0f 0b 48 c7 c7 00 8a 40 85 48 89 de e8 54 be 38 02 <0f> 0b 48 c7 c7 60 8a 40 85 48 89 de e8 43 be 38 02 0f 0b 00 55 48 [ 72.887860][ T281] RSP: 0018:ffffc90000b27c60 EFLAGS: 00010246 [ 72.894493][ T281] RAX: 0000000000000054 RBX: ffff888110202e60 RCX: 41745b818105cb00 [ 72.904265][ T281] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 72.913448][ T281] RBP: ffffc90000b27c80 R08: ffffc90000b27607 R09: fffff52000164ef4 [ 72.924123][ T281] R10: dffffc0000000000 R11: fffff52000164ec1 R12: dffffc0000000000 [ 72.932282][ T281] R13: dffffc0000000000 R14: ffff8881102025e0 R15: ffff888110202910 [ 72.940920][ T281] FS: 000055558bf2f500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 72.951398][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.959490][ T281] CR2: 0000555575869908 CR3: 0000000125cd4000 CR4: 00000000003526b0 [ 72.969791][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.980375][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.993168][ T281] Call Trace: [ 72.997188][ T281] __dentry_kill+0x24c/0x650 [ 73.003488][ T281] dentry_kill+0xc0/0x2a0 [ 73.009307][ T281] dput+0x42/0x80 [ 73.013447][ T281] incfs_free_mount_info+0x60/0x200 [ 73.019756][ T281] incfs_kill_sb+0x1aa/0x210 [ 73.025412][ T281] deactivate_locked_super+0xa0/0x100 [ 73.031536][ T281] deactivate_super+0xaf/0xe0 [ 73.036924][ T281] cleanup_mnt+0x45b/0x510 [ 73.042117][ T281] __cleanup_mnt+0x19/0x20 [ 73.047298][ T281] task_work_run+0x127/0x190 [ 73.052187][ T281] exit_to_user_mode_loop+0xcb/0xe0 [ 73.058112][ T281] exit_to_user_mode_prepare+0x76/0xa0 [ 73.063843][ T281] syscall_exit_to_user_mode+0x1d/0x40 [ 73.069434][ T281] do_syscall_64+0x3d/0x40 [ 73.074566][ T281] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 73.080735][ T281] RIP: 0033:0x7fa5ecd18f77 [ 73.085671][ T281] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.109163][ T281] RSP: 002b:00007ffec5047508 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 73.118336][ T281] RAX: 0000000000000000 RBX: 0000000000000065 RCX: 00007fa5ecd18f77 [ 73.127839][ T281] RDX: 0000000000000200 RSI: 00007ffec50486b0 RDI: 00000000ffffff9c [ 73.136915][ T281] RBP: 00007fa5ecdaf1ca R08: 00000000000106c0 R09: 0000000000000001 [ 73.145655][ T281] R10: 0000000000000000 R11: 0000000000000207 R12: 00007ffec50486b0 [ 73.156180][ T281] R13: 00007fa5ecdaf1ca R14: 0000000000011602 R15: 00007ffec5049780 [ 73.167489][ T281] Modules linked in: [ 73.172028][ T281] ---[ end trace cdd9a81385a54fd4 ]--- [ 73.179733][ T281] RIP: 0010:__list_del_entry_valid+0x10c/0x120 [ 73.186662][ T281] Code: 48 89 de e8 76 be 38 02 0f 0b 48 c7 c7 a0 89 40 85 48 89 de e8 65 be 38 02 0f 0b 48 c7 c7 00 8a 40 85 48 89 de e8 54 be 38 02 <0f> 0b 48 c7 c7 60 8a 40 85 48 89 de e8 43 be 38 02 0f 0b 00 55 48 [ 73.212828][ T281] RSP: 0018:ffffc90000b27c60 EFLAGS: 00010246 [ 73.222114][ T281] RAX: 0000000000000054 RBX: ffff888110202e60 RCX: 41745b818105cb00 [ 73.231625][ T281] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 73.244367][ T281] RBP: ffffc90000b27c80 R08: ffffc90000b27607 R09: fffff52000164ef4 [ 73.255171][ T281] R10: dffffc0000000000 R11: fffff52000164ec1 R12: dffffc0000000000 [ 73.255188][ T281] R13: dffffc0000000000 R14: ffff8881102025e0 R15: ffff888110202910 [ 73.255201][ T281] FS: 000055558bf2f500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 73.255213][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.255224][ T281] CR2: 0000555575869908 CR3: 0000000125cd4000 CR4: 00000000003506b0 [ 73.255236][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.255247][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.255256][ T281] Kernel panic - not syncing: Fatal exception [ 73.255899][ T281] Kernel Offset: disabled [ 73.345693][ T281] Rebooting in 86400 seconds..