last executing test programs: 8.419579835s ago: executing program 3 (id=218): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r1, 0x400, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00') setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x102, 0x4f) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x3d6}], 0x1}}], 0x1, 0x408c0) 8.357047389s ago: executing program 3 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000005453ad00000004000000020007000000a0672b66f90847c1928a89931e7dedabdbe9e19b6936bd2d874ebe95a00803ea2443e96b214781423f155c2388dcc38e2e8b4a017494ec46499ad57a818dc2bd16c7d7df3099cf87e8f7256406c6d9f0639bee3cc5c6dd64978377ec192a8eec642a21f4c61f328803060000001edb1cd6b57972470d3275348fc1cdd211e81297b09485db61ee156b56", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r2, 0x1}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000040)=0x2) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0020000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1a00000000000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) r8 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000340)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x80, 0x0) unshare(0x60000000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0xac) 7.686712552s ago: executing program 1 (id=222): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) r1 = fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='defcontext', &(0x7f0000000040)='defcontext', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='cpuset\x00', &(0x7f0000000240)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = socket(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) unshare(0x2a000600) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x5bf, &(0x7f0000000280)="$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") setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r5, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x43451) 7.558718063s ago: executing program 3 (id=226): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet(0x2, 0x1, 0xc) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010101}, 0x10) r3 = gettid() socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000004000000080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000001a27030000000000000000000000000000fdffffffffffffff0000000000000000ff0f000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f000000000000000000000029bd7000000000000a00040000000000000000001c00200000004e2200000000ac1414bb00000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x35, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) unshare(0x22020600) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a7, 0xc}) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) (async) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_socket_connect_nvme_tcp() (async) r8 = syz_socket_connect_nvme_tcp() setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, 0x0, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x6000c181) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x11, &(0x7f00000008c0)={[{@data_ordered}, {@noblock_validity}, {@norecovery}, {@noquota}, {@nombcache}, {@data_err_ignore}, {@noauto_da_alloc}, {@nogrpid}, {@nobh}]}, 0x8, 0x607, &(0x7f00000001c0)="$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") (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x11, &(0x7f00000008c0)={[{@data_ordered}, {@noblock_validity}, {@norecovery}, {@noquota}, {@nombcache}, {@data_err_ignore}, {@noauto_da_alloc}, {@nogrpid}, {@nobh}]}, 0x8, 0x607, &(0x7f00000001c0)="$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") socket(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r9}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) 7.479308279s ago: executing program 3 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x8810) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005468a9fe52386e52000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb33ea699a80e3f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r10, &(0x7f00000000c0)='lp\x00', 0xfffffdef) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) dup2(r10, r6) close_range(0xffffffffffffffff, r5, 0x2) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r11, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) 6.798196313s ago: executing program 3 (id=231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x800000002400}, 0xc) syz_emit_ethernet(0xfffffe45, 0x0, 0x0) (async) syz_emit_ethernet(0xfffffe45, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000040)='./bus\x00', 0x38) (async) inotify_add_watch(r3, &(0x7f0000000040)='./bus\x00', 0x38) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r5}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x80, 0x3, 0x6, {{0x10, 0x4, 0x0, 0x35, 0x40, 0x67, 0x0, 0x3, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, {[@ssrr={0x89, 0x2b, 0xe5, [@empty, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1, @broadcast, @remote]}]}}}}}) getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000200)={@private0, 0x0}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_delroute={0x38, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x0, 0xfe, 0x3, 0xc8, 0x4}, [@RTA_MULTIPATH={0xc, 0x9, {0xca, 0x28, 0x6, r8}}, @RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_IIF={0x8, 0x3, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0xc0) syz_clone3(&(0x7f00000006c0)={0x324100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.776332125s ago: executing program 1 (id=232): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r5}, 0x18) syz_usb_connect(0x5, 0x164, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e0100000824060725518827e7c8c1c20e3f4903", @ANYBLOB="78fbb57a28cf38a1a5a7756398b66cd15d6de76a71aa08000000fd781c1dea3000"/50], 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket(0x18, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) unshare(0x22020600) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa"], 0x98}}, 0x0) 5.685296551s ago: executing program 4 (id=240): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async, rerun: 32) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x102002, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x4008, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) (async, rerun: 64) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) (async, rerun: 64) setxattr$security_ima(&(0x7f00000011c0)='./file0/file1\x00', &(0x7f0000001200), 0x0, 0x0, 0x3) lseek(r4, 0x1, 0x1) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x4080) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000001000000e000000200000000", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) 5.258362494s ago: executing program 4 (id=244): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syslog(0x2, &(0x7f0000000040)=""/19, 0xe2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000040)={0x1, 0x1, 0x1000, 0x1, &(0x7f0000000280)='\x00', 0x0, 0x0, 0x0}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x40000000000005d, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(r3, 0xe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec1bb2106c04e01401000102030109028f11010000000009046900000e010000182402010202", @ANYRESHEX], 0x0) 3.67475767s ago: executing program 1 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async, rerun: 64) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async, rerun: 64) close_range(r3, 0xffffffffffffffff, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="900000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a03006abe0500140012800900010069706970000000000600000054001a8004201c002c000a8014000700fc020000000000000000000000000001140007000000000000000000000000000000000020000a8014000700fc0200000000000000000000000000000500080005000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x40c4}, 0x240400c0) 3.638805363s ago: executing program 1 (id=249): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) rmdir(&(0x7f00000003c0)='./file1\x00') ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e21, @broadcast}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), 0x0}, 0x20) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e50009040000000101"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0x4000010) 3.15960401s ago: executing program 0 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xd8, r1, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x5}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0xa7, 0xf, [@fast_bss_trans={0x37, 0x99, {0x4a, 0x3, "7cd7831a943fdfecf4df30fbb0ed97bc", "3963cf49e7af178620f5ab41e5df3546aaeb126d3ee2a08b4bf9d4a51b3c3c17", "6fe75755e7eb1368905689ef08538e65e1ada24e30b703cd2a795a2d74e567b7", [{0x4, 0x1b, "27d26fe26e2308b3a1203f737371304bcd1ed17de418c0d5beac62"}, {0x1, 0x3, "e5f7cd"}, {0x3, 0x23, "7abce9e8a3851015fceffaf42a25b3df36ca872172ff494ac91ca80501dd0679ac9285"}]}}, @mesh_chsw={0x76, 0x6, {0xff, 0x9, 0x3c, 0x71b3}}]}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000010) rmdir(&(0x7f0000000040)='./bus/file0\x00') symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 3.110274974s ago: executing program 0 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x4007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000cee4e06e47cecf06a02d56c0b623536574b68a66b2b187c79348c4a2da10fac18c2d60b7f4a710b5db1ad54090fde32ac298182221e2ebf4678e60abc672db71a49002f80900009c9d1366f311c8fee600000000f9c8aad2d2d8c00b25e4f94075677e11ad74a928d50fbcd317ef525f1fd6001012aaa658068018b3064043481b7f33426e2e2946a32c2f42fea296fb4506b39f3cd3223593b9d8a408b51847e319f1098e9b4f8f9d61ec31b57d33f7d69529c8"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xcc0, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r8}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700303a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x0, 0x7f, "203c5ee7fffefffffffffff200", 0x7, 0x5}) io_setup(0x46, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) 2.240643273s ago: executing program 4 (id=256): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x7, &(0x7f0000000000)=@raw=[@generic={0xc2, 0xd, 0x9, 0x3, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd3a, 0x0, 0x0, 0x0, 0xf7d8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000040)='GPL\x00', 0x7, 0xe, &(0x7f0000000080)=""/14, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x1, 0xfffffff2, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000001c0)=[r0, r2, r2, r2], &(0x7f0000000240)=[{0x1, 0x2, 0x6, 0xa}, {0x1, 0x4, 0x1, 0x2}, {0x3, 0x2, 0x1, 0x3}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000700008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[], 0x8) write$binfmt_elf64(r6, &(0x7f00000001c0)=ANY=[], 0x18c6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r11}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r12}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x4040, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x63, 0x37, 0x35, 0x36, 0x35, 0x35, 0x3], 0x2d, [0x36, 0x35, 0x61, 0x36], 0x2d, [0x0, 0x66, 0x66, 0x30], 0x2d, [0x3d, 0x61, 0x64, 0x39], 0x2d, [0x61, 0x39, 0x63, 0x32, 0x32, 0x30, 0x0, 0x61]}}}, {@subj_user={'subj_user', 0x3d, '/}:\\'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'syz1\x00'}}]}}) r13 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f00000000c0)) ioctl$TUNGETIFF(r13, 0x800454d2, &(0x7f00000004c0)={'nicvf0\x00'}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7287}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x44) 2.183960308s ago: executing program 0 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000077c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x0, 0x0, 0xfffffe2a}}, {{0x0, 0x0, 0x0}}], 0x400000000000059, 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x3, 0x30e, &(0x7f0000000f00)="$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") open(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) ppoll(&(0x7f0000000d40)=[{r2, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x6, 0x9c17, 0x8000, 0x6fd}, 0x10) 2.067790347s ago: executing program 0 (id=258): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)={0x24, 0x5e, 0xe25, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @pid}]}]}, 0x24}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0x1, 0x3}, 0x6) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r11, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.003181932s ago: executing program 2 (id=259): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000003002000210000001c2ca1b7d31a0aadf0810c065a3459a8328e2bc900000000000000b5a07428c0783acc2c23d9fb4833832d9ddf39cd3d6ef49ca9562a729ac4b01aeb7b29", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) listen(0xffffffffffffffff, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) shutdown(r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=@newtaction={0x18, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}}, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0200000069872cfe3049132bd3c5509bfdd841dd6ebe9bf64f77769b4616a326c5d3232413ba7312a36991f8f39f848273501964adfcc5d1f54f5459c735342076ce15778f9a5f066263178d394211c6d05903c5f97d5b6444a3", @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003801c000380180001800c000200657468746f6f6c000800010007000000"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000193de92a27bb0cbfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r11, 0x0, 0x3}, 0x18) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r13, &(0x7f0000000100)=[{&(0x7f0000001800)=""/154, 0x9a}], 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.676421478s ago: executing program 4 (id=260): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)="b5", 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x0, 0x240, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100a7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r6, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1.675687348s ago: executing program 1 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600000000071"], 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r7}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r8}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) 1.673115138s ago: executing program 3 (id=262): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0xffffffffffffffda, r2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x8, 0x2f, 0x0, @remote, @local}, {0x2001, 0x880b, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "d838a8ec7ac5e0c90b8600b5f18fc55f17ccc702a266f518", "6eef58d067d3958ab07e55d85dc5b08471a0d09e8f82368a9f657148ebd86126"}}}}}}, 0x0) 1.153238689s ago: executing program 2 (id=263): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) (async) sendfile(r1, r0, 0x0, 0x7ffff000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.113813642s ago: executing program 2 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mremap(&(0x7f0000331000/0x5000)=nil, 0x5000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r4, 0x0, 0x0, 0x2101, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) fchdir(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x18}, 0x2}, 0x1c) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000200)=ANY=[@ANYRES64=r3, @ANYRESHEX=r7, @ANYRESDEC=r5, @ANYRESDEC=r1, @ANYRESHEX=r0], 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) getresuid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) 1.038329298s ago: executing program 0 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r5, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) 1.037187738s ago: executing program 2 (id=266): getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYRESDEC], &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @private=0xa010101}, 0x10) 1.002436271s ago: executing program 2 (id=267): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 695.202255ms ago: executing program 1 (id=268): r0 = socket$pptp(0x18, 0x1, 0x2) (async) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xff8c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) r5 = syz_pidfd_open(0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000440)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000000280)="6758a4a9cc814273785e0b7d2f1340f1a61a3c2da60117d9d69d9a48daef5ddd1157643db09d7b1dea45ae89ff451325c3e2b472cf179c34a72480f29d0a5a57060956df8e026707e9af614e5fbd7260ab935a628be726bd7b27871f08cf0ff4f7321b4efba406f2b6d378bc8b68ead9847c53c97b5b3f222b25edda81d83e2e2d7481acc3e098387b8462973c5791e8b38b115a92f975898c78b597b0914b7a27449c54ddc389f608c42b0d09ce2550672172221f64640df5deeede30", 0xbd}], 0x2, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r4, r0, r3, r5, r2, r2]}}], 0x40, 0x44860}}], 0x1, 0x40084) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1e) (async) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 222.565783ms ago: executing program 4 (id=269): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x81010000000000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) (async) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000001c0)=0x81, 0x4) (async) pidfd_send_signal(0xffffffffffffffff, 0x28, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd64]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}) syz_open_dev$evdev(0x0, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r4, r4, 0x2) (async) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)="06f7", 0x0}, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0x2, 0x2, {{0x6, 0x4, 0x0, 0x3e, 0x18, 0x67, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x3, 0x99}]}}}}}) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000001600)="8cdfa5c10c780c49b2646da4c04426f33112c4883da9e3aed9731156aa3feeaad663719b43315f14262c353142462dfea936ad81a906b7a45f515add0fc3cd1b4658b5da022598cba1d62298cc60d5db546d1190217395341555d7ccf7adad379802a15fdef3567265af44b6dff9ac07cba8a0b8b9cd2eef7a3f33b76c9cd178fd18b585a366d4a74f7ae39ffd869444e2ba1a1022ad59664a2bbf776fd5e19b7b889b85ec06eb19815f5fc66f9eec4c7e830a9c20d2afc64fba2196bdb4e1c8230cd8e807ea17205d1f977f74ed43f2e3e3b166bd341a5c6335899322ce1722a688c7ccb5f7e3f798fa99e3c4f840aa381f2964c84bff1cdf9ce552f066f9fe79f1c6fd718ebb65128b6c759184dee4216a06a546f727746a1ed5738d914c412db43293e48929d66c9d2361c87054b325a23ed8034cfda206428d3fa7ecfd25a4ff4023cfbd87f4410d91a6839343ba44f74e56ccc68925d8ed7b6275b4e4f2993256053fc88d473a0469da14fbe526936847d67484c01d2fbc49c89cbb0aa6526f6c1f7d92f77fd8e98431ba075c6df41a9b1ce76322e9cd6ad85ea91dc68948c06385d9b63a3db1795a3f78f66f0ee868472adb20b93fb2f25cfe099dabaa29686367c57b89bd31895d8478652dcdd7cc2eeca83fbbd0a2edad978dcb0e8f745bedb51060f2d4bfeb27df6afa756320ae1d8f761322ed1e2989c1eedcd35355079df0601371255f94d56fb768e39eb30f21a31933976f560b4abe5445f722041657b023399f381af4bd02318ff7a99a00da9cf94cc4b22c1a30f0733bb72bb085f92680f3209e6743caf1f14273cc6f1797bf74b142f6cf4ac46d8892e8d099e9b85bced9103b8a45913ba79ba715045dbb94af237767bb4b5b131903a6bb8a05038a07d398e74965ee8b0ecabab4dcfff11625343656d033c693f58723a2c6a9f49e41802fc3bfef02a4bf7ff81af7595185f96feb5093884651ec262d07118ac8251d32931feef6a83bf7b5a47752ca201c35f46b04fc6441ca204add2be58c51d2527ce60a4b868caa1d2210f0498f6b10626ac63c007f6297b54c95f1ecbb330a96622da44d7deff85fda2851d660a3bdc30fd9c0e0812b9324993006aa8bf8298e3053f58eee8abfab9837db05b57c15e53e96036da488dfd048b29e3261cc9093dd435dadc6fef5e8b4e5f04ad9eac272800f003a4c96ba58ea40edbe3515094e2f1655813cc056f266770a3ba08eff52f54e7a5a5fb91fcdf3ddd5ca36f19f1dd8f9e305dfad23846eb7cb5ec9de06d704759f2ad6a596780cef5eb31c23c0d3ad29786461d94a273941679a15ffc165cba508b03a527859a371924d4e5f904e86b62555fc625b4cd24cc17059603ca9de4fc2db38bf45f7015bf7e7bee99daf2c7344ed8196fbd17cb8d24580a839367566b37423e535c8e4ab58b1ad1445c69da777b65abedb8d245b7e5933e60e2b50a2df96a97cf9960b8452b939c769394ccd0b4a3e05a3f8516607d3d977a0684900f6e33b85188bba27ac36f36a8d75d71355ee9583f2da46acd34c50f143a3b6ca62863788ecd1bc073bf8e7ca4ad5e3a56f9410bc4e233c88f3fddfd92e3ce69e6d60ccfa159be9887b219250b238f22e686f1761ebafc49d77d5a4d2ebebe28b26fd35cf205e3c99675157f05ef9f8a3dce3f4c896d8ecd95e764bdc977116a3f9c328cf61dd1009da515370ce9a7507304e4276f91401b975f008e20eb3c5ee7271b00f7c5ff38ed7c673e4670f42c59828cac3cd0fb1b638f6d8d50ed2e6834477b3158c82f51f7e7c3a1feab9653825a377c8a4b5c0ffa3b202330db4b1ed3bfffdacab01ba2c6c0822580440be6f91d63fe573af3a82d71cd956fd5ea550c9708b0825eed67c4b9324abca1d4f544b7d6fe6a33a9baa713ba103ccf73c1414d4512c383f7038988f805b87a6d15a17e07630e7c7fa0dde9b9ca58d5aafa386f0bfa3e0e75343337ef609675e90dc2d5beb8ca6add3c48d309ea735f1cef59c0cf7f632346263d0d8a23466c82f3f38edfc2bb8d4442ce3413c1962df09f8dd2979af218118d997948b542ac7886c2535837fc1c7541a447be053c2c3e8f0618f076244ecf1d683ace1a8ffe7aca8f3511fd394ea16bfeca0a47abc6c85e1ef6fcd603cdaff0f69551a98a8bbfc5ee7a651fd3cc5c35dba947cfb84b55f6de960f6ef214826534cf1129381946bd742376258f87d4e7b9cc5695e02e290814bc99685dc750b32699605770529d1ea3d4a0786daa2a6a8c2cc3c5ee13f8303c96f62a5ae87e6f45c1f50e6ca6a9fb3ca6f932db95d9aee92cb758e86d748b1f0c15c6fc6f24c4cc7176305ded927baeec4f6639b324e5b160df69672b15f87bf69e0031860d580fa809b2b1d0d0424e43190ead178e035af20cae6d81c9391c57075e8fc74dc8024cb0b87ee4585788deee5c7d25d0a0cd7776eb9911166f5ccf130991bab50cf3cd7cc928cb4f1515f78f1f211098a68ab287fcc93e172d3a629214032d0847e1143900374b40f62c4e438643828b35e86b431b20abf5ff5221075b2da4dcf9eae0d044a96f9bc8fbb2cd7ef0322029b4455d321474683dd49f347dfb8ec0b254210a9d06e44a828a9158d64948d2b4329426b1449ebad1661f1609309cfc22424fceb26174778a9a64037075a6f8689a75e535e9b7c58dab3c71b3e2e748a06f7b42379cf4447d98730a6cf1f01752369a06e6063832af12b79cd1c5171af99ef3bb9c1b4c106ab042e50833db40b47bb9c846823592118f9355ec92941b078c42f7b518ca976aa713ba05cb0f782ba1bc07099e19ee90b694c91c6af26a03e8bcd80d51821ed9451b77ed647ee70de00da7e01835baa8e5e576f2426736c5a414e5de595c221abc0a254d91577fc67bf4d5df3e37eaded8b3e9459e551014af311095c7a932b842ba68f377a2f6813198e60c70e7fe91d1fc38e1cdcf5f8864825fdd208f4ef772f69c6dbcaceabf8c6e78a663df32698987676c93e949d959843db14d0454a94bcb3ef9c59cd2d7db9a0f870db76b5620a9d30584f80c3d37ab9f2d4f206549a11162014bc7df026cc6012255c5fc692a21db582452a33dfb96e17738a356d683c3300a7bff71a71662b999b0138c5cf1a67d3fe0b23a868660c834ed2c20dec878d631827c33043433abe0229d45a676cceab664ffc4349d27fc64f730959d8d060b02df8fd81b74c8264f28778a9acfd31bb96371c6f6a5f9c069c0f887f8ebfee41409c06a91c7a0b3435012854e61b358b514ef1f72133cbd44b3968f63adb710567b7f05ed8c161cb9a6de088f8765b3faae2cbffa4eae521ec7c00d0499611b5a026665da4aec7f290b47bc795a150a9f9ab4e4dbc3b57ebff1a4d55ea7dd0daaef1f2f3234acaf6e5d32f3b6ca53265c9ea286bdc8abdea8e699806708ee28c347b511c07284dda391b76e49d8e58f5d800c8a333377631816904886fa82f824a10716e5c212583615f374ccf599cc60977821c3e6e5252b1e379e26c0f526e2d6e92ad50c6b96a1eca2a9cc0b3a2cc928cb1ca28f767b38e4770ade297129dca67c420adea40df2ad39dfa84519d7c019fa79770f2054318b48d23aeda4db5f94b43632b07e30429f530a079c41db86a824d7f6e4bf65dc0df78d3c622bc913b48d0ab13e2a464b6e9237460876d37b58e572fe9a54237e4bc5a75dab0f432869952a9ff7f69e7a547268e2ea00635dc1492c09ff30bad8753d5278738f52abe70a8b60d09984ace7dc73ae129122ac000f33ce63553267079feb366123569e0f9523c856aeb85f90d53b626331dfe692974d7642d2620e32d0bed13065534bfa7abc0691ac2dc6f74909d21e61ef8c0deae0607a0fc3953a6a9cc0882483920d6a4ffd5df66c32e2898dcec0940abbeae31652709b98e5d251fc5aed6d4b6880f7dd896890a8c10ed0d0350004c95e3f59aa3d91b02b46a60410537b752443bf9b918fe9c8ca14451795c3e15ae4cc01cf3abca378b32d7ec021d28062735e02eb390c2a809f8879539df3f94ce22e0388c1a7d92a8f3d7bf43fb44c0379a2fb20f0e7b6b0935be5c6506720b6b8b6aa308bd099b8605f72dc7b54d1de247d2e3beaf3bab2741aeb0a8bc43bcc44779af67cae9d8dde48336740216532f7ae1b15eccfe4701ee935102f729c251e04cabf8f6276b8cd801f9de9d4d37e9be24cf8718862c1fb7d55ef4a08e64b04ee00ef467fcc005c1f7bcca7a1af2c1cdeab2d1d251d197e20c83e215723be812234842808993caf52dc62e086acf9574260fca398e75e4f2a9d309bc5307ccacb651b2b0100dbb8bf614767cab7f8296a55464f7c5ff9f6313a1ac115fd37e5bbcbd15f88650ee3d84be33e66c9084dcbb53c9447283a2a9fd0289c3d0cbd2b9c291f8db882a5c973ff7421c7651329889a5583904be71d3c675bac74ce13c393ad749800181af22ea4b7f13e1c0c164d6ad0633c5eca0affb28ce41796bd64cc920622cfa3108e82027836edfff4e00904a5b7bac8d3d94cea6aad48a838ae40839e04771417ee5aaedc6dca71ef4d8799f55f8769153322028870c3e536cc5d3b790260b92d9a70aab867cd9848f6ebe89c40170940bd33fbef6aca42d1d81cdddefb707a4f7075b0b374927a7a5c90b7584c8eb7518c302817d543c88cdff9d9ae72f66b495c720b4c11cc3a83b8b5461121ccad2e92a0086b29863ca784375545b6b98c238f30abd6eb494a70d9e3261bdebd7ed141c651c9a20efac3c428aecb8f14d2b11ffce1cc83799a4825bc93f6a8f6592b66c854cfb921cc3e7158e244932550672db33087bf17f9e267832f4f0471d8d22f37364a8be298f0c8281ca59d06b501f789cfe45f747a1a1b67b7cb125d5042a8f7d5a06c202ad212f381d64d80d5581145311a1ee94c21eba9618485bb37b763c410ff439e812aa5e7b825d5e93fc974a60e8ddd52a209a3ea99166cbd133d38857b368c9389dcc081d2653aeda4e798f0ab3c10c00d3a7fe332ca9eeff09928b595d02600b7987f275036cac34784d1abce01eca8c2647f2ce24b36e5b856b6b261455508174f71c9949c90eddd094e0e7ca01cc8a249862f54726ac3c2fa54576ecd2e0f07cba30e775e1477ea2e241e3942505ef8521625255264766321ebbd3d8d91c3f665138ac7cef7a9c201dad81fcc9a7129f598d6af21c0f31f56a867ddf19dac5fefae23648ed77980bcaa6b2a74a154fad6cc7d54b0ecb540dfa1c7a25c116c21a5b63487458394f329b6987c0777d143446abd4915768977f28488a0ed9eed0d1fb5892e09949dc639e6088c123d5f9a976810c82b6224b34ac92732f295740016d645e0cbe61fdda1cf4afdb2147c8869d5d5378a1ff3b17e24735b5874b908bb7b03813741b2f7dee3d79203aaa7f00520191cafbe23d87aa6e4243ed5d1df8ec1aaa5f4bbf00342d7616ac902fd510e2b5a55e4a39a3e8a4d39fdd77a5faa7a66640e5ff2e5134370051ae35fa879546c5a66c3dcdbc9765e5c260e9618dbd84befd3a848cfbfcfa3e7094f49dc57af1a59abe98ba4c864b1d3433942c728ae2cfe1c65eb5d16ae87443eb94ad82d29d2d43f334c564ac2730c34cc839c18bf0f6b48e3c5cf7660cc939425d5bba447524a3b203bdcb069f21b682529440fb4ad5d01ec3ad6f095b5b500500588df6492e4d8228b6d7ff5712c4317f4c65052bf74b655221726aac4890b82670f8e1b7e8e10f3193652769994fb59e24f5eab5d67ab751af55bd", 0x1000}], 0x1, 0x0, 0x0, 0x8000}, 0x804) 6.09574ms ago: executing program 0 (id=270): socket$packet(0x11, 0xa, 0x300) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socket$packet(0x11, 0x2, 0x300) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8c) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000005580)='./file0\x00', 0x100010, &(0x7f0000000240)={[{@noblock_validity}, {@acl}]}, 0x1, 0x3d4, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) utime(0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x26, 0x34b, &(0x7f0000000700)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "100017", 0x14, 0x6, 0x0, @mcast2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000012000000240000000800000085000000050000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 508.57µs ago: executing program 2 (id=271): syz_usb_connect(0x0, 0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e8bc011064112206fcc6010203010902620002000018000904f50703b9c1780209050503ff030d080009050f03000403010b090b1eb80002587d9c09050701ff0307050309047e0902cdecf9d209050a0c10000591d60904f4206bfeced09a0905f90c0002080700080bbf16c9850455"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x21, 0xf0, 0xf2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xf7, 0x9, 0x7f}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x9, 0x6, 0x62, 0x10, 0x2}, 0x5, &(0x7f0000001a00)={0x5, 0xf, 0x5}, 0x2, [{0xde, &(0x7f0000000340)=@string={0xde, 0x3, "90f0991094d0f6bfab67610020b13d2ca47ce58168f3164fb0dcd64dc8be74a675cd8deeeedfd99a83d9828b1ccf0ad80677dbddfba06245238bb5a5431b57a373e7470d8441f1a6fcc0563ce69bc63882ca1f8cfce1ce65da46a57d917f32f988e4dcaade08736a58e01817a41eea0c41671db381958b8d990312c6bb650b9ff278d494684105be1bb173519b7e79a684048e282ede1b2344d14e7e2125dadd80b3d8affc611082a63f2f85aaff2af131b40adc477f1badce798e229c6c53ebfeada085fff8ae216f5119d7ddbee86445e2e88fd6adf0cba9b4e598"}}, {0x6b, &(0x7f0000000440)=@string={0x6b, 0x3, "027ed34978513ba72f856d83ce35870b2d01db8b95203c57455d0a4ed27692960a0f1d03a1a0121d3781f8feb0149e7783e511a1c0e09f84b7c2c571de972c43f7acfd7706e4be0f4c95da9fbbc98123ec7d99bc7c414dd8a61bd5830313870dab0043a1bb378db7a2"}}]}) syz_clone(0x80000, &(0x7f0000000080)="3afb7ffc44f468d2d7f188cbedef16ce312b2906cb7553317e42b390cfd4dfd3650d04df670d681388df42d4766b473c8de0114425f1e663e9a48d89c40c6db6da641149f80e6e66f456cfc8b1afd2789a43869bfac9dcb6c82bf7a96373ca08cc88b9f0f5a3249b025a243e36c9af24a7ebdf3a6814cf08eba5b5f1e268cb0b8bd80fbf8c05ce79ddc9f56485053f1f1a4721989d1d5f5f668d85bb533b3ba0836080226c92857faafffc0bce73", 0xae, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="1cbce99c7bdb8e1821f542d9a2fe4da871d4606d7849e785d7e7263c33445bddcbfc69dd8975d3a6e46d266020a55ea51b257af3f577912c10a9c50c5b6371bde6ef17533017f59ef0a7bf9bb90352f20b0d7c76b00bcd8d62733e224152f8e7447d35a48968c4c0962a717f8cc7986c941ea6e44056768d8742e99f7d1c3b4ac58d7a26eb45779d") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x103042, 0x0) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000100)={0x6, 0x2, 0xad86}) (async) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x0, 0x0, 0x2}}, 0x14) readv(r0, &(0x7f0000001980)=[{&(0x7f0000000500)=""/172, 0xac}, {&(0x7f00000005c0)=""/47, 0x2f}, {&(0x7f0000000600)=""/1, 0x1}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/153, 0x99}, {&(0x7f0000001700)=""/94, 0x5e}, {&(0x7f0000001780)=""/230, 0xe6}, {&(0x7f0000001880)=""/195, 0xc3}], 0x8) 0s ago: executing program 4 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x83f43, 0xa0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2}}], 0x1, 0x700, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 20.537202][ T30] audit: type=1400 audit(1765697528.573:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.538298][ T273] cgroup: Unknown subsys name 'net' [ 20.559849][ T30] audit: type=1400 audit(1765697528.573:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.587065][ T30] audit: type=1400 audit(1765697528.603:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.587202][ T273] cgroup: Unknown subsys name 'devices' [ 20.760821][ T273] cgroup: Unknown subsys name 'hugetlb' [ 20.766390][ T273] cgroup: Unknown subsys name 'rlimit' [ 20.963197][ T30] audit: type=1400 audit(1765697529.003:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.986365][ T30] audit: type=1400 audit(1765697529.003:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.002781][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.011251][ T30] audit: type=1400 audit(1765697529.003:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.042736][ T30] audit: type=1400 audit(1765697529.063:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.053091][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.068237][ T30] audit: type=1400 audit(1765697529.063:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.102360][ T30] audit: type=1400 audit(1765697529.093:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.127879][ T30] audit: type=1400 audit(1765697529.093:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.596024][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.603180][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.610584][ T281] device bridge_slave_0 entered promiscuous mode [ 22.618216][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.625275][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.632623][ T281] device bridge_slave_1 entered promiscuous mode [ 22.690648][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.697685][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.705220][ T284] device bridge_slave_0 entered promiscuous mode [ 22.713212][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.720268][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.727497][ T284] device bridge_slave_1 entered promiscuous mode [ 22.799587][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.806620][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.813953][ T282] device bridge_slave_0 entered promiscuous mode [ 22.820723][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.827742][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.835245][ T282] device bridge_slave_1 entered promiscuous mode [ 22.856986][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.864047][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.871443][ T283] device bridge_slave_0 entered promiscuous mode [ 22.886004][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.893061][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.900392][ T283] device bridge_slave_1 entered promiscuous mode [ 22.927029][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.934083][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.941452][ T285] device bridge_slave_0 entered promiscuous mode [ 22.957300][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.964339][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.971661][ T285] device bridge_slave_1 entered promiscuous mode [ 23.024418][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.031466][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.038705][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.045726][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.100702][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.107734][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.114991][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.122012][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.162561][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.169628][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.176873][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.183906][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.193566][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.200613][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.207855][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.214874][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.224811][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.232206][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.239538][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.246712][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.254295][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.261405][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.268550][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.276027][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.283748][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.291207][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.308729][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.329951][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.337466][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.345876][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.352926][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.360732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.368801][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.375837][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.383170][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.391311][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.398313][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.405657][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.413758][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.420786][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.441707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.450058][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.457075][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.464524][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.473325][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.480352][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.487683][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.495625][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.503566][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.511561][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.533252][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.540881][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.548268][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.556257][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.575698][ T284] device veth0_vlan entered promiscuous mode [ 23.586377][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.594958][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.603478][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.612092][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.619526][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.627304][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.635321][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.643771][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.651983][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.658988][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.666415][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.674775][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.682992][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.690012][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.697321][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.704911][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.712922][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.721253][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.729451][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.736452][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.750798][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.758821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.766789][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.775022][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.787957][ T281] device veth0_vlan entered promiscuous mode [ 23.794714][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.803090][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.811557][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.819540][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.827583][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.835217][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.845708][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.854099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.868405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.876835][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.885197][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.893968][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.902107][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.909135][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.916534][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.924596][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.932604][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.940064][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.956595][ T282] device veth0_vlan entered promiscuous mode [ 23.963313][ T284] device veth1_macvtap entered promiscuous mode [ 23.969890][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.977523][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.985957][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.994019][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.002049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.009922][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.018087][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.026422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.034598][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.043736][ T281] device veth1_macvtap entered promiscuous mode [ 24.057456][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.065161][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.073507][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.081922][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.090264][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.098454][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.106331][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.114273][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.121760][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.131334][ T285] device veth0_vlan entered promiscuous mode [ 24.143479][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.151671][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.160129][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.168259][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.184534][ T282] device veth1_macvtap entered promiscuous mode [ 24.194066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.202839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.203792][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 24.211706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.226529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.234823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.244343][ T283] device veth0_vlan entered promiscuous mode [ 24.252565][ T285] device veth1_macvtap entered promiscuous mode [ 24.267471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.276594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.285175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.293868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.312086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.320222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.327583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.335171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.343825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.352450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.360793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.369035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.377328][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.387627][ T283] device veth1_macvtap entered promiscuous mode [ 24.413627][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.426649][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.436112][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.444630][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.488645][ T348] loop2: detected capacity change from 0 to 512 [ 24.515746][ T348] EXT4-fs (loop2): Ignoring removed orlov option [ 24.539517][ T354] overlayfs: overlapping lowerdir path [ 24.550378][ T348] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 24.567807][ T348] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 24.724043][ T347] loop4: detected capacity change from 0 to 40427 [ 24.739684][ T347] F2FS-fs (loop4): Unrecognized mount option "18446744073709551615" or missing value [ 24.766330][ T366] loop0: detected capacity change from 0 to 128 [ 24.822178][ T347] loop4: detected capacity change from 0 to 512 [ 24.877146][ T373] netlink: 57 bytes leftover after parsing attributes in process `syz.1.11'. [ 24.916415][ T347] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.5: inode has both inline data and extents flags [ 24.939454][ T347] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 24.953509][ T376] loop1: detected capacity change from 0 to 512 [ 24.964915][ T347] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 24.991694][ T379] syz.2.13 (379) used greatest stack depth: 21552 bytes left [ 25.058624][ T376] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.111797][ T382] loop2: detected capacity change from 0 to 8192 [ 25.159551][ T382] ======================================================= [ 25.159551][ T382] WARNING: The mand mount option has been deprecated and [ 25.159551][ T382] and is ignored by this kernel. Remove the mand [ 25.159551][ T382] option from the mount to silence this warning. [ 25.159551][ T382] ======================================================= [ 25.207414][ T388] loop4: detected capacity change from 0 to 512 [ 25.267086][ T388] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 25.279279][ T388] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.305047][ T391] attempt to access beyond end of device [ 25.305047][ T391] loop2: rw=0, want=57848, limit=8192 [ 25.353588][ T392] attempt to access beyond end of device [ 25.353588][ T392] loop2: rw=0, want=57848, limit=8192 [ 25.411987][ T386] loop1: detected capacity change from 0 to 40427 [ 25.514708][ T386] F2FS-fs (loop1): invalid crc value [ 25.550943][ T386] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.557468][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 25.557478][ T30] audit: type=1326 audit(1765697533.593:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=401 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 25.597284][ T30] audit: type=1326 audit(1765697533.593:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=401 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 25.620760][ T30] audit: type=1326 audit(1765697533.593:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=401 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 25.644494][ T30] audit: type=1326 audit(1765697533.593:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=401 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 25.648727][ T386] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 25.668791][ T30] audit: type=1400 audit(1765697533.613:137): avc: denied { read } for pid=400 comm="syz.0.19" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.697977][ T30] audit: type=1400 audit(1765697533.613:138): avc: denied { open } for pid=400 comm="syz.0.19" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.721289][ T30] audit: type=1400 audit(1765697533.613:139): avc: denied { ioctl } for pid=400 comm="syz.0.19" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 25.746021][ T30] audit: type=1326 audit(1765697533.633:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=401 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 25.769241][ T30] audit: type=1326 audit(1765697533.633:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=401 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 25.792578][ T30] audit: type=1326 audit(1765697533.633:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=401 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 25.889255][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.929248][ T20] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 25.949295][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.199143][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 26.259199][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.269572][ T26] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 26.278684][ T26] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.287862][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.289880][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.299480][ T26] usb 1-1: config 0 descriptor?? [ 26.319205][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.330095][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.338986][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.348934][ T6] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 26.358238][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.366925][ T6] usb 2-1: config 0 descriptor?? [ 26.489209][ T20] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.498315][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.506305][ T20] usb 3-1: Product: syz [ 26.510506][ T20] usb 3-1: Manufacturer: syz [ 26.515075][ T20] usb 3-1: SerialNumber: syz [ 26.573028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 26.581579][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 26.589807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 26.597870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 26.606210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 26.614485][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 26.622637][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 26.630784][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 26.679605][ T63] usb 1-1: USB disconnect, device number 2 [ 26.819247][ T20] usb 3-1: cannot find UAC_HEADER [ 26.824437][ T20] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 26.832829][ T6] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 27.036561][ T386] fuse: Bad value for 'fd' [ 27.042053][ T386] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.071227][ T26] usb 2-1: USB disconnect, device number 2 [ 27.256406][ T418] loop4: detected capacity change from 0 to 131072 [ 27.281663][ T418] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 27.290082][ T418] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 27.304752][ T418] F2FS-fs (loop4): invalid crc value [ 27.535278][ T432] device bridge0 entered promiscuous mode [ 27.570051][ T418] F2FS-fs (loop4): Found nat_bits in checkpoint [ 27.576775][ T432] bridge0: port 3(vlan2) entered blocking state [ 27.596531][ T432] bridge0: port 3(vlan2) entered disabled state [ 27.616430][ T432] device bridge0 left promiscuous mode [ 27.626522][ T418] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 27.633742][ T418] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 27.681442][ T405] loop2: detected capacity change from 0 to 40427 [ 27.698115][ T405] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 27.706541][ T282] attempt to access beyond end of device [ 27.706541][ T282] loop1: rw=2049, want=45112, limit=40427 [ 27.707957][ T405] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 27.727222][ T405] F2FS-fs (loop2): invalid crc value [ 27.734460][ T405] F2FS-fs (loop2): Found nat_bits in checkpoint [ 27.796893][ T405] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 27.806048][ T405] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.224444][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 28.232940][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.241473][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 28.249816][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.258125][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.264318][ T462] loop0: detected capacity change from 0 to 256 [ 28.266618][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.280818][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.289008][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.324819][ T460] device wg2 entered promiscuous mode [ 28.679162][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.769468][ T63] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.868125][ T470] loop3: detected capacity change from 0 to 512 [ 28.911050][ T470] EXT4-fs (loop3): Ignoring removed bh option [ 29.035523][ T470] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 29.048632][ T470] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.139964][ T410] usb 3-1: USB disconnect, device number 2 [ 29.179284][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 29.181614][ T482] loop0: detected capacity change from 0 to 4096 [ 29.200582][ T482] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 29.208636][ T482] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.218047][ T482] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 29.299244][ T6] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.329898][ T63] usb 5-1: Using ep0 maxpacket: 16 [ 29.408969][ T491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 29.424418][ T491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 30.179223][ T6] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 30.188315][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.199293][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.207317][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.217648][ T6] usb 2-1: Product: syz [ 30.221835][ T6] usb 2-1: Manufacturer: syz [ 30.226420][ T6] usb 2-1: SerialNumber: syz [ 30.231085][ T63] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 30.240745][ T6] usb 2-1: config 0 descriptor?? [ 30.245735][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.256177][ T63] usb 5-1: config 0 descriptor?? [ 30.279608][ T6] usb 2-1: bad CDC descriptors [ 30.284550][ T6] usb 2-1: unsupported MDLM descriptors [ 30.291905][ T511] capability: warning: `syz.3.43' uses deprecated v2 capabilities in a way that may be insecure [ 30.350872][ T507] loop0: detected capacity change from 0 to 128 [ 30.377406][ T507] FAT-fs (loop0): bogus number of reserved sectors [ 30.383943][ T507] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 30.393335][ T507] FAT-fs (loop0): Can't find a valid FAT filesystem [ 30.449129][ T410] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.519004][ T515] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.530387][ T515] FAT-fs (loop1): unable to read boot sector [ 30.538012][ T515] netlink: 64 bytes leftover after parsing attributes in process `syz.0.44'. [ 30.670730][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 30.670744][ T30] audit: type=1400 audit(1765697538.713:240): avc: denied { create } for pid=526 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.696724][ T410] usb 3-1: Using ep0 maxpacket: 16 [ 30.740358][ T63] ntrig 0003:1B96:0008.0002: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 30.819181][ T410] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.829318][ T410] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.989187][ T410] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.998349][ T410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.006382][ T410] usb 3-1: Product: ŕ ľ [ 31.010574][ T410] usb 3-1: Manufacturer: ç˛ěŚ§íž˛ďĄ•çś„适ɭ뫭꤀罰⍿鎭떰꽅䷜腴蔺ĺšă™‰á“ᇽ㰅㎋Ꞧᾼë‘園ﲇ鷹ᣝ묇糓鎼ꊉćźĺ˘™ç–µď‘®ë„‰ěˇč±Şá¦˘ćŤšâĽŁěµ‰ä©żď™«ë­»ęŠ…í‡ÝżâšŁăşść¶µéą™ŕł†ĺŚ®ćŻä˝–씨ëŚă›·á¸©ěł‚壳થ겙딶Ϲ䔫ﰙ릑K蛲빓䫻ᨊ崤榋ĺ“榿赋촽韏ॲڳä“룛꣣ď˝â ›î©¬é…¶ĺŽ˝ć•¬ë¦â¦ é˘„ăť•íťč‘ŽęšâŤ­č“ę›’ [ 31.042456][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.049933][ T410] usb 3-1: SerialNumber: syz [ 31.146480][ T531] kvm: pic: non byte write [ 31.151355][ T531] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 31.253453][ T30] audit: type=1400 audit(1765697539.293:241): avc: denied { accept } for pid=533 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 31.299146][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 31.409372][ T410] usb 3-1: 0:2 : does not exist [ 31.418027][ T410] usb 3-1: USB disconnect, device number 3 [ 31.424075][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.435246][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.445358][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 31.454966][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.464604][ T6] usb 1-1: config 0 descriptor?? [ 31.503975][ T428] usb 2-1: USB disconnect, device number 3 [ 31.519870][ T6] hub 1-1:0.0: USB hub found [ 31.739186][ T6] hub 1-1:0.0: 1 port detected [ 31.856846][ T30] audit: type=1326 audit(1765697539.893:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=541 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 31.880490][ T30] audit: type=1326 audit(1765697539.893:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=541 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 31.903661][ T30] audit: type=1326 audit(1765697539.923:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=541 comm="syz.2.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 31.926719][ T428] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.043404][ T63] usb 5-1: USB disconnect, device number 2 [ 32.057478][ T547] loop3: detected capacity change from 0 to 128 [ 32.077185][ T548] fido_id[548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 32.196134][ T428] usb 2-1: Using ep0 maxpacket: 16 [ 32.265367][ T558] loop2: detected capacity change from 0 to 128 [ 32.379220][ T410] hub 1-1:0.0: activate --> -90 [ 32.412166][ T428] usb 2-1: config 188 has too many interfaces: 219, using maximum allowed: 32 [ 32.421461][ T428] usb 2-1: config 188 has an invalid interface descriptor of length 5, skipping [ 32.429143][ T30] audit: type=1400 audit(1765697540.463:245): avc: denied { write } for pid=554 comm="syz.3.54" name="event2" dev="devtmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.430555][ T428] usb 2-1: config 188 has an invalid descriptor of length 0, skipping remainder of the config [ 32.463779][ T428] usb 2-1: config 188 has 0 interfaces, different from the descriptor's value: 219 [ 32.479157][ T63] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.597114][ T30] audit: type=1400 audit(1765697540.633:246): avc: denied { mounton } for pid=554 comm="syz.3.54" path="/12/file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.639219][ T428] usb 2-1: New USB device found, idVendor=061c, idProduct=c0a4, bcdDevice=b4.21 [ 32.653768][ T428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.671124][ T428] usb 2-1: Product: syz [ 32.680488][ T428] usb 2-1: Manufacturer: syz [ 32.690267][ T428] usb 2-1: SerialNumber: syz [ 32.942982][ T428] usb 2-1: USB disconnect, device number 4 [ 33.015355][ T30] audit: type=1400 audit(1765697541.053:247): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 33.051950][ T568] loop3: detected capacity change from 0 to 512 [ 33.123181][ T570] loop2: detected capacity change from 0 to 512 [ 33.164536][ T570] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.178789][ T570] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 33.181364][ T30] audit: type=1400 audit(1765697541.223:248): avc: denied { create } for pid=572 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 33.187763][ T570] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.213373][ T570] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 33.222393][ T573] loop3: detected capacity change from 0 to 2048 [ 33.227935][ T570] EXT4-fs (loop2): Remounting filesystem read-only [ 33.240826][ T570] EXT4-fs error (device loop2): ext4_do_update_inode:5249: inode #11: comm syz.2.58: corrupted inode contents [ 33.252929][ T570] EXT4-fs (loop2): Remounting filesystem read-only [ 33.259601][ T570] EXT4-fs error (device loop2): ext4_dirty_inode:6085: inode #11: comm syz.2.58: mark_inode_dirty error [ 33.259603][ T63] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.259626][ T63] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 33.271430][ T570] EXT4-fs (loop2): Remounting filesystem read-only [ 33.281295][ T63] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 33.290075][ T570] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.58: invalid indirect mapped block 327680 (level 0) [ 33.297432][ T573] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.309707][ T570] EXT4-fs (loop2): Remounting filesystem read-only [ 33.322868][ T573] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.333507][ T570] EXT4-fs error (device loop2): ext4_do_update_inode:5249: inode #11: comm syz.2.58: corrupted inode contents [ 33.361916][ T570] EXT4-fs (loop2): Remounting filesystem read-only [ 33.368436][ T570] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 33.377251][ T570] EXT4-fs (loop2): Remounting filesystem read-only [ 33.383782][ T570] EXT4-fs error (device loop2): ext4_do_update_inode:5249: inode #11: comm syz.2.58: corrupted inode contents [ 33.395596][ T570] EXT4-fs (loop2): Remounting filesystem read-only [ 33.402116][ T570] EXT4-fs error (device loop2): ext4_truncate:4310: inode #11: comm syz.2.58: mark_inode_dirty error [ 33.413366][ T570] EXT4-fs (loop2): Remounting filesystem read-only [ 33.420040][ T570] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 33.429066][ T570] EXT4-fs (loop2): Remounting filesystem read-only [ 33.435631][ T570] EXT4-fs (loop2): 1 truncate cleaned up [ 33.441284][ T570] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,. Quota mode: none. [ 33.459286][ T63] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 33.459538][ T30] audit: type=1400 audit(1765697541.503:249): avc: denied { read } for pid=569 comm="syz.2.58" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 33.468551][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.504319][ T63] usb 5-1: Product: syz [ 33.782568][ T585] loop1: detected capacity change from 0 to 1024 [ 34.312798][ T63] usb 5-1: Manufacturer: syz [ 34.317410][ T63] usb 5-1: SerialNumber: syz [ 34.323267][ T63] usb 5-1: config 0 descriptor?? [ 34.334322][ T483] usb 1-1: USB disconnect, device number 3 [ 34.345961][ T585] EXT4-fs (loop1): Ignoring removed nobh option [ 34.352564][ T585] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 34.362117][ T585] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 34.376630][ T584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.61'. [ 34.414873][ T589] loop3: detected capacity change from 0 to 4096 [ 34.424883][ T595] loop2: detected capacity change from 0 to 128 [ 34.434100][ T595] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.444929][ T595] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.516912][ T589] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 34.609205][ T410] usb 1-1-port1: config error [ 35.282856][ T630] netlink: 32 bytes leftover after parsing attributes in process `syz.3.63'. [ 35.291825][ T630] netlink: 32 bytes leftover after parsing attributes in process `syz.3.63'. [ 35.539158][ T63] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.790085][ T63] usb 2-1: Using ep0 maxpacket: 16 [ 35.808879][ T650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.75'. [ 35.909228][ T63] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.924569][ T63] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.981821][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 35.981834][ T30] audit: type=1400 audit(1765697544.023:282): avc: denied { create } for pid=654 comm="syz.3.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.010883][ T655] loop3: detected capacity change from 0 to 16 [ 36.101580][ T657] loop3: detected capacity change from 0 to 2048 [ 36.109287][ T63] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.118364][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.126454][ T63] usb 2-1: Product: syz [ 36.131678][ T63] usb 2-1: Manufacturer: syz [ 36.136791][ T63] usb 2-1: SerialNumber: syz [ 36.147775][ T657] 9pnet: Insufficient options for proto=fd [ 36.153896][ T30] audit: type=1400 audit(1765697544.203:283): avc: denied { block_suspend } for pid=656 comm="syz.3.78" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.180737][ T657] capability: warning: `syz.3.78' uses 32-bit capabilities (legacy support in use) [ 36.408611][ T30] audit: type=1400 audit(1765697544.443:284): avc: denied { sys_admin } for pid=659 comm="syz.0.80" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 36.434565][ T410] usb 5-1: USB disconnect, device number 3 [ 36.484202][ T30] audit: type=1400 audit(1765697544.443:285): avc: denied { bind } for pid=660 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.511986][ T678] xt_TCPMSS: Only works on TCP SYN packets [ 36.517973][ T674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=674 comm=syz.3.79 [ 36.653371][ T684] loop0: detected capacity change from 0 to 8192 [ 36.698869][ T30] audit: type=1400 audit(1765697544.733:286): avc: denied { watch } for pid=681 comm="syz.0.86" path="/23/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 36.721161][ T683] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 36.766086][ T683] syz.0.86 (683) used greatest stack depth: 20768 bytes left [ 36.777893][ T686] syz.2.85[686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.777962][ T686] syz.2.85[686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.917438][ T30] audit: type=1400 audit(1765697544.953:287): avc: denied { append } for pid=695 comm="syz.0.89" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.970746][ T699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.89'. [ 36.971901][ T666] loop4: detected capacity change from 0 to 131072 [ 37.021315][ T666] F2FS-fs (loop4): invalid crc value [ 37.034892][ T666] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.061859][ T666] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 37.071435][ T666] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 37.077938][ T705] loop3: detected capacity change from 0 to 512 [ 37.093278][ T30] audit: type=1400 audit(1765697545.133:288): avc: denied { append } for pid=665 comm="syz.4.82" name="file1" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.136280][ T705] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 37.151748][ T705] ext4 filesystem being mounted at /24/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.178958][ T705] tipc: Started in network mode [ 37.184061][ T705] tipc: Node identity 4, cluster identity 4711 [ 37.190480][ T705] tipc: Node number set to 4 [ 37.198685][ T30] audit: type=1400 audit(1765697545.233:289): avc: denied { ioctl } for pid=704 comm="syz.3.90" path="socket:[17508]" dev="sockfs" ino=17508 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.384333][ T725] loop4: detected capacity change from 0 to 2048 [ 37.409271][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.417371][ T539] loop4: p3 < > p4 < > [ 37.421653][ T539] loop4: partition table partially beyond EOD, truncated [ 37.433869][ T539] loop4: p3 start 4284289 is beyond EOD, truncated [ 37.441982][ T725] loop4: p3 < > p4 < > [ 37.446188][ T725] loop4: partition table partially beyond EOD, truncated [ 37.453617][ T725] loop4: p3 start 4284289 is beyond EOD, truncated [ 37.568000][ T30] audit: type=1400 audit(1765697545.593:290): avc: denied { write } for pid=726 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 37.662192][ T729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'. [ 37.681107][ T732] loop1: detected capacity change from 0 to 128 [ 37.728736][ T734] syz.2.98[734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.728779][ T734] syz.2.98[734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.741481][ T734] syz.2.98[734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.751386][ T732] FAT-fs (loop1): Unrecognized mount option "˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙00000000000000000000" or missing value [ 37.752670][ T734] syz.2.98[734] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.764934][ T539] udevd[539]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 37.795379][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 37.799283][ T63] usb 2-1: cannot find UAC_HEADER [ 37.805613][ T410] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 37.815686][ T63] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 37.824851][ T734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 37.828322][ T63] usb 2-1: USB disconnect, device number 5 [ 37.853611][ T539] udevd[539]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 37.886034][ T732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 37.919188][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 37.930733][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 37.945767][ T39] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 37.955366][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.092954][ T410] usb 4-1: Using ep0 maxpacket: 16 [ 38.103641][ T39] usb 1-1: config 0 descriptor?? [ 38.209144][ T26] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 38.219195][ T410] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.230198][ T410] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.239979][ T410] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 38.253165][ T410] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 38.262315][ T410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.273961][ T410] usb 4-1: config 0 descriptor?? [ 38.351643][ T30] audit: type=1400 audit(1765697546.393:291): avc: denied { name_bind } for pid=752 comm="syz.0.101" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 38.499155][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 38.509417][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 38.516290][ T39] usbhid: probe of 1-1:0.0 failed with error -71 [ 38.527229][ T39] usb 1-1: USB disconnect, device number 4 [ 38.659307][ T26] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 38.697109][ T26] usb 5-1: config 1 has no interface number 1 [ 38.705074][ T26] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 38.715949][ T26] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 38.731036][ T26] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 38.803795][ T771] loop1: detected capacity change from 0 to 256 [ 38.839188][ T410] usbhid 4-1:0.0: can't add hid device: -71 [ 38.845253][ T410] usbhid: probe of 4-1:0.0 failed with error -71 [ 38.853739][ T410] usb 4-1: USB disconnect, device number 2 [ 38.883310][ T771] FAT-fs (loop1): Directory bread(block 64) failed [ 38.903287][ T771] FAT-fs (loop1): Directory bread(block 65) failed [ 38.911083][ T773] SELinux: Context * is not valid (left unmapped). [ 38.920179][ T771] FAT-fs (loop1): Directory bread(block 66) failed [ 38.926766][ T771] FAT-fs (loop1): Directory bread(block 67) failed [ 38.933356][ T771] FAT-fs (loop1): Directory bread(block 68) failed [ 38.939230][ T26] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.940287][ T771] FAT-fs (loop1): Directory bread(block 69) failed [ 38.955399][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.955712][ T771] FAT-fs (loop1): Directory bread(block 70) failed [ 38.963679][ T26] usb 5-1: Product: syz [ 38.974480][ T26] usb 5-1: Manufacturer: syz [ 38.979366][ T26] usb 5-1: SerialNumber: syz [ 39.016841][ T771] FAT-fs (loop1): Directory bread(block 71) failed [ 39.071214][ T779] netlink: 64 bytes leftover after parsing attributes in process `syz.2.108'. [ 39.100723][ T771] FAT-fs (loop1): Directory bread(block 72) failed [ 39.107686][ T771] FAT-fs (loop1): Directory bread(block 73) failed [ 39.592675][ T781] loop0: detected capacity change from 0 to 2048 [ 39.619237][ T26] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 39.671146][ T781] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 39.699039][ T26] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 41.100011][ T26] usb 5-1: USB disconnect, device number 4 [ 41.121362][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 41.121427][ T30] audit: type=1400 audit(1765697549.123:304): avc: denied { connect } for pid=791 comm="syz.2.112" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.301582][ T30] audit: type=1400 audit(1765697549.133:305): avc: denied { setopt } for pid=791 comm="syz.2.112" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.443714][ T30] audit: type=1400 audit(1765697549.133:306): avc: denied { write } for pid=791 comm="syz.2.112" path="socket:[17318]" dev="sockfs" ino=17318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.454570][ T812] loop2: detected capacity change from 0 to 1024 [ 41.479506][ T30] audit: type=1400 audit(1765697549.143:307): avc: denied { read } for pid=791 comm="syz.2.112" path="socket:[17318]" dev="sockfs" ino=17318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.502747][ T410] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.575808][ T812] EXT4-fs (loop2): Ignoring removed bh option [ 41.591577][ T30] audit: type=1400 audit(1765697549.633:308): avc: denied { create } for pid=814 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.616885][ T812] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000001,bh,init_itable,. Quota mode: none. [ 41.659613][ T30] audit: type=1400 audit(1765697549.703:309): avc: denied { connect } for pid=811 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.715593][ T30] audit: type=1400 audit(1765697549.733:310): avc: denied { write } for pid=811 comm="syz.2.118" path="socket:[17648]" dev="sockfs" ino=17648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.609176][ T410] usb 4-1: device descriptor read/all, error -71 [ 43.616238][ T30] audit: type=1400 audit(1765697551.653:311): avc: denied { read write } for pid=819 comm="syz.1.119" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.690968][ T30] audit: type=1400 audit(1765697551.653:312): avc: denied { open } for pid=819 comm="syz.1.119" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 43.816416][ T30] audit: type=1400 audit(1765697551.853:313): avc: denied { read } for pid=828 comm="syz.0.120" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.017651][ T849] loop3: detected capacity change from 0 to 40427 [ 44.040092][ T868] loop1: detected capacity change from 0 to 128 [ 44.075620][ T849] F2FS-fs (loop3): invalid crc value [ 44.106974][ T849] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.114595][ T868] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.130862][ T868] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.250507][ T876] loop2: detected capacity change from 0 to 256 [ 44.286963][ T876] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 44.560173][ T849] F2FS-fs (loop3): Start checkpoint disabled! [ 44.760727][ T849] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 45.407412][ T342] attempt to access beyond end of device [ 45.407412][ T342] loop3: rw=2049, want=45104, limit=40427 [ 45.449134][ T410] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 45.510332][ T905] loop3: detected capacity change from 0 to 1024 [ 45.549257][ T26] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 45.699124][ T410] usb 5-1: Using ep0 maxpacket: 16 [ 45.819162][ T410] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.837787][ T912] loop3: detected capacity change from 0 to 131072 [ 45.879200][ T410] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 45.886871][ T410] usb 5-1: can't read configurations, error -71 [ 45.894716][ T912] F2FS-fs (loop3): Test dummy encryption mode enabled [ 45.903098][ T912] F2FS-fs (loop3): invalid crc value [ 45.910151][ T912] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.933645][ T912] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.941228][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.955823][ T912] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 45.997916][ T919] loop0: detected capacity change from 0 to 256 [ 46.009041][ T919] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b3698, utbl_chksum : 0xe619d30d) [ 46.025819][ T919] exFAT-fs (loop0): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5) [ 46.037397][ T919] exFAT-fs (loop0): Filesystem has been set read-only [ 46.129414][ T26] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.138566][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.239259][ T922] loop1: detected capacity change from 0 to 40427 [ 46.251402][ T26] usb 3-1: Product: syz [ 46.255616][ T26] usb 3-1: Manufacturer: syz [ 46.260258][ T26] usb 3-1: SerialNumber: syz [ 46.270711][ T922] F2FS-fs (loop1): invalid crc value [ 46.276058][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 46.276071][ T30] audit: type=1400 audit(1765697554.313:322): avc: denied { ioctl } for pid=925 comm="syz.4.144" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 46.307794][ T922] F2FS-fs (loop1): Mismatch valid blocks 0 vs. 7 [ 46.315206][ T922] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 46.315412][ T926] loop4: detected capacity change from 0 to 512 [ 46.334422][ T926] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.345841][ T926] EXT4-fs (loop4): 1 orphan inode deleted [ 46.351702][ T926] EXT4-fs (loop4): 1 truncate cleaned up [ 46.357355][ T926] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 46.538465][ T930] 9pnet: Insufficient options for proto=fd [ 46.547401][ T30] audit: type=1400 audit(1765697554.583:323): avc: denied { map } for pid=925 comm="syz.4.144" path="/13/file0/cpu.stat" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.671475][ T932] syz.1.143[932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.671646][ T932] syz.1.143[932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.723385][ T30] audit: type=1400 audit(1765697554.613:324): avc: denied { read write } for pid=925 comm="syz.4.144" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.019839][ T30] audit: type=1400 audit(1765697554.623:325): avc: denied { open } for pid=925 comm="syz.4.144" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 47.269208][ T30] audit: type=1400 audit(1765697555.253:326): avc: denied { setopt } for pid=933 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.303918][ T944] syz.0.148 uses obsolete (PF_INET,SOCK_PACKET) [ 47.311492][ T946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.149'. [ 47.322818][ T946] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 47.330507][ T30] audit: type=1400 audit(1765697555.263:327): avc: denied { ioctl } for pid=933 comm="syz.0.146" path="socket:[18656]" dev="sockfs" ino=18656 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.359845][ T946] xt_hashlimit: size too large, truncated to 1048576 [ 47.378630][ T948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.150'. [ 47.401891][ T951] loop4: detected capacity change from 0 to 512 [ 47.410617][ T953] loop3: detected capacity change from 0 to 256 [ 47.440361][ T953] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.466678][ T953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=953 comm=syz.3.149 [ 47.479382][ T958] tmpfs: Unknown parameter 'nolazytime˙˙' [ 47.515648][ T30] audit: type=1400 audit(1765697555.553:328): avc: denied { associate } for pid=947 comm="syz.1.150" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.537890][ T948] incfs: Can't find or create .index dir in ./file0 [ 47.554703][ T948] incfs: mount failed -14 [ 47.601906][ T30] audit: type=1400 audit(1765697555.643:329): avc: denied { create } for pid=961 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.624316][ T30] audit: type=1400 audit(1765697555.643:330): avc: denied { connect } for pid=961 comm="syz.4.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 47.674631][ T965] syz.0.151[965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.674974][ T965] syz.0.151[965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.779377][ T26] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 47.864979][ T26] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 48.168076][ T30] audit: type=1326 audit(1765697556.203:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=973 comm="syz.3.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbe9e81749 code=0x7ffc0000 [ 48.319326][ T26] cdc_ncm 3-1:1.0: setting tx_max = 16384 [ 48.397112][ T26] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 48.416033][ T26] usb 3-1: USB disconnect, device number 4 [ 48.425512][ T26] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 48.549152][ T976] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 48.744647][ T1001] loop4: detected capacity change from 0 to 256 [ 48.758496][ T1001] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 48.790089][ T1001] Zero length message leads to an empty skb [ 48.799312][ T976] usb 4-1: Using ep0 maxpacket: 8 [ 48.819143][ T483] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 48.892500][ T1004] loop2: detected capacity change from 0 to 128 [ 48.912931][ T1004] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.919287][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.923628][ T1004] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.935279][ T976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.982764][ T976] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.995706][ T976] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 49.004786][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.016688][ T976] usb 4-1: config 0 descriptor?? [ 49.089156][ T483] usb 2-1: Using ep0 maxpacket: 16 [ 49.176280][ T1012] loop2: detected capacity change from 0 to 40427 [ 49.222326][ T1012] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 49.228810][ T1012] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 49.238121][ T1012] F2FS-fs (loop2): invalid crc value [ 49.244722][ T1012] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 49.255880][ T483] usb 2-1: unable to get BOS descriptor or descriptor too short [ 49.270813][ T1012] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 49.277856][ T1012] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.295706][ T284] attempt to access beyond end of device [ 49.295706][ T284] loop2: rw=2049, want=45104, limit=40427 [ 49.339562][ T483] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 49.348708][ T483] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 49.358819][ T483] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.396056][ T1022] loop2: detected capacity change from 0 to 128 [ 49.480407][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.487498][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.495226][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.502318][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.509387][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.516426][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.523481][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.530553][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.537558][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.539172][ T483] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.544712][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.553631][ T483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.560938][ T976] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 49.568734][ T483] usb 2-1: Product: syz [ 49.576697][ T976] hid-rmi 0003:06CB:81A7.0003: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 49.579890][ T483] usb 2-1: Manufacturer: syz [ 49.595677][ T483] usb 2-1: SerialNumber: syz [ 49.609180][ T408] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 49.749185][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 49.859225][ T408] usb 1-1: Using ep0 maxpacket: 8 [ 50.009190][ T408] usb 1-1: config 253 has an invalid interface number: 176 but max is 0 [ 50.017629][ T408] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 50.027986][ T408] usb 1-1: config 253 has no interface number 0 [ 50.034281][ T408] usb 1-1: config 253 interface 176 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 50.047655][ T408] usb 1-1: config 253 interface 176 has no altsetting 0 [ 50.119169][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.130175][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.139930][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.152868][ T26] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.161934][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.170753][ T26] usb 3-1: config 0 descriptor?? [ 50.209262][ T408] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=25.28 [ 50.218867][ T408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.226908][ T408] usb 1-1: Product: syz [ 50.231125][ T408] usb 1-1: Manufacturer: syz [ 50.235727][ T408] usb 1-1: SerialNumber: syz [ 50.389210][ T483] usb 2-1: 0:2 : does not exist [ 50.395066][ T408] usb 1-1: cannot find UAC_HEADER [ 50.400237][ T408] snd-usb-audio: probe of 1-1:253.176 failed with error -22 [ 50.480961][ T408] usb 1-1: USB disconnect, device number 5 [ 50.562429][ T1035] device wireguard0 entered promiscuous mode [ 50.613848][ T483] usb 2-1: USB disconnect, device number 6 [ 50.650055][ T26] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x3 [ 50.657673][ T26] plantronics 0003:047F:FFFF.0004: invalid report_size -679509223 [ 50.665821][ T26] plantronics 0003:047F:FFFF.0004: item 0 4 1 7 parsing failed [ 50.673694][ T26] plantronics 0003:047F:FFFF.0004: parse failed [ 50.680301][ T26] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 50.788175][ T1051] loop4: detected capacity change from 0 to 40427 [ 50.836582][ T1051] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.871291][ T1051] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 50.871561][ T26] usb 3-1: USB disconnect, device number 5 [ 51.097548][ T408] usb 4-1: USB disconnect, device number 5 [ 51.188648][ T1065] loop1: detected capacity change from 0 to 1024 [ 51.280253][ T285] attempt to access beyond end of device [ 51.280253][ T285] loop4: rw=2049, want=45104, limit=40427 [ 51.295870][ T1065] EXT4-fs (loop1): Ignoring removed bh option [ 51.352543][ T1065] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=continue,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,sysvgroups,usrquota,noauto_da_alloc,bh,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 51.401822][ T30] kauditd_printk_skb: 124 callbacks suppressed [ 51.401835][ T30] audit: type=1400 audit(1765697559.443:456): avc: denied { create } for pid=1064 comm="syz.1.177" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.463232][ T30] audit: type=1400 audit(1765697559.453:457): avc: denied { name_bind } for pid=1071 comm="syz.2.179" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 51.547112][ T1076] loop1: detected capacity change from 0 to 256 [ 51.567124][ T1072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 51.615228][ T1083] device macsec0 entered promiscuous mode [ 51.924441][ T1109] loop4: detected capacity change from 0 to 512 [ 52.156072][ T1122] loop2: detected capacity change from 0 to 256 [ 52.171351][ T1109] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 52.267377][ T1122] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.302164][ T1122] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 52.399253][ T408] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 52.434013][ T1122] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 52.513494][ T1122] exFAT-fs (loop2): abnormal access to deleted source dentry [ 52.521012][ T30] audit: type=1400 audit(1765697560.553:458): avc: denied { rename } for pid=1121 comm="syz.2.190" name="file0" dev="loop2" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.636863][ T30] audit: type=1326 audit(1765697560.673:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039bece749 code=0x7ffc0000 [ 52.684995][ T30] audit: type=1326 audit(1765697560.703:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f039bece749 code=0x7ffc0000 [ 52.689330][ T1130] usb usb8: usbfs: process 1130 (syz.1.192) did not claim interface 0 before use [ 52.789536][ T30] audit: type=1326 audit(1765697560.703:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039bece749 code=0x7ffc0000 [ 52.816840][ T1143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 52.849244][ T408] usb 1-1: not running at top speed; connect to a high speed hub [ 52.887633][ T30] audit: type=1326 audit(1765697560.703:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f039bece749 code=0x7ffc0000 [ 52.919163][ T30] audit: type=1326 audit(1765697560.703:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039bece749 code=0x7ffc0000 [ 52.942478][ T408] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 52.957195][ T1139] loop3: detected capacity change from 0 to 40427 [ 52.964610][ T408] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 52.976094][ T408] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 53.000640][ T408] usb 1-1: config 1 interface 0 has no altsetting 0 [ 53.009780][ T1150] netlink: 'syz.1.198': attribute type 16 has an invalid length. [ 53.017842][ T1139] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 53.024082][ T1152] loop4: detected capacity change from 0 to 1024 [ 53.025869][ T1150] netlink: 'syz.1.198': attribute type 17 has an invalid length. [ 53.032117][ T30] audit: type=1326 audit(1765697560.703:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f039bece749 code=0x7ffc0000 [ 53.054970][ T1139] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 53.111585][ T1154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.199'. [ 53.116634][ T30] audit: type=1326 audit(1765697560.703:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1133 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039bece749 code=0x7ffc0000 [ 53.129971][ T1139] F2FS-fs (loop3): invalid crc value [ 53.150964][ T1152] EXT4-fs (loop4): Ignoring removed orlov option [ 53.159248][ T408] usb 1-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.40 [ 53.172404][ T1157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.199'. [ 53.181849][ T408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.191768][ T1152] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 53.210946][ T408] usb 1-1: Product: syz [ 53.215110][ T408] usb 1-1: Manufacturer: syz [ 53.220059][ T408] usb 1-1: SerialNumber: syz [ 53.226308][ T1139] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.249203][ T1118] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.259396][ T1118] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.300064][ T1139] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 53.314750][ T1139] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.369131][ T410] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 53.621507][ T1175] tipc: Enabled bearer , priority 0 [ 53.629031][ T1175] device syzkaller0 entered promiscuous mode [ 53.668332][ T1180] loop2: detected capacity change from 0 to 1024 [ 53.709196][ T408] usbhid 1-1:1.0: can't add hid device: -71 [ 53.715156][ T408] usbhid: probe of 1-1:1.0 failed with error -71 [ 53.733278][ T408] usb 1-1: USB disconnect, device number 6 [ 53.759430][ T1180] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 53.767913][ T1180] EXT4-fs (loop2): orphan cleanup on readonly fs [ 53.774416][ T410] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.784766][ T1180] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.205: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.799362][ T410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.799401][ T1180] EXT4-fs (loop2): 1 orphan inode deleted [ 53.809172][ T410] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 53.827816][ T410] usb 2-1: config 1 interface 1 has no altsetting 1 [ 53.834520][ T1180] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.964946][ T1187] loop2: detected capacity change from 0 to 256 [ 54.009181][ T410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.018319][ T410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.026508][ T410] usb 2-1: Product: syz [ 54.037310][ T410] usb 2-1: Manufacturer: syz [ 54.044934][ T410] usb 2-1: SerialNumber: syz [ 54.111551][ T1195] loop0: detected capacity change from 0 to 512 [ 54.140364][ T1195] EXT4-fs (loop0): Ignoring removed bh option [ 54.146749][ T1195] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 54.399731][ T1195] EXT4-fs (loop0): 1 truncate cleaned up [ 54.410956][ T1195] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback. [ 54.422827][ T1156] loop1: detected capacity change from 0 to 4096 [ 54.436371][ T1174] tipc: Resetting bearer [ 54.438552][ T1195] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 54.451149][ T1174] tipc: Disabling bearer [ 54.489862][ T1156] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 54.528458][ T1156] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 55.319060][ T1217] syz.2.212 (1217) used greatest stack depth: 20192 bytes left [ 55.359168][ T26] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 55.380377][ T1208] syz.3.210 (1208) used greatest stack depth: 20000 bytes left [ 55.434649][ T1230] loop0: detected capacity change from 0 to 1024 [ 55.480765][ T1230] EXT4-fs (loop0): Ignoring removed bh option [ 55.487324][ T1230] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.514407][ T1230] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 55.705063][ T26] usb 5-1: device descriptor read/64, error -71 [ 56.149140][ T26] usb 5-1: device descriptor read/64, error -71 [ 56.308680][ T1264] netlink: 'syz.3.226': attribute type 32 has an invalid length. [ 56.419179][ T26] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 56.429566][ T410] usb 2-1: selecting invalid altsetting 1 [ 56.459176][ T410] cdc_ncm 2-1:1.0: bind() failure [ 56.464988][ T410] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 56.472662][ T410] cdc_ncm 2-1:1.1: bind() failure [ 56.483489][ T410] usb 2-1: USB disconnect, device number 7 [ 56.498438][ T1276] SELinux: security_context_str_to_sid(defcontext) failed for (dev ?, type ?) errno=-22 [ 56.547146][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 56.547159][ T30] audit: type=1400 audit(1765697564.583:574): avc: denied { connect } for pid=1273 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.748688][ T1280] loop1: detected capacity change from 0 to 2048 [ 56.756087][ T26] usb 5-1: device descriptor read/64, error -71 [ 56.830567][ T539] loop1: p1 p3 p4 [ 56.842746][ T539] loop1: p4 size 589824 extends beyond EOD, truncated [ 56.974507][ T1280] loop1: p1 p3 p4 [ 56.979073][ T1280] loop1: p4 size 589824 extends beyond EOD, truncated [ 57.045645][ T30] audit: type=1400 audit(1765697565.083:575): avc: denied { watch watch_reads } for pid=1291 comm="syz.3.231" path="/48/bus/bus" dev="incremental-fs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.071018][ T1292] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 57.080507][ T30] audit: type=1400 audit(1765697565.113:576): avc: denied { getattr } for pid=1291 comm="syz.3.231" name="/" dev="incremental-fs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 57.103991][ T30] audit: type=1400 audit(1765697565.113:577): avc: denied { setattr } for pid=1291 comm="syz.3.231" name="work" dev="incremental-fs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.131169][ T101] loop1: p1 p3 p4 [ 57.136287][ T101] loop1: p4 size 589824 extends beyond EOD, truncated [ 57.196693][ T539] udevd[539]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 57.199237][ T26] usb 5-1: device descriptor read/64, error -71 [ 57.213791][ T364] udevd[364]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 57.213926][ T540] udevd[540]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 57.238083][ T1294] device syzkaller0 entered promiscuous mode [ 57.254241][ T540] udevd[540]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 57.360425][ T26] usb usb5-port1: attempt power cycle [ 57.446172][ T539] udevd[539]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 57.481076][ T364] udevd[364]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 57.519702][ T540] udevd[540]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 57.519730][ T1302] udevd[1302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 57.530920][ T539] udevd[539]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 57.609140][ T428] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 57.688487][ T1309] loop0: detected capacity change from 0 to 512 [ 57.779219][ T26] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 57.785706][ T1309] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 57.794789][ T1309] System zones: 0-2, 18-18, 34-35 [ 57.800620][ T1309] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 57.811797][ T1309] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.859152][ T428] usb 2-1: Using ep0 maxpacket: 16 [ 57.928564][ T30] audit: type=1400 audit(1765697565.963:578): avc: denied { watch } for pid=1315 comm="syz.0.236" path="/51/file0" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 57.969333][ T26] usb 5-1: device descriptor read/8, error -71 [ 58.009200][ T428] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 58.020580][ T428] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.108996][ T428] usb 2-1: config 0 has no interface number 0 [ 58.119715][ T428] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 58.128871][ T428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.179915][ T26] usb 5-1: device descriptor read/8, error -71 [ 58.366123][ T428] usb 2-1: config 0 descriptor?? [ 58.569538][ T428] usb 2-1: Found UVC 0.00 device (0bd3:0555) [ 58.576471][ T428] usb 2-1: No valid video chain found. [ 58.622382][ T1345] loop4: detected capacity change from 0 to 4096 [ 58.651718][ T1345] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.663961][ T1345] fs-verity: sha256 using implementation "sha256-avx2" [ 58.774602][ T1300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 58.783512][ T1300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 58.792391][ T1300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.232'. [ 58.799154][ T410] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 58.801247][ T1300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.232'. [ 58.819451][ T483] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 59.039138][ T410] usb 1-1: Using ep0 maxpacket: 16 [ 59.039137][ T26] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 59.059166][ T483] usb 3-1: Using ep0 maxpacket: 16 [ 59.169270][ T410] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.182327][ T483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.193284][ T410] usb 1-1: config 0 interface 0 has no altsetting 0 [ 59.199947][ T483] usb 3-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00 [ 59.209033][ T410] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 59.218084][ T483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.226107][ T410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.234738][ T483] usb 3-1: config 0 descriptor?? [ 59.240206][ T410] usb 1-1: config 0 descriptor?? [ 59.480498][ T30] audit: type=1326 audit(1765697567.523:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1341 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 59.503971][ T30] audit: type=1326 audit(1765697567.523:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1341 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 59.520721][ T1342] UDC core: couldn't find an available UDC or it's busy: -16 [ 59.527684][ T30] audit: type=1326 audit(1765697567.523:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1341 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 59.536252][ T1342] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.558149][ T30] audit: type=1326 audit(1765697567.523:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1341 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 59.588911][ T30] audit: type=1326 audit(1765697567.523:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1341 comm="syz.2.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd0e90fb749 code=0x7ffc0000 [ 59.597142][ T1353] syz.2.245 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.649214][ T483] usb 3-1: string descriptor 0 read error: -71 [ 59.758528][ T483] usbhid 3-1:0.0: can't add hid device: -71 [ 59.764550][ T483] usbhid: probe of 3-1:0.0 failed with error -71 [ 59.771709][ T483] usb 3-1: USB disconnect, device number 6 [ 60.169228][ T410] usbhid 1-1:0.0: can't add hid device: -71 [ 60.175281][ T976] usb 2-1: USB disconnect, device number 8 [ 60.184731][ T410] usbhid: probe of 1-1:0.0 failed with error -71 [ 60.201602][ T410] usb 1-1: USB disconnect, device number 7 [ 60.221352][ T1366] loop1: detected capacity change from 0 to 1024 [ 60.251082][ T1366] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 60.276924][ T1366] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz.1.249: directory missing '..' [ 60.666660][ T1371] loop2: detected capacity change from 0 to 256 [ 60.689178][ T976] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 60.719456][ T1371] exfat: Deprecated parameter 'namecase' [ 60.727501][ T1371] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 60.825483][ T1380] loop0: detected capacity change from 0 to 256 [ 60.901704][ T1382] loop2: detected capacity change from 0 to 256 [ 61.138229][ T1389] tmpfs: Cannot retroactively limit inodes [ 61.263471][ T976] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.273612][ T976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.359212][ T976] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 61.368310][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 61.376346][ T976] usb 2-1: SerialNumber: syz [ 61.609193][ T26] usb 5-1: device descriptor read/8, error -71 [ 61.619837][ T1366] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 61.660050][ T976] usb 2-1: cannot find UAC_HEADER [ 61.665240][ T976] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 61.673653][ T976] usb 2-1: USB disconnect, device number 9 [ 61.712282][ T1395] loop0: detected capacity change from 0 to 128 [ 61.829189][ T26] usb 5-1: device descriptor read/8, error -71 [ 61.866681][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 61.866695][ T30] audit: type=1400 audit(1765697569.903:684): avc: denied { shutdown } for pid=1396 comm="syz.2.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.949221][ T26] usb usb5-port1: unable to enumerate USB device [ 62.166121][ T281] ------------[ cut here ]------------ [ 62.171643][ T281] WARNING: CPU: 1 PID: 281 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 62.179762][ T281] Modules linked in: [ 62.183916][ T281] CPU: 1 PID: 281 Comm: syz-executor Not tainted syzkaller #0 [ 62.191418][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.209795][ T30] audit: type=1326 audit(1765697570.253:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1405 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b34f09749 code=0x7ffc0000 [ 62.279168][ T30] audit: type=1326 audit(1765697570.283:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1405 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0b34f09749 code=0x7ffc0000 [ 62.292280][ T281] RIP: 0010:drop_nlink+0xc5/0x110 [ 62.307465][ T281] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 35 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1b b1 b3 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 62.310272][ T30] audit: type=1326 audit(1765697570.283:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1405 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b34f09749 code=0x7ffc0000 [ 62.327518][ T281] RSP: 0018:ffffc90000a17b28 EFLAGS: 00010293 [ 62.350497][ T30] audit: type=1326 audit(1765697570.283:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1405 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b34f09749 code=0x7ffc0000 [ 62.350966][ T281] [ 62.356804][ T30] audit: type=1326 audit(1765697570.283:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1405 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b34f09749 code=0x7ffc0000 [ 62.380386][ T281] RAX: ffffffff81b50dc5 RBX: ffff88812a3eb260 RCX: ffff88811fccbb40 [ 62.384046][ T30] audit: type=1326 audit(1765697570.283:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1405 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b34f09749 code=0x7ffc0000 [ 62.414188][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.444921][ T30] audit: type=1326 audit(1765697570.283:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1405 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b34f09749 code=0x7ffc0000 [ 62.470520][ T30] audit: type=1326 audit(1765697570.283:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1405 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0b34f09749 code=0x7ffc0000 [ 62.473000][ T281] RBP: ffffc90000a17b50 R08: 0000000000000004 R09: 0000000000000003 [ 62.494235][ T30] audit: type=1326 audit(1765697570.283:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1405 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b34f09749 code=0x7ffc0000 [ 62.502248][ T281] R10: fffff52000142f54 R11: 1ffff92000142f54 R12: dffffc0000000000 [ 62.533087][ T281] R13: 1ffff1102547d655 R14: ffff88812a3eb2a8 R15: 0000000000000000 [ 62.541133][ T281] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 62.550145][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.556779][ T281] CR2: 0000200000017038 CR3: 000000010f0af000 CR4: 00000000003506b0 [ 62.564970][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.573065][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.581116][ T281] Call Trace: [ 62.587444][ T281] [ 62.590564][ T281] shmem_rmdir+0x5b/0x90 [ 62.594880][ T281] vfs_rmdir+0x313/0x460 [ 62.599165][ T281] incfs_kill_sb+0x105/0x220 [ 62.603763][ T281] deactivate_locked_super+0xa0/0x100 [ 62.609152][ T281] deactivate_super+0xaf/0xe0 [ 62.613824][ T281] cleanup_mnt+0x446/0x500 [ 62.618219][ T281] __cleanup_mnt+0x19/0x20 [ 62.622644][ T281] task_work_run+0x127/0x190 [ 62.627226][ T281] do_exit+0xa7e/0x27a0 [ 62.631517][ T281] ? put_task_struct+0x90/0x90 [ 62.636278][ T281] ? __fdget_pos+0x1f7/0x380 [ 62.640909][ T281] ? ksys_write+0x1da/0x240 [ 62.645445][ T281] ? __ia32_sys_read+0x90/0x90 [ 62.650265][ T281] do_group_exit+0x141/0x310 [ 62.654869][ T281] ? debug_smp_processor_id+0x17/0x20 [ 62.660289][ T281] __x64_sys_exit_group+0x3f/0x40 [ 62.665322][ T281] x64_sys_call+0x832/0x9a0 [ 62.669879][ T281] do_syscall_64+0x4c/0xa0 [ 62.674304][ T281] ? clear_bhb_loop+0x50/0xa0 [ 62.679018][ T281] ? clear_bhb_loop+0x50/0xa0 [ 62.683773][ T281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.690579][ T281] RIP: 0033:0x7fdbe9e81749 [ 62.695471][ T281] Code: Unable to access opcode bytes at RIP 0x7fdbe9e8171f. [ 62.715889][ T281] RSP: 002b:00007ffc6106ffe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 62.734089][ T281] RAX: ffffffffffffffda RBX: 00007fdbe9f05ddd RCX: 00007fdbe9e81749 [ 62.752540][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 62.774667][ T281] RBP: 0000000000000009 R08: 00007ffc6106dd87 R09: 00007ffc610712a0 [ 62.785013][ T281] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffc610712a0 [ 62.845537][ T281] R13: 00007fdbe9f05d7d R14: 000055558b26e4a8 R15: 00007ffc61072370 [ 62.857662][ T281] [ 62.860870][ T281] ---[ end trace 35d39222da95bc4e ]--- [ 62.866717][ T281] ------------[ cut here ]------------ [ 62.872389][ T281] WARNING: CPU: 1 PID: 281 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 62.882206][ T281] Modules linked in: [ 62.886141][ T281] CPU: 1 PID: 281 Comm: syz-executor Tainted: G W syzkaller #0 [ 62.895249][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.905656][ T281] RIP: 0010:drop_nlink+0xc5/0x110 [ 62.911474][ T281] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 35 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 1b b1 b3 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 62.932041][ T281] RSP: 0018:ffffc90000a17b28 EFLAGS: 00010293 [ 62.938166][ T281] RAX: ffffffff81b50dc5 RBX: ffff88812a3e9f28 RCX: ffff88811fccbb40 [ 62.947451][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.076869][ T281] RBP: ffffc90000a17b50 R08: 0000000000000004 R09: 0000000000000003 [ 63.087411][ T281] R10: fffff52000142f54 R11: 1ffff92000142f54 R12: dffffc0000000000 [ 63.096335][ T281] R13: 1ffff1102547d3ee R14: ffff88812a3e9f70 R15: 0000000000000000 [ 63.104990][ T281] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 63.114772][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.121929][ T281] CR2: 000000110c31532e CR3: 00000001307ea000 CR4: 00000000003506a0 [ 63.222153][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.328366][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.400906][ T281] Call Trace: [ 63.404283][ T281] [ 63.407296][ T281] shmem_rmdir+0x5b/0x90 [ 63.446963][ T281] vfs_rmdir+0x313/0x460 [ 63.484449][ T281] incfs_kill_sb+0x198/0x220 [ 63.522453][ T281] deactivate_locked_super+0xa0/0x100 [ 63.567267][ T281] deactivate_super+0xaf/0xe0 [ 63.607411][ T281] cleanup_mnt+0x446/0x500 [ 63.696332][ T281] __cleanup_mnt+0x19/0x20 [ 63.759166][ T281] task_work_run+0x127/0x190 [ 63.763777][ T281] do_exit+0xa7e/0x27a0 [ 63.767931][ T281] ? put_task_struct+0x90/0x90 [ 63.781344][ T281] ? __fdget_pos+0x1f7/0x380 [ 63.789872][ T281] ? ksys_write+0x1da/0x240 [ 63.794398][ T281] ? __ia32_sys_read+0x90/0x90 [ 63.812396][ T1436] loop0: detected capacity change from 0 to 128 [ 63.827168][ T281] do_group_exit+0x141/0x310 [ 63.832126][ T281] ? debug_smp_processor_id+0x17/0x20 [ 63.842413][ T281] __x64_sys_exit_group+0x3f/0x40 [ 63.847467][ T281] x64_sys_call+0x832/0x9a0 [ 63.858575][ T281] do_syscall_64+0x4c/0xa0 [ 63.863256][ T281] ? clear_bhb_loop+0x50/0xa0 [ 63.867991][ T281] ? clear_bhb_loop+0x50/0xa0 [ 63.872926][ T281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.878824][ T281] RIP: 0033:0x7fdbe9e81749 [ 63.893524][ T281] Code: Unable to access opcode bytes at RIP 0x7fdbe9e8171f. [ 63.905880][ T281] RSP: 002b:00007ffc6106ffe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 63.914539][ T281] RAX: ffffffffffffffda RBX: 00007fdbe9f05ddd RCX: 00007fdbe9e81749 [ 63.923158][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 63.931338][ T281] RBP: 0000000000000009 R08: 00007ffc6106dd87 R09: 00007ffc610712a0 [ 63.939451][ T281] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffc610712a0 [ 63.947601][ T281] R13: 00007fdbe9f05d7d R14: 000055558b26e4a8 R15: 00007ffc61072370 [ 63.955662][ T281] [ 63.958671][ T281] ---[ end trace 35d39222da95bc4f ]--- [ 63.975532][ T1436] attempt to access beyond end of device [ 63.975532][ T1436] loop0: rw=2049, want=1041, limit=128 [ 64.000794][ T281] ================================================================== [ 64.008880][ T281] BUG: KASAN: use-after-free in fast_dput+0x1e9/0x290 [ 64.015643][ T281] Read of size 4 at addr ffff88812ac8b330 by task syz-executor/281 [ 64.023528][ T281] [ 64.025855][ T281] CPU: 1 PID: 281 Comm: syz-executor Tainted: G W syzkaller #0 [ 64.034689][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.044735][ T281] Call Trace: [ 64.048004][ T281] [ 64.050928][ T281] __dump_stack+0x21/0x30 [ 64.055255][ T281] dump_stack_lvl+0xee/0x150 [ 64.059838][ T281] ? show_regs_print_info+0x20/0x20 [ 64.065026][ T281] ? load_image+0x3a0/0x3a0 [ 64.069536][ T281] print_address_description+0x7f/0x2c0 [ 64.075081][ T281] ? fast_dput+0x1e9/0x290 [ 64.079487][ T281] kasan_report+0xf1/0x140 [ 64.083892][ T281] ? fast_dput+0x1e9/0x290 [ 64.088297][ T281] __asan_report_load4_noabort+0x14/0x20 [ 64.093922][ T281] fast_dput+0x1e9/0x290 [ 64.098162][ T281] dput+0x26/0x90 [ 64.101790][ T281] incfs_free_mount_info+0x60/0x200 [ 64.106975][ T281] incfs_kill_sb+0x1b8/0x220 [ 64.111560][ T281] deactivate_locked_super+0xa0/0x100 [ 64.116917][ T281] deactivate_super+0xaf/0xe0 [ 64.121586][ T281] cleanup_mnt+0x446/0x500 [ 64.125992][ T281] __cleanup_mnt+0x19/0x20 [ 64.130390][ T281] task_work_run+0x127/0x190 [ 64.134968][ T281] do_exit+0xa7e/0x27a0 [ 64.139105][ T281] ? put_task_struct+0x90/0x90 [ 64.143847][ T281] ? __fdget_pos+0x1f7/0x380 [ 64.148417][ T281] ? ksys_write+0x1da/0x240 [ 64.152897][ T281] ? __ia32_sys_read+0x90/0x90 [ 64.157638][ T281] do_group_exit+0x141/0x310 [ 64.162203][ T281] ? debug_smp_processor_id+0x17/0x20 [ 64.167555][ T281] __x64_sys_exit_group+0x3f/0x40 [ 64.172556][ T281] x64_sys_call+0x832/0x9a0 [ 64.177037][ T281] do_syscall_64+0x4c/0xa0 [ 64.181433][ T281] ? clear_bhb_loop+0x50/0xa0 [ 64.186084][ T281] ? clear_bhb_loop+0x50/0xa0 [ 64.190735][ T281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.196606][ T281] RIP: 0033:0x7fdbe9e81749 [ 64.201005][ T281] Code: Unable to access opcode bytes at RIP 0x7fdbe9e8171f. [ 64.208355][ T281] RSP: 002b:00007ffc6106ffe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 64.216744][ T281] RAX: ffffffffffffffda RBX: 00007fdbe9f05ddd RCX: 00007fdbe9e81749 [ 64.224695][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 64.232644][ T281] RBP: 0000000000000009 R08: 00007ffc6106dd87 R09: 00007ffc610712a0 [ 64.240604][ T281] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffc610712a0 [ 64.248555][ T281] R13: 00007fdbe9f05d7d R14: 000055558b26e4a8 R15: 00007ffc61072370 [ 64.256549][ T281] [ 64.259553][ T281] [ 64.261853][ T281] Allocated by task 1292: [ 64.266153][ T281] __kasan_slab_alloc+0xbd/0xf0 [ 64.270985][ T281] slab_post_alloc_hook+0x4f/0x2b0 [ 64.276073][ T281] kmem_cache_alloc+0xf7/0x260 [ 64.280811][ T281] __d_alloc+0x2d/0x6a0 [ 64.284947][ T281] d_alloc_parallel+0xe1/0x1380 [ 64.289773][ T281] __lookup_slow+0x13e/0x3e0 [ 64.294358][ T281] lookup_one_len+0x195/0x2c0 [ 64.299009][ T281] incfs_lookup_dentry+0x60/0xb0 [ 64.303925][ T281] open_or_create_special_dir+0x4f/0x1d0 [ 64.309540][ T281] incfs_mount_fs+0x42f/0x880 [ 64.314192][ T281] legacy_get_tree+0xed/0x190 [ 64.318846][ T281] vfs_get_tree+0x89/0x260 [ 64.323238][ T281] do_new_mount+0x25a/0xa20 [ 64.327716][ T281] path_mount+0x675/0x1020 [ 64.332109][ T281] __se_sys_mount+0x318/0x380 [ 64.336764][ T281] __x64_sys_mount+0xbf/0xd0 [ 64.341330][ T281] x64_sys_call+0x6bf/0x9a0 [ 64.345810][ T281] do_syscall_64+0x4c/0xa0 [ 64.350202][ T281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.356073][ T281] [ 64.358375][ T281] Freed by task 0: [ 64.362065][ T281] kasan_set_track+0x4a/0x70 [ 64.366632][ T281] kasan_set_free_info+0x23/0x40 [ 64.371550][ T281] ____kasan_slab_free+0x125/0x160 [ 64.376647][ T281] __kasan_slab_free+0x11/0x20 [ 64.381392][ T281] slab_free_freelist_hook+0xc2/0x190 [ 64.386753][ T281] kmem_cache_free+0x100/0x320 [ 64.391496][ T281] __d_free+0x23/0x30 [ 64.395458][ T281] rcu_do_batch+0x51d/0xba0 [ 64.399940][ T281] rcu_core+0x5e4/0xf80 [ 64.404070][ T281] rcu_core_si+0x9/0x10 [ 64.408199][ T281] handle_softirqs+0x250/0x560 [ 64.412938][ T281] __irq_exit_rcu+0x52/0xf0 [ 64.417416][ T281] irq_exit_rcu+0x9/0x10 [ 64.421633][ T281] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 64.427244][ T281] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 64.433201][ T281] [ 64.435501][ T281] Last potentially related work creation: [ 64.441197][ T281] kasan_save_stack+0x3a/0x60 [ 64.445851][ T281] __kasan_record_aux_stack+0xd2/0x100 [ 64.451284][ T281] kasan_record_aux_stack_noalloc+0xb/0x10 [ 64.457071][ T281] call_rcu+0x105/0xfe0 [ 64.461202][ T281] dentry_free+0xbd/0x150 [ 64.465510][ T281] __dentry_kill+0x50a/0x650 [ 64.470223][ T281] dentry_kill+0xc0/0x2a0 [ 64.474541][ T281] dput+0x47/0x90 [ 64.478151][ T281] incfs_free_mount_info+0x60/0x200 [ 64.483337][ T281] incfs_kill_sb+0x1b8/0x220 [ 64.487928][ T281] deactivate_locked_super+0xa0/0x100 [ 64.493288][ T281] deactivate_super+0xaf/0xe0 [ 64.497949][ T281] cleanup_mnt+0x446/0x500 [ 64.502347][ T281] __cleanup_mnt+0x19/0x20 [ 64.506746][ T281] task_work_run+0x127/0x190 [ 64.511318][ T281] do_exit+0xa7e/0x27a0 [ 64.515456][ T281] do_group_exit+0x141/0x310 [ 64.520024][ T281] __x64_sys_exit_group+0x3f/0x40 [ 64.525028][ T281] x64_sys_call+0x832/0x9a0 [ 64.529512][ T281] do_syscall_64+0x4c/0xa0 [ 64.533907][ T281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.539779][ T281] [ 64.542078][ T281] Second to last potentially related work creation: [ 64.548632][ T281] kasan_save_stack+0x3a/0x60 [ 64.553289][ T281] __kasan_record_aux_stack+0xd2/0x100 [ 64.558725][ T281] kasan_record_aux_stack_noalloc+0xb/0x10 [ 64.564511][ T281] call_rcu+0x105/0xfe0 [ 64.568640][ T281] dentry_free+0xbd/0x150 [ 64.572944][ T281] __dentry_kill+0x50a/0x650 [ 64.577521][ T281] dentry_kill+0xc0/0x2a0 [ 64.581824][ T281] dput+0x47/0x90 [ 64.585434][ T281] do_renameat2+0x8ba/0xf60 [ 64.589915][ T281] __x64_sys_rename+0x86/0x90 [ 64.594567][ T281] x64_sys_call+0x680/0x9a0 [ 64.599047][ T281] do_syscall_64+0x4c/0xa0 [ 64.603439][ T281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 64.609311][ T281] [ 64.611612][ T281] The buggy address belongs to the object at ffff88812ac8b330 [ 64.611612][ T281] which belongs to the cache dentry of size 208 [ 64.625204][ T281] The buggy address is located 0 bytes inside of [ 64.625204][ T281] 208-byte region [ffff88812ac8b330, ffff88812ac8b400) [ 64.638277][ T281] The buggy address belongs to the page: [ 64.643882][ T281] page:ffffea0004ab22c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12ac8b [ 64.654103][ T281] flags: 0x4000000000000200(slab|zone=1) [ 64.659724][ T281] raw: 4000000000000200 dead000000000100 dead000000000122 ffff8881001c4d80 [ 64.668290][ T281] raw: 0000000000000000 00000000000f000f 00000001ffffffff 0000000000000000 [ 64.676850][ T281] page dumped because: kasan: bad access detected [ 64.683240][ T281] page_owner tracks the page as allocated [ 64.688933][ T281] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112cd0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_RECLAIMABLE), pid 284, ts 24691269234, free_ts 0 [ 64.705684][ T281] post_alloc_hook+0x192/0x1b0 [ 64.710435][ T281] prep_new_page+0x1c/0x110 [ 64.714918][ T281] get_page_from_freelist+0x2cc5/0x2d50 [ 64.720440][ T281] __alloc_pages+0x18f/0x440 [ 64.725008][ T281] new_slab+0xa1/0x4d0 [ 64.729053][ T281] ___slab_alloc+0x381/0x810 [ 64.733620][ T281] __slab_alloc+0x49/0x90 [ 64.737928][ T281] kmem_cache_alloc+0x138/0x260 [ 64.742761][ T281] __d_alloc+0x2d/0x6a0 [ 64.746893][ T281] d_alloc+0x4b/0x260 [ 64.750849][ T281] lookup_one_qstr_excl+0xcb/0x250 [ 64.755939][ T281] filename_create+0x219/0x450 [ 64.760677][ T281] do_mkdirat+0x5c/0x4c0 [ 64.764905][ T281] __x64_sys_mkdirat+0x89/0xa0 [ 64.769645][ T281] x64_sys_call+0x37e/0x9a0 [ 64.774125][ T281] do_syscall_64+0x4c/0xa0 [ 64.778518][ T281] page_owner free stack trace missing [ 64.783858][ T281] [ 64.786166][ T281] Memory state around the buggy address: [ 64.791769][ T281] ffff88812ac8b200: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb [ 64.799806][ T281] ffff88812ac8b280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 64.807842][ T281] >ffff88812ac8b300: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 64.815877][ T281] ^ [ 64.821480][ T281] ffff88812ac8b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.829528][ T281] ffff88812ac8b400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 64.837560][ T281] ================================================================== [ 64.845598][ T281] Disabling lock debugging due to kernel taint [ 64.852151][ T281] ------------[ cut here ]------------ [ 64.857961][ T281] WARNING: CPU: 1 PID: 281 at fs/dcache.c:769 fast_dput+0x210/0x290 [ 64.865979][ T281] Modules linked in: [ 64.869914][ T281] CPU: 1 PID: 281 Comm: syz-executor Tainted: G B W syzkaller #0 [ 64.878770][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.888842][ T281] RIP: 0010:fast_dput+0x210/0x290 [ 64.893884][ T281] Code: 15 f3 ff e9 46 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 99 fe ff ff 48 89 df e8 da 15 f3 ff e9 8c fe ff ff e8 20 94 b4 ff <0f> 0b e9 0b ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e4 fe ff [ 64.913521][ T281] RSP: 0018:ffffc90000a17b40 EFLAGS: 00010293 [ 64.919599][ T281] RAX: ffffffff81b42ac0 RBX: ffff88812ac8b330 RCX: ffff88811fccbb40 [ 64.927570][ T281] RDX: 0000000000000000 RSI: 00000000ffffff80 RDI: 0000000000000001 [ 64.929125][ T483] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 64.935574][ T281] RBP: ffffc90000a17b70 R08: 0000000000000004 R09: 0000000000000003 [ 64.951095][ T281] R10: fffff52000142f58 R11: 1ffff92000142f58 R12: 00000000ffffff80 [ 64.959069][ T281] R13: dffffc0000000000 R14: ffff88812ac8b388 R15: 1ffff11025591671 [ 64.967080][ T281] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 64.976019][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.982640][ T281] CR2: 0000000000000000 CR3: 000000011a14f000 CR4: 00000000003506a0 [ 64.990629][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.998598][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 65.006611][ T281] Call Trace: [ 65.009930][ T281] [ 65.012867][ T281] dput+0x26/0x90 [ 65.016499][ T281] incfs_free_mount_info+0x60/0x200 [ 65.021706][ T281] incfs_kill_sb+0x1b8/0x220 [ 65.026287][ T281] deactivate_locked_super+0xa0/0x100 [ 65.031675][ T281] deactivate_super+0xaf/0xe0 [ 65.036344][ T281] cleanup_mnt+0x446/0x500 [ 65.040762][ T281] __cleanup_mnt+0x19/0x20 [ 65.045168][ T281] task_work_run+0x127/0x190 [ 65.049776][ T281] do_exit+0xa7e/0x27a0 [ 65.053920][ T281] ? put_task_struct+0x90/0x90 [ 65.058661][ T281] ? __fdget_pos+0x1f7/0x380 [ 65.063260][ T281] ? ksys_write+0x1da/0x240 [ 65.067753][ T281] ? __ia32_sys_read+0x90/0x90 [ 65.072560][ T281] do_group_exit+0x141/0x310 [ 65.077148][ T281] ? debug_smp_processor_id+0x17/0x20 [ 65.082546][ T281] __x64_sys_exit_group+0x3f/0x40 [ 65.087562][ T281] x64_sys_call+0x832/0x9a0 [ 65.092085][ T281] do_syscall_64+0x4c/0xa0 [ 65.096498][ T281] ? clear_bhb_loop+0x50/0xa0 [ 65.101197][ T281] ? clear_bhb_loop+0x50/0xa0 [ 65.105870][ T281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.111776][ T281] RIP: 0033:0x7fdbe9e81749 [ 65.116183][ T281] Code: Unable to access opcode bytes at RIP 0x7fdbe9e8171f. [ 65.123557][ T281] RSP: 002b:00007ffc6106ffe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 65.131988][ T281] RAX: ffffffffffffffda RBX: 00007fdbe9f05ddd RCX: 00007fdbe9e81749 [ 65.139967][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 65.147928][ T281] RBP: 0000000000000009 R08: 00007ffc6106dd87 R09: 00007ffc610712a0 [ 65.155919][ T281] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffc610712a0 [ 65.163923][ T281] R13: 00007fdbe9f05d7d R14: 000055558b26e4a8 R15: 00007ffc61072370 [ 65.171919][ T281] [ 65.174926][ T281] ---[ end trace 35d39222da95bc50 ]--- [ 65.279132][ T1372] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 65.379148][ T483] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 65.386739][ T483] usb 2-1: can't read configurations, error -71 [ 65.539119][ T1372] usb 3-1: Using ep0 maxpacket: 16 [ 65.551009][ T340] tipc: Left network mode [ 65.659159][ T1372] usb 3-1: config 0 has an invalid interface number: 245 but max is 1 [ 65.667425][ T1372] usb 3-1: config 0 has an invalid interface number: 126 but max is 1 [ 65.676093][ T1372] usb 3-1: config 0 has an invalid interface number: 244 but max is 1 [ 65.684467][ T1372] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 65.693591][ T1372] usb 3-1: config 0 has no interface number 0 [ 65.699810][ T1372] usb 3-1: config 0 has no interface number 1 [ 65.705877][ T1372] usb 3-1: config 0 has no interface number 2 [ 65.714574][ T1372] usb 3-1: config 0 interface 126 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.727737][ T1372] usb 3-1: too many endpoints for config 0 interface 244 altsetting 32: 107, using maximum allowed: 30 [ 65.738940][ T1372] usb 3-1: config 0 interface 244 altsetting 32 has an invalid endpoint with address 0xF9, skipping [ 65.749855][ T1372] usb 3-1: config 0 interface 244 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 107 [ 65.763216][ T1372] usb 3-1: config 0 interface 245 has no altsetting 0 [ 65.774808][ T1372] usb 3-1: config 0 interface 126 has no altsetting 0 [ 65.781711][ T1372] usb 3-1: config 0 interface 244 has no altsetting 0 [ 65.949186][ T1372] usb 3-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=c6.fc [ 65.958309][ T1372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.966510][ T1372] usb 3-1: Product: syz [ 65.970803][ T1372] usb 3-1: Manufacturer: syz [ 65.975392][ T1372] usb 3-1: SerialNumber: syz [ 65.980837][ T1372] usb 3-1: config 0 descriptor?? [ 66.073628][ T340] device bridge_slave_1 left promiscuous mode [ 66.079804][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.087476][ T340] device bridge_slave_0 left promiscuous mode [ 66.093904][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.102113][ T340] device veth1_macvtap left promiscuous mode [ 66.108137][ T340] device veth0_vlan left promiscuous mode [ 66.219579][ T1444] UDC core: couldn't find an available UDC or it's busy: -16 [ 66.227013][ T1444] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 66.652329][ T1372] usb 3-1: USB disconnect, device number 7