last executing test programs: 23.97335387s ago: executing program 2 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x34, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xb, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 23.973036641s ago: executing program 4 (id=5): syz_usb_connect(0x2, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f010000000000000002000724140000000004"], 0x0) getpid() 23.874774441s ago: executing program 2 (id=7): prlimit64(0x0, 0xb, &(0x7f0000000340), 0x0) rt_sigprocmask(0x0, &(0x7f00000005c0)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) tkill(r0, 0x14) (async) tkill(r0, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) fstat(r1, &(0x7f0000000600)) (async) fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) (async) setreuid(0x0, r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x130}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x130}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x2002, 0x0) pwritev2(r5, &(0x7f0000000880)=[{&(0x7f00000008c0)='G', 0x1}], 0x1, 0x9, 0x7, 0x0) (async) pwritev2(r5, &(0x7f0000000880)=[{&(0x7f00000008c0)='G', 0x1}], 0x1, 0x9, 0x7, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f0000000480), &(0x7f00000004c0)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = open$dir(&(0x7f00000007c0)='./file0\x00', 0x2002, 0x101) mknodat$null(r11, &(0x7f0000000800)='./file0\x00', 0x10, 0x103) (async) mknodat$null(r11, &(0x7f0000000800)='./file0\x00', 0x10, 0x103) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000740)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x8, 0x0, 0x1000, 0xb82, 0x400000, 0x1ff, 0x4, 0x40000000, 0x402, 0x20000009, 0x5, 0x1, 0x8, 0x4006, 0x84, 0xfffffffc, 0xffffffff, 0x37e9, 0x80000004, 0x6, 0x5, 0x40424f, 0x3}}) 23.719539547s ago: executing program 2 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'geneve1\x00', 0x400}) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) setresgid(0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x591, 0xe0, 0xd6}, {0x8, 0x2, 0x84, 0x10}, {0x4, 0xd, 0x6, 0x2}, {0x1, 0x20, 0x0, 0x8}]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x102}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000001f80)=@vmx={0x1, 0x0, 0x2080, {0xb000, 0x70000}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a082000000000000000000000000000000169500", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23.614673878s ago: executing program 2 (id=13): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x11, &(0x7f0000000380)={[{@noquota}, {@journal_dev={'journal_dev', 0x3d, 0xb08}}, {@delalloc}, {@data_writeback}, {@lazytime}, {@data_ordered}]}, 0x1, 0x641, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x400c, &(0x7f0000000d00)={[{@data_err_abort}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000d40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000011c0)='./bus\x00', 0x30020, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001200)='./bus\x00', &(0x7f0000001240), 0x0, &(0x7f0000001280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001300)={'syzkaller0\x00', 0x7101}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000140)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000280)=@delqdisc={0xf8, 0x25, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x2, 0x2}, {0xa, 0xfff1}, {0xffe0, 0x4}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x12, 0x6, 0x9, 0x0, 0x8, 0x6, 0x3}}, {0xa, 0x2, [0x6, 0x0, 0xebd7]}}]}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xf, 0x40, 0x8, 0x0, 0xff, 0xfffffff8, 0x2}}, {0x8, 0x2, [0xc128, 0x3]}}, {{0x1c, 0x1, {0x80, 0x1, 0x8, 0x54, 0x0, 0xc, 0x7, 0x7}}, {0x12, 0x2, [0xe, 0xa52, 0x6, 0x6, 0x3, 0x1, 0x2ea]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xfffffffa}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x9}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x200000}}]}, 0xf8}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=@newtclass={0x68, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0x9}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x205c, 0x0, 0x1000}, 0x1000, 0x1080}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x68}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r10, 0x8030942b, 0x0) recvmmsg(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x20}, 0x8}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001740)=""/4096}, {&(0x7f0000002740)=""/178}], 0x0, &(0x7f0000002840)=""/198}, 0x341}], 0x1, 0x2382, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@textreal={0x8, &(0x7f0000000080)="0fc75d0066b9800000c00f326635000100000f30660f3adf8a0001e6260f018f94b5650f78f6f366260f90470f2e0f300f0fe5b4f2360f180a66b8c70000000f23d00f21f86635300000080f23f8", 0x4e}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.265263494s ago: executing program 2 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_winnt}, {@utf8no}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlateno}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@numtail}, {@uni_xlate}, {@utf8no}, {@uni_xlateno}], [{@uid_eq}, {@euid_lt}, {@flag='rw'}, {@subj_type={'subj_type', 0x3d, '&'}}, {@flag='posixacl'}, {@obj_user={'obj_user', 0x3d, 'uni_xlate=1'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}]}, 0xf5, 0x2a8, &(0x7f0000000540)="$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") fsmount(r1, 0x0, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder_logs/stats\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0xfec00000, 0xffc, 0x7, 0x7f, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newlink={0x90, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24603}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x9}}]}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfffffffb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x72f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x2}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40040) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0xc085}, 0x40080) ioctl$LOOP_CLR_FD(r2, 0x4c01) 23.186958872s ago: executing program 2 (id=15): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000005f80)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f00000026c0)=ANY=[@ANYBLOB="500000001800010000000000fedbdf251d01070008000a00", @ANYRES32, @ANYBLOB="08000e00", @ANYRES32, @ANYBLOB="08000500f9fe0207150001000300080008010000000001000000000012"], 0x50}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='hsr0\x00', 0x10) 23.168593004s ago: executing program 32 (id=15): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000005f80)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f00000026c0)=ANY=[@ANYBLOB="500000001800010000000000fedbdf251d01070008000a00", @ANYRES32, @ANYBLOB="08000e00", @ANYRES32, @ANYBLOB="08000500f9fe0207150001000300080008010000000001000000000012"], 0x50}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='hsr0\x00', 0x10) 22.255781489s ago: executing program 4 (id=18): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000700)={@empty, 0xf, 0x1, 0x2, 0x1, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x20) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240300"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='mnt/encrypted_dir\x00', 0x800, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000580)=0x8) r3 = socket$inet6(0xa, 0x3, 0x1) r4 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r4, 0x3, 0x0, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x2, 0xd0, 0x50, {0x8, 0xb, 0x1, 0x2, 0x1, 0x0, 0x20, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x1, 0x9, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf8, 0x10, 0x1, {0x8, 0x25, 0x1, 0x81, 0xc, 0x3, 0x60}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x68, 0x6, 0x3, 0xe, {0x8, 0x25, 0x1, 0x80, 0x0, 0x0, 0x9}}}}}}}}]}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000680)=@framed, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x80) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000480)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdnm=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000840)) fcntl$lock(r3, 0x7, &(0x7f0000000880)={0x0, 0x0, 0x39, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_open_procfs(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000008c0)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000900)='ext2\x00', &(0x7f0000000940)='./bus\x00', 0x38880, &(0x7f0000000980), 0x1, 0x51a, &(0x7f00000009c0)="$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") fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 20.084667444s ago: executing program 4 (id=33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./binfmt\x00', &(0x7f0000000980)='binfmt_misc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./binfmt/status\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)="fca633", 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x3, '\x00', @b}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="640fc7290f01b6000000000f10343a66ba400066ed0f38c80d1e65000066b8b9000f00d0f30f0966460f388006c4a2b58ea2ba2b0000f366420f06", 0x3b}], 0x1, 0x60, &(0x7f00000001c0)=[@cstype0={0x4, 0xf}, @cr0={0x0, 0x6005000d}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x3c0, 0x1d8, 0x1d8, 0x3c0, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x9400, 0x98, 0x100, 0x94, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/custom1\x00', 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r7}}, 0x58) write$selinux_load(r6, &(0x7f0000000480)=ANY=[], 0x190ec) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000a40)={0x3, "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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000cc0)='./mysys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r8, 0x4000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000d80)={0x1a32e5400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) 19.994234264s ago: executing program 4 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xc0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x3a0600b, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x2040020, 0x0, 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x29, 0x0, @empty, @broadcast}}}}) unshare(0x60000600) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) unlink(&(0x7f0000000000)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000009c0)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x54}], 0x1, 0x65, 0x0, 0x0) 6.698557175s ago: executing program 1 (id=103): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) (async) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') wait4(r0, &(0x7f00000002c0), 0x1, 0x0) fchdir(r1) (async) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='attr/sockcreate\x00') r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, r1, 0x2}, 0x50) preadv(r2, &(0x7f00000017c0)=[{&(0x7f0000000140)=""/50, 0x32}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f00000001c0)=""/9, 0x9}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/245, 0xf5}, {&(0x7f00000015c0)=""/244, 0xf4}, {&(0x7f00000016c0)=""/239, 0xef}], 0x8, 0x165c, 0x6) 6.476648167s ago: executing program 1 (id=104): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000000)={0x80, 0xa, 0x2, "0080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d77e17208680630b326a01020301090224000100041000090456100289f0b408"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x0, 0x2, {0x2, 0x31}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f0000000640)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0x82, 0x1, "17"}, &(0x7f0000000440)={0x20, 0x83, 0x1, '7'}, &(0x7f0000000480)={0x20, 0x84, 0x1, 'r'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "01a2b7"}}) r1 = syz_usb_connect$uac1(0x6549b6fed0547462, 0xc9, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x7, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x28}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x4, 0x6, 0x400, 0x75, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x405, 0x1, 0x1, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x402, 0x3, 0x4, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x2, 0x0, 0x6}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xd0, 0x4, 0x70, 0x0, "e31a82", "21ebcc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x80, 0x58, 0x80, {0x7, 0x25, 0x1, 0x4, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x4, 0xb, "657ba664f9a0110614"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x2c}, @as_header={0x7, 0x24, 0x1, 0x5, 0xef, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x93, 0x0, {0x7, 0x25, 0x1, 0xc, 0x27, 0x9}}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x201, 0x8, 0x2, 0x1, 0xff, 0x1}, 0x12, &(0x7f0000000900)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0x5, 0x7}, @ptm_cap={0x3}]}, 0x8, [{0xab, &(0x7f0000000940)=@string={0xab, 0x3, "d12b8cc7cbfd81fc569d94517d297bf34e4de3c00b53e713ea1873240a76b4987198ac24a826e1f5d07f00d7ff99f21d79473dc7973a9cd5dd913ede525531cd3ae1ce4b123df557be7f7ed4d954ace2995f0531022e91b891b2bcd911ed0bccff97e136088bd2ee80e4f33657cad9355bcc43d38c3c891832c87d7611ad60b2c69bb53e13c4b5e8abf86f1cf3546d1bcc12d7359dd9d2ede9bb703523a2d0d502e7e42cdf45aa6a03"}}, {0xe1, &(0x7f0000000a00)=@string={0xe1, 0x3, "99591479062b53335d50163ae05c29ed031603deed51ead97c6ee5572fa4b3a18c7d0691de984c24a174c592882d02802fe5d3d423e20d53f07847ce9eeda8e7e1ed1257dd1c57ddc51fe5211ed0c7ec83367a007d7ace808314e76784b95a4c587ad91a78131efbff4c26e78a2266df56ebe2c65d20f0d6e02b08f2ac7f0e0367a855ae4d367d216b56a6da5644ef5e85cd2394d241325565e4dc9b8a186e3a50869fe0f83a22b4c249610d43841eee7754215a231b20580f6c40c8f29cd866766bf766903e2e24f3c830ac2e392fa581225cc93fe7c5cd773bab03fe11af"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x1809}}, {0xc4, &(0x7f0000000bc0)=@string={0xc4, 0x3, "5d8426cfe5e850997c65b1df87e4a71a4938591bff6b657e5e170f661b0dd716b9531dd6dc393e2af47bb686c1228d141c1767d06de59f9b6a04ab23fb124810582ab2781ae98697a1dc669f1faa79614e89ba81c26117e0e4d92985c5fc033e1befc6c4c9e7a51e56b1368e54f1f1e54e0020fac00a5338564213355898408a4d7a2b464be33984863278f14603864e6d721cb8065f52baf3f50b4dc4ca23d1dc2a2dd033f6c8ef67f92e6918160ffad3ee8fa65b03e0db8d4494f219da248858ca"}}, {0xea, &(0x7f0000000cc0)=@string={0xea, 0x3, "36bea0ffa19501486a6aa36f3ee32774402357583b17a74f1b0fdd9013b5e75505e998afad0639c9979e9ba406067eff694c193d41dd64059f72e4d4cbd007f737cc808fee3adb3e080f2bbc8958d21479092a2f228af175ef731ae1198f238a3e54ff430b45bde5e70d728697f06319c2565dbcf82c976e833fdbb7cca6e4329a87476274c8174f8063dd6a02e816f3bc74815d4c9cc2c17b4e64366de660080b82e43ff735125e5618b7211a1af82738bb59370d607b5707f4c33c520bd33c78389085e7c6d7e516471c2c13786bed58ff160e607b7175e9592290552a0cf7d7998891e3b435a5"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x500a}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000f80)={0x14, &(0x7f0000000e80)={0x0, 0xe, 0x22, {0x22, 0x5, "d0dd8bbb056b5ca62b21087558334c3100902fb907a0481503d8491a0ff870be"}}, &(0x7f0000000ec0)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "acacc4eef49c64be96ba336ee5395ce4e445e8a455b018b48b3e53dd0eed84ca4199d9c3130d2853922a694ed8aab0e280b9d11dccfaf168e0e7d9aa2048b417526e012d7c3aeb3e0843d7b26d5cbeda556d595bcea79a3d19753c60ad87e859f4aaf8ac645e2344e2dde8033ae8d0668d39d9323dd4816adcc587bd516c52c5866a9af3a51343e975106cd4f8f75337522d3610bdce82096c230b2b0cc0f073d8e23c3ba9e3d920f56f72cea52d61f284f9db7cad7f"}}}, &(0x7f00000011c0)={0x44, &(0x7f0000000fc0)={0x40, 0x31, 0x7, "b217a9b139e3d4"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x6f}, &(0x7f0000001080)={0x20, 0x81, 0x1, "1b"}, &(0x7f00000010c0)={0x20, 0x82, 0x2, "176d"}, &(0x7f0000001100)={0x20, 0x83, 0x3, "887ffd"}, &(0x7f0000001140)={0x20, 0x84, 0x4, "296ff58a"}, &(0x7f0000001180)={0x20, 0x85, 0x3, "670bfb"}}) syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x2002) syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000000)={0x80, 0xa, 0x2, "0080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000d77e17208680630b326a01020301090224000100041000090456100289f0b408"], 0x0) (async) syz_usb_control_io$uac2(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x0, 0x2, {0x2, 0x31}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f0000000640)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0x82, 0x1, "17"}, &(0x7f0000000440)={0x20, 0x83, 0x1, '7'}, &(0x7f0000000480)={0x20, 0x84, 0x1, 'r'}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "01a2b7"}}) (async) syz_usb_connect$uac1(0x6549b6fed0547462, 0xc9, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x7, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x28}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x100, 0x4, 0x6, 0x400, 0x75, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x405, 0x1, 0x1, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x402, 0x3, 0x4, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x2, 0x0, 0x6}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xd0, 0x4, 0x70, 0x0, "e31a82", "21ebcc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x80, 0x58, 0x80, {0x7, 0x25, 0x1, 0x4, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x4, 0xb, "657ba664f9a0110614"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x1, 0x0, 0x2c}, @as_header={0x7, 0x24, 0x1, 0x5, 0xef, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x93, 0x0, {0x7, 0x25, 0x1, 0xc, 0x27, 0x9}}}}}}}}]}}, &(0x7f0000000e00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x201, 0x8, 0x2, 0x1, 0xff, 0x1}, 0x12, &(0x7f0000000900)={0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x2, 0x5, 0x7}, @ptm_cap={0x3}]}, 0x8, [{0xab, &(0x7f0000000940)=@string={0xab, 0x3, "d12b8cc7cbfd81fc569d94517d297bf34e4de3c00b53e713ea1873240a76b4987198ac24a826e1f5d07f00d7ff99f21d79473dc7973a9cd5dd913ede525531cd3ae1ce4b123df557be7f7ed4d954ace2995f0531022e91b891b2bcd911ed0bccff97e136088bd2ee80e4f33657cad9355bcc43d38c3c891832c87d7611ad60b2c69bb53e13c4b5e8abf86f1cf3546d1bcc12d7359dd9d2ede9bb703523a2d0d502e7e42cdf45aa6a03"}}, {0xe1, &(0x7f0000000a00)=@string={0xe1, 0x3, "99591479062b53335d50163ae05c29ed031603deed51ead97c6ee5572fa4b3a18c7d0691de984c24a174c592882d02802fe5d3d423e20d53f07847ce9eeda8e7e1ed1257dd1c57ddc51fe5211ed0c7ec83367a007d7ace808314e76784b95a4c587ad91a78131efbff4c26e78a2266df56ebe2c65d20f0d6e02b08f2ac7f0e0367a855ae4d367d216b56a6da5644ef5e85cd2394d241325565e4dc9b8a186e3a50869fe0f83a22b4c249610d43841eee7754215a231b20580f6c40c8f29cd866766bf766903e2e24f3c830ac2e392fa581225cc93fe7c5cd773bab03fe11af"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x1809}}, {0xc4, &(0x7f0000000bc0)=@string={0xc4, 0x3, "5d8426cfe5e850997c65b1df87e4a71a4938591bff6b657e5e170f661b0dd716b9531dd6dc393e2af47bb686c1228d141c1767d06de59f9b6a04ab23fb124810582ab2781ae98697a1dc669f1faa79614e89ba81c26117e0e4d92985c5fc033e1befc6c4c9e7a51e56b1368e54f1f1e54e0020fac00a5338564213355898408a4d7a2b464be33984863278f14603864e6d721cb8065f52baf3f50b4dc4ca23d1dc2a2dd033f6c8ef67f92e6918160ffad3ee8fa65b03e0db8d4494f219da248858ca"}}, {0xea, &(0x7f0000000cc0)=@string={0xea, 0x3, "36bea0ffa19501486a6aa36f3ee32774402357583b17a74f1b0fdd9013b5e75505e998afad0639c9979e9ba406067eff694c193d41dd64059f72e4d4cbd007f737cc808fee3adb3e080f2bbc8958d21479092a2f228af175ef731ae1198f238a3e54ff430b45bde5e70d728697f06319c2565dbcf82c976e833fdbb7cca6e4329a87476274c8174f8063dd6a02e816f3bc74815d4c9cc2c17b4e64366de660080b82e43ff735125e5618b7211a1af82738bb59370d607b5707f4c33c520bd33c78389085e7c6d7e516471c2c13786bed58ff160e607b7175e9592290552a0cf7d7998891e3b435a5"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x500a}}]}) (async) syz_usb_control_io$uac1(r1, &(0x7f0000000f80)={0x14, &(0x7f0000000e80)={0x0, 0xe, 0x22, {0x22, 0x5, "d0dd8bbb056b5ca62b21087558334c3100902fb907a0481503d8491a0ff870be"}}, &(0x7f0000000ec0)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "acacc4eef49c64be96ba336ee5395ce4e445e8a455b018b48b3e53dd0eed84ca4199d9c3130d2853922a694ed8aab0e280b9d11dccfaf168e0e7d9aa2048b417526e012d7c3aeb3e0843d7b26d5cbeda556d595bcea79a3d19753c60ad87e859f4aaf8ac645e2344e2dde8033ae8d0668d39d9323dd4816adcc587bd516c52c5866a9af3a51343e975106cd4f8f75337522d3610bdce82096c230b2b0cc0f073d8e23c3ba9e3d920f56f72cea52d61f284f9db7cad7f"}}}, &(0x7f00000011c0)={0x44, &(0x7f0000000fc0)={0x40, 0x31, 0x7, "b217a9b139e3d4"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x6f}, &(0x7f0000001080)={0x20, 0x81, 0x1, "1b"}, &(0x7f00000010c0)={0x20, 0x82, 0x2, "176d"}, &(0x7f0000001100)={0x20, 0x83, 0x3, "887ffd"}, &(0x7f0000001140)={0x20, 0x84, 0x4, "296ff58a"}, &(0x7f0000001180)={0x20, 0x85, 0x3, "670bfb"}}) (async) syz_open_dev$evdev(&(0x7f0000000780), 0x2, 0x2002) (async) 6.061771721s ago: executing program 0 (id=106): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000280)={0x0, 0x0, 0x3ed4, 0x5}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) getresuid(0x0, 0xfffffffffffffffe, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000180)=[{{&(0x7f0000000200)=@hci, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/191}, {&(0x7f0000000500)=""/4096}, {&(0x7f0000001500)=""/132}]}, 0x8f6e}, {{0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000001600)=""/25}, 0x5}], 0x400000000000113, 0x4000820b, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000001640)=0x7, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000001680)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f00000016c0)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) (async, rerun: 64) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000000080)) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000015c0)={0x0, r2}, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mknod(&(0x7f0000000340)='./file0\x00', 0x8001420, 0x4) open(&(0x7f0000000380)='./file0\x00', 0x80140, 0x0) (async) unshare(0x80) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) (async) creat(&(0x7f0000000400)='./file0\x00', 0x0) 5.403678559s ago: executing program 3 (id=112): gettid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000000680)={[{@norecovery}, {@stripe={'stripe', 0x3d, 0x2}}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}, {@user_xattr}, {@test_dummy_encryption_v1}]}, 0x1, 0x612, &(0x7f0000000a00)="$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") open(0x0, 0x8000, 0x112) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8917, &(0x7f0000000780)={{0x2, 0x4e23, @empty}, {0x1, @link_local}, 0x1c, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}, 'veth0_to_hsr\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000500)='rootcontext', &(0x7f0000000540)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x4, 0x1000, &(0x7f0000000380)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001380)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 4.425450371s ago: executing program 5 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000126bd7000fcdbdf09040000002c00028008000500ddff0000060002004e20000008000400000d0000080005000500000006000e004e2400001c000180060002005c000000060001000a00000008000800010000000800050000000000080004002e000000d84f01aaaec093180a289f518eab74b4a9d66cca3c7b0eea99900c7adabd474ae3ed1e60529e263f1a3904dd0182bb189fc0a57707cca8c3a8133b42c1e17567ffa8c725c3939d902ac6aaf3ef0025f841841d2cd401a78d4175557499f4f9be606f6f858404e41b5f0f33c254421efceadc7ede76550b74a57c16452caa5bd646f74312dfce8a2f57db6d394c85bbb258c6cfbe034db062db371ffbb34fdf7872e9f112a8eab412c88d65da8d79e4"], 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x8014) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000080)={0x2, 0x1, 0x2, 0x2, 0x1c7, 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) (async) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) futex(0xfffffffffffffffc, 0x9, 0x2, 0x0, 0x0, 0xfffffffc) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 4.425229521s ago: executing program 3 (id=120): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0x8000, 0x16, {{0x22, 0x4, 0x3, 0x9, 0x88, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x1f, 0x4, [@broadcast, @local, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @private=0xa010102]}, @timestamp_prespec={0x44, 0x54, 0x77, 0x3, 0xd, [{@multicast2, 0x7cef4cce}, {@multicast2, 0x7}, {@multicast1, 0x537}, {@rand_addr=0x64010100, 0xfffffff8}, {@remote, 0xc63}, {@loopback, 0x5467b461}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x3}, {@private=0xa010102, 0xffffffff}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8692d4d8c9f918a4, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711809000000000095"], &(0x7f0000000000)='GPL\x00', 0xff, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x160341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000d00)=@usbdevfs_driver={0x80, 0x7109272a, 0x0}) 4.417861281s ago: executing program 5 (id=121): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) mlockall(0x3) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x42, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1652, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @generic={0x20, 0xd, 0x7, 0x4, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) (async) mlockall(0x3) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, '\x00', r1, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x42, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1652, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @generic={0x20, 0xd, 0x7, 0x4, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 4.073806487s ago: executing program 6 (id=115): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0', [{0x20, '9p\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "68adcc266f4d094dbd7ee6c1aa440b3f625fb61c6863d6f64c0f8356ebf7c2c9bb0b03aef00922e73bf444184a47fe9734f22e974e6876a4edcd9df3d63a1c8642d034a81c69b5a798d405c27aa634b9c1ecf24191161ae0136bea65bab1ddb98d77da493fe808aa0708161cc920e4e8127f3231d54799ed"}, 0x91) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0), 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) ptrace(0x10, 0x0) mount$9p_tcp(&(0x7f0000000500), &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x8010, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=tcp,port=0x00000p0000004m22,privport,\x00']) ptrace$pokeuser(0x6, r4, 0x388, 0x41d9fda7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4f0, &(0x7f0000000740)="$eJzs3VFrHFsdAPD/TLL3pm2um4si14L3XmwkvWh3kxvvvUGkVhB9Kqj1PcZkE0I22ZDd1CYUTfEDCCIq+OSTL4IfQJB+BBEK+i5aFNFWH3zQjuzsxDbpbpI2abZ38/vB6ZwzM3v+50yTMzuZw0wAZ9bbEXEtIoYi4p2IKBfr0yLNFqm938MHt+fbKYksu/H3JJJi3W5d7fJwRFyIiJ2IGImIb3w14tvJ03GbW9src/V6baMoV1ur69Xm1vaV5dW5pdpSbW16eur9mQ9m3puZzArH6ufFiLj65fs//sEvvnL1N5/9zh9n/3r5u+1mfeHjnXZHxPyz1Dd6xP06dZfyY7GrfYw2niXYS2yo6E+p3w0BAOBIxiPiUkR8Kv/+X46h/NscAAAAMEiyL47Gf5KIDAAAABhYaT6XNUkrxXzf0UjTSqUzh/djcT6tN5qtzyw2NtcWOnNex6KULi7Xa5PFXOGxKCXt8lSef1x+d195OiJej4gflc/l5cp8o77Q7z9+AAAAwBlx4a291///Kqd5HgAAABgwYz0LAAAAwKBwyQ8AAACDz/U/AAAADLSvXb/eTtnue7wXbm5trjRuXlmoNVcqq5vzlfnGxnplqdFYyp/Zt3pYffVGY/1zsbZ5q9qqNVvV5tb27Gpjc601u7znFdgAAADAKXr9rbt/SCJi5/Pn8hTFcwAB9vhzvxsAnKShfjcA6JvhfjcA6JvSoXsYIWDQJYds7zl557cn3xYAAODFmPjE0/f/XzFTH84Ec30A4Ox57rt7r55sO4DTVzIDEM688c6i51n9+Pf/s+yZGwUAAJyo0TwlaaW4FzgaaVqpRLyWvxaglCwu12uTEfGRiPh9ufRquzyVfzI5dM4wAAAAAAAAAAAAAAAAAAAAAAAAANCRZUlkAAAAwECLSP+S5E/zj5goj4/u//vAK8m/y3G/KPzsxk9uzbVaG1Pt9f8o59sjovXTYv27mVcCAAAAwEugc51eLKf63RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs3DB7fnd9Npxv3blyJirFv84RjJlyNRiojz/0xi+InPJRExdALxd+5ExBvd4ifxKMuysaIV3eKfe8Hxx/JD0z1+GhEXTiA+nGV32+PPtW6/f2m8nS9HkqTL799wkY6r9/iX/n/8G+ox/rx2xBgX7/2q2jP+nYiLw93Hn9343frfXnfpiPG/9c3t7V7bsp9HTHQ9/yR7YlVbq+vV5tb2leXVuaXaUm1tenrq/ZkPZt6bmawuLtdrxb9dY/zwk79+dFD/z/eIP3ZI/8e7VdhlUP7vvVsPPtrJlrrFv3yp+/n3jR7x0+Lc9+ki394+sZvf6eSf9OYvf/fmQf1f6NH/w/7/L/eqdJ93vv79Px1xVwDgFDS3tlfm6vXaxgGZkSPs83yZF1ezzIcrk32v8/N4vHqO+fGnMlm/D0sfM/0emQAAgJP2+Et/v1sCAAAAAAAAAAAAAAAAAAAAZ9dpPE5sf8yd/nQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBA/wsAAP//bzveBg==") 3.393366008s ago: executing program 5 (id=122): socket(0x10, 0x803, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x80000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000000c0)=0x0) userfaultfd(0x80001) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000140)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mlock(&(0x7f00001c6000/0x3000)=nil, 0x3000) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x2]}, 0x8, 0x80000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)=0x0) wait4(r2, &(0x7f0000000440), 0x40000000, 0x0) rt_sigprocmask(0x0, &(0x7f00000001c0)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1a00444, &(0x7f0000000340)={[], [{@euid_eq}, {@uid_gt}, {@dont_measure}, {@flag='mand'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_gt}, {@flag='dirsync'}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, ')'}}]}, 0x1, 0xbbb, &(0x7f0000001200)="$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") syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x4, &(0x7f0000000500), 0x1, 0x76a, &(0x7f0000001e40)="$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") chdir(&(0x7f00000025c0)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000002640)={0x1, 0x1f, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000001dc0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, &(0x7f0000001e00)={0x3ff, 0x0, 0xb, 0x100000001, 0x6, 0x6, 0x7fffffff}, 0x0, 0x0) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x3200002, &(0x7f0000000200)={[{@noquota}, {@quota}, {@delalloc}]}, 0x3, 0x61b, &(0x7f0000000bc0)="$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") unlinkat(r4, &(0x7f0000000b80)='./file0\x00', 0x200) 3.235910754s ago: executing program 3 (id=123): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x16bfc9754559bcb9) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000c00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002c40)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x4f834d49, 0x7, 0x105, 0x7, 0xa15, 0x0, 0x0, 0x1, 0xa}}, 0x50) lsetxattr$system_posix_acl(&(0x7f0000002cc0)='./file0/file0\x00', 0x0, 0x0, 0x54, 0x2) syz_fuse_handle_req(r1, &(0x7f0000002d00)="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", 0x2000, &(0x7f0000004d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004dc0)={0x90, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, {0x0, 0x401, 0xfffffffffffffff8, 0x0, 0xd5a6, 0x9, 0x0, 0xfffffffd, 0xfffffffd, 0x1000, 0x0, 0x0, 0x0, 0x7f, 0x40}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x109980, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000003c0)=[@cr0={0x0, 0x20040021}], 0x1) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x1c916, &(0x7f0000000240)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@norecovery}, {@acl}, {@resgid={'resgid', 0x3d, 0xee01}}, {@norecovery}, {@noauto_da_alloc}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x98, 0x4d9, &(0x7f0000000700)="$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") 3.211817957s ago: executing program 6 (id=124): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000086e05ff0000000000000109022400010000002104000c01222800090581030004f708fe00"/54], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="2008280000002831f70ba381030000000000000000cb4fdea0560592"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffeffffffffff]}, 0x0, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000086e05ff0000000000000109022400010000002104000c01222800090581030004f708fe00"/54], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="2008280000002831f70ba381030000000000000000cb4fdea0560592"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$evdev(0x0, 0x4, 0x800) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffeffffffffff]}, 0x0, 0x8) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) 2.981176861s ago: executing program 3 (id=125): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x4c}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8041, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d0000", 0x23) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000300)={0x0, 0xfffffff5, &(0x7f0000000340)=[{&(0x7f0000000380)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r4, &(0x7f00000003c0)=[{{0x0, 0x5dc, 0x0}}, {{0x0, 0x0, 0x0}}], 0x802, 0x4000011) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1000}, {"1bb6bf22"}}}}}}, 0x0) 2.980441091s ago: executing program 1 (id=126): unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) preadv2(r0, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/74, 0x4a}], 0x1, 0x0, 0x7e, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000ac0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000b00)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a000010ffffffffffffaaaaaaaaaa4486dd6900000000082c00fc0200"/41], 0x42) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)='nobh', 0xfffffffffffffffe) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x282000, &(0x7f0000000940)={[{@prjquota}, {@barrier_val={'barrier', 0x3d, 0x401}}, {@delalloc}, {@data_writeback}, {@nobh}], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, 'data=writeback'}}]}, 0x40, 0x79d, &(0x7f0000000180)="$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") 2.724394407s ago: executing program 0 (id=127): socket(0x3, 0xa, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000), &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'crct10dif-arm64-ce\x00'}}, 0x0, 0x0) inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') sendfile(r1, r1, 0x0, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') close(0x3) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2000485c) socket(0x3, 0xa, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000), &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'crct10dif-arm64-ce\x00'}}, 0x0, 0x0) (async) inotify_init() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv4/neigh/lo/base_reachable_time\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') (async) sendfile(r1, r1, 0x0, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') (async) close(0x3) (async) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2000485c) (async) 2.682037052s ago: executing program 0 (id=128): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x4, &(0x7f0000000440), 0x1, 0x76a, &(0x7f0000000480)="$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") chdir(&(0x7f0000000c00)='./file0\x00') (async) chdir(&(0x7f0000000c00)='./file0\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000280)=""/128, 0x80, 0x3) ptrace(0x10, r1) (async) ptrace(0x10, r1) wait4(r1, 0x0, 0x40000000, 0x0) (async) wait4(r1, 0x0, 0x40000000, 0x0) ptrace$cont(0x18, r1, 0xffffffffffffffec, 0x6) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x80401c, &(0x7f0000000100)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000e80)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000063c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000006400)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "3c2efbd771a965cc652045b2a7ddc23e4ca99c6db5a2c3411ff15ad0bf74817b20a889e44f41c504f1ae1f161963344cc2ad54066dd123832b3d7370d4e49934b63b3cd9b7d618598ed73ffcde0fc04851c521591bd720ac73ccbb0914ee440bcc36885ca5759ad249b84e0d17445503b36663190ca35112bf19ffc820c736449d43eba3fa976bb600be7d19c3"}, 0x18c) (async) write$binfmt_script(r3, &(0x7f0000006400)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [], 0xa, "3c2efbd771a965cc652045b2a7ddc23e4ca99c6db5a2c3411ff15ad0bf74817b20a889e44f41c504f1ae1f161963344cc2ad54066dd123832b3d7370d4e49934b63b3cd9b7d618598ed73ffcde0fc04851c521591bd720ac73ccbb0914ee440bcc36885ca5759ad249b84e0d17445503b36663190ca35112bf19ffc820c736449d43eba3fa976bb600be7d19c3"}, 0x18c) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20010, r4, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)=0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x50, &(0x7f000000bf00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r5, @ANYBLOB="2c67796f757770705f692ba9cc22c2e3a6584f09c0a4b48e75dd7b4aae1859781f0fa80585c051ed77e437d4127ffc2e9c0b26c1513654799223973a6bb8f0583ed54c4289980ea3391633df7ad09f7049897460c43801000000be8957b65479b04a6cc3a4f50695d8785d72e11ae3c2073bf8d7e4ae62bfa652d4d3c6ef16bce6c4852ce468dc5a274cc2e44f3401ecf8862cc551b4f95290051e34714e2556d1e2135ed15e3433997781f479b7d3be3838237ddc5fe4a804491c9b72b0fa8f4f100d", @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,allow_other,allow_other,max_read=0xfffffffffffffff8,obj_user=#!({,subj_user=\x00,\x00'], 0x0, 0x0, &(0x7f0000000d40)="c72926005c1db2f43effebf1d1bb807ca5c3e773b1b2ca139c0126af5d6e5c6ec536d3f100e8a54ff316eeea7504b49a3df99e089192560f9d2275d6587267ae88063b71931936bdc2372efc11c4cf49e288e1de9c98ce26d17ca043d8b9939732bf5709fbda7ffacf2a7eba81371537d45cbbfce4852b4b209963ac365fb69af414737229a7a8ff5e32a09261a525670980f1f74433156cf15518c3cff94781def97f3f7ba890b65988931ded888089eb0247a09810653b14d717595409d6b7479e93a70cb66ae8e82bae9966f702ac165f074cc12ccfa92c24fd48cfbb28a214b2f0ee07e073e2d488de") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20c3) ftruncate(r3, 0xf4ff) (async) ftruncate(r3, 0xf4ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) socketpair(0x1, 0x20000000000001, 0x0, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000006600), &(0x7f0000006640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000006740)=ANY=[@ANYBLOB="22280bc5f634caf9921fd6b8a647192fe4cd88a590dfeedcbdcff007d857d5f5b4a6f4699206a4e3f27d9a662c60d0b42e5111833d4e5614cfe72709d2d9b7f15a3925501abe21524d4f5595d8ed8b7cc7f7626e1e929eec629f335c18fee97bc103c32033feb9fec889067d2b5e96eba299e47848c88f023e9c80b0cdfe91d7ec121167c377c413bd057fecf204cba4af01ad58c6ed529f6b671b081e6d728c107514be1464f75789393d473f63f749bc90ef6b56430106b209327379684ced01a4eb8872e675141fa90bff0aca660ee40b2d98dd5a7b58d5d0336c5a48b3ba5549f73df7407189bfc6f0ac", @ANYRESDEC, @ANYBLOB="2dde075626ee55cad30e48e89a3ccb6bdd5713b3eed5d38b2f647affd9d6ffacf293c79f6b201517bdde8c2e6bc552b6", @ANYRES8=r3, @ANYBLOB="7d58ce5cb999b62c96d57b292842543b2b9eacf8d2a054ea94a06baab3db5b9b739bd83cf4f16dc73a9090e0a8af49d94e8c6348b2daafa8237823007dfb144561f20d3c51d0170a03651bb9cf04b3f06debddec3d9fdc32cff3cec62c0fc1eb00235e673ad51b163889c54e2cb7719eb93a9d09e142", @ANYRESHEX, @ANYRES64=r5, @ANYRES32=r3], 0x25, 0x55bf, &(0x7f0000006940)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000c80)='./file0\x00', 0x40200) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x40806685, &(0x7f0000000cc0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.549222606s ago: executing program 5 (id=129): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/asound/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000240), 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000540)=0x5a6, 0x4) bind$inet(r2, &(0x7f0000000580)={0x2, 0x4e20, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000600)={0x5813}, 0x10) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000001e008d2af5ffffff000000000a0000", @ANYBLOB='\x00\v'], 0x1c}}, 0x4004) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000000600), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000640)=0x5, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000680)=0x40, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980), 0x3f, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000009c0)={r4, &(0x7f0000000a00), &(0x7f0000000a40)=""/158}, 0x20) recvmmsg(r2, &(0x7f00000006c0), 0x291962b, 0x45833af92e4b39ff, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)=""/29, 0x1d) ioctl$DM_TABLE_STATUS(r0, 0xc138fd0c, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x168, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, "025df471adb44f2210b79d1d1b27048fe60225c470f9aa6b71bbfd39d1b0675dcc80d59393856037ba"}) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f00000000c0), 0x1) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 2.237616668s ago: executing program 1 (id=130): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd04\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaK\xce\x00\x00\x01\x00p\x9e\xf2\x16\x01`\xd2+FG\tX)\x910\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O\xb2+b\x1c*4Cnv\x13\xfa\xf2\xf8&\xae\xe3\b\xa8\xd4\x9b\xabo\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xf3\xa7*O\xe3\xc3L\x00\x02\x00\x00\x00\x00\x00\x00\xd4\xde\xe5\x1b\x1e34~\xa8\xb8aQtp\xc8r_\x14K\xd35;\x8f_\xe0|Y\x8bG\x89\xe43\xff\x04%\xd5S\xd3\x1e\xce\xfeDS\x16\xb9H\x15\xa1G\x06\x18*\x1a5\xb6\xd1f\x14\x86&\x95\x91\xef\x81\xa0J\xe5\xceI\xc3\x01\xdbU\x11M\x93\xd5(\xb0M/\x89$\"\xdaa\x0e\xa7p\xf1[\xec\x1d \xf5\x8c_\xd6\xc2\xd3\x8f\xc5\xed\xebR\xf8\x95\x87Pa\x93\xa6\xf3\x96\xe2\x94Y\xc9\x8e@\x9b\xf2\x17\xccfql\xdd\xcb\x00\xd3\xafR\xa3\xf5\xf6\x03\xa52\xd0A\xe8\xb6\x1e\xb7\x91\xa9\xd8\xff'}]}, 0x13e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x2080, 0x0) r1 = socket(0x1e, 0x802, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f00000003c0)=""/183, &(0x7f0000000480)=0xb7) r2 = epoll_create1(0x80000) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0x10}) ppoll(&(0x7f0000000340)=[{r2, 0x2000}], 0x1, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001700)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f00004a5000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/90, 0x5a, 0x0, &(0x7f0000000200)=""/93, 0x5d}, &(0x7f00000002c0)=0x40) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.172349385s ago: executing program 1 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000002c80)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002cc0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000002d00)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000002d40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r3, 0x8cee000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x12) connect$unix(r1, &(0x7f0000002dc0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000002e40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002e80), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000003480)={0x1, &(0x7f00000034c0)=[{0x6, 0x2, 0x7, 0x7ffc0001}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x60040000) syz_mount_image$ext4(&(0x7f00000035c0)='ext4\x00', &(0x7f0000003600)='./file1\x00', 0x200000, &(0x7f0000003640)={[{@dioread_nolock}, {}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000036c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3178}, 0x48) 2.02129837s ago: executing program 3 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) mount(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='ramfs\x00', 0x10, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x400a8, &(0x7f00000009c0)=ANY=[], 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000840)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x87}, [@ldst={0x4}]}, &(0x7f00000009c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000b40)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000c00), 0x1f3, 0x10, &(0x7f0000000c40), 0xfffffffffffffc79}, 0x2a) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000480)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b2404"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000580)={0x14, 0x0, 0x0}, &(0x7f00000005c0)={0x44, &(0x7f0000000640)={0x40, 0xa, 0x1a, "29311b60e283f15cc30e00aded5c89b4070ff39cdaebe7dbfae8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x181) r2 = syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file1\x00', 0x6, 0x0, 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0xc1b2, 0x4, 0x0, 0x0, 0x6, 0x0, [{0x43, 0x726d, 0xb, '\x00', 0x1285}, {0x6, 0x5, 0x4, '\x00', 0x407}, {0x2, 0x1, 0x8, '\x00', 0x9}, {0x1, 0x4, 0x1ff, '\x00', 0x800}, {0x6, 0x9, 0xa5cf, '\x00', 0x2204}, {0x9, 0x4, 0x1e3, '\x00', 0x1004}]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000003c0)={{r2, &(0x7f0000000240)='ramfs\x00', 0x200000, &(0x7f0000000280)={@align=0x5c60, {0x9, 0x7ff, 0xffffffff, 0x2}}, 0x5, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x2}, {[0x4, 0x1, 0x3ff, 0x1]}, 0x4, 0x5f, &(0x7f0000000340)=""/95}) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000440)=0x3) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x220000, &(0x7f0000000200)={[{@max={'max', 0x3d, 0x1}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'lowerdir'}}, {@hash}]}) 1.454020359s ago: executing program 0 (id=133): r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x507, &(0x7f00000014c0)="$eJzs3c9vI1cdAPCvnV9ONm22pQdA0C5tYUGrdRJvG1V7gHJCCFVC9AjSNiTeKIodR7FTmrCH9MwViUqc4MgfwLkn7lwQ3LiUAxI/ItAGicNUM55kvVl7E20Szyr+fKTRvDfP6+97yc578TexXwAj60ZE7EfEZER8EBFz+fVSfsS73SN93MODByuHBw9WSpEk7/+rlLWn16Ln36Su5c9ZiYgffS/ip6Un47Z39zaWG436dl6f7zS35tu7e7fXm8tr9bX6Zq22tLi08M6dt2sXNtbXmpN56auf/XH/Wz9PuzWbX+kdx0XqDn3iOE5qPCJ+cBnBCjCWj2ey6I7wTMoR8XJEvJ7d/3Mxln03AYCrLEnmIpnrrQMAV105y4GVytU8FzAb5XK12s3hvRIz5Uar3bl1v7WzudrN56XurzfqC3mu8HpMlNL6YlZ+VK+dqN+JiJci4pdT01m9utJqrBb1Qw8AjLhrJ9b//051138A4IqrFN0BAGDorP8AMHqs/wAweqz/ADB6uuv/dNHdAACGyOt/ABg91n8AGCk/fO+99EgO88+/Xv1wd2ej9eHt1Xp7o9rcWamutLa3qmut1lr2mT3N056v0WptLb4VOx9d//ZWuzPf3t2712ztbHbuZZ/rfa8+kT1qfwgjAwAGeem1T/9SSlfku9PZET17OUwU2jPgspWL7gBQmLGiOwAUxm5fMLrO8RpfegCuiD5b9D6m0u8NQkmSJJfXJeCS3fyS/D+Mqp78v78ChhEj/w+jS/4fRleSlM6653+c9YEAwPOtN8efnPZLQOBKGnDrv5yff5f/cuAnqycf8cll9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeb0f7/1bzvcBno1yuViNeiIjrMVG6v96oL0TEixHx56mJqbS+WHCfAYDzKv+9lO//dXPuzdnHml69dlycjIif/fr9X3203Ols/ylisvTvqaPrnU/y67Xh9x4AON3ROp2de17IPzx4sHJ0DLM///huRFS68Q8PJuPwOP54jGfnSkxExMx/Snm9q9STuziP/Y8j4ov9xl+K2SwH0t359GT8NPYLQ41ffix+OWvrntOvxRcuoC8waj5N5593+91/5biRnfvf/5Vshjq/fP5Ln2rlMJsDH8U/mv/GBsx/N84a460/fL9bmn6y7eOIL49HHMU+7Jl/juKXBsR/84zx//qVV18f1Jb8JuJm9I/fG2u+09yab+/u3V5vLq/V1+qbtdrS4tLCO3fers1nOer5wavBP+/eenFQWzr+mQHxK08Zf1r5+hnH/9v/f/Djrz0l/jff6Be/HK88JX66Jn7jjPGXZ35fGdSWxl8dMP7Tvv+3zhj/s7/tPbFtOABQnPbu3sZyo1HfVlA4tXA3/WmyyG6k/2WL/iIMKnxnWLEmo3/TL97o3tMnmpLkmWINmjEuIusGPA+Ob/qI+F/RnQEAAAAAAAAAAAAAAPoaxjuWih4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV9fnAQAA///drM50") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000640)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000680)={0x8, 0x9, 0xc8c, 0x8, 0x2, 0xfffffffffffffffe, 0x5, 0xf64, 0x7fffffff}) r1 = syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000880)='./file0\x00', 0x120485a, &(0x7f00000008c0)=ANY=[], 0x1, 0x2e7, &(0x7f0000000900)="$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") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r3, 0x4068aea3, &(0x7f0000000140)) syz_mount_image$ext4(0x0, &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000d00)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000d40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xfffffd3b, 0x0, 0x1, 0x0, 0x0, 0x8c004}, 0x880) timer_create(0x0, 0x0, &(0x7f0000000040)) r4 = open(&(0x7f0000000e00)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000e40)={0xa0, 0x0, 0x0, {{0x403, 0x7, 0x6, 0x282b, 0x20103, 0x200, {0x200004, 0x10005c62, 0x203, 0x1000000003, 0x83, 0xd616, 0x10000006, 0x6, 0x100000, 0x0, 0x80000001, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) setxattr$incfs_size(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000f40), &(0x7f0000000f80)=0x7, 0x8, 0x0) sendfile(r4, r4, &(0x7f0000000fc0)=0x4, 0x80000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) dup(r1) r5 = open(&(0x7f0000001000)='./file1\x00', 0x109cc2, 0x5c) clock_adjtime(0xffc99a3b, &(0x7f0000001040)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x4, 0x8000000000005a, 0x3}) ftruncate(r5, 0x200004) pselect6(0x40, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000001180)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, &(0x7f00000011c0)={0x0, 0x3938700}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a2c000000180a00000000000000000000000000020c00054000000000000000040900010073797a310000000034010000000a010300000000000000000500000808000240000000030c00044000000000000000030900010073797a3000000000000106009e739c8d43803c5e11e46cd3601639f094d3a36c21746fcaf9033157e8e2e5361d5cc444d1a0097ec92fd958580363e2e87c739b50ecbc949f85baaa2fe5efb97b24211dd27414e7fa71e65f98e4e109f2449605a9e151ae3289a3f85baf153ea198477b2521757b41fa7bc8d784035506de1ce67bd066a06cff899cd934f6d04ff7c66ea45da561cc83761a68523d7322f4f33af2b3c38ab8fea1b01f730c2f19930af0ca2a282e8022d2e7f5fa2965e8eb8fc75764a23aa5b830a909df8af9982157b9081614a1ed536c7368eadfdd0bc6b82487ab5ec534d7d272ae3a19f1b50e912c50ab7b00b97e3833155d0d8c06f06c0eb20b8238122c61dd14000000050a010300000000000000000500000a140000001100010000000000000000000200000ab23c972e14c0016eedd69831e0da70"], 0x19c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000001480)=0x4, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) connect$inet(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.447545s ago: executing program 5 (id=134): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x8000080, 0x3, 0x800}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x200000, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xa04080, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x440200, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x2, 0x1, 0x90003) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r6) recvmmsg(r6, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000780)=""/194, 0xc2}, {&(0x7f0000000880)=""/152, 0x98}, {&(0x7f0000001440)=""/4101, 0x1005}, {&(0x7f0000002480)=""/161, 0xa1}, {&(0x7f0000002540)=""/163, 0xa3}], 0x5}}], 0x1, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f00000006c0)='./file0\x00', r5}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.049202291s ago: executing program 0 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='10', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r3, 0x10e, 0xc, 0x0, 0x0) close(r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) unshare(0x2a000400) 1.049088521s ago: executing program 34 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000480)='10', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r3, 0x10e, 0xc, 0x0, 0x0) close(r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) unshare(0x2a000400) 1.019919404s ago: executing program 1 (id=137): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_procfs(0x0, &(0x7f0000000600)='pagemap\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='pagemap\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) (async) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) r2 = socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000800)=[{{&(0x7f0000000000)=@file={0x82a6699a622ca2f2, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000640)="646e0b4c3178dba1d0d6e4e47edfb8d26caefb088ea372f87905b443913f16fb5e26a1d8f039745a4f8cf79698d1c9c2a7f48d973f94bc9d7997d4c33b6fa4bb217b2e2f35616f4ba478dd82a70ddf7e736a7715b2a6a5109906f73e7bf9bbe54ca5f7cedb4045f1108c790007081385f47fec1013ab0835286f0e35a8d0271f6189035c3493e7c15cb1ac4fa58f6526c3df5576379e0f996e1df0205f43efc5bc3498eaa5fed7aa2cce2840bcdbc52ed55f1bb4b81e8f664cb39d2b5b388ff80a61711268dcd8bf2318d7ee4569895100efba88ddea5abdb24ec7a60b3fe684da0e54f034a737305bb11d906c89d69b6b9bf6", 0xf3}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000000010000000000010000100000001000000"], 0x40, 0x50}}], 0x1, 0x4040800) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x97) mkdir(&(0x7f0000000380)='./file1\x00', 0x13b) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000004c0)='./bus\x00') r5 = open(&(0x7f0000000500)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000019680)=ANY=[@ANYBLOB="00222300000096231b26e53f07010000002a900683"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000019680)=ANY=[@ANYBLOB="00222300000096231b26e53f07010000002a900683"], 0x0}, 0x0) rt_sigsuspend(0x0, 0x0) (async) rt_sigsuspend(0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000196c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000540)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x4000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000019640), 0x7f03) timer_create(0x1, 0x0, 0x0) 489.91342ms ago: executing program 7 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x6, 0x4, 0x1, 0x81, r0}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents(r1, &(0x7f0000000080)=""/24, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000140)=0x2, 0x8) setrlimit(0x40000000000008, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/73}, 0x20) 433.796975ms ago: executing program 7 (id=138): socket$inet6(0xa, 0xa, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x102, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES64=r0]) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x800, 0x0) getsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x8000, &(0x7f0000000300)={0x11, 0x5, r5, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8000) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000203ed6f2747e8c8067a90e0db00"/28], 0x1c}}, 0x0) r9 = fsopen(&(0x7f0000000600)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r11, &(0x7f0000000a40)=""/1024, 0x400) read$FUSE(r11, &(0x7f0000000e40)={0x2020}, 0x2020) open(&(0x7f0000000340)='./bus\x00', 0x143bc2, 0x1c0) setxattr$system_posix_acl(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010005000000000002000300", @ANYRES32=0x0, @ANYBLOB="040000000000000008000700", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="100000000000000020000500000000003e3ed60ee53a0a99a9cafb5aa34f0b53b09a39db4eb05294848c510213aaa259e42a196e72a234a5a49d"], 0xff3c, 0x1) 432.696315ms ago: executing program 5 (id=139): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x1c916, &(0x7f0000000240)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@norecovery}, {@acl}, {@resgid={'resgid', 0x3d, 0xee01}}, {@norecovery}, {@noauto_da_alloc}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x98, 0x4d9, &(0x7f0000000700)="$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") 365.309522ms ago: executing program 7 (id=140): socketpair(0x28, 0x6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x59}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8001) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x33c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x169, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x6, 0x80, @device_a, 0x1, @value, 0x100, 0x1, @broadcast, 0xfffffffb}}, @random_vendor={0xdd, 0x77, "b9a77deb968d3a87b37ca24023db3e5e1b9e1b4522975194f2773ada10fa8b6d39696a971640400826f566a8c1a2eea0066e82efde80dc122075953717f70894ae0b811cf5a0c062ea22a8706311ec67c9f023d026cc41d66fcd59f226e521f9c2db3a903b6f549c49eba71b9d25118855172b71260585"}, @fast_bss_trans={0x37, 0xb5, {0x3, 0x4, "00d66b87765439901e4127d269eef711", "604c8505f51f8050eed9c757f318bae586f966c7d333c435a3beb350e6f53563", "db4ebbd2732fc3f79aa8e2b5e7bed4f8fb90565e569963696bc8758f0d090630", [{0x3, 0x1a, "45f9bfbcacadde96d7b19a19275f3a911c0f4d9fb6694251d7dd"}, {0x2, 0xf, "2556c4fb24e059b408449f34aa5a84"}, {0x1, 0x1c, "967773d54394add9ae289057fc0ab490aa08ad1fe864a239cbc2d0d0"}, {0x3, 0x16, "46119b10a92b6bba9fa37bee1dfe635c848524e1aedf"}]}}, @chsw_timing={0x68, 0x4, {0x2, 0x6}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x121, 0x2a, [@random_vendor={0xdd, 0xc6, "fab1fd832a53df0c8ac4b80cd9073068e70e02d9666cc46f46da00f699429a016675bdb131ba6638c8c59e0b6d92f6c08645a0a5b23a91897a6b705e6343fcae58698c83bebb0355185ba983141b14e4b6a2e92eb8100613d674e0cadb8bd9323e558fb7d9e2a1accef22e4fb2f83c90e5a3e8a94545e06e5d429f0fe02848e262791b200a5da057d8b1163158049145aa870d25aef13cc6cf9e94c607d5dfb1d76fdced4bd5638026a9b09438bda04d41f8cdcdc212ce04244066b844b4906457580a78a0cb"}, @mesh_chsw={0x76, 0x6, {0x42, 0x9, 0x32, 0x9}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xf, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x15}}, @peer_mgmt={0x75, 0x18, {0x1, 0x6, @val, @val=0x23, @val="25f0a8d7f5c08baf9ec6cce3f16a00e3"}}, @ssid={0x0, 0x1f, @random="c354239945f06dae3b6460bf4b1c6666d44003c7e87281e8de90648d7c70ca"}]}, @NL80211_ATTR_IE={0x65, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x60}}, @mic={0x8c, 0x10, {0xe16, "c90f5ba6a392", @short="a1cd4583975ed116"}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@random="51ea94d4d791", @device_a, @broadcast}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x6, @device_b, 0xa2, @value, 0x5, 0x3, @broadcast, 0x1}}, @challenge={0x10, 0x1, 0x24}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x83c}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040894) prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000008c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000009c0)={0x0, &(0x7f0000000a00)}) sendmmsg$unix(r5, &(0x7f0000000a40), 0x40000000000032a, 0x0) recvmmsg(r4, &(0x7f0000000a80), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000ac0)=0x2) syz_mount_image$fuse(0x0, &(0x7f0000000b00)='./file0\x00', 0x5008a, 0x0, 0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="1500000065ffff01641d000800395032303030"], 0x15) r6 = dup(0xffffffffffffffff) write$FUSE_BMAP(r6, &(0x7f0000000bc0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000c00)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x10008, &(0x7f0000000cc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c756e616d653d6efa1aa71f2a61702c64656275673d3078303030303030303030303030303030382c706f73697861636c2c76657273696f6e3d3970323030302e4c2c63616368653d66736361636865"]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x400, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002340)=0x2eb4, 0x2000007ff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6993}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 0s ago: executing program 6 (id=141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xd, 0x100, 0x4, 0x1, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f0000000680), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x32}]}, 0x3c}}, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000000)=0x0) read$eventfd(r3, &(0x7f0000000040), 0x8) r5 = socket$netlink(0x10, 0x3, 0xf) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x44}}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000b40)={&(0x7f0000000700)=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}, 0x2}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000740)="c4aad5fe16b4466ebb462defcb481ccd5318bbbfed88259d76bf9822dc647e06dbaf6d3e4d6c27774215c3337486437d7a79203ec03de683c69dd61e772dbef3e0062eab83c51d7c2a7faf6c9183557a95a6211451f83a8961422dbb1640186f0bfb6c6cb9294dede674e8c9cfbf3908cbd07411f3581a649c4fccc6a3", 0x7d}, {&(0x7f00000007c0)="41a50385e3faaea7eb8f36c7cd558dcadc41f50b346110b8446da180ecbb3254d0c7d4666e0a08f9374c61d6cecc2670d8ce608b0b8d3f345d56b3ab8db43fc0403bb29b66a17483d40875e8593972214253cf050e1ae80a85f5df40acaa1aa778c2756205c5f1abaf", 0x69}, {&(0x7f0000000840)="5e0d7c018ad3f04c80c86ab7313c5b88953d0f5800a1bde5dba6a570fc479c3c98548f5775599c46d12b2dd318d16e9b12fabb525e721b1f51fa1ce994e4f820e38f13c3ca55e55beda8265a401cd15b5532ca89c37fa2a1cc0b0c2e0cb83140ce681eb6d350bd0e7d3f1983ae635dd8a405b677054bb99e443292cef7d7e80d82e57ef5d4304372f3141ccb7978c3ef", 0x90}, {&(0x7f0000000900)="d65e781d54b6c5355abf0e3bbe35dfad47346d508d70c99a8cd82af4a3d0938745294b10993ce6f7193118302f7ab9af75763058e0c17cdc5469e6c26a3560b6ae58ffb8095fc6097948646064542aec6ab2c4dcb686a78506a137d998dc57f05edac0ccae60b58297f96fce9b1646a7c9e0b9aba1b8c117f9c564d08dbf5b7dd8cebc8d32241510a2d62d18709a718498826855014e539adb731966d8f7a8536b94d8c86d0dfa0a69f1d37dfdcb5c6d65ba27ac105599d6034c04463f431f1edcf43d4a0c8057752679f0f64c0b824bdff78e8cd7dbd59444c071ce8857f4e6e360a84ed4c2c3add4cadb532821c0", 0xef}], 0x4, &(0x7f0000000a40)="0aa7276acf098e8ffac47201ec59a5416f90df1b8b5fe13cab377668e1694f7eb6de919c48fbf8952cb3ecf4d28d4e6318d4538e45c50c87968527260d1cec4b5f62927670595c5ed3466f9228ba71e39d110a0e69c3c952b0912a6f69817fcc10ac617a2ba5c9142a04a47a932d0fb549bfb0344f7096d8ffa6ee6a22cda0cfcc0110706ec7059bf0ba56489a7791b52019abc1bb4e45273b9e59e5cc56a62f4898c064496ef889d9a625da32c5d43504bca3c2d76fe4e801c0116ac996bf64dd", 0xc1}, 0x8000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000680)={0x0, 0xe82, 0x9}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}]}, 0x40}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x8, &(0x7f0000000b80)=0x6, 0x4) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000c00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x38, 0x1000}}}}}}}, 0x0) openat(0xffffffffffffffff, 0x0, 0x42842, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xec, r7, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xec}}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts. [ 24.048532][ T24] audit: type=1400 audit(1793162320.870:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.051909][ T271] cgroup: Unknown subsys name 'net' [ 24.071306][ T24] audit: type=1400 audit(1793162320.870:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.098510][ T24] audit: type=1400 audit(1793162320.910:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.098954][ T271] cgroup: Unknown subsys name 'devices' [ 24.276190][ T271] cgroup: Unknown subsys name 'hugetlb' [ 24.281789][ T271] cgroup: Unknown subsys name 'rlimit' [ 24.422380][ T24] audit: type=1400 audit(1793162321.240:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.445711][ T24] audit: type=1400 audit(1793162321.240:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.470575][ T24] audit: type=1400 audit(1793162321.240:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.483772][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.502792][ T24] audit: type=1400 audit(1793162321.320:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.528260][ T24] audit: type=1400 audit(1793162321.320:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.553876][ T24] audit: type=1400 audit(1793162321.360:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.553887][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.588161][ T24] audit: type=1400 audit(1793162321.360:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.194827][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.201870][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.209566][ T281] device bridge_slave_0 entered promiscuous mode [ 25.219136][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.226284][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.233631][ T281] device bridge_slave_1 entered promiscuous mode [ 25.257330][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.264435][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.271781][ T280] device bridge_slave_0 entered promiscuous mode [ 25.285363][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.292424][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.300152][ T280] device bridge_slave_1 entered promiscuous mode [ 25.321231][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.328499][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.335970][ T279] device bridge_slave_0 entered promiscuous mode [ 25.356624][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.363688][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.371196][ T283] device bridge_slave_0 entered promiscuous mode [ 25.380614][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.387841][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.395305][ T283] device bridge_slave_1 entered promiscuous mode [ 25.401852][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.408971][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.416536][ T279] device bridge_slave_1 entered promiscuous mode [ 25.423114][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.430218][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.437762][ T282] device bridge_slave_0 entered promiscuous mode [ 25.447704][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.454809][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.462226][ T282] device bridge_slave_1 entered promiscuous mode [ 25.636051][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.643124][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.650445][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.657488][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.665774][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.672832][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.680140][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.687180][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.705720][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.712862][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.720165][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.727230][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.737810][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.744902][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.752166][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.759249][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.767631][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.774708][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.781969][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.789049][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.836391][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.844023][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.851681][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.859022][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.866726][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.873891][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.881172][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.888425][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.895714][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.902866][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.910189][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.919634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.927927][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.934988][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.966410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.974026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.983297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.991645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.999256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.007460][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.014503][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.021865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.030094][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.037148][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.044550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.052679][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.059736][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.067696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.075944][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.082964][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.090357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.097807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.106102][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.113123][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.120522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.128792][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.135862][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.143295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.151511][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.158543][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.166056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.174190][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.181272][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.205579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.213688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.221987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.232828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.241001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.249100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.257192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.265269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.273150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.281477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.289670][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.296848][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.304538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.312568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.320627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.328793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.336861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.345046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.352972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.361150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.377473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.386030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.403830][ T279] device veth0_vlan entered promiscuous mode [ 26.411890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.420558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.429010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.437247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.445488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.452924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.461165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.469287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.481820][ T279] device veth1_macvtap entered promiscuous mode [ 26.496186][ T280] device veth0_vlan entered promiscuous mode [ 26.504755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.512817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.520859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.529200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.537714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.545849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.553732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.562176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.570619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.578708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.586693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.594612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.602602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.611185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.619780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.627379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.635861][ T282] device veth0_vlan entered promiscuous mode [ 26.648360][ T283] device veth0_vlan entered promiscuous mode [ 26.660990][ T280] device veth1_macvtap entered promiscuous mode [ 26.668183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.676373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.683795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.691463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.699809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.711295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.719902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.734104][ T283] device veth1_macvtap entered promiscuous mode [ 26.744368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.752688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.761574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.770233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.779560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.789520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.798004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.809575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.818020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.826409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.835202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.851044][ T282] device veth1_macvtap entered promiscuous mode [ 26.859298][ T281] device veth0_vlan entered promiscuous mode [ 26.867536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.875554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.883577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.891207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.907598][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 26.924143][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.929171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.942995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.952920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.961373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.970107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.978839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.987535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.996001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.007851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.016189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.028674][ T281] device veth1_macvtap entered promiscuous mode [ 27.056063][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.067102][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.075745][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.084141][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.102171][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.170232][ T307] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 27.179702][ T307] FAT-fs (loop3): Filesystem has been set read-only [ 27.206740][ T319] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 27.255530][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.293576][ T324] Zero length message leads to an empty skb [ 27.407029][ T342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.474504][ T305] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 27.504372][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 27.545445][ T345] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 27.556425][ T345] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 27.566393][ T345] EXT4-fs (loop2): failed to open journal device unknown-block(11,8) -6 [ 27.584516][ T338] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.634531][ T5] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.645505][ T5] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.655510][ T5] usb 2-1: config 0 interface 0 has no altsetting 0 [ 27.662224][ T5] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 27.671712][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.674436][ T25] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 27.685068][ T5] usb 2-1: config 0 descriptor?? [ 27.694788][ T345] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.708127][ T345] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 27.719666][ T345] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.13: bad orphan inode 131083 [ 27.731359][ T345] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,nodioread_nolock,norecovery,,errors=continue [ 27.747494][ T345] overlayfs: upper fs needs to support d_type. [ 27.809395][ T282] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /4/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 27.824529][ T338] usb 1-1: Using ep0 maxpacket: 32 [ 27.834882][ T305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.964839][ T338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.975346][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 27.985528][ T338] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 28.014462][ T305] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 28.023700][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.032087][ T305] usb 5-1: Product: syz [ 28.036877][ T305] usb 5-1: Manufacturer: syz [ 28.041493][ T305] usb 5-1: SerialNumber: syz [ 28.049165][ T305] usb 5-1: config 0 descriptor?? [ 28.071427][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.078591][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.086179][ T351] device bridge_slave_0 entered promiscuous mode [ 28.093062][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.096243][ T305] cdc_ether 5-1:0.0: skipping garbage [ 28.100782][ T25] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 28.108421][ T305] usb 5-1: bad CDC descriptors [ 28.117148][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.122261][ T305] usb 5-1: unsupported MDLM descriptors [ 28.129057][ T25] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 28.145663][ T351] device bridge_slave_1 entered promiscuous mode [ 28.152323][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 28.154822][ T338] usb 1-1: New USB device found, idVendor=0499, idProduct=105a, bcdDevice= 0.40 [ 28.160031][ T25] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 28.168433][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.178105][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.193692][ T338] usb 1-1: Product: syz [ 28.198267][ T338] usb 1-1: Manufacturer: syz [ 28.202895][ T338] usb 1-1: SerialNumber: syz [ 28.208434][ T25] usb 4-1: config 0 descriptor?? [ 28.224377][ T340] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 28.274741][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.281828][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.289166][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.296228][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.309884][ T309] usb 5-1: USB disconnect, device number 2 [ 28.329786][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.337406][ T5] usbhid 2-1:0.0: can't add hid device: -71 [ 28.343444][ T5] usbhid: probe of 2-1:0.0 failed with error -71 [ 28.350093][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.355201][ T5] usb 2-1: USB disconnect, device number 2 [ 28.366424][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.378353][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.386618][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.393637][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.403585][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.411877][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.418938][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.433399][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.443155][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.451906][ T340] udc-core: couldn't find an available UDC or it's busy [ 28.459308][ T340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.475104][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.486640][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.494632][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.502683][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.510455][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.518916][ T351] device veth0_vlan entered promiscuous mode [ 28.530930][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.539314][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.549571][ T351] device veth1_macvtap entered promiscuous mode [ 28.557323][ T300] device bridge_slave_1 left promiscuous mode [ 28.563522][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.571046][ T338] usb 1-1: invalid MIDI in EP 0 [ 28.576758][ T338] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 28.583888][ T300] device bridge_slave_0 left promiscuous mode [ 28.591381][ T338] usb 1-1: USB disconnect, device number 2 [ 28.598186][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.606400][ T300] device veth1_macvtap left promiscuous mode [ 28.612397][ T300] device veth0_vlan left promiscuous mode [ 28.661083][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.668773][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.677224][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.689153][ T340] netlink: 136 bytes leftover after parsing attributes in process `syz.3.11'. [ 28.698505][ T340] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 28.715564][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.723804][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.733101][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.740257][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.747459][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.754592][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.761607][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.768649][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.775790][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.784492][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.791497][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.799007][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.806552][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.813726][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.821213][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.828584][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.835709][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.842687][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.853021][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.861144][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.868966][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.883317][ T362] ====================================================== [ 28.883317][ T362] WARNING: the mand mount option is being deprecated and [ 28.883317][ T362] will be removed in v5.15! [ 28.883317][ T362] ====================================================== [ 28.884495][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.921630][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.928904][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.936604][ T340] udc-core: couldn't find an available UDC or it's busy [ 28.944061][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.951371][ T340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.959095][ T25] elecom 0003:056E:010C.0001: unknown main item tag 0x0 [ 28.966433][ T362] EXT4-fs (loop1): Ignoring removed oldalloc option [ 28.973515][ T25] elecom 0003:056E:010C.0001: hidraw0: USB HID v0.08 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0 [ 28.984712][ T362] EXT4-fs (loop1): Ignoring removed orlov option [ 28.991575][ T25] usb 4-1: USB disconnect, device number 2 [ 28.992942][ T362] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 29.008410][ T362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e018, mo2=0002] [ 29.017104][ T362] System zones: 1-12 [ 29.021577][ T362] EXT4-fs (loop1): orphan cleanup on readonly fs [ 29.028289][ T362] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.17: bad orphan inode 267 [ 29.038593][ T362] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,orlov,discard,nogrpid,lazytime,errors=continue [ 29.081139][ T376] fido_id[376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 29.095719][ T362] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 5: comm syz.1.17: lblock 0 mapped to illegal pblock 5 (length 1) [ 29.096167][ T362] EXT4-fs warning (device loop1): dx_probe:796: inode #2: lblock 0: comm syz.1.17: error -117 reading directory block [ 29.109872][ T24] kauditd_printk_skb: 76 callbacks suppressed [ 29.109883][ T24] audit: type=1400 audit(1793162325.900:150): avc: denied { name_bind } for pid=361 comm="syz.1.17" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 29.153693][ T362] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 5: comm syz.1.17: lblock 0 mapped to illegal pblock 5 (length 1) [ 29.155873][ T378] exfat: Deprecated parameter 'utf8' [ 29.172910][ T362] EXT4-fs warning (device loop1): dx_probe:796: inode #2: lblock 0: comm syz.1.17: error -117 reading directory block [ 29.175444][ T338] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.188224][ T378] exfat: Deprecated parameter 'namecase' [ 29.198720][ T362] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #2: block 5: comm syz.1.17: lblock 0 mapped to illegal pblock 5 (length 1) [ 29.213278][ T362] EXT4-fs warning (device loop1): dx_probe:796: inode #2: lblock 0: comm syz.1.17: error -117 reading directory block [ 29.226649][ T378] exfat: Deprecated parameter 'namecase' [ 29.232582][ T378] exfat: Deprecated parameter 'namecase' [ 29.256964][ T378] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 29.369603][ T24] audit: type=1400 audit(1793162326.190:151): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.401867][ T24] audit: type=1400 audit(1793162326.220:152): avc: denied { mounton } for pid=361 comm="syz.1.17" path="/1/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.448146][ T368] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 29.459821][ T368] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 29.464496][ T384] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 29.471378][ T368] F2FS-fs (loop5): invalid crc value [ 29.480628][ T300] Bluetooth: hci0: Frame reassembly failed (-84) [ 29.492406][ T368] F2FS-fs (loop5): Found nat_bits in checkpoint [ 29.504358][ T338] usb 5-1: Using ep0 maxpacket: 16 [ 29.526552][ T368] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 29.533716][ T368] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 29.544455][ T384] EXT4-fs (loop0): Ignoring removed nobh option [ 29.550915][ T24] audit: type=1400 audit(1793162326.360:153): avc: denied { mounton } for pid=383 comm="syz.0.20" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.563871][ T384] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 29.583296][ T384] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 29.593401][ T384] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 29.603756][ T384] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 29.611777][ T384] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 29.619931][ T384] EXT4-fs (loop0): failed to initialize system zone (-117) [ 29.627329][ T384] EXT4-fs (loop0): mount failed [ 29.644363][ T338] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.657499][ T338] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.662752][ T24] audit: type=1400 audit(1793162326.450:154): avc: denied { read write } for pid=392 comm="syz.3.21" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.689964][ T24] audit: type=1400 audit(1793162326.450:155): avc: denied { open } for pid=392 comm="syz.3.21" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.713394][ T24] audit: type=1400 audit(1793162326.460:156): avc: denied { create } for pid=392 comm="syz.3.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.779843][ T400] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 29.874394][ T338] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.880177][ T24] audit: type=1400 audit(1793162326.700:157): avc: denied { write } for pid=399 comm="syz.3.22" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.893928][ T338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.912937][ T338] usb 5-1: Product: syz [ 29.917361][ T338] usb 5-1: Manufacturer: syz [ 29.922057][ T338] usb 5-1: SerialNumber: syz [ 29.928417][ T24] audit: type=1400 audit(1793162326.750:158): avc: denied { add_name } for pid=399 comm="syz.3.22" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.949035][ T24] audit: type=1400 audit(1793162326.750:159): avc: denied { associate } for pid=399 comm="syz.3.22" name="file7" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.132973][ T421] capability: warning: `syz.3.28' uses deprecated v2 capabilities in a way that may be insecure [ 30.180076][ T365] udc-core: couldn't find an available UDC or it's busy [ 30.191507][ T365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.408405][ T365] udc-core: couldn't find an available UDC or it's busy [ 30.415686][ T365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.424557][ T365] 9pnet: Insufficient options for proto=fd [ 30.474362][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.494363][ T304] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.584663][ T338] usb 5-1: 0:2 : does not exist [ 30.592067][ T338] usb 5-1: USB disconnect, device number 3 [ 30.724332][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 30.734354][ T304] usb 4-1: Using ep0 maxpacket: 16 [ 30.804809][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.894401][ T304] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.944523][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 30.955598][ T25] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 177, changing to 7 [ 30.974439][ T304] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 31.046736][ T437] SELinux: policydb magic number 0x65736162 does not match expected magic number 0xf97cff8c [ 31.057049][ T437] SELinux: failed to load policy [ 31.114426][ T360] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 31.135048][ T25] usb 2-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice= 0.40 [ 31.144249][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.144893][ T304] usb 4-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 31.154722][ T25] usb 2-1: Product: syz [ 31.166032][ T25] usb 2-1: Manufacturer: syz [ 31.170659][ T25] usb 2-1: SerialNumber: syz [ 31.171902][ T304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.183838][ T304] usb 4-1: Product: ᐁ [ 31.188098][ T304] usb 4-1: Manufacturer: 曁纈ॲ僑鹊臱滒冽涏補콣궨貸餿⯨溧讓Ꚓ茲딎츏邠䷆⋸䪈㉽ঀ埢⑐㯥⿺՝售₡␛ﾣ좓Ô룞ᔃ㑱८贖籹쩧稌驌ꩾﲖꘆ蛂ꂋⅻ卯ﳁ֖엤ꂕ鷄幉뫻밪哉Ԗ昱㖯ᐸ酙섏謬䍛铷㙿ՠ [ 31.213659][ T304] usb 4-1: SerialNumber: ࠧ [ 31.234434][ T428] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 31.504821][ T309] Bluetooth: hci0: command 0x1003 tx timeout [ 31.510892][ T385] Bluetooth: hci0: sending frame failed (-49) [ 31.524384][ T360] usb 6-1: unable to get BOS descriptor or descriptor too short [ 31.624452][ T360] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.635433][ T360] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.644611][ T360] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 31.656530][ T360] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 31.669973][ T426] udc-core: couldn't find an available UDC or it's busy [ 31.677307][ T360] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 31.688331][ T426] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.697715][ T360] usb 6-1: config 1 interface 1 has no altsetting 0 [ 31.774526][ T25] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.794470][ T25] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 31.824447][ T304] usb 4-1: USB disconnect, device number 3 [ 31.843263][ T25] usb 2-1: USB disconnect, device number 3 [ 31.980584][ T360] usb 6-1: string descriptor 0 read error: -22 [ 31.991623][ T360] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 32.004221][ T360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.048993][ T441] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.055970][ T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 32.090098][ T441] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 32.099937][ T441] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3357: comm syz.3.35: Allocating blocks 42-43 which overlap fs metadata [ 32.116084][ T441] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.35: Failed to acquire dquot type 0 [ 32.127683][ T441] EXT4-fs (loop3): 1 truncate cleaned up [ 32.133368][ T441] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue [ 32.308154][ T441] ip_tables: iptables: counters copy to user failed while replacing table [ 32.524395][ T305] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.698180][ T463] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 32.714815][ T463] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.764362][ T305] usb 2-1: Using ep0 maxpacket: 16 [ 32.834393][ T360] usb 6-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 32.854506][ T360] usb 6-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 32.864444][ T360] usb 6-1: Warning! Unlikely big volume range (=20554), cval->res is probably wrong. [ 32.873936][ T360] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = -20554/0/1 [ 32.904470][ T305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.912867][ T360] usb 6-1: USB disconnect, device number 2 [ 33.833407][ T25] Bluetooth: hci0: command 0x1001 tx timeout [ 33.839845][ T385] Bluetooth: hci0: sending frame failed (-49) [ 34.019200][ T305] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 34.020218][ T280] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /12/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 34.028278][ T305] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 34.124346][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 34.124360][ T24] audit: type=1400 audit(1793162330.940:196): avc: denied { ioctl } for pid=471 comm="syz.3.42" path="socket:[16153]" dev="sockfs" ino=16153 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.178297][ T470] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 34.186399][ T470] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 34.194857][ T470] F2FS-fs (loop5): fault_type options not supported [ 34.203351][ T470] F2FS-fs (loop5): invalid crc value [ 34.209729][ T470] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 34.231328][ T24] audit: type=1400 audit(1793162331.050:197): avc: denied { write } for pid=471 comm="syz.3.42" name="file1" dev="loop3" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.254428][ T305] usb 2-1: New USB device found, idVendor=0582, idProduct=0156, bcdDevice= 0.40 [ 34.273733][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.283818][ T305] usb 2-1: Product: syz [ 34.293911][ T305] usb 2-1: Manufacturer: syz [ 34.298949][ T305] usb 2-1: SerialNumber: syz [ 34.304260][ T24] audit: type=1400 audit(1793162331.050:198): avc: denied { open } for pid=471 comm="syz.3.42" name="file1" dev="loop3" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.329666][ T24] audit: type=1400 audit(1793162331.160:199): avc: denied { mounton } for pid=471 comm="syz.3.42" path="/13/file0/bus" dev="loop3" ino=1048657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.353097][ T470] F2FS-fs (loop5): Start checkpoint disabled! [ 34.360728][ T470] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 34.368223][ T470] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 34.376374][ T475] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 34.389148][ T24] audit: type=1400 audit(1793162331.210:200): avc: denied { read write open } for pid=469 comm="syz.5.41" path="/5/file0/file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.415164][ T472] exFAT-fs (loop3): hint_cluster is invalid (17) [ 34.422503][ T24] audit: type=1400 audit(1793162331.240:201): avc: denied { read } for pid=471 comm="syz.3.42" name="file1" dev="loop3" ino=1048656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.445194][ T393] attempt to access beyond end of device [ 34.445194][ T393] loop5: rw=2049, want=45104, limit=40427 [ 34.532577][ T24] audit: type=1400 audit(1793162331.350:202): avc: denied { unlink } for pid=280 comm="syz-executor" name="file0" dev="loop3" ino=1048663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.574566][ T24] audit: type=1400 audit(1793162331.350:203): avc: denied { rmdir } for pid=280 comm="syz-executor" name="file0" dev="loop3" ino=1048661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.624625][ T24] audit: type=1400 audit(1793162331.350:204): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.655865][ T24] audit: type=1400 audit(1793162331.430:205): avc: denied { bind } for pid=476 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.664937][ T487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'. [ 34.694704][ T487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 34.716006][ T487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 34.725321][ T496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.44'. [ 34.734264][ T487] netlink: 108 bytes leftover after parsing attributes in process `syz.3.44'. [ 34.743465][ T496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 34.753098][ T496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 34.762018][ T496] netlink: 108 bytes leftover after parsing attributes in process `syz.3.44'. [ 34.786183][ T485] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 34.796859][ T485] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.814428][ T305] usb 2-1: 0:2 : does not exist [ 34.833467][ T305] usb 2-1: USB disconnect, device number 4 [ 35.042374][ T485] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.45: path /7/file1: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 35.342573][ T503] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 35.351727][ T503] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.377645][ T503] netlink: 40 bytes leftover after parsing attributes in process `syz.5.46'. [ 35.394999][ T503] netlink: 40 bytes leftover after parsing attributes in process `syz.5.46'. [ 35.403835][ T503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 35.411095][ T503] IPv6: NLM_F_CREATE should be set when creating new route [ 35.532813][ T518] process 'syz.3.50' launched './file1' with NULL argv: empty string added [ 35.624878][ T521] exfat: Deprecated parameter 'utf8' [ 35.632741][ T521] exfat: Deprecated parameter 'utf8' [ 35.639317][ T521] exfat: Deprecated parameter 'utf8' [ 35.644963][ T521] exfat: Bad value for 'gid' [ 35.714372][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.826647][ T529] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 35.837035][ T529] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 35.850504][ T529] FAULT_INJECTION: forcing a failure. [ 35.850504][ T529] name failslab, interval 1, probability 0, space 0, times 1 [ 35.863537][ T529] CPU: 0 PID: 529 Comm: syz.3.54 Not tainted syzkaller #0 [ 35.870669][ T529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.880765][ T529] Call Trace: [ 35.884089][ T529] __dump_stack+0x21/0x24 [ 35.888439][ T529] dump_stack_lvl+0x1a7/0x208 [ 35.893130][ T529] ? show_regs_print_info+0x18/0x18 [ 35.894469][ T309] Bluetooth: hci0: command 0x1009 tx timeout [ 35.898365][ T529] dump_stack+0x15/0x1c [ 35.908496][ T529] should_fail+0x3ab/0x500 [ 35.912938][ T529] ? security_inode_alloc+0x33/0x110 [ 35.918246][ T529] __should_failslab+0xa4/0xe0 [ 35.923037][ T529] should_failslab+0x9/0x20 [ 35.927564][ T529] kmem_cache_alloc+0x3d/0x2d0 [ 35.932370][ T529] security_inode_alloc+0x33/0x110 [ 35.937509][ T529] inode_init_always+0x725/0x9c0 [ 35.942469][ T529] new_inode_pseudo+0x91/0x210 [ 35.947251][ T529] new_inode+0x28/0x1e0 [ 35.951433][ T529] shmem_get_inode+0x343/0x9d0 [ 35.956215][ T529] __shmem_file_setup+0x113/0x2b0 [ 35.961270][ T529] shmem_file_setup+0x2f/0x40 [ 35.964460][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 35.966004][ T529] __se_sys_memfd_create+0x1de/0x3a0 [ 35.976366][ T529] __x64_sys_memfd_create+0x5b/0x70 [ 35.981583][ T529] do_syscall_64+0x31/0x40 [ 35.986037][ T529] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.991947][ T529] RIP: 0033:0x7f88c1100559 [ 35.996379][ T529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.016014][ T529] RSP: 002b:00007f88bfb57e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 36.024547][ T529] RAX: ffffffffffffffda RBX: 00000000000014f5 RCX: 00007f88c1100559 [ 36.032546][ T529] RDX: 00007f88bfb57ee0 RSI: 0000000000000000 RDI: 00007f88c1197d00 [ 36.040540][ T529] RBP: 0000200000004740 R08: 00000000ffffffff R09: 0000000000000003 [ 36.048532][ T529] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000ec0 [ 36.056525][ T529] R13: 00007f88bfb57ee0 R14: 00007f88bfb57ea0 R15: 0000200000000f00 [ 36.084451][ T25] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 36.092742][ T25] usb 2-1: config 0 has no interface number 0 [ 36.099345][ T25] usb 2-1: config 0 interface 184 has no altsetting 0 [ 36.264451][ T25] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 36.275692][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.283701][ T25] usb 2-1: Product: syz [ 36.289082][ T25] usb 2-1: Manufacturer: syz [ 36.293933][ T25] usb 2-1: SerialNumber: syz [ 36.303499][ T25] usb 2-1: config 0 descriptor?? [ 36.346433][ T25] smsc75xx v1.0.0 [ 36.924360][ T305] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 37.004433][ T25] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 37.016352][ T25] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.284466][ T25] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 37.295953][ T25] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 37.305808][ T25] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 37.315470][ T25] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 37.325834][ T25] usb 2-1: USB disconnect, device number 5 [ 37.344425][ T305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.384884][ T305] usb 4-1: not running at top speed; connect to a high speed hub [ 37.464419][ T305] usb 4-1: config index 0 descriptor too short (expected 61365, got 181) [ 37.473008][ T305] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 37.481792][ T305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.492256][ T305] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 37.614438][ T305] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 37.623601][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 37.631896][ T305] usb 4-1: Product: syz [ 37.636228][ T305] usb 4-1: Manufacturer: syz [ 37.685804][ T305] uvcvideo: Found UVC 1.00 device syz (8086:0ad2) [ 37.692725][ T305] uvcvideo: No streaming interface found for terminal 2. [ 37.703632][ T305] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input4 [ 37.825894][ T547] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 37.837800][ T547] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #16: comm syz.5.58: invalid indirect mapped block 32768 (level 2) [ 37.852074][ T547] EXT4-fs (loop5): 1 orphan inode deleted [ 37.858079][ T547] EXT4-fs (loop5): 1 truncate cleaned up [ 37.863816][ T547] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 37.894047][ T305] usb 4-1: USB disconnect, device number 4 [ 37.991803][ T556] capability: warning: `syz.1.61' uses 32-bit capabilities (legacy support in use) [ 38.691004][ T561] F2FS-fs (loop1): invalid crc value [ 38.733136][ T561] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.840442][ T561] F2FS-fs (loop1): Start checkpoint disabled! [ 38.868437][ T561] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 39.404886][ T594] EXT4-fs (loop1): invalid inodes per group: 1 [ 39.404886][ T594] [ 39.447622][ T600] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 39.470901][ T611] overlayfs: failed to get inode (-116) [ 39.476591][ T611] overlayfs: failed to get inode (-116) [ 39.482215][ T611] overlayfs: failed to get inode (-116) [ 39.487953][ T611] overlayfs: failed to get inode (-116) [ 39.516292][ T597] cgroup: fork rejected by pids controller in /syz5 [ 39.534599][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 39.534612][ T24] audit: type=1400 audit(1793162336.270:241): avc: denied { unlink } for pid=596 comm="syz.5.68" name="#3" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.597688][ T24] audit: type=1400 audit(1793162336.390:242): avc: denied { read write } for pid=631 comm="syz.3.69" name="trace_clock" dev="tracefs" ino=12660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.780654][ T24] audit: type=1400 audit(1793162336.600:243): avc: denied { setopt } for pid=656 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.957624][ T632] binder: 631:632 ioctl 4018620d 0 returned -22 [ 40.035163][ T24] audit: type=1400 audit(1793162336.780:244): avc: denied { read } for pid=631 comm="syz.3.69" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.094243][ T24] audit: type=1400 audit(1793162336.780:245): avc: denied { open } for pid=631 comm="syz.3.69" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.157540][ T632] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 40.164938][ T632] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 40.192063][ T632] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.199630][ T632] EXT4-fs (loop3): 1 truncate cleaned up [ 40.205376][ T632] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000200,inlinecrypt,nolazytime,nomblk_io_submit,max_dir_size_kb=0x0000000000000000,,errors=continue [ 40.334335][ T688] exFAT-fs (loop0): invalid boot record signature [ 40.342045][ T24] audit: type=1400 audit(1793162336.780:246): avc: denied { ioctl } for pid=631 comm="syz.3.69" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.389911][ T688] exFAT-fs (loop0): failed to read boot sector [ 40.429447][ T688] exFAT-fs (loop0): failed to recognize exfat type [ 40.444876][ T24] audit: type=1400 audit(1793162336.910:247): avc: denied { write } for pid=658 comm="syz.0.71" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.487858][ T24] audit: type=1400 audit(1793162336.910:248): avc: denied { read } for pid=658 comm="syz.0.71" path="socket:[17554]" dev="sockfs" ino=17554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.537015][ T24] audit: type=1400 audit(1793162337.140:249): avc: denied { write } for pid=684 comm="syz.5.75" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.583630][ T24] audit: type=1400 audit(1793162337.210:250): avc: denied { create } for pid=691 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.624450][ T360] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 40.725626][ T688] exFAT-fs (loop0): invalid boot record signature [ 40.734466][ T688] exFAT-fs (loop0): failed to read boot sector [ 40.742285][ T688] exFAT-fs (loop0): failed to recognize exfat type [ 40.858407][ T688] exFAT-fs (loop0): invalid boot record signature [ 40.866022][ T688] exFAT-fs (loop0): failed to read boot sector [ 40.873664][ T688] exFAT-fs (loop0): failed to recognize exfat type [ 40.904968][ T705] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.925666][ T705] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 40.936396][ T705] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3357: comm syz.3.77: Allocating blocks 42-43 which overlap fs metadata [ 40.950753][ T705] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.77: Failed to acquire dquot type 0 [ 40.962069][ T705] EXT4-fs (loop3): 1 truncate cleaned up [ 40.967795][ T705] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue [ 41.009247][ T688] exFAT-fs (loop0): invalid boot record signature [ 41.024516][ T688] exFAT-fs (loop0): failed to read boot sector [ 41.031169][ T688] exFAT-fs (loop0): failed to recognize exfat type [ 41.044412][ T360] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.054903][ T360] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.102855][ T688] exFAT-fs (loop0): invalid boot record signature [ 41.112537][ T688] exFAT-fs (loop0): failed to read boot sector [ 41.120539][ T721] mmap: syz.3.79 (721): VmData 29212672 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 41.134373][ T360] usb 6-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 41.144144][ T688] exFAT-fs (loop0): failed to recognize exfat type [ 41.150717][ T360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 41.150728][ T360] usb 6-1: SerialNumber: syz [ 41.213403][ T725] tc_dump_action: action bad kind [ 41.464375][ T305] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 41.481178][ T685] attempt to access beyond end of device [ 41.481178][ T685] loop5: rw=2049, want=544, limit=256 [ 41.493625][ T685] attempt to access beyond end of device [ 41.493625][ T685] loop5: rw=2049, want=1024, limit=256 [ 41.506445][ T685] attempt to access beyond end of device [ 41.506445][ T685] loop5: rw=2049, want=1508, limit=256 [ 41.715012][ T360] usb 6-1: 0:2 : does not exist [ 41.724182][ T303] udevd[303]: incorrect ext4 checksum on /dev/loop1 [ 41.731405][ T360] usb 6-1: USB disconnect, device number 3 [ 41.811710][ T728] F2FS-fs (loop0): fault_injection options not supported [ 41.819054][ T728] F2FS-fs (loop0): fault_type options not supported [ 41.904441][ T305] usb 4-1: not running at top speed; connect to a high speed hub [ 41.944676][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.994384][ T305] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 42.004792][ T305] usb 4-1: config 14 has 0 interfaces, different from the descriptor's value: 1 [ 42.135330][ T338] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 42.174406][ T305] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=c1.97 [ 42.188295][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.196927][ T305] usb 4-1: Product: ᠁ [ 42.201140][ T305] usb 4-1: Manufacturer: 《 [ 42.205958][ T305] usb 4-1: SerialNumber: syz [ 42.306617][ T756] EXT4-fs (loop1): Mount option "nojournal_checksum" incompatible with ext3 [ 42.415984][ T752] EXT4-fs (loop5): Unrecognized mount option "obj_type=auto_da_alloc" or missing value [ 42.428852][ T756] device syz_tun entered promiscuous mode [ 42.440387][ T755] device syz_tun left promiscuous mode [ 42.508191][ T305] usb 4-1: USB disconnect, device number 5 [ 42.524448][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 42.537343][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 42.564457][ T338] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 42.584364][ T338] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 42.721655][ T767] __nla_validate_parse: 1 callbacks suppressed [ 42.721666][ T767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.94'. [ 42.774412][ T338] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.785145][ T309] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 42.793719][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.808659][ T770] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 42.814031][ T338] usb 1-1: Product: syz [ 42.834921][ T338] usb 1-1: Manufacturer: syz [ 42.839682][ T338] usb 1-1: SerialNumber: syz [ 42.864419][ T744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 42.895667][ T338] cdc_mbim 1-1:1.0: skipping garbage [ 43.037684][ T773] FAT-fs (loop3): error, clusters badly computed (1 != 0) [ 43.055839][ T773] FAT-fs (loop3): Filesystem has been set read-only [ 43.065951][ T773] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 43.095458][ T744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 43.102751][ T744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 43.142337][ T773] kvm [772]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x0 [ 43.152693][ T773] kvm [772]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x0 [ 43.184476][ T309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.264465][ T309] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 8 [ 43.524383][ T309] usb 2-1: string descriptor 0 read error: -22 [ 43.530843][ T309] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 43.540361][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.574528][ T304] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 43.584443][ T760] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 43.605051][ T309] usb 2-1: selecting invalid altsetting 1 [ 43.624465][ T309] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 43.649968][ T792] mmap: syz.3.101 (792) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 43.774666][ T744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 43.781680][ T744] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 43.794466][ T338] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 43.854453][ T304] usb 6-1: device descriptor read/64, error -71 [ 43.944420][ T305] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 44.188451][ T744] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 44.207066][ T744] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.224439][ T744] F2FS-fs (loop0): invalid crc value [ 44.230910][ T744] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 44.244427][ T304] usb 6-1: device descriptor read/64, error -71 [ 44.268373][ T744] F2FS-fs (loop0): recover fsync data on readonly fs [ 44.275358][ T744] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 44.282024][ T744] F2FS-fs (loop0): checkpoint=disable on readonly fs [ 44.304386][ T305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.317627][ T305] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 44.404929][ T20] usb 2-1: USB disconnect, device number 6 [ 44.475182][ T338] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 44.483753][ T338] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, f6:69:e8:0e:78:e0 [ 44.494576][ T305] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 44.503640][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.514466][ T304] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 44.542583][ T338] usb 1-1: USB disconnect, device number 3 [ 44.548816][ T338] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 44.557825][ T305] usb 4-1: Product: syz [ 44.562059][ T305] usb 4-1: Manufacturer: syz [ 44.567302][ T305] usb 4-1: SerialNumber: syz [ 44.606723][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 44.606737][ T24] audit: type=1400 audit(1793162341.430:268): avc: denied { read } for pid=808 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.636357][ T305] usb-storage 4-1:1.0: USB Mass Storage device detected [ 44.655805][ T305] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 44.671407][ T305] scsi host1: usb-storage 4-1:1.0 [ 44.691849][ T24] audit: type=1400 audit(1793162341.470:269): avc: denied { open } for pid=808 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.727533][ T24] audit: type=1400 audit(1793162341.470:270): avc: denied { getattr } for pid=808 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.771063][ T24] audit: type=1400 audit(1793162341.590:271): avc: denied { write } for pid=807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.798699][ T24] audit: type=1400 audit(1793162341.590:272): avc: denied { add_name } for pid=807 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.821291][ T304] usb 6-1: device descriptor read/64, error -71 [ 44.842339][ T305] usb 4-1: USB disconnect, device number 6 [ 44.851619][ T24] audit: type=1400 audit(1793162341.590:273): avc: denied { create } for pid=807 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.895187][ T24] audit: type=1400 audit(1793162341.590:274): avc: denied { write } for pid=807 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wwan0.link" dev="tmpfs" ino=1104 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.923339][ T24] audit: type=1400 audit(1793162341.590:275): avc: denied { append } for pid=807 comm="dhcpcd-run-hook" name="resolv.conf.wwan0.link" dev="tmpfs" ino=1104 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 44.948374][ T24] audit: type=1400 audit(1793162341.660:276): avc: denied { remove_name } for pid=821 comm="rm" name="resolv.conf.wwan0.link" dev="tmpfs" ino=1104 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.971989][ T24] audit: type=1400 audit(1793162341.660:277): avc: denied { unlink } for pid=821 comm="rm" name="resolv.conf.wwan0.link" dev="tmpfs" ino=1104 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.064383][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 45.224369][ T304] usb 6-1: device descriptor read/64, error -71 [ 45.344488][ T304] usb usb6-port1: attempt power cycle [ 45.400167][ T846] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 45.411952][ T317] udevd[317]: incorrect ext4 checksum on /dev/loop3 [ 45.422497][ T317] udevd[317]: incorrect ext4 checksum on /dev/loop3 [ 45.474372][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.513683][ T846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 45.564464][ T20] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 45.619188][ T857] 9pnet: p9_fd_create_tcp (857): problem connecting socket to 127.0.0.1 [ 45.754355][ T304] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 45.754695][ T20] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 45.771025][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.794331][ T20] usb 2-1: Product: syz [ 45.870731][ T20] usb 2-1: Manufacturer: syz [ 45.875596][ T20] usb 2-1: SerialNumber: syz [ 45.914935][ T877] xt_hashlimit: size too large, truncated to 1048576 [ 45.924458][ T304] usb 6-1: device descriptor read/8, error -71 [ 46.004569][ T880] netlink: 'syz.3.112': attribute type 9 has an invalid length. [ 46.012287][ T880] netlink: 'syz.3.112': attribute type 7 has an invalid length. [ 46.019988][ T880] netlink: 'syz.3.112': attribute type 8 has an invalid length. [ 46.032265][ T880] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 46.149322][ T20] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 46.350590][ T883] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 46.370956][ T886] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 46.406508][ T883] EXT4-fs (loop5): 1 truncate cleaned up [ 46.422350][ T883] EXT4-fs (loop5): mounted filesystem without journal. Opts: acl,errors=remount-ro, [ 46.454407][ T304] usb 6-1: device descriptor read/8, error -71 [ 46.508396][ T889] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.522361][ T889] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.530912][ T896] overlayfs: missing 'lowerdir' [ 46.537286][ T889] device bridge_slave_0 entered promiscuous mode [ 46.547307][ T896] netlink: 40 bytes leftover after parsing attributes in process `syz.5.117'. [ 46.556644][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.574370][ T889] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.581781][ T905] overlayfs: missing 'lowerdir' [ 46.588600][ T889] device bridge_slave_1 entered promiscuous mode [ 46.603891][ T914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.117'. [ 46.634422][ T309] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 46.670114][ T920] netlink: 'syz.5.119': attribute type 4 has an invalid length. [ 46.680205][ T918] netlink: 'syz.5.119': attribute type 4 has an invalid length. [ 46.701624][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.708731][ T889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.716084][ T889] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.723124][ T889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.749630][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.757898][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.766089][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.777176][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.791143][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.798258][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.812453][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.813693][ T806] udc-core: couldn't find an available UDC or it's busy [ 46.821307][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.834656][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.837891][ T806] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 46.857861][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.870952][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.876138][ T20] usb 2-1: invalid uac2 rates [ 46.884140][ T20] usb 2-1: invalid uac2 rates [ 46.901559][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.915084][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.926675][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.938683][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.949334][ T889] device veth0_vlan entered promiscuous mode [ 46.962746][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.975901][ T889] device veth1_macvtap entered promiscuous mode [ 46.987285][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.006525][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.055606][ T393] device bridge_slave_1 left promiscuous mode [ 47.061791][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.069140][ T309] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.078390][ T939] udc-core: couldn't find an available UDC or it's busy [ 47.080841][ T806] udc-core: couldn't find an available UDC or it's busy [ 47.088872][ T939] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.094533][ T806] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.109223][ T393] device bridge_slave_0 left promiscuous mode [ 47.115805][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.128158][ T393] device veth1_macvtap left promiscuous mode [ 47.134506][ T393] device veth0_vlan left promiscuous mode [ 47.165424][ T945] 9pnet: p9_fd_create_tcp (945): problem connecting socket to 127.0.0.1 [ 47.176534][ T309] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 47.204811][ T309] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 109, changing to 10 [ 47.404815][ T20] usb 2-1: clock source 0 is not valid, cannot use [ 47.455471][ T947] EXT4-fs (loop6): orphan cleanup on readonly fs [ 47.462363][ T947] EXT4-fs warning (device loop6): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.477556][ T947] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 47.484324][ T947] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.115: couldn't read orphan inode 26 (err -116) [ 47.497106][ T309] usb 1-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 47.507007][ T947] EXT4-fs (loop6): Remounting filesystem read-only [ 47.513935][ T947] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro, [ 47.523608][ T20] usb 2-1: 2:1: cannot get freq (v2/v3): err -32 [ 47.530283][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.538669][ T309] usb 1-1: Product: syz [ 47.542869][ T309] usb 1-1: Manufacturer: syz [ 47.547740][ T309] usb 1-1: SerialNumber: syz [ 47.574579][ T879] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 47.614661][ T20] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 47.662652][ T20] usb 2-1: USB disconnect, device number 7 [ 47.741057][ T951] EXT4-fs (loop5): Unrecognized mount option "euid=00000000000000000000" or missing value [ 47.856423][ T951] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 47.865487][ T951] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.906822][ T951] fs-verity (loop5, inode 13): Unknown hash algorithm number: 31 [ 47.964416][ T309] usb 1-1: MIDIStreaming interface descriptor not found [ 47.982025][ T309] usb 1-1: USB disconnect, device number 4 [ 47.997009][ T956] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.015591][ T956] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 48.025109][ T956] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3357: comm syz.3.123: Allocating blocks 42-43 which overlap fs metadata [ 48.039014][ T956] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.123: Failed to acquire dquot type 0 [ 48.050763][ T956] EXT4-fs (loop3): 1 truncate cleaned up [ 48.056647][ T956] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue [ 48.184790][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.194802][ T20] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 48.269967][ T970] device vlan0 entered promiscuous mode [ 48.485830][ T990] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 48.502079][ T990] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.584391][ T20] usb 7-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 48.594964][ T998] raw_sendmsg: syz.5.129 forgot to set AF_INET. Fix it! [ 48.606315][ T20] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 48.619165][ T20] usb 7-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 48.628518][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.637805][ T20] usb 7-1: config 0 descriptor?? [ 48.855526][ T990] fuse: Bad value for 'user_id' [ 49.075636][ T990] fs-verity: sha512 using implementation "sha512-avx2" [ 49.084933][ T990] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -28 [ 49.624040][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 49.624076][ T24] audit: type=1326 audit(1793162346.440:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.1.131" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff2eea1fd8e code=0x7ffc0000 [ 49.656805][ T24] audit: type=1326 audit(1793162346.440:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.1.131" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff2eea1fd8e code=0x7ffc0000 [ 49.681504][ T24] audit: type=1326 audit(1793162346.460:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.1.131" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eea5f559 code=0x7ffc0000 [ 49.706476][ T24] audit: type=1326 audit(1793162346.460:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.1.131" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2eea5f559 code=0x7ffc0000 [ 49.731420][ T24] audit: type=1326 audit(1793162346.540:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.1.131" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff2eea5e3c7 code=0x7ffc0000 [ 49.731539][ T1007] EXT4-fs (loop1): Ignoring removed oldalloc option [ 49.756980][ T24] audit: type=1326 audit(1793162346.540:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.1.131" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff2eea607ca code=0x7ffc0000 [ 49.762802][ T1007] EXT4-fs (loop1): Ignoring removed oldalloc option [ 49.787865][ T352] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 49.794153][ T1007] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.826629][ T1007] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,bsddf,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue [ 49.845186][ T24] audit: type=1326 audit(1793162346.670:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.1.131" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2eea1fd8e code=0x7ffc0000 [ 49.894421][ T24] audit: type=1326 audit(1793162346.670:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.1.131" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff2eea5d997 code=0x7ffc0000 [ 49.923316][ T1014] udc-core: couldn't find an available UDC or it's busy [ 49.930600][ T1014] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.938321][ T24] audit: type=1326 audit(1793162346.670:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.1.131" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2eea1fd8e code=0x7ffc0000 [ 49.966304][ T24] audit: type=1326 audit(1793162346.670:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1002 comm="syz.1.131" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2eea5f1eb code=0x7ffc0000 [ 50.155844][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.162962][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.171082][ T1021] device bridge_slave_0 entered promiscuous mode [ 50.177745][ T1011] F2FS-fs (loop5): invalid crc value [ 50.182106][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.189146][ T1011] F2FS-fs (loop5): Found nat_bits in checkpoint [ 50.197101][ T1030] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 50.211272][ T1030] overlayfs: filesystem on './bus' not supported as upperdir [ 50.220325][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.231266][ T1021] device bridge_slave_1 entered promiscuous mode [ 50.252049][ T1011] F2FS-fs (loop5): Start checkpoint disabled! [ 50.259114][ T1011] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 50.310911][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.318022][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.325372][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.332421][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.340146][ T352] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.366374][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.374011][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.381826][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.390643][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.399102][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.406183][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.422525][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.430766][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.435817][ T352] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.437840][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.461181][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.473314][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.490998][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.502992][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.511305][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.519045][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.530107][ T1021] device veth0_vlan entered promiscuous mode [ 50.536428][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 50.548806][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.558281][ T1021] device veth1_macvtap entered promiscuous mode [ 50.564705][ T352] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 50.573900][ T352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 50.582220][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.590955][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.599108][ T352] usb 4-1: Product: syz [ 50.603342][ T352] usb 4-1: Manufacturer: syz [ 50.648220][ T1036] device syzkaller0 entered promiscuous mode [ 50.681701][ T352] uvcvideo: Unknown video format 00000000-0000-0000-0000-000000000000 [ 50.690447][ T352] uvcvideo: Found UVC 1.00 device syz (8086:0ad2) [ 50.713392][ T48] attempt to access beyond end of device [ 50.713392][ T48] loop5: rw=2049, want=40976, limit=40427 [ 50.784417][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 50.817617][ T1040] 9pnet: Insufficient options for proto=fd [ 50.924649][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.954611][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.019934][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 51.106884][ T305] usb 7-1: USB disconnect, device number 2 [ 51.118438][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 51.128757][ T1042] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.139067][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.147146][ T1042] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 51.156115][ T1042] ================================================================== [ 51.159217][ T25] usb 2-1: config 0 descriptor?? [ 51.164221][ T1042] BUG: KASAN: use-after-free in __ext4_iget+0x378/0x44e0 [ 51.164282][ T1042] Read of size 8 at addr ffff88811c369ee8 by task syz.5.139/1042 [ 51.183900][ T1042] [ 51.186233][ T1042] CPU: 0 PID: 1042 Comm: syz.5.139 Not tainted syzkaller #0 [ 51.193502][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.203551][ T1042] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 51.206851][ T1042] __dump_stack+0x21/0x24 [ 51.211205][ T1042] dump_stack_lvl+0x1a7/0x208 [ 51.215907][ T1042] ? show_regs_print_info+0x18/0x18 [ 51.221134][ T1042] ? thaw_kernel_threads+0x220/0x220 [ 51.226437][ T1042] ? _raw_spin_lock+0x94/0xf0 [ 51.231142][ T1042] print_address_description+0x7f/0x2c0 [ 51.236712][ T1042] ? __ext4_iget+0x378/0x44e0 [ 51.241446][ T1042] kasan_report+0x100/0x140 [ 51.245976][ T1042] ? __ext4_iget+0x378/0x44e0 [ 51.250679][ T1042] __asan_report_load8_noabort+0x14/0x20 [ 51.256344][ T1042] __ext4_iget+0x378/0x44e0 [ 51.260881][ T1042] ? __kasan_check_write+0x14/0x20 [ 51.266021][ T1042] ? _raw_write_trylock+0x150/0x150 [ 51.271242][ T1042] ? __proc_create+0x581/0x8f0 [ 51.276036][ T1042] ? _raw_write_trylock+0x150/0x150 [ 51.281261][ T1042] ? ext4_get_projid+0x140/0x140 [ 51.286234][ T1042] ? _raw_write_unlock+0x2b/0x60 [ 51.291197][ T1042] ? proc_register+0x380/0x530 [ 51.295983][ T1042] ext4_enable_quotas+0x338/0x6d0 [ 51.301037][ T1042] ? ext4_register_sysfs+0x251/0x290 [ 51.306350][ T1042] ext4_fill_super+0x84cc/0x8d90 [ 51.311344][ T1042] ? ext4_mount+0x40/0x40 [ 51.315703][ T1042] ? vscnprintf+0x80/0x80 [ 51.320060][ T1042] ? set_blocksize+0x1eb/0x3a0 [ 51.324853][ T1042] ? sb_set_blocksize+0xaa/0xf0 [ 51.329732][ T1042] mount_bdev+0x26a/0x380 [ 51.334096][ T1042] ? ext4_mount+0x40/0x40 [ 51.338480][ T1042] ext4_mount+0x34/0x40 [ 51.342699][ T1042] legacy_get_tree+0xed/0x190 [ 51.347528][ T1042] ? ext4_chksum+0x180/0x180 [ 51.352151][ T1042] vfs_get_tree+0x89/0x260 [ 51.356597][ T1042] do_new_mount+0x25a/0xa30 [ 51.361126][ T1042] path_mount+0x581/0xca0 [ 51.365483][ T1042] __se_sys_mount+0x320/0x390 [ 51.370189][ T1042] ? __x64_sys_mount+0xd0/0xd0 [ 51.374987][ T1042] ? debug_smp_processor_id+0x17/0x20 [ 51.380388][ T1042] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 51.386480][ T1042] __x64_sys_mount+0xbf/0xd0 [ 51.391096][ T1042] do_syscall_64+0x31/0x40 [ 51.395539][ T1042] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.401447][ T1042] RIP: 0033:0x7fa42133e7ca [ 51.405887][ T1042] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.425512][ T1042] RSP: 002b:00007fa41fd94e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.433952][ T1042] RAX: ffffffffffffffda RBX: 00007fa41fd94ee0 RCX: 00007fa42133e7ca [ 51.441965][ T1042] RDX: 00002000000001c0 RSI: 0000200000000200 RDI: 00007fa41fd94ea0 [ 51.449962][ T1042] RBP: 00002000000001c0 R08: 00007fa41fd94ee0 R09: 000000000001c916 [ 51.457957][ T1042] R10: 000000000001c916 R11: 0000000000000246 R12: 0000200000000200 [ 51.465960][ T1042] R13: 00007fa41fd94ea0 R14: 00000000000004d9 R15: 0000200000000240 [ 51.473953][ T1042] [ 51.476296][ T1042] Allocated by task 368: [ 51.480555][ T1042] __kasan_slab_alloc+0xb7/0xe0 [ 51.485418][ T1042] slab_post_alloc_hook+0x5d/0x2f0 [ 51.490522][ T1042] kmem_cache_alloc+0x15a/0x2d0 [ 51.495393][ T1042] f2fs_alloc_inode+0x26/0x410 [ 51.500164][ T1042] iget_locked+0x146/0x7d0 [ 51.504574][ T1042] f2fs_iget+0x55/0x4af0 [ 51.508807][ T1042] f2fs_fill_super+0x40d3/0x73d0 [ 51.513733][ T1042] mount_bdev+0x26a/0x380 [ 51.518053][ T1042] f2fs_mount+0x34/0x40 [ 51.522194][ T1042] legacy_get_tree+0xed/0x190 [ 51.526859][ T1042] vfs_get_tree+0x89/0x260 [ 51.531265][ T1042] do_new_mount+0x25a/0xa30 [ 51.535753][ T1042] path_mount+0x581/0xca0 [ 51.540157][ T1042] __se_sys_mount+0x320/0x390 [ 51.544850][ T1042] __x64_sys_mount+0xbf/0xd0 [ 51.549428][ T1042] do_syscall_64+0x31/0x40 [ 51.553831][ T1042] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.559702][ T1042] [ 51.562017][ T1042] Last potentially related work creation: [ 51.567728][ T1042] kasan_save_stack+0x3a/0x60 [ 51.572397][ T1042] __kasan_record_aux_stack+0xd2/0x100 [ 51.577846][ T1042] kasan_record_aux_stack_noalloc+0xb/0x10 [ 51.583638][ T1042] call_rcu+0x11a/0x1090 [ 51.587874][ T1042] evict+0x88f/0x940 [ 51.591757][ T1042] iput+0x654/0x7e0 [ 51.595554][ T1042] f2fs_put_super+0x681/0xbd0 [ 51.600224][ T1042] generic_shutdown_super+0x149/0x320 [ 51.605587][ T1042] kill_block_super+0x7f/0xf0 [ 51.610261][ T1042] kill_f2fs_super+0x30a/0x3d0 [ 51.615016][ T1042] deactivate_locked_super+0xa0/0x100 [ 51.620374][ T1042] deactivate_super+0xaf/0xe0 [ 51.625058][ T1042] cleanup_mnt+0x44f/0x500 [ 51.629466][ T1042] __cleanup_mnt+0x19/0x20 [ 51.633869][ T1042] task_work_run+0x127/0x190 [ 51.638447][ T1042] exit_to_user_mode_loop+0xcb/0xe0 [ 51.643648][ T1042] exit_to_user_mode_prepare+0x76/0xa0 [ 51.649097][ T1042] syscall_exit_to_user_mode+0x1d/0x40 [ 51.654550][ T1042] do_syscall_64+0x3d/0x40 [ 51.658994][ T1042] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 51.664870][ T1042] [ 51.667212][ T1042] The buggy address belongs to the object at ffff88811c3699c0 [ 51.667212][ T1042] which belongs to the cache f2fs_inode_cache of size 1520 [ 51.681782][ T1042] The buggy address is located 1320 bytes inside of [ 51.681782][ T1042] 1520-byte region [ffff88811c3699c0, ffff88811c369fb0) [ 51.695219][ T1042] The buggy address belongs to the page: [ 51.700868][ T1042] page:ffffea000470da00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811c368ce0 pfn:0x11c368 [ 51.712419][ T1042] head:ffffea000470da00 order:3 compound_mapcount:0 compound_pincount:0 [ 51.720752][ T1042] flags: 0x4000000000010200(slab|head) [ 51.726221][ T1042] raw: 4000000000010200 dead000000000100 dead000000000122 ffff8881027ea780 [ 51.734818][ T1042] raw: ffff88811c368ce0 000000008013000e 00000001ffffffff 0000000000000000 [ 51.743403][ T1042] page dumped because: kasan: bad access detected [ 51.749838][ T1042] page_owner tracks the page as allocated [ 51.755718][ T1042] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 368, ts 29470028076, free_ts 0 [ 51.776339][ T1042] prep_new_page+0x176/0x190 [ 51.780937][ T1042] get_page_from_freelist+0x225f/0x23f0 [ 51.786486][ T1042] __alloc_pages_nodemask+0x29a/0x640 [ 51.791884][ T1042] new_slab+0x84/0x3f0 [ 51.795956][ T1042] ___slab_alloc+0x2f8/0x4c0 [ 51.800557][ T1042] __slab_alloc+0x63/0xa0 [ 51.804882][ T1042] kmem_cache_alloc+0x1a4/0x2d0 [ 51.809733][ T1042] f2fs_alloc_inode+0x26/0x410 [ 51.814498][ T1042] iget_locked+0x146/0x7d0 [ 51.818939][ T1042] f2fs_iget+0x55/0x4af0 [ 51.823172][ T1042] f2fs_fill_super+0x40d3/0x73d0 [ 51.828222][ T1042] mount_bdev+0x26a/0x380 [ 51.832549][ T1042] f2fs_mount+0x34/0x40 [ 51.836699][ T1042] legacy_get_tree+0xed/0x190 [ 51.841373][ T1042] vfs_get_tree+0x89/0x260 [ 51.845784][ T1042] do_new_mount+0x25a/0xa30 [ 51.850275][ T1042] page_owner free stack trace missing [ 51.855653][ T1042] [ 51.857971][ T1042] Memory state around the buggy address: [ 51.863602][ T1042] ffff88811c369d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.871689][ T1042] ffff88811c369e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.879747][ T1042] >ffff88811c369e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.887797][ T1042] ^ [ 51.895242][ T1042] ffff88811c369f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.903290][ T1042] ffff88811c369f80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 51.911337][ T1042] ================================================================== [ 51.919399][ T1042] Disabling lock debugging due to kernel taint [ 51.938058][ T1042] EXT4-fs warning (device loop5): ext4_enable_quotas:6495: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 51.967015][ T1042] EXT4-fs (loop5): mount failed [ 52.034618][ T352] uvcvideo: Failed to set UVC probe control : -71 (exp. 26). [ 52.054411][ T352] uvcvideo: Failed to query (129) UVC probe control : -71 (exp. 26). [ 52.062572][ T352] uvcvideo: Failed to initialize the device (-5). [ 52.079598][ T352] usb 4-1: USB disconnect, device number 7 [ 52.134486][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 52.140477][ T25] usbhid: probe of 2-1:0.0 failed with error -71 [ 52.156794][ T25] usb 2-1: USB disconnect, device number 8 [ 52.163354][ T9] device bridge_slave_1 left promiscuous mode [ 52.169733][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.177722][ T9] device bridge_slave_0 left promiscuous mode [ 52.183870][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.192000][ T9] device veth1_macvtap left promiscuous mode [ 52.198095][ T9] device veth0_vlan left promiscuous mode [ 53.365414][ T9] device bridge_slave_1 left promiscuous mode [ 53.371552][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.379124][ T9] device bridge_slave_0 left promiscuous mode [ 53.385348][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.393108][ T9] device bridge_slave_1 left promiscuous mode [ 53.399460][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.406927][ T9] device bridge_slave_0 left promiscuous mode [ 53.413031][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.421068][ T9] device bridge_slave_1 left promiscuous mode [ 53.427262][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.434764][ T9] device bridge_slave_0 left promiscuous mode [ 53.440871][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.448717][ T9] device bridge_slave_1 left promiscuous mode [ 53.454849][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.462245][ T9] device bridge_slave_0 left promiscuous mode [ 53.468495][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.476331][ T9] device bridge_slave_1 left promiscuous mode [ 53.482436][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.489941][ T9] device bridge_slave_0 left promiscuous mode [ 53.496232][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.504996][ T9] device veth1_macvtap left promiscuous mode [ 53.510999][ T9] device veth0_vlan left promiscuous mode [ 53.516996][ T9] device veth1_macvtap left promiscuous mode [ 53.523005][ T9] device veth0_vlan left promiscuous mode [ 53.528982][ T9] device veth1_macvtap left promiscuous mode [ 53.535157][ T9] device veth1_macvtap left promiscuous mode [ 53.541146][ T9] device veth0_vlan left promiscuous mode [ 53.547301][ T9] device veth1_macvtap left promiscuous mode [ 53.553326][ T9] device veth0_vlan left promiscuous mode