last executing test programs: 7m53.050388063s ago: executing program 3 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0xc3, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) 7m52.106261685s ago: executing program 3 (id=304): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0}, 0x94) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000004c0)={0x6, 0x0, [{0x4, 0x6, 0x0, [0xae6d, 0x3, 0x9, 0x1, 0x19, 0x6, 0x790c, 0xffff8001]}, {0x7, 0x40, 0x800, [0x4376, 0x0, 0x200, 0x8, 0x6, 0x0, 0x5, 0x5]}, {0x0, 0x4, 0xc92, [0x7, 0x5, 0xfffffff8, 0x2, 0x1, 0x800, 0x80000000]}, {0x0, 0x6, 0x7, [0xfa, 0x6, 0x6730, 0x4200, 0x9, 0x0, 0xffffffff, 0x7]}, {0x0, 0x800, 0x1000, [0x4, 0x1ff, 0x5, 0x9, 0x4, 0x200, 0x0, 0x7f]}, {0x9, 0xf, 0x80000000, [0x7, 0x5, 0xa4f3, 0x6, 0xcb2, 0x9, 0x5, 0x3]}]}) shutdown(r0, 0x1) ptrace$setopts(0x4206, r1, 0x9, 0x100039) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r6, r7) 7m50.986110915s ago: executing program 3 (id=305): r0 = timerfd_create(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000d, 0x31, 0xffffffffffffffff, 0x9a1da000) select(0x64, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32, @ANYBLOB="6d3082610000000008001300", @ANYRES32=0xffffffffffffffff], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x64, 0x24, 0xe0b, 0x4, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x800, 0x0, 0xfffffffe, 0x1}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x800004, 0x8, 0x575, 0xfffffff8}}]}]}}}]}, 0x64}}, 0x0) sendto$packet(r6, &(0x7f00000001c0)="44c33b69ebc9e05e9bdec0c288a8", 0x1d, 0x830, &(0x7f0000000440)={0x11, 0x2, r9, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x0, 0x0}, &(0x7f00000009c0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000bc0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="60010000", @ANYRES16=r3, @ANYBLOB="000227bd7000fcdbdf25150000000c00018008000300020000005400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000208000100000000", @ANYRES32=0x0, @ANYBLOB="140002007665746831000000000000000000000008000300010000001400020076657468305f766972745f776966690008000300000000001400018008000100", @ANYRES32=r5, @ANYBLOB="08000300000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="50000180080003000000000008000300000000000800030002000000080003000000000008000100", @ANYRES32=r4, @ANYBLOB="0800030002000000080003000100000014000200766c616e3000000000000000000000004c00018014000200776c616e3000000000000000000000001400020070696d72656731000000000000000000080003000200000008000100", @ANYRES32=r9, @ANYRESHEX=r6, @ANYRES32=r10, @ANYRES16=0x0], 0x160}, 0x1, 0x0, 0x0, 0x20004054}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x80, 0x10, 0x94, 0xe1e, {{0xa, 0x4, 0x2, 0x2, 0x28, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0x7, 0xd0, [@rand_addr=0x64010101]}, @generic={0x83, 0x6, "af5fd0b0"}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x7, 0x3, 0x8, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x1, 0x9, 0x10000}}) request_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='!\x00', 0xfffffffffffffff8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xb, 0x2, 0x30, @empty, @private1, 0x8, 0x40, 0x8001, 0x5}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000d80)=ANY=[@ANYRESOCT=r7, @ANYRES16=r3, @ANYBLOB="00062cbd7000fddbdf25190000000c0001800800030003000000680001801400020076657468305f746f5f7465616d000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB="0008000100", @ANYRES32=0x0, @ANYBLOB="140002006d61637674617030000000000000000014000200766361300b5c479ba30a5438019a739997506e30000000000000000000000008000300010000004bc5c9c208000300050000001400d9c7a924696467655f736c6176655f31000036d7ff2cfea7046147a1634a921400020062726964676b090000002d6967ebd07bc23088253a25a8ec9ea58d4c2b34a4042237ae194d74ff500a7fe7c3d6260e5e162c9aa0ea6347e6466bee7985555977fb900732bd9fe1bd1aa19d75fae041fb8faa7fb892629f10d56b2131ee169986983e000c3b40e2b48623e720ed2b06fd1bfa92e7f719f2b2de89651f73d56c6973a7b2fbbcbf00"/261, @ANYRES32=r12, @ANYBLOB="1400020065727370616e300000000000000000003c00018014000200fffffffffffffffd000000000000000008000100", @ANYRES32=r13, @ANYBLOB="1400020070696d726567000000000000000000000800030001000000180001801400020065727370616e30000000000000000000"], 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r14}, 0x10) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r0, &(0x7f0000000040), 0x0) 7m50.898130213s ago: executing program 3 (id=310): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r4, r4, 0x1a) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getrlimit(0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x3, 0x0) 7m50.648205028s ago: executing program 3 (id=315): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x7ff, 0xcb, 0x81, 0x6}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) io_setup(0x1, &(0x7f00000004c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x6}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x26) io_submit(r5, 0x1, &(0x7f0000000680)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x7, 0x1f0e, r6, 0x0, 0x0, 0x24}]) 7m50.531286379s ago: executing program 3 (id=317): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0}, 0x94) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000004c0)={0x6, 0x0, [{0x4, 0x6, 0x0, [0xae6d, 0x3, 0x9, 0x1, 0x19, 0x6, 0x790c, 0xffff8001]}, {0x7, 0x40, 0x800, [0x4376, 0x0, 0x200, 0x8, 0x6, 0x0, 0x5, 0x5]}, {0x0, 0x4, 0xc92, [0x7, 0x5, 0xfffffff8, 0x2, 0x1, 0x800, 0x80000000]}, {0x0, 0x6, 0x7, [0xfa, 0x6, 0x6730, 0x4200, 0x9, 0x0, 0xffffffff, 0x7]}, {0x0, 0x800, 0x1000, [0x4, 0x1ff, 0x5, 0x9, 0x4, 0x200, 0x0, 0x7f]}, {0x9, 0xf, 0x80000000, [0x7, 0x5, 0xa4f3, 0x6, 0xcb2, 0x9, 0x5, 0x3]}]}) shutdown(r0, 0x1) ptrace$setopts(0x4206, r1, 0x9, 0x100039) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r6, r7) 7m50.487183834s ago: executing program 32 (id=317): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0}, 0x94) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000004c0)={0x6, 0x0, [{0x4, 0x6, 0x0, [0xae6d, 0x3, 0x9, 0x1, 0x19, 0x6, 0x790c, 0xffff8001]}, {0x7, 0x40, 0x800, [0x4376, 0x0, 0x200, 0x8, 0x6, 0x0, 0x5, 0x5]}, {0x0, 0x4, 0xc92, [0x7, 0x5, 0xfffffff8, 0x2, 0x1, 0x800, 0x80000000]}, {0x0, 0x6, 0x7, [0xfa, 0x6, 0x6730, 0x4200, 0x9, 0x0, 0xffffffff, 0x7]}, {0x0, 0x800, 0x1000, [0x4, 0x1ff, 0x5, 0x9, 0x4, 0x200, 0x0, 0x7f]}, {0x9, 0xf, 0x80000000, [0x7, 0x5, 0xa4f3, 0x6, 0xcb2, 0x9, 0x5, 0x3]}]}) shutdown(r0, 0x1) ptrace$setopts(0x4206, r1, 0x9, 0x100039) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r6, r7) 2m31.430570021s ago: executing program 0 (id=1852): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) inotify_init1(0x800) fcntl$setown(r0, 0x8, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0x8) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b700000000000000950000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2982, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TCSBRKP(r3, 0x5425, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 2m30.843636899s ago: executing program 0 (id=1855): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000448, &(0x7f0000000080), 0x1, 0x53a, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f00000004c0)=ANY=[], &(0x7f0000000280)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000040, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r3, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x4, 0x5, 0x3}, {0x3, 0x5, 0x4, 0x6}, {0x3, 0x5, 0xb, 0x2}, {0x0, 0x3, 0x3, 0xb}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x2000002, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 2m29.553765815s ago: executing program 0 (id=1860): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2m26.686591906s ago: executing program 0 (id=1871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000740), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@i_version}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x228100, 0x0) 2m26.54155211s ago: executing program 0 (id=1872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x138, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000980) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={[0x8]}, 0x8) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='rpc_socket_nospace\x00', r7, 0x0, 0x8000000000000000}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x30) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x64000600) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 2m26.440784951s ago: executing program 0 (id=1873): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = fcntl$getown(r4, 0x9) ptrace$poke(0x4, r5, &(0x7f0000000280), 0xffffffffffffffc0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) write$evdev(r1, &(0x7f0000000640)=[{{0x77359400}, 0x1, 0x7f, 0x2}, {}], 0x30) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)="f3810468000800316ec67fe4073222eef6ebdc8c7ad961dc73f1153b8da45a1c357e01ecea46", 0x26, 0x4c0b1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) 2m26.417462872s ago: executing program 33 (id=1873): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = fcntl$getown(r4, 0x9) ptrace$poke(0x4, r5, &(0x7f0000000280), 0xffffffffffffffc0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) write$evdev(r1, &(0x7f0000000640)=[{{0x77359400}, 0x1, 0x7f, 0x2}, {}], 0x30) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)="f3810468000800316ec67fe4073222eef6ebdc8c7ad961dc73f1153b8da45a1c357e01ecea46", 0x26, 0x4c0b1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) 5.198888711s ago: executing program 6 (id=2601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4f7, &(0x7f0000000c40)="$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") r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000440)='bpf_lsm_path_symlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.660921283s ago: executing program 6 (id=2606): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x2810005, &(0x7f0000000280), 0xfd, 0x5521, &(0x7f00000079c0)="$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") 4.601999339s ago: executing program 1 (id=2607): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") syz_open_pts(0xffffffffffffffff, 0x400400) recvmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180)=@hci, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/199, 0xc7}, 0x140) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x48) clock_gettime(0x0, &(0x7f0000003000)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 4.329819136s ago: executing program 4 (id=2608): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000004c0)={0x6, 0x0, [{0x4, 0x6, 0x0, [0xae6d, 0x3, 0x9, 0x1, 0x19, 0x6, 0x790c, 0xffff8001]}, {0x7, 0x40, 0x800, [0x4376, 0x0, 0x200, 0x8, 0x6, 0x0, 0x5, 0x5]}, {0x0, 0x4, 0xc92, [0x7, 0x5, 0xfffffff8, 0x2, 0x1, 0x800, 0x80000000]}, {0x0, 0x6, 0x7, [0xfa, 0x6, 0x6730, 0x4200, 0x9, 0x0, 0xffffffff, 0x7]}, {0x0, 0x800, 0x1000, [0x4, 0x1ff, 0x5, 0x9, 0x4, 0x200, 0x0, 0x7f]}, {0x9, 0xf, 0x80000000, [0x7, 0x5, 0xa4f3, 0x6, 0xcb2, 0x9, 0x5, 0x3]}]}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r4, r5) 4.328690496s ago: executing program 6 (id=2618): r0 = syz_clone(0x88020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) 3.549160483s ago: executing program 5 (id=2611): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='discard,nfs,dots,check=strict,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c003a579da66b5c8b1eba83198de0855eeffdd30d734e2f8ae9290d5398a81393ef4b30b7050b551c2ef52a88c993b032d62634fe7877f07d881c98a580d3fdfeeedf901e5b45e43a5eeae8a314fd67dce3592212b2f38b3405da772948598507a55f7ebd1097370eb7412c24af39afb14d6de035be4de91b989e08177c2d75b64b8dd41197d24341d36a15980dd2a69888d9"], 0x1, 0x22d, &(0x7f0000000300)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x5, 0x7, 0x0, 0x10003, 0xfffffffffffffffd, 0x4002004c4, 0x1004, 0x8, 0xfff, 0xa4a4, 0x0, 0x1, 0x7, 0x0, 0x4], 0x0, 0x2935c1}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000002c0)={@empty, @empty, 0x0, 0x4, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}]}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) 3.548975342s ago: executing program 5 (id=2612): syz_io_uring_setup(0x1593, &(0x7f0000000100)={0x0, 0xe5dc, 0x800, 0x3, 0x2f0}, &(0x7f0000001980), &(0x7f0000002c00)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x1e8}, 0x1, 0x0, 0x0, 0x48891}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xd90, 0x0, 0x9}]}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r4 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/189}], 0x0, &(0x7f00000006c0)=""/230}, 0x2}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000010c0)=""/238}, {&(0x7f0000000240)=""/94}, {&(0x7f0000000400)=""/47}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/22}, {&(0x7f00000007c0)=""/61}, {&(0x7f0000000800)=""/38}, {&(0x7f0000000840)=""/79}, {&(0x7f00000019c0)=""/4096}], 0x0, &(0x7f0000000980)=""/153}, 0x3}, {{&(0x7f0000000a40)=@alg, 0x0, &(0x7f0000000bc0)}, 0x7}], 0x4000000000002d0, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') close(r4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x12, 0x0, 0x0) ioctl$UFFDIO_POISON(r8, 0xc020aa08, &(0x7f0000000300)={{&(0x7f00000ee000/0x3000)=nil, 0x3000}}) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 3.548609922s ago: executing program 1 (id=2613): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) 3.548188962s ago: executing program 1 (id=2615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x138, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000980) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={[0x8]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='rpc_socket_nospace\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) unshare(0x64000600) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 3.320211865s ago: executing program 6 (id=2616): syz_clone(0x100000, &(0x7f0000000240)="2ee0231b7bcaa60680bd7a44a153e875c34e9abc6d5f0c88060ab22f8c5a9e534a22565cb90a26b1fe8995d5ac1898c0eedd06b0d8ad0d6a55d44f9e6841a96b9acbc9b17e291cbd497ffaddb26f72c2c760a754be7fcb7376d63768d4c585052d7818f94f96a0664cbc0a9df55b5bdc0c93c0b671294c7fdd3ee654a849b88ddd51042332de3b79987e6fc9f1f03ffbe8c49e27a80cf41a6401f54d89cebf9642b39aff4967af36", 0xa8, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) 2.825719773s ago: executing program 4 (id=2617): r0 = syz_io_uring_setup(0x94f, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x2ff}, &(0x7f0000000000), &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x26) io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x7, 0x1f0e, r5, 0x0, 0x0, 0x24}]) io_uring_enter(r0, 0x7, 0x464f, 0x1, 0x0, 0x0) 2.606030495s ago: executing program 5 (id=2619): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x82, 0x0, &(0x7f0000000240)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001300)={{0x0, 0x1, 0x2, 0x400, 0x27, 0xaeb, 0x5ab, 0x1, 0xfff, 0x4, 0x2, 0xeee, 0x8, 0x9, 0x6}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000280)={{r4, 0x9, 0x100000000, 0x4, 0x40, 0x7fff, 0xcf, 0x6, 0x4, 0x2, 0x4, 0x6, 0x400, 0x8000000000000001, 0x7}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) gettid() (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10) 2.55426094s ago: executing program 2 (id=2621): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffeff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0x4}, &(0x7f0000000180)=0x28) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r3, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES64=r4], 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@ifindex=r6, r3, 0x1b, 0x40, 0x0, @void, @value=r2, @void, @void, r4}, 0x20) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x25, 0x10, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@fallback=r0, r0, 0x19, 0x2000, 0x0, @value=r7, @void, @void, @void, r4}, 0x20) r8 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x19, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@block_validity}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xb64}, 0x22}, {@init_itable}, {@nodelalloc}, {@init_itable_val}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x5, 0x7}) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) read$FUSE(r9, &(0x7f0000002440)={0x2020}, 0x2020) 2.362768589s ago: executing program 2 (id=2622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241cf6ffffff070905810300020000000904010000020d00000904010102020d0000090582022000000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 2.287015246s ago: executing program 5 (id=2623): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000004c0)={0x6, 0x0, [{0x4, 0x6, 0x0, [0xae6d, 0x3, 0x9, 0x1, 0x19, 0x6, 0x790c, 0xffff8001]}, {0x7, 0x40, 0x800, [0x4376, 0x0, 0x200, 0x8, 0x6, 0x0, 0x5, 0x5]}, {0x0, 0x4, 0xc92, [0x7, 0x5, 0xfffffff8, 0x2, 0x1, 0x800, 0x80000000]}, {0x0, 0x6, 0x7, [0xfa, 0x6, 0x6730, 0x4200, 0x9, 0x0, 0xffffffff, 0x7]}, {0x0, 0x800, 0x1000, [0x4, 0x1ff, 0x5, 0x9, 0x4, 0x200, 0x0, 0x7f]}, {0x9, 0xf, 0x80000000, [0x7, 0x5, 0xa4f3, 0x6, 0xcb2, 0x9, 0x5, 0x3]}]}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup2(r5, r6) 2.102983935s ago: executing program 1 (id=2624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x3, 0x2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x190da) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:tmpfs_t:s0\x00', 0x1d) 2.007370444s ago: executing program 1 (id=2625): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") syz_open_pts(0xffffffffffffffff, 0x400400) recvmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180)=@hci, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/199, 0xc7}, 0x140) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x48) clock_gettime(0x0, &(0x7f0000003000)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 1.83572173s ago: executing program 4 (id=2626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x6a}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) accept$inet6(r3, &(0x7f0000000080), &(0x7f00000001c0)=0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.771926027s ago: executing program 4 (id=2627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xa0000004}) poll(&(0x7f00000000c0)=[{r4, 0x1009}], 0x1, 0x8000007) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x1, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r6, 0x2007ffb) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0xf6276ff64f0f99de, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) sendfile(r6, r6, 0x0, 0x1000000201005) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'erspan0\x00', 0x100}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) read$FUSE(r5, &(0x7f00000022c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18, 0x0, r11, {0x6}}, 0x18) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.771194297s ago: executing program 2 (id=2628): socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=r3], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbmon(0x0, 0x80000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000007b04cf83796a8fa6ab3a", @ANYRES16=r6, @ANYBLOB="010000000000000003001a000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000007b04cf83796a8fa6ab3a", @ANYRES16=r6, @ANYBLOB="010000000000000003001a000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x464, 0x0, 0x70bd25, 0x25dfdbfb, "cc10d365b7414a7e029c64b6d4edb4385bdeff1a599f825e7b330fbe8ea0e10947b9cab1fa318c5b", ["", "", "", "", "", "", "", ""]}, 0x38}}, 0x8000000) (async) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x464, 0x0, 0x70bd25, 0x25dfdbfb, "cc10d365b7414a7e029c64b6d4edb4385bdeff1a599f825e7b330fbe8ea0e10947b9cab1fa318c5b", ["", "", "", "", "", "", "", ""]}, 0x38}}, 0x8000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) 1.460953487s ago: executing program 2 (id=2629): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x67) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f00000001c0)) 1.448899838s ago: executing program 2 (id=2630): r0 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x600e00) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac14143b00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000010000000044000500ac1414aa003100000000000000000000000000003200000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1a8429", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, r0, 0xd0fb6000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f00008e3000/0x3000)=nil) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r5, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.198352673s ago: executing program 4 (id=2631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x76960bb5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = fcntl$getown(r4, 0x9) ptrace$poke(0x4, r5, &(0x7f0000000280), 0xffffffffffffffc0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x2406c014, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) write$evdev(r1, &(0x7f0000000640)=[{{0x77359400}, 0x1, 0x7f, 0x2}, {}], 0x30) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)="f3810468000800316ec67fe4073222eef6ebdc8c7ad961dc73f1153b8da45a1c357e01ecea46", 0x26, 0x4c0b1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) 1.117529921s ago: executing program 6 (id=2632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='cachefiles_ondemand_fd_write\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) r4 = epoll_create(0x400) epoll_wait(r4, &(0x7f0000000180)=[{}], 0x1, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "059500", 0x10, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[@routing={0x3b, 0x0, 0x0, 0x7, 0x300}], {0x4e21, 0x4e23, 0x8}}}}}}, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x8, 0x3a, 0x0, @private2, @mcast2, {[], @mlv2_report}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x183000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) 1.116979551s ago: executing program 5 (id=2633): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0xc000, 0x142) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x76960bb5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = fcntl$getown(r4, 0x9) ptrace$poke(0x4, r5, &(0x7f0000000280), 0xffffffffffffffc0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) 1.005924032s ago: executing program 1 (id=2634): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fcntl$getown(r1, 0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffdfffe, 0x0, 0x0, 0xfffffff9}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) listen(0xffffffffffffffff, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="60000400000083d828f2"], 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000006680), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063518800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) connect$unix(r0, 0x0, 0x0) 516.24191ms ago: executing program 2 (id=2635): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x138, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "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"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000980) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={[0x8]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='rpc_socket_nospace\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) unshare(0x64000600) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 486.059063ms ago: executing program 6 (id=2636): r0 = syz_io_uring_setup(0x94f, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x2ff}, &(0x7f0000000000), &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1214c2, 0x26) io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x7, 0x1f0e, r5, 0x0, 0x0, 0x24}]) io_uring_enter(r0, 0x7, 0x464f, 0x1, 0x0, 0x0) 229.173728ms ago: executing program 4 (id=2637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x3, 0x2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x190da) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r8, &(0x7f0000000100)='system_u:object_r:tmpfs_t:s0\x00', 0x1d) 0s ago: executing program 5 (id=2638): fsopen(&(0x7f0000000000)='overlay\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',F']) syz_io_uring_setup(0x7669, 0xfffffffffffffffe, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000a00)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() ptrace$peekuser(0x3, r7, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f00008be000/0x2000)=nil, 0x2000, 0xa, 0x4000010, r2, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) kernel console output (not intermixed with test programs): vailable UDC or it's busy [ 242.102299][ T4208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.111882][ T4207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.120910][ T4208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.013527][ T4207] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 243.049474][ T4254] loop4: detected capacity change from 0 to 16 [ 243.090560][ T4254] erofs: (device loop4): mounted with root inode @ nid 36. [ 243.112955][ T4257] loop2: detected capacity change from 0 to 512 [ 243.156294][ T4257] EXT4-fs (loop2): 1 orphan inode deleted [ 243.164359][ T4257] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 243.174422][ T1020] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 243.191073][ T1020] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:61: Failed to release dquot type 1 [ 243.210464][ T4257] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 244.190046][ T285] EXT4-fs (loop2): unmounting filesystem. [ 244.310217][ T617] usb 1-1: USB disconnect, device number 12 [ 244.437380][ T4267] 9pnet_fd: Insufficient options for proto=fd [ 245.114381][ T4280] loop0: detected capacity change from 0 to 16 [ 245.128539][ T4280] erofs: (device loop0): mounted with root inode @ nid 36. [ 247.121508][ T4292] loop0: detected capacity change from 0 to 256 [ 247.131737][ T4292] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 247.272940][ T4296] 9pnet_fd: Insufficient options for proto=fd [ 247.456202][ T4300] overlayfs: failed to resolve './file0': -2 [ 247.921010][ T4306] loop2: detected capacity change from 0 to 512 [ 247.983733][ T4306] EXT4-fs (loop2): 1 orphan inode deleted [ 247.993240][ T4306] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 248.003377][ T999] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 248.060236][ T999] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:40: Failed to release dquot type 1 [ 248.072173][ T4306] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.162611][ T4314] loop0: detected capacity change from 0 to 512 [ 248.184300][ T4314] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.474831][ T4314] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.585559][ T4314] EXT4-fs (loop0): Test dummy encryption mode enabled [ 248.616552][ T4314] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 248.643349][ T4314] EXT4-fs (loop0): 1 truncate cleaned up [ 248.646255][ T4318] 9pnet_fd: Insufficient options for proto=fd [ 248.652504][ T4314] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 248.838818][ T285] EXT4-fs (loop2): unmounting filesystem. [ 248.975299][ T4324] fscrypt: AES-256-XTS using blk-crypto-fallback [ 249.267346][ T4332] 9pnet_fd: Insufficient options for proto=fd [ 249.345782][ T282] EXT4-fs (loop0): unmounting filesystem. [ 249.379545][ T4335] loop4: detected capacity change from 0 to 256 [ 249.419492][ T4335] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 250.603756][ T4354] loop2: detected capacity change from 0 to 512 [ 250.844650][ T4354] EXT4-fs (loop2): 1 orphan inode deleted [ 250.939493][ T4364] overlayfs: failed to clone upperpath [ 251.658108][ T4354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 251.667538][ T4354] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.679452][ T4362] 9pnet_fd: Insufficient options for proto=fd [ 252.956521][ T4375] overlayfs: failed to resolve './file0': -2 [ 253.164887][ T617] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 253.170523][ T285] EXT4-fs (loop2): unmounting filesystem. [ 253.746437][ T4385] 9pnet_fd: Insufficient options for proto=fd [ 253.909290][ T4389] loop4: detected capacity change from 0 to 256 [ 253.946432][ T4389] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 254.237479][ T4391] loop2: detected capacity change from 0 to 32768 [ 254.521341][ T4407] 9pnet_fd: Insufficient options for proto=fd [ 254.539272][ T290] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 254.735524][ T290] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.746638][ T290] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 254.760412][ T290] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.776203][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.793171][ T290] usb 1-1: Product: syz [ 254.801914][ T290] usb 1-1: Manufacturer: syz [ 254.811095][ T290] usb 1-1: SerialNumber: syz [ 255.477560][ T4394] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.925545][ T290] cdc_ncm 1-1:1.0: bind() failure [ 255.932007][ T290] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 255.940774][ T290] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 255.954130][ T290] usb 1-1: USB disconnect, device number 13 [ 256.019795][ T28] audit: type=1400 audit(1760904074.349:430): avc: denied { map } for pid=4428 comm="syz.5.1178" path="socket:[28284]" dev="sockfs" ino=28284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.044360][ T28] audit: type=1400 audit(1760904074.349:431): avc: denied { read accept } for pid=4428 comm="syz.5.1178" path="socket:[28284]" dev="sockfs" ino=28284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 256.070411][ T4429] fuse: Unknown parameter 'ČDČPZ j˜V‡Šd˝b„ń¨8Ăż&˜ MŔ¨ËĎ.K•¸táe/01777777777777777777777' [ 256.669178][ T2579] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 256.895236][ T4438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60476 sclass=netlink_route_socket pid=4438 comm=syz.2.1181 [ 256.956458][ T2579] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.968181][ T2579] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 256.978907][ T28] audit: type=1400 audit(1760904075.245:432): avc: denied { read } for pid=4437 comm="syz.2.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.979906][ T2579] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.142215][ T2579] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.153750][ T2579] usb 5-1: Product: syz [ 257.161418][ T2579] usb 5-1: Manufacturer: syz [ 257.167302][ T2579] usb 5-1: SerialNumber: syz [ 258.114645][ T4423] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 258.142810][ T4457] overlayfs: failed to clone upperpath [ 258.351470][ T2579] cdc_ncm 5-1:1.0: bind() failure [ 258.360095][ T2579] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 258.378513][ T2579] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 258.384628][ T4460] 9pnet_fd: Insufficient options for proto=fd [ 258.395839][ T2579] usb 5-1: USB disconnect, device number 15 [ 259.063987][ T4474] loop0: detected capacity change from 0 to 2048 [ 260.947042][ T102] Alternate GPT is invalid, using primary GPT. [ 260.966452][ T102] loop0: p1 p2 p3 [ 260.970867][ T102] loop0: partition table partially beyond EOD, truncated [ 261.094857][ T3286] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 261.125623][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 261.135584][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 261.970142][ T4499] loop0: detected capacity change from 0 to 256 [ 262.023571][ T3838] udevd[3838]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 262.539402][ T4499] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 264.491165][ T4514] overlayfs: failed to clone upperpath [ 265.030675][ T4520] loop2: detected capacity change from 0 to 256 [ 265.039614][ T4521] syz.1.1200[4521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.039988][ T4521] syz.1.1200[4521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.322104][ T4520] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 265.389711][ T4526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1204'. [ 265.587649][ T4535] loop4: detected capacity change from 0 to 512 [ 265.707659][ T4536] overlayfs: failed to clone upperpath [ 265.955404][ T4535] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.969976][ T4535] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.985511][ T4535] EXT4-fs (loop4): Test dummy encryption mode enabled [ 265.999108][ T4535] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.040885][ T4535] EXT4-fs (loop4): 1 truncate cleaned up [ 266.051122][ T4535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 267.446094][ T283] EXT4-fs (loop4): unmounting filesystem. [ 267.745031][ T4562] 9pnet_fd: Insufficient options for proto=fd [ 267.963230][ T290] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 267.970068][ T4570] 9pnet_fd: Insufficient options for proto=fd [ 268.333622][ T4574] loop4: detected capacity change from 0 to 16 [ 268.350293][ T4574] erofs: (device loop4): mounted with root inode @ nid 36. [ 268.434216][ T290] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.461943][ T290] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.494055][ T290] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.534327][ T290] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.550997][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.559447][ T290] usb 1-1: Product: syz [ 268.567524][ T290] usb 1-1: Manufacturer: syz [ 268.572562][ T290] usb 1-1: SerialNumber: syz [ 269.866832][ T4591] fuse: Bad value for 'group_id' [ 270.068751][ T4595] fuse: Bad value for 'group_id' [ 270.422301][ T2579] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 270.487730][ T290] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 270.494251][ T290] cdc_ncm 1-1:1.0: bind() failure [ 270.506065][ T290] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 270.519856][ T290] cdc_ncm 1-1:1.1: bind() failure [ 270.532902][ T290] usb 1-1: USB disconnect, device number 14 [ 270.673669][ T2579] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.718205][ T4608] overlayfs: failed to resolve './file0': -2 [ 270.896907][ T2579] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 271.004093][ T2579] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 271.082435][ T2579] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.110889][ T2579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.136964][ T4613] loop0: detected capacity change from 0 to 512 [ 271.137278][ T2579] usb 3-1: Product: syz [ 271.161178][ T2579] usb 3-1: Manufacturer: syz [ 271.183112][ T2579] usb 3-1: SerialNumber: syz [ 271.447324][ T4613] EXT4-fs (loop0): 1 orphan inode deleted [ 271.457762][ T4613] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 271.467307][ T1022] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 271.478756][ T4603] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 271.486668][ T4613] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 271.500781][ T1022] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:63: Failed to release dquot type 1 [ 272.181665][ T2579] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 272.223850][ T282] EXT4-fs (loop0): unmounting filesystem. [ 272.252039][ T2579] cdc_ncm 3-1:1.0: bind() failure [ 272.313877][ T2579] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 272.350131][ T2579] cdc_ncm 3-1:1.1: bind() failure [ 272.400496][ T2579] usb 3-1: USB disconnect, device number 6 [ 272.464494][ T4629] 9pnet_fd: Insufficient options for proto=fd [ 272.566181][ T4632] device macsec1 entered promiscuous mode [ 272.572099][ T4632] device bridge0 entered promiscuous mode [ 272.578125][ T4632] bridge0: port 3(macsec1) entered blocking state [ 272.584958][ T4632] bridge0: port 3(macsec1) entered disabled state [ 272.593078][ T4632] device bridge0 left promiscuous mode [ 272.615095][ T4634] loop4: detected capacity change from 0 to 16 [ 272.629534][ T4634] erofs: (device loop4): mounted with root inode @ nid 36. [ 272.912536][ T4643] 9pnet_fd: Insufficient options for proto=fd [ 273.326064][ T4655] loop2: detected capacity change from 0 to 256 [ 273.339561][ T4655] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 274.072670][ T4669] loop4: detected capacity change from 0 to 512 [ 274.147425][ T4669] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 274.159281][ T4669] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1243: bad orphan inode 15 [ 274.177322][ T4669] ext4_test_bit(bit=14, block=4) = 1 [ 274.183907][ T4669] is_bad_inode(inode)=0 [ 274.188392][ T4669] NEXT_ORPHAN(inode)=0 [ 274.193300][ T4669] max_ino=32 [ 274.197067][ T4669] i_nlink=1 [ 274.200477][ T4669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 274.296987][ T4669] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 4: comm syz.4.1243: lblock 0 mapped to illegal pblock 4 (length 1) [ 274.695175][ T283] EXT4-fs (loop4): unmounting filesystem. [ 274.726031][ T4676] loop2: detected capacity change from 0 to 256 [ 274.818118][ T4676] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 274.998180][ T290] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 275.044231][ T4678] 9pnet_fd: Insufficient options for proto=fd [ 275.233795][ T290] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.246874][ T290] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 275.273961][ T290] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 275.299826][ T290] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.325033][ T290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.341036][ T290] usb 2-1: Product: syz [ 275.368423][ T290] usb 2-1: Manufacturer: syz [ 275.378869][ T290] usb 2-1: SerialNumber: syz [ 275.386341][ T4687] loop0: detected capacity change from 0 to 512 [ 275.412348][ T4687] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.432979][ T4687] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.448924][ T4687] EXT4-fs (loop0): Test dummy encryption mode enabled [ 275.464090][ T4687] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 275.499873][ T4687] EXT4-fs (loop0): 1 truncate cleaned up [ 275.506447][ T4687] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 275.601908][ T4685] loop4: detected capacity change from 0 to 40427 [ 275.609420][ T4685] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 275.615857][ T4685] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 275.625509][ T4675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.685270][ T4685] F2FS-fs (loop4): invalid crc value [ 275.718859][ T4685] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 276.132164][ T4685] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 276.139566][ T4685] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 276.155078][ T290] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 276.161237][ T290] cdc_ncm 2-1:1.0: bind() failure [ 276.180015][ T290] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 276.198792][ T290] cdc_ncm 2-1:1.1: bind() failure [ 276.216228][ T290] usb 2-1: USB disconnect, device number 10 [ 276.380263][ T282] EXT4-fs (loop0): unmounting filesystem. [ 276.399300][ T4698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1249'. [ 276.445974][ T4700] loop2: detected capacity change from 0 to 16 [ 276.462413][ T4700] erofs: (device loop2): mounted with root inode @ nid 36. [ 276.492679][ T4700] syz.2.1252: attempt to access beyond end of device [ 276.492679][ T4700] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 276.513336][ T4700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1252'. [ 276.522640][ T4700] sch_fq: defrate 0 ignored. [ 276.627339][ T4704] loop0: detected capacity change from 0 to 128 [ 276.667647][ T28] audit: type=1400 audit(1760904093.419:433): avc: denied { listen } for pid=4709 comm="syz.4.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.016637][ T28] audit: type=1400 audit(1760904093.612:434): avc: denied { connect } for pid=4709 comm="syz.4.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.824088][ T4746] loop4: detected capacity change from 0 to 16 [ 277.832142][ T4743] fuse: Bad value for 'fd' [ 277.871416][ T4746] erofs: (device loop4): mounted with root inode @ nid 36. [ 278.004016][ T4746] syz.4.1266: attempt to access beyond end of device [ 278.004016][ T4746] loop4: rw=0, sector=8, nr_sectors = 32 limit=16 [ 278.396237][ T301] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 278.446933][ T4763] 9pnet_fd: Insufficient options for proto=fd [ 278.636039][ T301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.647204][ T301] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 278.658619][ T301] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.667859][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.676138][ T301] usb 2-1: Product: syz [ 278.680794][ T301] usb 2-1: Manufacturer: syz [ 278.685675][ T301] usb 2-1: SerialNumber: syz [ 278.860147][ T4754] syz.2.1267 (4754) used greatest stack depth: 20568 bytes left [ 278.925375][ T4770] loop0: detected capacity change from 0 to 512 [ 278.943864][ T4770] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 278.952394][ T4770] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.1274: bad orphan inode 15 [ 278.963577][ T4770] ext4_test_bit(bit=14, block=4) = 1 [ 278.969010][ T4770] is_bad_inode(inode)=0 [ 278.974619][ T4770] NEXT_ORPHAN(inode)=0 [ 278.978791][ T4770] max_ino=32 [ 278.982512][ T4770] i_nlink=1 [ 278.985840][ T4770] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 279.001527][ T4770] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #2: block 4: comm syz.0.1274: lblock 0 mapped to illegal pblock 4 (length 1) [ 279.040004][ T282] EXT4-fs (loop0): unmounting filesystem. [ 279.104812][ T4781] loop0: detected capacity change from 0 to 512 [ 279.133663][ T4781] EXT4-fs (loop0): 1 orphan inode deleted [ 279.134175][ T4753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 279.139473][ T4781] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 279.311932][ T4781] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.402497][ T1022] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 279.553414][ T4788] overlayfs: failed to clone upperpath [ 279.770195][ T301] cdc_ncm 2-1:1.0: bind() failure [ 279.781065][ T301] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 279.782096][ T4791] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1280'. [ 279.787968][ T301] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 279.802765][ T1022] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:63: Failed to release dquot type 1 [ 279.810128][ T301] usb 2-1: USB disconnect, device number 11 [ 280.318111][ T4804] 9pnet_fd: Insufficient options for proto=fd [ 280.347570][ T282] EXT4-fs (loop0): unmounting filesystem. [ 280.446443][ T4814] 9pnet_fd: Insufficient options for proto=fd [ 280.840811][ T4822] loop0: detected capacity change from 0 to 512 [ 280.919477][ T4822] EXT4-fs (loop0): 1 orphan inode deleted [ 280.926862][ T4822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 280.935599][ T4828] 9pnet_fd: Insufficient options for proto=fd [ 280.975718][ T4822] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.379915][ T4836] 9pnet_fd: Insufficient options for proto=fd [ 282.044341][ T282] EXT4-fs (loop0): unmounting filesystem. [ 282.826172][ T4856] overlayfs: failed to resolve './file0': -2 [ 283.525160][ T4860] 9pnet_fd: Insufficient options for proto=fd [ 284.168903][ T4876] 9pnet_fd: Insufficient options for proto=fd [ 284.808909][ T4886] xt_bpf: check failed: parse error [ 285.711140][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'. [ 286.166016][ T4906] overlayfs: failed to resolve './file0': -2 [ 286.598956][ T4901] loop0: detected capacity change from 0 to 40427 [ 286.619240][ T4901] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 286.647239][ T4901] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 286.682995][ T4901] F2FS-fs (loop0): Found nat_bits in checkpoint [ 286.766243][ T4901] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 286.781913][ T4901] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 286.933887][ T4918] 9pnet_fd: Insufficient options for proto=fd [ 286.951425][ T4920] 9pnet_fd: Insufficient options for proto=fd [ 287.977210][ T282] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 287.977237][ T282] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 287.988368][ T282] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 288.323244][ T282] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 288.419835][ T282] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 288.427448][ T282] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 288.435240][ T282] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 288.703672][ T4949] loop0: detected capacity change from 0 to 4096 [ 288.761667][ T4949] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 288.870278][ T4958] 9pnet_fd: Insufficient options for proto=fd [ 288.885532][ T4960] 9pnet_fd: Insufficient options for proto=fd [ 289.089721][ T301] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 289.480919][ T301] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.492563][ T301] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.502023][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.510324][ T301] usb 1-1: Product: syz [ 289.514837][ T301] usb 1-1: Manufacturer: syz [ 289.519565][ T301] usb 1-1: SerialNumber: syz [ 289.615922][ T4971] fuse: Unknown parameter 'group_i00000000000000000000' [ 291.182477][ T4996] 9pnet_fd: Insufficient options for proto=fd [ 291.200227][ T4997] 9pnet_fd: Insufficient options for proto=fd [ 293.456754][ T5013] fuse: Unknown parameter 'group_i00000000000000000000' [ 293.522619][ T28] audit: type=1326 audit(1760904108.980:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5015 comm="syz.1.1346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f220c18efc9 code=0x0 [ 293.587648][ T5024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.608102][ T5024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.931729][ T4949] netlink: 'syz.0.1324': attribute type 3 has an invalid length. [ 293.942932][ T4949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1324'. [ 293.966792][ T28] audit: type=1400 audit(1760904109.386:436): avc: denied { ioctl } for pid=4948 comm="syz.0.1324" path="/239/file1/file3" dev="loop0" ino=16 ioctlcmd=0x6604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 293.992910][ T301] cdc_ncm 1-1:1.0: bind() failure [ 294.001342][ T301] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 294.013270][ T301] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 294.024690][ T301] usb 1-1: USB disconnect, device number 15 [ 294.145013][ T282] EXT4-fs (loop0): unmounting filesystem. [ 294.582953][ T5051] device wireguard0 entered promiscuous mode [ 294.629281][ T5056] 9pnet_fd: Insufficient options for proto=fd [ 294.663372][ T5060] fuse: Unknown parameter 'group_i00000000000000000000' [ 296.464012][ T5088] 9pnet_fd: Insufficient options for proto=fd [ 297.130429][ T5106] overlayfs: failed to resolve './file0': -2 [ 298.071350][ T5131] 9pnet_fd: Insufficient options for proto=fd [ 298.335288][ T5141] 9pnet_fd: Insufficient options for proto=fd [ 298.472652][ T5142] 9pnet_fd: Insufficient options for proto=fd [ 298.792675][ T5158] 9pnet_fd: Insufficient options for proto=fd [ 298.832076][ T5160] loop0: detected capacity change from 0 to 512 [ 298.850786][ T5160] EXT4-fs: Invalid want_extra_isize 224 [ 298.899520][ T5160] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1392'. [ 298.942492][ T5160] loop0: detected capacity change from 0 to 1024 [ 298.949631][ T5160] EXT4-fs: Ignoring removed orlov option [ 298.985711][ T5160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 298.997812][ T5160] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.048029][ T5160] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.1392: directory missing '..' [ 299.083701][ T282] EXT4-fs (loop0): unmounting filesystem. [ 299.349375][ T5177] fuse: Unknown parameter 'group_id00000000000000000000' [ 299.439519][ T5180] loop0: detected capacity change from 0 to 256 [ 299.749287][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1395'. [ 299.783366][ T5180] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 300.402284][ T5195] 9pnet_fd: Insufficient options for proto=fd [ 300.580617][ T5206] 9pnet_fd: Insufficient options for proto=fd [ 301.236480][ T5216] overlayfs: failed to resolve './file0': -2 [ 301.528411][ T5219] fuse: Unknown parameter 'group_id00000000000000000000' [ 302.944373][ T28] audit: type=1400 audit(1760904117.666:437): avc: denied { read } for pid=5242 comm="syz.0.1418" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 303.785796][ T5244] loop0: detected capacity change from 0 to 1024 [ 303.824267][ T28] audit: type=1400 audit(1760904118.312:438): avc: denied { create } for pid=5242 comm="syz.0.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 303.864777][ T28] audit: type=1400 audit(1760904118.506:439): avc: denied { append } for pid=5248 comm="syz.1.1419" name="loop6" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 303.901329][ T5244] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 303.923205][ T5256] fuse: Bad value for 'user_id' [ 303.971652][ T5262] 9pnet_fd: Insufficient options for proto=fd [ 304.061997][ T282] EXT4-fs (loop0): unmounting filesystem. [ 305.299404][ T5278] 9pnet_fd: Insufficient options for proto=fd [ 305.892498][ T5292] loop0: detected capacity change from 0 to 256 [ 305.920653][ T5292] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 308.323394][ T5306] fuse: Bad value for 'user_id' [ 308.375271][ T5313] 9pnet_fd: Insufficient options for proto=fd [ 308.522639][ T5320] 9pnet_fd: Insufficient options for proto=fd [ 308.581291][ T5334] loop0: detected capacity change from 0 to 512 [ 308.599920][ T5332] 9pnet_fd: Insufficient options for proto=fd [ 308.649908][ T5334] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.1445: invalid block [ 308.662201][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.670440][ T5334] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1445: Invalid block bitmap block 0 in block_group 0 [ 308.693342][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.700197][ T5334] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 308.710832][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.717683][ T5334] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1445: attempt to clear invalid blocks 983261 len 1 [ 308.731889][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.738816][ T5334] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1445: invalid indirect mapped block 2683928664 (level 0) [ 308.753763][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.760526][ T5334] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.1445: Invalid inode table block 0 in block_group 0 [ 308.773897][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.780886][ T5334] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 308.790989][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.797996][ T5334] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 308.806749][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.813593][ T5334] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.1445: Invalid inode table block 0 in block_group 0 [ 308.826726][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.833547][ T5334] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 308.843387][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.849911][ T5334] EXT4-fs error (device loop0): ext4_truncate:4314: inode #13: comm syz.0.1445: mark_inode_dirty error [ 308.861375][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.868050][ T5334] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 308.877359][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.884053][ T5334] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz.0.1445: Invalid inode table block 0 in block_group 0 [ 308.897090][ T5334] EXT4-fs (loop0): Remounting filesystem read-only [ 308.903809][ T5334] EXT4-fs (loop0): 1 truncate cleaned up [ 308.909580][ T5334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 309.147575][ T282] EXT4-fs (loop0): unmounting filesystem. [ 312.707467][ T5365] 9pnet_fd: Insufficient options for proto=fd [ 312.755940][ T28] audit: type=1400 audit(1760904126.730:440): avc: denied { setopt } for pid=5370 comm="syz.2.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 312.798662][ T5371] device wireguard0 entered promiscuous mode [ 312.803149][ T5377] loop0: detected capacity change from 0 to 256 [ 312.806277][ T28] audit: type=1400 audit(1760904126.757:441): avc: denied { shutdown } for pid=5366 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.835119][ T5377] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 313.979123][ T5405] 9pnet_fd: Insufficient options for proto=fd [ 315.142307][ T5393] overlayfs: failed to resolve './file0': -2 [ 315.881173][ T5419] overlayfs: failed to clone upperpath [ 316.185464][ T5421] overlayfs: failed to resolve './file0': -2 [ 317.273656][ T5430] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1474'. [ 317.283488][ T28] audit: type=1400 audit(1760904130.911:442): avc: denied { write } for pid=5429 comm="syz.1.1474" name="file0" dev="tmpfs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 317.384666][ T28] audit: type=1400 audit(1760904130.994:443): avc: denied { open } for pid=5429 comm="syz.1.1474" path="/290/file0" dev="tmpfs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 317.414238][ T28] audit: type=1400 audit(1760904130.994:444): avc: denied { getopt } for pid=5429 comm="syz.1.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 318.593564][ T5438] fuse: Bad value for 'fd' [ 318.617650][ T28] audit: type=1400 audit(1760904130.994:445): avc: denied { ioctl } for pid=5429 comm="syz.1.1474" path="/290/file0" dev="tmpfs" ino=1704 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 318.654392][ T5441] loop0: detected capacity change from 0 to 256 [ 318.687132][ T5441] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 318.784473][ T617] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 318.968787][ T617] usb 2-1: device descriptor read/64, error -71 [ 319.018068][ T5452] 9pnet_fd: Insufficient options for proto=fd [ 319.035651][ T5454] fuse: Bad value for 'user_id' [ 319.126229][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 319.306457][ T617] usb 2-1: device descriptor read/64, error -71 [ 319.743024][ T617] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 319.758013][ T28] audit: type=1326 audit(1760904133.191:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.5.1484" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f028e38efc9 code=0x0 [ 319.838495][ T5466] 9pnet_fd: Insufficient options for proto=fd [ 319.868670][ T5464] syz.5.1484[5464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.868772][ T5464] syz.5.1484[5464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.923843][ T617] usb 2-1: device descriptor read/64, error -71 [ 320.082298][ T5471] overlayfs: failed to clone upperpath [ 320.108887][ T301] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 320.357221][ T617] usb 2-1: device descriptor read/64, error -71 [ 320.487297][ T617] usb usb2-port1: attempt power cycle [ 320.494156][ T301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.505381][ T301] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 320.516834][ T301] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.526157][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.539454][ T301] usb 1-1: Product: syz [ 320.543926][ T301] usb 1-1: Manufacturer: syz [ 320.548597][ T301] usb 1-1: SerialNumber: syz [ 320.841111][ T5462] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 320.951244][ T5482] 9pnet_fd: Insufficient options for proto=fd [ 321.278836][ T301] cdc_ncm 1-1:1.0: bind() failure [ 322.153509][ T28] audit: type=1400 audit(1760904135.397:447): avc: denied { setopt } for pid=5489 comm="syz.1.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 322.193100][ T5492] 9pnet_fd: Insufficient options for proto=fd [ 322.205717][ T301] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 322.213032][ T301] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 322.221232][ T301] usb 1-1: USB disconnect, device number 16 [ 322.506374][ T5506] device lo entered promiscuous mode [ 322.513435][ T5506] device tunl0 entered promiscuous mode [ 322.520259][ T5506] device gre0 entered promiscuous mode [ 322.528432][ T5506] device gretap0 entered promiscuous mode [ 322.535877][ T5506] device erspan0 entered promiscuous mode [ 322.542975][ T5506] device ip_vti0 entered promiscuous mode [ 322.550835][ T5506] device ip6_vti0 entered promiscuous mode [ 322.557932][ T5506] device sit0 entered promiscuous mode [ 322.565079][ T5506] device ip6tnl0 entered promiscuous mode [ 322.572036][ T5506] device ip6gre0 entered promiscuous mode [ 322.579357][ T5506] device syz_tun entered promiscuous mode [ 322.586415][ T5506] device ip6gretap0 entered promiscuous mode [ 322.593627][ T5506] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.600897][ T5506] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.609822][ T5506] device bridge0 entered promiscuous mode [ 322.645932][ T5506] device vcan0 entered promiscuous mode [ 322.662478][ T28] audit: type=1400 audit(1760904135.867:448): avc: denied { create } for pid=5509 comm="syz.0.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 322.662526][ T5506] device dummy0 entered promiscuous mode [ 322.755738][ T5506] device veth0 entered promiscuous mode [ 322.776594][ T5506] device veth1 entered promiscuous mode [ 322.797948][ T5506] device wg0 entered promiscuous mode [ 322.819930][ T5506] device wg1 entered promiscuous mode [ 322.842663][ T5506] device wg2 entered promiscuous mode [ 322.861690][ T5506] device veth0_to_bridge entered promiscuous mode [ 322.887211][ T5506] device veth1_to_bridge entered promiscuous mode [ 322.910398][ T5506] device veth0_to_bond entered promiscuous mode [ 322.932722][ T5506] device bond_slave_0 entered promiscuous mode [ 322.953681][ T5506] device veth1_to_bond entered promiscuous mode [ 322.976342][ T5506] device bond_slave_1 entered promiscuous mode [ 323.003416][ T5506] device veth0_to_team entered promiscuous mode [ 323.021301][ T5506] device team_slave_0 entered promiscuous mode [ 323.036148][ T5506] device veth1_to_team entered promiscuous mode [ 323.050991][ T5506] device team_slave_1 entered promiscuous mode [ 323.076257][ T5506] device veth0_to_batadv entered promiscuous mode [ 323.136096][ T5506] device batadv_slave_0 entered promiscuous mode [ 323.155344][ T5506] device veth1_to_batadv entered promiscuous mode [ 323.172082][ T5506] device batadv_slave_1 entered promiscuous mode [ 323.187522][ T5506] device xfrm0 entered promiscuous mode [ 323.202381][ T5506] device veth0_to_hsr entered promiscuous mode [ 323.237444][ T5506] device hsr_slave_0 entered promiscuous mode [ 323.262962][ T5506] device veth1_to_hsr entered promiscuous mode [ 323.288078][ T5506] device hsr_slave_1 entered promiscuous mode [ 323.311712][ T5506] device veth1_virt_wifi entered promiscuous mode [ 323.337237][ T5506] device veth0_virt_wifi entered promiscuous mode [ 323.362693][ T5506] device veth1_vlan entered promiscuous mode [ 323.394283][ T5506] device vlan0 entered promiscuous mode [ 323.405136][ T5506] device vlan1 entered promiscuous mode [ 323.418167][ T5506] device veth1_macvtap entered promiscuous mode [ 323.434629][ T5506] device veth0_macvtap entered promiscuous mode [ 323.451315][ T5506] device syztnl2 entered promiscuous mode [ 323.459279][ T5506] device syztnl1 entered promiscuous mode [ 323.468197][ T5507] device macsec1 entered promiscuous mode [ 323.473961][ T5507] device bridge0 entered promiscuous mode [ 323.479966][ T5507] bridge0: port 3(macsec1) entered blocking state [ 323.486446][ T5507] bridge0: port 3(macsec1) entered disabled state [ 323.493966][ T5507] device bridge0 left promiscuous mode [ 323.501719][ T5512] veth0_to_batadv: default FDB implementation only supports local addresses [ 323.593808][ T5521] 9pnet_fd: Insufficient options for proto=fd [ 323.594000][ T5523] loop0: detected capacity change from 0 to 16 [ 323.630139][ T5523] erofs: (device loop0): mounted with root inode @ nid 36. [ 323.652119][ T5528] overlayfs: failed to clone upperpath [ 323.893291][ T5533] overlayfs: failed to clone upperpath [ 325.355355][ T5543] bridge_slave_0: default FDB implementation only supports local addresses [ 325.958551][ T2579] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 326.018976][ T5554] 9pnet_fd: Insufficient options for proto=fd [ 326.149130][ T28] audit: type=1400 audit(1760904395.089:449): avc: denied { ioctl } for pid=5562 comm="syz.5.1512" path="socket:[31306]" dev="sockfs" ino=31306 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 326.176653][ T2579] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.193948][ T2579] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 326.209425][ T2579] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.222236][ T2579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.230977][ T2579] usb 2-1: Product: syz [ 326.235552][ T2579] usb 2-1: Manufacturer: syz [ 326.240513][ T2579] usb 2-1: SerialNumber: syz [ 326.473146][ T5550] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.510430][ T5567] 9pnet_fd: Insufficient options for proto=fd [ 326.597972][ T28] audit: type=1400 audit(1760904395.505:450): avc: denied { create } for pid=5570 comm="syz.0.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.621428][ T28] audit: type=1400 audit(1760904395.532:451): avc: denied { write } for pid=5570 comm="syz.0.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.648109][ T28] audit: type=1400 audit(1760904395.532:452): avc: denied { nlmsg_write } for pid=5570 comm="syz.0.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 326.661689][ T5575] loop0: detected capacity change from 0 to 512 [ 326.699164][ T2579] cdc_ncm 2-1:1.0: bind() failure [ 326.713630][ T2579] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 326.737624][ T2579] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 326.757136][ T2579] usb 2-1: USB disconnect, device number 15 [ 326.829958][ T5583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1518'. [ 327.816296][ T5597] overlayfs: failed to resolve './file0': -2 [ 328.519378][ T5602] loop0: detected capacity change from 0 to 512 [ 328.529243][ T5602] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.535774][ T5602] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.538526][ T5601] 9pnet_fd: Insufficient options for proto=fd [ 328.548686][ T5602] EXT4-fs (loop0): Test dummy encryption mode enabled [ 328.555579][ T5602] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 328.571722][ T5602] EXT4-fs (loop0): 1 truncate cleaned up [ 328.577610][ T5602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 329.636240][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 329.690238][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 329.721722][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.749672][ T282] EXT4-fs (loop0): unmounting filesystem. [ 329.757080][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 329.766320][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.774990][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.783466][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.791826][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.801123][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.924566][ T5622] 9pnet_fd: Insufficient options for proto=fd [ 331.311336][ T28] audit: type=1400 audit(1760904399.861:453): avc: denied { ioctl } for pid=5627 comm="syz.1.1532" path="socket:[32050]" dev="sockfs" ino=32050 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 331.315608][ T5642] kvm [5632]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 332.567233][ T5642] kvm [5632]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 332.671738][ T5658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1540'. [ 332.721623][ T5642] kvm [5632]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 332.732941][ T5642] kvm [5632]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 332.741473][ T5642] kvm [5632]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 332.915005][ T5664] 9pnet_fd: Insufficient options for proto=fd [ 333.099960][ T28] audit: type=1400 audit(1760904401.504:454): avc: denied { mounton } for pid=5668 comm="syz.0.1543" path="/281/file0" dev="tmpfs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 333.123004][ T5669] fuse: Bad value for 'fd' [ 333.126188][ T5671] 9pnet_fd: Insufficient options for proto=fd [ 333.322429][ T5679] fuse: Invalid rootmode [ 334.072041][ T5687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 334.118315][ T5691] fuse: Invalid rootmode [ 334.984218][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1551'. [ 335.430907][ T5709] 9pnet_fd: Insufficient options for proto=fd [ 335.979228][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 336.142211][ T28] audit: type=1326 audit(1760904404.310:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5719 comm="syz.2.1560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6de658efc9 code=0x0 [ 336.630396][ T5733] 9pnet_fd: Insufficient options for proto=fd [ 336.720427][ T5735] FAULT_INJECTION: forcing a failure. [ 336.720427][ T5735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.765949][ T5735] CPU: 0 PID: 5735 Comm: syz.0.1563 Not tainted syzkaller #0 [ 336.773406][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.783534][ T5735] Call Trace: [ 336.786834][ T5735] [ 336.789893][ T5735] __dump_stack+0x21/0x24 [ 336.794263][ T5735] dump_stack_lvl+0xee/0x150 [ 336.798875][ T5735] ? __cfi_dump_stack_lvl+0x8/0x8 [ 336.803926][ T5735] ? finish_task_switch+0x16b/0x7b0 [ 336.809155][ T5735] dump_stack+0x15/0x24 [ 336.813348][ T5735] should_fail_ex+0x3d4/0x520 [ 336.818155][ T5735] should_fail+0xb/0x10 [ 336.822354][ T5735] should_fail_usercopy+0x1a/0x20 [ 336.827612][ T5735] _copy_from_user+0x1e/0xc0 [ 336.832248][ T5735] __sys_bpf+0x277/0x780 [ 336.836524][ T5735] ? bpf_link_show_fdinfo+0x320/0x320 [ 336.841942][ T5735] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 336.848039][ T5735] ? __cfi_native_x2apic_wait_icr_idle+0x10/0x10 [ 336.854411][ T5735] __x64_sys_bpf+0x7c/0x90 [ 336.858867][ T5735] x64_sys_call+0x488/0x9a0 [ 336.863398][ T5735] do_syscall_64+0x4c/0xa0 [ 336.868027][ T5735] ? clear_bhb_loop+0x30/0x80 [ 336.872822][ T5735] ? clear_bhb_loop+0x30/0x80 [ 336.877581][ T5735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.883533][ T5735] RIP: 0033:0x7f564d38efc9 [ 336.888164][ T5735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.907975][ T5735] RSP: 002b:00007f564e1f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.916779][ T5735] RAX: ffffffffffffffda RBX: 00007f564d5e5fa0 RCX: 00007f564d38efc9 [ 336.924798][ T5735] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 336.932799][ T5735] RBP: 00007f564e1f9090 R08: 0000000000000000 R09: 0000000000000000 [ 336.940835][ T5735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.948828][ T5735] R13: 00007f564d5e6038 R14: 00007f564d5e5fa0 R15: 00007ffe7c79d8b8 [ 336.956834][ T5735] [ 337.094086][ T5745] incfs: Options parsing error. -22 [ 337.099511][ T5745] incfs: mount failed -22 [ 337.287702][ T5750] device batadv_slave_1 entered promiscuous mode [ 338.008440][ T5744] device batadv_slave_1 left promiscuous mode [ 338.611434][ T5773] 9pnet_fd: Insufficient options for proto=fd [ 338.687625][ T5775] overlayfs: failed to resolve './file1': -2 [ 338.937531][ T5785] 9pnet_fd: Insufficient options for proto=fd [ 339.945756][ T5790] 9pnet_fd: Insufficient options for proto=fd [ 340.880270][ T5796] fuse: Bad value for 'rootmode' [ 342.048782][ T5821] 9pnet_fd: Insufficient options for proto=fd [ 342.461901][ T5834] 9pnet_fd: Insufficient options for proto=fd [ 342.780010][ T5844] xt_hashlimit: size too large, truncated to 1048576 [ 343.446024][ T5859] 9pnet_fd: Insufficient options for proto=fd [ 343.728658][ T5863] 9pnet_fd: Insufficient options for proto=fd [ 344.507581][ T5886] overlayfs: failed to clone upperpath [ 345.249923][ T5891] overlayfs: failed to clone upperpath [ 345.376351][ T5895] 9pnet_fd: Insufficient options for proto=fd [ 345.383585][ T5897] 9pnet_fd: Insufficient options for proto=fd [ 345.589065][ T5905] 9pnet_fd: Insufficient options for proto=fd [ 346.236592][ T5912] 9pnet_fd: Insufficient options for proto=fd [ 348.005436][ T5934] 9pnet_fd: Insufficient options for proto=fd [ 348.043311][ T5942] 9pnet_fd: Insufficient options for proto=fd [ 348.228812][ T5950] overlayfs: failed to clone upperpath [ 348.424803][ T617] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 348.621015][ T617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.632066][ T617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.641988][ T617] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 348.651118][ T617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.660256][ T617] usb 2-1: config 0 descriptor?? [ 349.104714][ T617] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 349.123487][ T617] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 349.603855][ T617] hid-steam 0003:28DE:1142.0005: unknown main item tag 0x0 [ 349.717598][ T617] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 349.876025][ T617] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 349.908745][ T617] hid-steam 0003:28DE:1142.0004: No HID_FEATURE_REPORT submitted - nothing to read [ 349.925503][ T617] usb 2-1: USB disconnect, device number 16 [ 349.934091][ T617] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 349.979417][ T28] audit: type=1400 audit(1760904417.091:456): avc: denied { compute_member } for pid=5970 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 349.999988][ T5973] fido_id[5973]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 350.115156][ T5977] 9pnet_fd: Insufficient options for proto=fd [ 350.181620][ T5985] 9pnet_fd: Insufficient options for proto=fd [ 350.723790][ T5992] overlayfs: failed to resolve './file0': -2 [ 350.987918][ T5997] loop0: detected capacity change from 0 to 512 [ 351.029681][ T5997] EXT4-fs (loop0): 1 orphan inode deleted [ 351.035980][ T5997] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 351.045714][ T1021] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 351.062672][ T5997] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.068784][ T1021] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:62: Failed to release dquot type 1 [ 351.839799][ T6001] overlayfs: failed to clone upperpath [ 352.131575][ T6019] 9pnet_fd: Insufficient options for proto=fd [ 352.154900][ T282] EXT4-fs (loop0): unmounting filesystem. [ 352.216880][ T6029] 9pnet_fd: Insufficient options for proto=fd [ 352.786874][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 356.764419][ T6067] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 358.017452][ T6076] 9pnet_fd: Insufficient options for proto=fd [ 358.166043][ T6086] loop0: detected capacity change from 0 to 256 [ 358.832521][ T6089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1670'. [ 358.839534][ T6092] 9pnet_fd: Insufficient options for proto=fd [ 358.849815][ T6086] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 359.439219][ T6107] 9pnet_fd: Insufficient options for proto=fd [ 362.168452][ T6136] loop0: detected capacity change from 0 to 512 [ 362.212163][ T6090] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 362.345978][ T6146] 9pnet_fd: Insufficient options for proto=fd [ 363.770737][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1688'. [ 365.486859][ T6174] 9pnet_fd: Insufficient options for proto=fd [ 365.637986][ T6178] 9pnet_fd: Insufficient options for proto=fd [ 366.659231][ T6190] fuse: Unknown parameter '0x0000000000000003' [ 366.912205][ T6198] overlayfs: failed to resolve './file1': -2 [ 367.304716][ T6196] loop0: detected capacity change from 0 to 32768 [ 367.785143][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1701'. [ 367.894377][ T6210] mmap: syz.5.1702 (6210) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 368.121567][ T6223] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1703'. [ 368.409713][ T28] audit: type=1400 audit(1760904433.834:457): avc: denied { setopt } for pid=6211 comm="syz.1.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 368.709425][ T6230] fuse: Unknown parameter '0x0000000000000003' [ 369.322304][ T6243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1713'. [ 369.454067][ T6256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6256 comm=syz.0.1716 [ 369.503033][ T6258] loop0: detected capacity change from 0 to 16 [ 369.519597][ T6258] erofs: (device loop0): mounted with root inode @ nid 36. [ 369.757720][ T6264] 9pnet_fd: Insufficient options for proto=fd [ 371.487369][ T6301] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 371.505608][ T28] audit: type=1400 audit(1760904436.937:458): avc: denied { bind } for pid=6297 comm="syz.1.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 371.883732][ T6307] 9pnet_fd: Insufficient options for proto=fd [ 372.014594][ T6312] 9pnet_fd: Insufficient options for proto=fd [ 372.284352][ T6314] 9pnet_fd: Insufficient options for proto=fd [ 372.358908][ T6317] loop0: detected capacity change from 0 to 16 [ 372.368143][ T6317] erofs: (device loop0): mounted with root inode @ nid 36. [ 372.877236][ T6327] overlayfs: failed to clone upperpath [ 373.014611][ T6333] 9pnet_fd: Insufficient options for proto=fd [ 373.368687][ T28] audit: type=1326 audit(1760904438.692:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6335 comm="syz.2.1742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6de658efc9 code=0x0 [ 373.843465][ T6346] 9pnet_fd: Insufficient options for proto=fd [ 373.961499][ T6353] 9pnet_fd: Insufficient options for proto=fd [ 374.526764][ T6362] 9pnet_fd: Insufficient options for proto=fd [ 375.161008][ T6378] 9pnet_fd: Insufficient options for proto=fd [ 375.161481][ T6380] 9pnet_fd: Insufficient options for proto=fd [ 376.799781][ T6399] overlayfs: failed to resolve './file0': -2 [ 377.158393][ T6402] overlayfs: failed to clone upperpath [ 377.698712][ T6398] fuse: Unknown parameter '0x0000000000000003' [ 377.704223][ T6409] 9pnet_fd: Insufficient options for proto=fd [ 377.712614][ T6410] loop0: detected capacity change from 0 to 512 [ 377.769460][ T6410] EXT4-fs (loop0): 1 orphan inode deleted [ 377.784361][ T1021] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 377.798017][ T6410] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 377.818520][ T1021] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:62: Failed to release dquot type 1 [ 377.834691][ T6410] ext4 filesystem being mounted at /325/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 377.877687][ T617] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 378.458624][ T617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.469854][ T617] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 378.481722][ T617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.490970][ T617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.499239][ T617] usb 2-1: Product: syz [ 378.503567][ T617] usb 2-1: Manufacturer: syz [ 378.508294][ T617] usb 2-1: SerialNumber: syz [ 378.665519][ T282] EXT4-fs (loop0): unmounting filesystem. [ 378.704650][ T6430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1771'. [ 378.749920][ T6430] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6430 comm=syz.4.1771 [ 378.765910][ T28] audit: type=1400 audit(1760904443.642:460): avc: denied { getopt } for pid=6427 comm="syz.5.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 378.791063][ T6392] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 378.823233][ T28] audit: type=1400 audit(1760904443.725:461): avc: denied { mount } for pid=6435 comm="syz.4.1773" name="/" dev="ramfs" ino=33763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 379.068475][ T617] cdc_ncm 2-1:1.0: bind() failure [ 379.077152][ T6445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1775'. [ 379.080173][ T617] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 379.093536][ T617] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 379.102782][ T617] usb 2-1: USB disconnect, device number 17 [ 379.293925][ T6451] overlayfs: failed to clone upperpath [ 379.772012][ T2579] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 380.055937][ T2579] usb 1-1: unable to get BOS descriptor or descriptor too short [ 380.064164][ T2579] usb 1-1: not running at top speed; connect to a high speed hub [ 380.073187][ T2579] usb 1-1: config 1 interface 0 has no altsetting 0 [ 380.083022][ T2579] usb 1-1: string descriptor 0 read error: -22 [ 380.090287][ T2579] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 380.099963][ T2579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.561318][ T2579] usbhid 1-1:1.0: can't add hid device: -71 [ 380.587639][ T2579] usbhid: probe of 1-1:1.0 failed with error -71 [ 380.630102][ T2579] usb 1-1: USB disconnect, device number 17 [ 380.986664][ T6473] 9pnet_fd: Insufficient options for proto=fd [ 381.182947][ T6477] loop0: detected capacity change from 0 to 256 [ 381.219977][ T6477] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 382.854809][ T28] audit: type=1400 audit(1760904447.447:462): avc: denied { getopt } for pid=6479 comm="syz.1.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 383.098956][ T6497] overlayfs: failed to clone upperpath [ 383.334739][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'. [ 384.423523][ T6527] overlayfs: failed to clone upperpath [ 384.696509][ T6529] 9pnet_fd: Insufficient options for proto=fd [ 385.778115][ T6531] 9p: Unknown access argument 01777777777777777777777: -34 [ 385.795052][ T6531] overlayfs: failed to clone upperpath [ 386.050069][ T6555] 9pnet_fd: Insufficient options for proto=fd [ 386.636119][ T6566] overlayfs: failed to clone upperpath [ 387.308792][ T6569] loop0: detected capacity change from 0 to 512 [ 387.442839][ T6569] EXT4-fs (loop0): 1 orphan inode deleted [ 387.450273][ T6569] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 387.462422][ T1020] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 387.495270][ T6569] ext4 filesystem being mounted at /330/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.507389][ T1020] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:61: Failed to release dquot type 1 [ 388.014191][ T6578] overlayfs: failed to clone upperpath [ 388.322568][ T282] EXT4-fs (loop0): unmounting filesystem. [ 388.444162][ T6581] 9pnet_fd: Insufficient options for proto=fd [ 388.543102][ T6587] 9pnet_fd: Insufficient options for proto=fd [ 388.686020][ T6584] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1814'. [ 389.182759][ T542] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 389.389651][ T542] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.421192][ T542] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 389.452132][ T542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.479459][ T542] usb 1-1: config 0 descriptor?? [ 389.497910][ T542] usb 1-1: bad CDC descriptors [ 390.104245][ T6609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1820'. [ 390.117592][ T6611] 9pnet_fd: Insufficient options for proto=fd [ 390.208131][ T301] usb 1-1: USB disconnect, device number 18 [ 390.366863][ T6620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1825'. [ 390.503150][ T6620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1825'. [ 390.803423][ T6629] loop0: detected capacity change from 0 to 256 [ 390.856068][ T6629] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 392.854384][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1833'. [ 392.934185][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1831'. [ 393.818781][ T6668] loop0: detected capacity change from 0 to 16 [ 393.846743][ T6668] erofs: (device loop0): mounted with root inode @ nid 36. [ 394.026301][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1841'. [ 397.007125][ T6722] 9pnet_fd: Insufficient options for proto=fd [ 397.347794][ T6730] loop0: detected capacity change from 0 to 512 [ 397.355058][ T6728] 9pnet_fd: Insufficient options for proto=fd [ 397.474481][ T6739] 9pnet_fd: Insufficient options for proto=fd [ 397.514711][ T6730] EXT4-fs (loop0): 1 orphan inode deleted [ 397.525219][ T6730] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 397.534526][ T1022] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 397.563932][ T1022] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:63: Failed to release dquot type 1 [ 397.880322][ T6730] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.591983][ T282] EXT4-fs (loop0): unmounting filesystem. [ 399.933719][ T6766] 9pnet_fd: Insufficient options for proto=fd [ 400.078043][ T6764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1863'. [ 400.207470][ T6771] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1863'. [ 400.216610][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 400.791374][ T6775] 9pnet_fd: Insufficient options for proto=fd [ 400.816712][ T6776] 9pnet_fd: Insufficient options for proto=fd [ 400.987446][ T6781] overlayfs: unrecognized mount option "verity=on" or missing value [ 401.483950][ T6788] loop0: detected capacity change from 0 to 512 [ 401.490821][ T6788] EXT4-fs: Ignoring removed i_version option [ 401.499388][ T6788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.509546][ T6788] EXT4-fs (loop0): orphan cleanup on readonly fs [ 401.516949][ T6788] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1871: bg 0: block 248: padding at end of block bitmap is not set [ 401.531709][ T6788] Quota error (device loop0): write_blk: dquota write failed [ 401.539411][ T6788] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 401.549743][ T6788] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.1871: Failed to acquire dquot type 1 [ 401.562209][ T6788] EXT4-fs (loop0): 1 truncate cleaned up [ 401.568205][ T6788] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 401.614910][ T282] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 401.628122][ T282] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 12 [ 401.652180][ T6790] EXT4-fs (loop0): unmounting filesystem. [ 402.452474][ T1021] device bridge_slave_1 left promiscuous mode [ 402.472543][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.515783][ T1021] device bridge_slave_0 left promiscuous mode [ 402.643906][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.098337][ T1021] device veth1_macvtap left promiscuous mode [ 403.104442][ T1021] device veth0_vlan left promiscuous mode [ 403.287650][ T6808] 9pnet_fd: Insufficient options for proto=fd [ 403.367445][ T6819] 9pnet_fd: Insufficient options for proto=fd [ 403.532257][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.539456][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.547899][ T6804] device bridge_slave_0 entered promiscuous mode [ 403.556274][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1886'. [ 403.566506][ T6829] device veth1_macvtap left promiscuous mode [ 403.586141][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.595320][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.635395][ T6804] device bridge_slave_1 entered promiscuous mode [ 404.514324][ T6842] 9pnet_fd: Insufficient options for proto=fd [ 404.730630][ T28] audit: type=1400 audit(1760904467.644:463): avc: denied { watch_reads } for pid=6855 comm="syz.4.1893" path="/424" dev="tmpfs" ino=2406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 404.754185][ T6857] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 404.755154][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.763089][ T6857] overlayfs: conflicting options: userxattr,redirect_dir=on [ 404.794632][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.857832][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.874095][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.882628][ T1022] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.889822][ T1022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.945945][ T6804] device veth0_vlan entered promiscuous mode [ 405.040412][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 405.058993][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 405.073308][ T6868] 9pnet_fd: Insufficient options for proto=fd [ 405.080286][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 405.117099][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.124674][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.144029][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.155373][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.163773][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.173078][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.182074][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.191925][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.202603][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 405.210870][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.220230][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.228524][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.245274][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 405.259442][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 405.273403][ T6873] IPv6: sit1: Disabled Multicast RS [ 405.322245][ T6804] device veth1_macvtap entered promiscuous mode [ 405.343648][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 405.352057][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 405.360917][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 405.387867][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 405.396642][ T1022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 405.594329][ T6884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1902'. [ 405.662724][ T6890] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 406.302728][ T6908] 9pnet_fd: Insufficient options for proto=fd [ 407.750416][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1915'. [ 407.805337][ T6932] 9pnet_fd: Insufficient options for proto=fd [ 408.940597][ T6948] 9pnet_fd: Insufficient options for proto=fd [ 410.093388][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1927'. [ 410.112714][ T6961] overlayfs: failed to clone upperpath [ 410.417215][ T1683] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 410.481608][ T6978] 9pnet_fd: Insufficient options for proto=fd [ 410.622974][ T1683] usb 2-1: Using ep0 maxpacket: 16 [ 410.631622][ T1683] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 410.650861][ T1683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.667292][ T1683] usb 2-1: Product: syz [ 410.677066][ T1683] usb 2-1: Manufacturer: syz [ 410.687686][ T1683] usb 2-1: SerialNumber: syz [ 410.705666][ T1683] usb 2-1: config 0 descriptor?? [ 410.720641][ T1683] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 410.937103][ T1683] usb 2-1: USB disconnect, device number 18 [ 411.161648][ T28] audit: type=1400 audit(1760904473.591:464): avc: denied { execute } for pid=6974 comm="syz.5.1930" path="/341/file1" dev="tmpfs" ino=1932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 411.322953][ T6987] syz.5.1930 (6987) used greatest stack depth: 20016 bytes left [ 411.433240][ T6994] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=681636878 (43624760192 ns) > initial count (12691487104 ns). Using initial count to start timer. [ 411.878908][ T7009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1939'. [ 412.382710][ T7019] loop6: detected capacity change from 0 to 512 [ 412.452000][ T7019] EXT4-fs (loop6): 1 orphan inode deleted [ 412.458336][ T7019] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 412.467635][ T1021] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 412.478501][ T1021] EXT4-fs error (device loop6): ext4_release_dquot:6839: comm kworker/u4:62: Failed to release dquot type 1 [ 412.490590][ T7019] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.615389][ T7030] 9pnet_fd: Insufficient options for proto=fd [ 412.631378][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1944'. [ 413.332852][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 414.476342][ T7052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1952'. [ 416.854258][ T7091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1964'. [ 417.043195][ T7099] syz.5.1966 uses obsolete (PF_INET,SOCK_PACKET) [ 417.068302][ T7100] 9pnet_fd: Insufficient options for proto=fd [ 417.722188][ T7117] syz.2.1972[7117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.722272][ T7117] syz.2.1972[7117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.735753][ T28] audit: type=1400 audit(1760904479.658:465): avc: denied { nlmsg_read } for pid=7111 comm="syz.2.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 418.361191][ T7123] loop6: detected capacity change from 0 to 512 [ 418.398435][ T7123] EXT4-fs (loop6): 1 orphan inode deleted [ 418.404401][ T7123] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 418.413958][ T7123] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.430307][ T1022] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 418.617255][ T1022] EXT4-fs error (device loop6): ext4_release_dquot:6839: comm kworker/u4:63: Failed to release dquot type 1 [ 418.972167][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1976'. [ 419.333477][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 419.927969][ T7157] 9pnet_fd: Insufficient options for proto=fd [ 420.785935][ T7183] random: crng reseeded on system resumption [ 420.986929][ T7183] tipc: Started in network mode [ 420.992326][ T7183] tipc: Node identity 86c054176344, cluster identity 4711 [ 421.001055][ T7183] tipc: Enabled bearer , priority 0 [ 421.021703][ T7183] device syzkaller0 entered promiscuous mode [ 421.036955][ T28] audit: type=1400 audit(1760904482.475:466): avc: denied { append } for pid=7170 comm="syz.6.1989" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 421.428829][ T7170] tipc: Resetting bearer [ 421.435943][ T7170] tipc: Disabling bearer [ 421.709775][ T7191] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 421.736106][ T7191] overlayfs: conflicting lowerdir path [ 422.334612][ T7206] 9pnet_fd: Insufficient options for proto=fd [ 423.129720][ T1683] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 423.244927][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2005'. [ 423.250616][ T7226] overlayfs: failed to clone upperpath [ 423.267104][ T7228] netlink: 'syz.5.2007': attribute type 6 has an invalid length. [ 423.368738][ T1683] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.381927][ T1683] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 423.393778][ T1683] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.414122][ T1683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.432921][ T1683] usb 2-1: Product: syz [ 423.443699][ T1683] usb 2-1: Manufacturer: syz [ 423.468751][ T1683] usb 2-1: SerialNumber: syz [ 423.698673][ T7222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 423.929233][ T1683] cdc_ncm 2-1:1.0: bind() failure [ 423.940941][ T1683] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 423.949767][ T1683] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 423.961005][ T1683] usb 2-1: USB disconnect, device number 19 [ 424.392219][ T7246] xt_hashlimit: max too large, truncated to 1048576 [ 424.399024][ T7246] xt_hashlimit: overflow, try lower: 0/0 [ 424.439459][ T7249] loop6: detected capacity change from 0 to 4096 [ 424.457066][ T7249] EXT4-fs: Ignoring removed mblk_io_submit option [ 424.466216][ T7249] EXT4-fs (loop6): Test dummy encryption mode enabled [ 424.499511][ T7249] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 424.654659][ T7262] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2018'. [ 425.891398][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 426.035319][ T28] audit: type=1400 audit(1760904487.324:467): avc: denied { write } for pid=7263 comm="syz.5.2019" path="socket:[36895]" dev="sockfs" ino=36895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 426.075225][ T7276] 9pnet_fd: Insufficient options for proto=fd [ 427.381902][ T7294] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2028'. [ 427.397488][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2028'. [ 427.436034][ T7296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2029'. [ 427.515210][ T2579] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 427.723001][ T2579] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 427.732373][ T2579] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.741766][ T2579] usb 2-1: config 0 descriptor?? [ 428.631638][ T2579] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 428.641781][ T2579] asix: probe of 2-1:0.0 failed with error -61 [ 428.666405][ T7314] 9pnet_fd: Insufficient options for proto=fd [ 428.971257][ T28] audit: type=1400 audit(1760904490.039:468): avc: denied { watch } for pid=7318 comm="syz.6.2036" path="/" dev="configfs" ino=14081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 429.843285][ T7326] netlink: 'syz.5.2038': attribute type 1 has an invalid length. [ 430.009183][ T7328] loop6: detected capacity change from 0 to 512 [ 430.036739][ T7328] EXT4-fs (loop6): 1 orphan inode deleted [ 430.042758][ T7328] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 430.052012][ T1000] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 430.052248][ T7328] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 430.062081][ T1000] EXT4-fs error (device loop6): ext4_release_dquot:6839: comm kworker/u4:41: Failed to release dquot type 1 [ 430.411600][ T1683] usb 2-1: USB disconnect, device number 20 [ 430.940685][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 431.169600][ T7343] overlayfs: failed to resolve './file1': -2 [ 432.311558][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 432.336333][ T7361] device veth0_vlan left promiscuous mode [ 432.342778][ T7361] device veth0_vlan entered promiscuous mode [ 432.350263][ T7361] device veth1_macvtap left promiscuous mode [ 432.358096][ T7361] device veth1_macvtap entered promiscuous mode [ 432.370142][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 432.377862][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.385758][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.394187][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.401289][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.409604][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 432.418070][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.426925][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.434007][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.441885][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 432.450480][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 432.458834][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 432.467165][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 432.475503][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 432.484379][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 432.492684][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 432.500988][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 432.509275][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 432.517497][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.526025][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.534593][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.543184][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.552021][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.560293][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 432.568619][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.576785][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 432.585647][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.594462][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.602932][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.611394][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.619391][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.627180][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.634734][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.643257][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.651628][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 432.659564][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 432.667263][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 432.674859][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 432.687079][ T617] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 433.336549][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 433.336908][ T7386] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2055'. [ 433.345652][ T28] audit: type=1400 audit(1760904494.065:469): avc: denied { nlmsg_read } for pid=7385 comm="syz.5.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 434.429093][ T7412] 9pnet_fd: Insufficient options for proto=fd [ 434.799177][ T7421] xt_CT: No such helper "pptp" [ 434.971104][ T7414] device wg2 left promiscuous mode [ 435.325672][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2068'. [ 435.886221][ T7435] bridge0: port 3(gretap0) entered blocking state [ 435.892949][ T7435] bridge0: port 3(gretap0) entered disabled state [ 435.900624][ T7435] device gretap0 entered promiscuous mode [ 435.907500][ T7435] device gretap0 left promiscuous mode [ 435.913217][ T7435] bridge0: port 3(gretap0) entered disabled state [ 436.390535][ T7461] xt_CT: No such helper "pptp" [ 437.455647][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 437.592038][ T7468] loop6: detected capacity change from 0 to 512 [ 437.602873][ T7469] 9pnet_fd: Insufficient options for proto=fd [ 437.629549][ T7479] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 437.646881][ T7468] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2081: casefold flag without casefold feature [ 437.670941][ T7468] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2081: couldn't read orphan inode 15 (err -117) [ 437.685544][ T7481] netlink: 'syz.4.2086': attribute type 3 has an invalid length. [ 437.704798][ T7481] netlink: 'syz.4.2086': attribute type 3 has an invalid length. [ 437.712766][ T7468] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 437.882263][ T7505] 9pnet_fd: Insufficient options for proto=fd [ 438.360515][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2098'. [ 438.456505][ T7518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7518 comm=syz.5.2100 [ 438.517786][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 438.575691][ T7525] netlink: 'syz.5.2105': attribute type 4 has an invalid length. [ 438.699943][ T7532] syz.1.2104[7532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.700091][ T7532] syz.1.2104[7532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.707093][ T7533] 9pnet_fd: Insufficient options for proto=fd [ 438.723314][ T7535] loop6: detected capacity change from 0 to 16 [ 438.736690][ T7535] erofs: (device loop6): mounted with root inode @ nid 36. [ 438.746825][ T7535] erofs: (device loop6): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 438.753872][ T7537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7537 comm=syz.4.2108 [ 438.757528][ T7535] erofs: (device loop6): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 438.815690][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2110'. [ 439.030957][ T7550] erofs: (device loop6): erofs_readdir: invalid de[0].nameoff 0 @ nid 36 [ 440.122569][ T7558] fuse: Bad value for 'fd' [ 440.732058][ T7661] 9pnet_fd: Insufficient options for proto=fd [ 440.752326][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 440.754051][ T7667] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2121'. [ 444.643493][ T7709] 9pnet_fd: Insufficient options for proto=fd [ 444.664613][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2134'. [ 444.840670][ T7717] loop6: detected capacity change from 0 to 40427 [ 444.849873][ T7717] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 444.857714][ T7717] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 444.867125][ T7717] F2FS-fs (loop6): invalid crc value [ 444.887203][ T7717] F2FS-fs (loop6): Found nat_bits in checkpoint [ 444.928481][ T7717] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 444.935572][ T7717] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 445.064771][ T7729] 9pnet_fd: Insufficient options for proto=fd [ 446.541047][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2143'. [ 446.585545][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2147'. [ 446.618521][ T7759] loop6: detected capacity change from 0 to 1024 [ 446.625870][ T7759] EXT4-fs: quotafile must be on filesystem root [ 446.985063][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 448.598024][ T1685] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 448.792921][ T1685] usb 2-1: Using ep0 maxpacket: 32 [ 448.805815][ T1685] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.817938][ T1685] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 448.827488][ T1685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.835835][ T1685] usb 2-1: Product: syz [ 448.840408][ T1685] usb 2-1: Manufacturer: syz [ 448.845181][ T1685] usb 2-1: SerialNumber: syz [ 448.859792][ T1685] usb 2-1: config 0 descriptor?? [ 448.874447][ T1685] usb 2-1: bad CDC descriptors [ 448.887505][ T1685] usb 2-1: unsupported MDLM descriptors [ 448.973411][ T7804] fuse: Unknown parameter 'roptmode' [ 449.242664][ T7805] overlayfs: failed to clone upperpath [ 450.973303][ T301] usb 2-1: USB disconnect, device number 21 [ 451.132800][ T7822] syz.2.2162[7822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.132930][ T7822] syz.2.2162[7822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.198116][ T7823] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2162'. [ 451.296922][ T7839] tipc: New replicast peer: 255.255.255.255 [ 451.303991][ T7839] tipc: Enabled bearer , priority 10 [ 451.760876][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 452.519757][ T301] tipc: Node number set to 3850654743 [ 452.964398][ T7875] 9pnet_fd: Insufficient options for proto=fd [ 455.728722][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2178'. [ 455.799845][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 455.839882][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 456.105227][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 456.165578][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 456.174127][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 456.182645][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 456.193030][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 456.204007][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 456.213001][ T999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 456.348712][ T28] audit: type=1400 audit(1760904515.315:470): avc: denied { write } for pid=7897 comm="syz.1.2180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 458.182063][ T7914] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 458.190443][ T7914] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 458.203590][ T7914] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 458.211575][ T7914] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 458.219817][ T7914] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 458.227976][ T7914] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 458.236406][ T7914] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 459.006414][ T7926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2187'. [ 459.290064][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2191'. [ 459.304813][ T28] audit: type=1400 audit(1760904518.048:471): avc: denied { append } for pid=7937 comm="syz.1.2191" name="file0" dev="incremental-fs" ino=2405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 459.328985][ T7938] 9pnet_fd: Insufficient options for proto=fd [ 459.939889][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2195'. [ 460.400260][ T3284] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 460.420160][ T7972] xt_ecn: cannot match TCP bits for non-tcp packets [ 460.674007][ T3284] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.715578][ T3284] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 460.767035][ T3284] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.780164][ T3284] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.788404][ T3284] usb 7-1: Product: syz [ 460.792713][ T3284] usb 7-1: Manufacturer: syz [ 460.797472][ T3284] usb 7-1: SerialNumber: syz [ 461.024407][ T7952] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 461.251795][ T3284] cdc_ncm 7-1:1.0: bind() failure [ 461.259539][ T3284] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 461.274277][ T3284] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 461.297910][ T3284] usb 7-1: USB disconnect, device number 2 [ 461.313372][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2208'. [ 462.816746][ T8034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2220'. [ 462.875345][ T8038] overlayfs: failed to clone upperpath [ 463.865027][ T8045] input: syz1 as /devices/virtual/input/input11 [ 463.873453][ T28] audit: type=1400 audit(1760904522.269:472): avc: denied { setattr } for pid=8044 comm="syz.1.2225" name="/" dev="configfs" ino=14081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 463.896717][ T8045] device bridge_slave_1 left promiscuous mode [ 463.903011][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.910955][ T8045] device bridge_slave_0 left promiscuous mode [ 463.917245][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.816430][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2232'. [ 465.379090][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 465.394514][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 465.415441][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 465.428519][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 465.450092][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 465.465695][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 465.480146][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 465.696180][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 465.887006][ T8087] 9pnet_fd: Insufficient options for proto=fd [ 466.048222][ T8090] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2237'. [ 466.768728][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2243'. [ 467.484593][ T8116] netlink: 'syz.1.2246': attribute type 27 has an invalid length. [ 468.086771][ T28] audit: type=1400 audit(1760904526.157:473): avc: denied { getopt } for pid=8131 comm="syz.6.2250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 468.199996][ T8138] 9pnet_fd: Insufficient options for proto=fd [ 468.234981][ T28] audit: type=1400 audit(1760904526.295:474): avc: denied { read write } for pid=8134 comm="syz.6.2251" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 468.283324][ T28] audit: type=1400 audit(1760904526.295:475): avc: denied { open } for pid=8134 comm="syz.6.2251" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 468.342228][ T28] audit: type=1400 audit(1760904526.295:476): avc: denied { ioctl } for pid=8134 comm="syz.6.2251" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 468.522220][ T542] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 468.727928][ T542] usb 7-1: Using ep0 maxpacket: 16 [ 468.734334][ T542] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.762659][ T542] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 468.790581][ T542] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 468.812785][ T542] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.834210][ T542] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 468.857602][ T542] usb 7-1: SerialNumber: syz [ 470.461957][ T8174] 9pnet_fd: Insufficient options for proto=fd [ 470.529282][ T8173] 9pnet_fd: Insufficient options for proto=fd [ 471.185989][ T1685] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 471.392488][ T542] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 471.404890][ T1685] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 471.417947][ T1685] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.445165][ T542] usb 7-1: USB disconnect, device number 3 [ 471.501676][ T1685] usb 2-1: config 0 has no interface number 0 [ 471.521425][ T1685] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 471.544926][ T1685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.575309][ T1685] usb 2-1: Product: syz [ 471.593934][ T1685] usb 2-1: Manufacturer: syz [ 471.612872][ T1685] usb 2-1: SerialNumber: syz [ 471.633291][ T1685] usb 2-1: config 0 descriptor?? [ 472.710040][ T8212] 9pnet_fd: Insufficient options for proto=fd [ 472.804752][ T8216] 9pnet_fd: Insufficient options for proto=fd [ 472.914036][ T8220] loop6: detected capacity change from 0 to 256 [ 472.950802][ T8220] FAT-fs (loop6): Directory bread(block 64) failed [ 472.965597][ T8220] FAT-fs (loop6): Directory bread(block 65) failed [ 472.980393][ T8220] FAT-fs (loop6): Directory bread(block 66) failed [ 472.995285][ T8220] FAT-fs (loop6): Directory bread(block 67) failed [ 473.010039][ T8220] FAT-fs (loop6): Directory bread(block 68) failed [ 473.024877][ T8220] FAT-fs (loop6): Directory bread(block 69) failed [ 473.039719][ T8220] FAT-fs (loop6): Directory bread(block 70) failed [ 473.054453][ T8220] FAT-fs (loop6): Directory bread(block 71) failed [ 473.068096][ T8220] FAT-fs (loop6): Directory bread(block 72) failed [ 473.083047][ T8220] FAT-fs (loop6): Directory bread(block 73) failed [ 473.272757][ T28] audit: type=1400 audit(1760904530.950:477): avc: denied { mounton } for pid=8219 comm="syz.6.2278" path="/70/file0/file0" dev="loop6" ino=1048693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 474.003530][ T1685] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 474.012912][ T1685] usb 2-1: No valid video chain found. [ 474.022435][ T1685] usb 2-1: USB disconnect, device number 22 [ 474.058091][ T8232] 9pnet_fd: Insufficient options for proto=fd [ 474.966975][ T28] audit: type=1400 audit(1760904532.520:478): avc: denied { map } for pid=8252 comm="syz.1.2288" path="pipe:[14463]" dev="pipefs" ino=14463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 475.023823][ T28] audit: type=1400 audit(1760904532.520:479): avc: denied { execute } for pid=8252 comm="syz.1.2288" path="pipe:[14463]" dev="pipefs" ino=14463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 475.049954][ T8254] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2288'. [ 475.676815][ T8259] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2289'. [ 475.685949][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2289'. [ 475.694980][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2289'. [ 475.704122][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2289'. [ 478.461821][ T8312] loop6: detected capacity change from 0 to 256 [ 478.461849][ T8310] 9pnet_fd: Insufficient options for proto=fd [ 478.473710][ T8312] FAT-fs (loop6): Unrecognized mount option "iocharsetŐ$tf8" or missing value [ 478.509313][ T8314] 9pnet_fd: Insufficient options for proto=fd [ 478.531633][ T6983] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 478.544633][ T8312] fuse: Unknown parameter '000000000000000000030000000000000000000018446744073709551615' [ 478.560336][ T8312] fuse: Bad value for 'fd' [ 480.610644][ T8352] 9pnet_fd: Insufficient options for proto=fd [ 481.292353][ T8372] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2320'. [ 481.333824][ T8374] 9pnet_fd: Insufficient options for proto=fd [ 482.372796][ T28] audit: type=1400 audit(1760904539.354:480): avc: denied { ioctl } for pid=8395 comm="syz.6.2326" path="socket:[39530]" dev="sockfs" ino=39530 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 482.516898][ T28] audit: type=1400 audit(1760904539.492:481): avc: denied { load_policy } for pid=8398 comm="syz.6.2327" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 482.660078][ T8399] SELinux: failed to load policy [ 482.864112][ T8411] random: crng reseeded on system resumption [ 483.401049][ T8414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8414 comm=syz.6.2331 [ 483.505279][ T8420] 9pnet_fd: Insufficient options for proto=fd [ 483.512881][ T8421] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2332'. [ 486.975068][ T8445] 9pnet_fd: Insufficient options for proto=fd [ 487.061363][ T8452] overlayfs: failed to resolve './file0': -2 [ 487.072794][ T8457] 9pnet_fd: Insufficient options for proto=fd [ 487.280413][ T8470] overlayfs: failed to clone upperpath [ 488.979942][ T8477] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2350'. [ 488.989237][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2350'. [ 488.998210][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2350'. [ 489.007276][ T8477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2350'. [ 489.556228][ T8493] 9pnet_fd: Insufficient options for proto=fd [ 490.973866][ T8521] 9pnet_fd: Insufficient options for proto=fd [ 490.975781][ T8522] 9pnet_fd: Insufficient options for proto=fd [ 491.016238][ T8524] 9pnet_fd: Insufficient options for proto=fd [ 491.036894][ T8526] 9pnet_fd: Insufficient options for proto=fd [ 491.591294][ T8537] loop6: detected capacity change from 0 to 512 [ 491.624104][ T8537] EXT4-fs (loop6): 1 orphan inode deleted [ 491.667162][ T999] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 491.669368][ T8537] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 491.682856][ T999] EXT4-fs error (device loop6): ext4_release_dquot:6839: comm kworker/u4:40: Failed to release dquot type 1 [ 491.688344][ T8537] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 492.807493][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 494.054684][ T8565] 9pnet_fd: Insufficient options for proto=fd [ 494.423655][ T8577] syz.5.2380[8577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.424081][ T8577] syz.5.2380[8577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.450997][ T8593] 9pnet_fd: Insufficient options for proto=fd [ 495.636414][ T617] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 495.843432][ T617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.855497][ T617] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 495.868625][ T617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.878626][ T617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.887532][ T617] usb 2-1: Product: syz [ 495.892489][ T617] usb 2-1: Manufacturer: syz [ 495.897808][ T617] usb 2-1: SerialNumber: syz [ 496.126862][ T8587] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 496.241281][ T8598] 9pnet_fd: Insufficient options for proto=fd [ 496.357929][ T617] cdc_ncm 2-1:1.0: bind() failure [ 496.917943][ T617] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 497.000533][ T617] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 497.068474][ T617] usb 2-1: USB disconnect, device number 23 [ 498.128168][ T8622] 9pnet_fd: Insufficient options for proto=fd [ 498.191067][ T8629] overlayfs: failed to clone upperpath [ 499.233149][ T8649] xt_bpf: check failed: parse error [ 499.518546][ T8651] 9pnet_fd: Insufficient options for proto=fd [ 500.018573][ T8661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2405'. [ 500.027746][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2405'. [ 500.834042][ T2579] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 501.086918][ T2579] usb 7-1: Using ep0 maxpacket: 8 [ 501.092654][ T2579] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 501.107378][ T2579] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 501.115059][ T2579] usb 7-1: can't read configurations, error -61 [ 501.278062][ T2579] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 501.323148][ T8683] 9pnet_fd: Insufficient options for proto=fd [ 501.472897][ T2579] usb 7-1: Using ep0 maxpacket: 8 [ 501.478800][ T2579] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 501.495750][ T2579] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 501.511889][ T2579] usb 7-1: can't read configurations, error -61 [ 501.525284][ T2579] usb usb7-port1: attempt power cycle [ 501.981900][ T2579] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 502.044215][ T2579] usb 7-1: Using ep0 maxpacket: 8 [ 502.049974][ T2579] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 502.059251][ T2579] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 502.067663][ T2579] usb 7-1: can't read configurations, error -61 [ 502.239433][ T2579] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 502.308911][ T2579] usb 7-1: Using ep0 maxpacket: 8 [ 502.316446][ T2579] usb 7-1: too many configurations: 48, using maximum allowed: 8 [ 502.383463][ T2579] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 502.392806][ T2579] usb 7-1: can't read configurations, error -61 [ 502.402173][ T8699] 9pnet_fd: Insufficient options for proto=fd [ 502.409651][ T2579] usb usb7-port1: unable to enumerate USB device [ 505.661841][ T8726] loop6: detected capacity change from 0 to 512 [ 505.690515][ T8726] EXT4-fs (loop6): 1 orphan inode deleted [ 505.697655][ T8726] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 505.707255][ T7649] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 505.718568][ T7649] EXT4-fs error (device loop6): ext4_release_dquot:6839: comm kworker/u4:98: Failed to release dquot type 1 [ 505.731075][ T8726] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.857758][ T8735] device wireguard0 entered promiscuous mode [ 506.673798][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 506.696533][ T8750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2431'. [ 506.722966][ T8752] 9pnet_fd: Insufficient options for proto=fd [ 506.741018][ T8754] 9pnet_fd: Insufficient options for proto=fd [ 507.105659][ T8761] loop6: detected capacity change from 0 to 256 [ 507.114975][ T8761] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 507.130798][ T8761] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 507.140403][ T8761] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x111dabd0) [ 507.151021][ T8761] exFAT-fs (loop6): invalid boot region [ 507.156793][ T8761] exFAT-fs (loop6): failed to recognize exfat type [ 508.839359][ T8775] xt_bpf: check failed: parse error [ 510.531489][ T617] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 510.765469][ T8801] 9pnet_fd: Insufficient options for proto=fd [ 511.551099][ T8814] 9pnet_fd: Insufficient options for proto=fd [ 511.682255][ T28] audit: type=1400 audit(1760904566.421:482): avc: denied { getopt } for pid=8819 comm="syz.5.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 511.792581][ T8821] random: crng reseeded on system resumption [ 513.114480][ T28] audit: type=1400 audit(1760904567.751:483): avc: denied { map } for pid=8836 comm="syz.5.2457" path="/459" dev="tmpfs" ino=2582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 514.374665][ T8854] 9pnet_fd: Insufficient options for proto=fd [ 514.564401][ T617] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 514.770230][ T617] usb 7-1: Using ep0 maxpacket: 16 [ 514.776820][ T617] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.827075][ T617] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 514.869951][ T617] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 514.903630][ T617] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 514.937534][ T617] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 514.986114][ T617] usb 7-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 515.017111][ T617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 515.043065][ T617] usb 7-1: SerialNumber: syz [ 515.062397][ T8843] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 515.071453][ T617] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 515.099291][ T617] cdc_acm: probe of 7-1:1.0 failed with error -12 [ 515.617060][ T3284] usb 7-1: USB disconnect, device number 9 [ 516.000680][ T8880] loop6: detected capacity change from 0 to 1024 [ 516.990163][ T8880] EXT4-fs: Ignoring removed nobh option [ 517.174789][ T8880] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.2470: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 517.204651][ T8887] overlayfs: failed to clone upperpath [ 517.235119][ T8880] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2470: couldn't read orphan inode 11 (err -117) [ 517.261318][ T8880] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 517.307231][ T28] audit: type=1400 audit(1760904571.621:484): avc: denied { map } for pid=8879 comm="syz.6.2470" path="/107/file1" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.497454][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 517.661164][ T8898] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 517.687468][ T8898] SELinux: failed to load policy [ 517.804573][ T8902] random: crng reseeded on system resumption [ 518.381857][ T8916] fuse: Bad value for 'fd' [ 519.591603][ T8931] 9pnet_fd: Insufficient options for proto=fd [ 520.076148][ T617] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 520.390118][ T617] usb 2-1: Using ep0 maxpacket: 32 [ 520.399696][ T617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.417762][ T617] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 520.428499][ T8958] overlayfs: failed to clone upperpath [ 520.436795][ T617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.446212][ T617] usb 2-1: Product: syz [ 520.450649][ T617] usb 2-1: Manufacturer: syz [ 520.456282][ T617] usb 2-1: SerialNumber: syz [ 520.465201][ T617] usb 2-1: config 0 descriptor?? [ 520.498055][ T617] usb 2-1: bad CDC descriptors [ 520.515495][ T617] usb 2-1: unsupported MDLM descriptors [ 522.387349][ T8990] loop6: detected capacity change from 0 to 1024 [ 522.417786][ T8990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 522.450441][ T8990] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 522.789049][ T8995] 9pnet_fd: Insufficient options for proto=fd [ 523.107454][ T9005] tipc: Enabling of bearer rejected, failed to enable media [ 523.216379][ T9004] overlayfs: failed to clone upperpath [ 523.257605][ T3284] usb 2-1: USB disconnect, device number 24 [ 524.569244][ T9031] netlink: 'syz.5.2516': attribute type 12 has an invalid length. [ 524.613347][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 524.632495][ T9041] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 524.712584][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 524.756184][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 524.773740][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 524.802697][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.822659][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.841250][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.877215][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.896039][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.925656][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 524.943242][ T1020] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 525.158306][ T9057] random: crng reseeded on system resumption [ 525.288597][ T9057] tipc: Enabled bearer , priority 0 [ 525.298862][ T9057] device syzkaller0 entered promiscuous mode [ 525.832561][ T9052] tipc: Resetting bearer [ 525.839867][ T9052] tipc: Disabling bearer [ 526.399883][ T542] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 526.606401][ T542] usb 7-1: not running at top speed; connect to a high speed hub [ 526.623058][ T542] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 526.636165][ T9085] 9pnet_fd: Insufficient options for proto=fd [ 526.648405][ T542] usb 7-1: config 95 has no interface number 0 [ 526.661406][ T542] usb 7-1: config 95 interface 1 has no altsetting 0 [ 526.677538][ T542] usb 7-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 526.687532][ T542] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.704668][ T542] usb 7-1: Product: syz [ 526.713949][ T542] usb 7-1: Manufacturer: syz [ 526.726172][ T542] usb 7-1: SerialNumber: syz [ 526.775304][ T9087] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 526.990351][ T542] usb 7-1: USB disconnect, device number 10 [ 527.064838][ T9093] 9pnet_fd: Insufficient options for proto=fd [ 527.079077][ T9088] fuse: Bad value for 'fd' [ 527.248510][ T9102] device bridge0 entered promiscuous mode [ 527.254593][ T9102] device macsec0 entered promiscuous mode [ 527.262840][ T9102] bridge0: port 3(macsec0) entered blocking state [ 527.280194][ T9102] bridge0: port 3(macsec0) entered disabled state [ 527.337004][ T9102] device bridge0 left promiscuous mode [ 528.646274][ T9136] 9pnet_fd: Insufficient options for proto=fd [ 528.904661][ T1683] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 528.923244][ T1683] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 529.005070][ T9152] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2551'. [ 529.036337][ T9150] fido_id[9150]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 530.395510][ T542] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 530.466569][ T9175] 9pnet_fd: Insufficient options for proto=fd [ 530.601228][ T542] usb 7-1: Invalid ep0 maxpacket: 64 [ 530.763664][ T542] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 530.780907][ T9179] xt_bpf: check failed: parse error [ 530.969451][ T542] usb 7-1: Invalid ep0 maxpacket: 64 [ 530.975407][ T542] usb usb7-port1: attempt power cycle [ 531.424232][ T542] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 531.467991][ T542] usb 7-1: Invalid ep0 maxpacket: 64 [ 531.900651][ T542] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 531.933504][ T542] usb 7-1: Invalid ep0 maxpacket: 64 [ 531.939074][ T542] usb usb7-port1: unable to enumerate USB device [ 532.307517][ T9196] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 532.317663][ T9196] SELinux: failed to load policy [ 532.718075][ T3284] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 533.798168][ T3284] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 133, using maximum allowed: 30 [ 533.953096][ T3284] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 133 [ 534.122036][ T3284] usb 2-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 534.131785][ T3284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.203485][ T3284] usb 2-1: config 0 descriptor?? [ 534.711009][ T3284] wacom 0003:056A:00B0.0007: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 534.726669][ T3284] wacom 0003:056A:00B0.0007: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.1-1/input0 [ 534.748404][ T3284] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B0.0007/input/input12 [ 534.969571][ T9227] SELinux: policydb magic number 0xc9ea91da does not match expected magic number 0xf97cff8c [ 535.091521][ T9227] SELinux: failed to load policy [ 535.135072][ T9227] loop6: detected capacity change from 0 to 1024 [ 536.013429][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 536.055375][ T9233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 536.393854][ T9227] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 536.607122][ T28] audit: type=1400 audit(1760904589.435:485): avc: denied { getopt } for pid=9226 comm="syz.6.2571" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 536.633359][ T28] audit: type=1400 audit(1760904589.463:486): avc: denied { setattr } for pid=9226 comm="syz.6.2571" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 536.827583][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 536.974311][ T9241] 9pnet_fd: Insufficient options for proto=fd [ 537.240799][ T301] usb 2-1: USB disconnect, device number 25 [ 537.377215][ T9249] x_tables: duplicate underflow at hook 2 [ 537.389051][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2576'. [ 537.410526][ T9249] overlayfs: workdir and upperdir must be separate subtrees [ 537.485585][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2574'. [ 537.616624][ T9249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9249 comm=syz.1.2575 [ 537.704680][ T28] audit: type=1400 audit(1760904590.432:487): avc: denied { link } for pid=9246 comm="syz.1.2575" name="file1" dev="tmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 538.348117][ T9257] loop6: detected capacity change from 0 to 512 [ 538.366978][ T9257] EXT4-fs: Ignoring removed mblk_io_submit option [ 538.373851][ T9257] EXT4-fs: Ignoring removed mblk_io_submit option [ 538.398014][ T9257] EXT4-fs (loop6): Test dummy encryption mode enabled [ 538.464247][ T9257] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 538.501221][ T9257] EXT4-fs (loop6): 1 truncate cleaned up [ 538.506982][ T9257] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 539.284684][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 539.387031][ T28] audit: type=1400 audit(1760904592.012:488): avc: denied { create } for pid=9278 comm="syz.5.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 539.497994][ T9280] 9pnet_fd: Insufficient options for proto=fd [ 539.499565][ T9281] 9pnet_fd: Insufficient options for proto=fd [ 539.800378][ T9287] tipc: Enabling of bearer rejected, failed to enable media [ 540.599444][ T28] audit: type=1326 audit(1760904593.129:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9298 comm="syz.1.2589" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f220c18efc9 code=0x0 [ 541.311433][ T9312] tipc: Enabling of bearer rejected, failed to enable media [ 541.969600][ T28] audit: type=1326 audit(1760904594.385:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9326 comm="syz.4.2596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6df918efc9 code=0x0 [ 541.997549][ T9331] 9pnet_fd: Insufficient options for proto=fd [ 542.959707][ T9348] loop6: detected capacity change from 0 to 512 [ 542.980431][ T9348] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2601: invalid block [ 542.995518][ T9348] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2601: invalid indirect mapped block 4294967295 (level 1) [ 543.012113][ T9348] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.2601: invalid indirect mapped block 4294967295 (level 1) [ 543.027027][ T9348] EXT4-fs (loop6): 2 truncates cleaned up [ 543.033256][ T9348] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 543.444665][ T6804] EXT4-fs (loop6): unmounting filesystem. [ 543.449619][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2605'. [ 544.230508][ T9382] device wireguard0 entered promiscuous mode [ 546.078405][ T9425] SELinux: policydb magic number 0x10 does not match expected magic number 0xf97cff8c [ 546.103743][ T9425] SELinux: failed to load policy [ 546.337348][ T28] audit: type=1400 audit(1760904598.430:491): avc: denied { accept } for pid=9432 comm="syz.4.2626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 546.586408][ T28] audit: type=1400 audit(1760904598.661:492): avc: denied { audit_write } for pid=9435 comm="syz.2.2628" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 547.450242][ T3284] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 547.659678][ T6804] ------------[ cut here ]------------ [ 547.665537][ T6804] WARNING: CPU: 0 PID: 6804 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 547.673804][ T6804] Modules linked in: [ 547.677744][ T6804] CPU: 0 PID: 6804 Comm: syz-executor Not tainted syzkaller #0 [ 547.685373][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 547.691417][ T3284] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 547.695499][ T6804] RIP: 0010:drop_nlink+0xc5/0x110 [ 547.705023][ T3284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.709569][ T6804] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 547.718056][ T3284] usb 2-1: Product: syz [ 547.737950][ T6804] RSP: 0018:ffffc90000997c38 EFLAGS: 00010293 [ 547.742788][ T3284] usb 2-1: Manufacturer: syz [ 547.748632][ T6804] RAX: ffffffff81c3ab85 RBX: ffff888112986288 RCX: ffff88810feb3cc0 [ 547.753353][ T3284] usb 2-1: SerialNumber: syz [ 547.761344][ T6804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 547.761365][ T6804] RBP: ffffc90000997c60 R08: 0000000000000004 R09: 0000000000000003 [ 547.761395][ T6804] R10: fffff52000132f78 R11: 1ffff92000132f78 R12: dffffc0000000000 [ 547.766961][ T3284] r8152-cfgselector 2-1: config 0 descriptor?? [ 547.774076][ T6804] R13: 1ffff11022530c5a R14: ffff8881129862d0 R15: 0000000000000000 [ 547.805065][ T6804] FS: 000055558da4a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 547.814168][ T6804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.820862][ T6804] CR2: 000055558da6d4e8 CR3: 000000011dbb3000 CR4: 00000000003506b0 [ 547.828865][ T6804] Call Trace: [ 547.832289][ T6804] [ 547.835236][ T6804] shmem_rmdir+0x5b/0x90 [ 547.839639][ T6804] vfs_rmdir+0x393/0x500 [ 547.844008][ T6804] incfs_kill_sb+0x105/0x220 [ 547.848803][ T6804] deactivate_locked_super+0xb5/0x120 [ 547.854412][ T6804] deactivate_super+0xaf/0xe0 [ 547.859138][ T6804] cleanup_mnt+0x45f/0x4e0 [ 547.863748][ T6804] __cleanup_mnt+0x19/0x20 [ 547.868218][ T6804] task_work_run+0x1db/0x240 [ 547.872892][ T6804] ? __cfi_task_work_run+0x10/0x10 [ 547.878042][ T6804] ? __x64_sys_umount+0x125/0x160 [ 547.883346][ T6804] ? __cfi___x64_sys_umount+0x10/0x10 [ 547.888849][ T6804] exit_to_user_mode_loop+0x9b/0xb0 [ 547.894203][ T6804] exit_to_user_mode_prepare+0x5a/0xa0 [ 547.899703][ T6804] syscall_exit_to_user_mode+0x1a/0x30 [ 547.905589][ T6804] do_syscall_64+0x58/0xa0 [ 547.910049][ T6804] ? clear_bhb_loop+0x30/0x80 [ 547.914862][ T6804] ? clear_bhb_loop+0x30/0x80 [ 547.919642][ T6804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.925667][ T6804] RIP: 0033:0x7fd6cab902f7 [ 547.930152][ T6804] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 547.949892][ T6804] RSP: 002b:00007ffff6e702b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 547.958449][ T6804] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd6cab902f7 [ 547.966580][ T6804] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff6e70370 [ 547.974610][ T6804] RBP: 00007ffff6e70370 R08: 0000000000000000 R09: 0000000000000000 [ 547.982825][ T6804] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffff6e71400 [ 547.991028][ T6804] R13: 00007fd6cac11d7d R14: 000000000007c1ff R15: 00007ffff6e71440 [ 547.999214][ T6804] [ 548.002390][ T6804] ---[ end trace 0000000000000000 ]--- [ 548.147407][ T6804] ================================================================== [ 548.154295][ T9470] 9pnet_fd: Insufficient options for proto=fd [ 548.155563][ T6804] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 548.168159][ T6804] Write of size 4 at addr 0000000000000170 by task syz-executor/6804 [ 548.176366][ T6804] [ 548.178775][ T6804] CPU: 1 PID: 6804 Comm: syz-executor Tainted: G W syzkaller #0 [ 548.187811][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 548.197964][ T6804] Call Trace: [ 548.201290][ T6804] [ 548.204226][ T6804] __dump_stack+0x21/0x24 [ 548.208567][ T6804] dump_stack_lvl+0xee/0x150 [ 548.213168][ T6804] ? __cfi_dump_stack_lvl+0x8/0x8 [ 548.218263][ T6804] ? ihold+0x20/0x60 [ 548.222190][ T6804] ? ihold+0x20/0x60 [ 548.226268][ T6804] ? ihold+0x20/0x60 [ 548.230299][ T6804] print_report+0x3d/0x60 [ 548.234738][ T6804] kasan_report+0x122/0x150 [ 548.239298][ T6804] ? ihold+0x20/0x60 [ 548.243204][ T6804] kasan_check_range+0x280/0x290 [ 548.248238][ T6804] __kasan_check_write+0x14/0x20 [ 548.253266][ T6804] ihold+0x20/0x60 [ 548.256998][ T6804] vfs_rmdir+0x25f/0x500 [ 548.261351][ T6804] incfs_kill_sb+0x105/0x220 [ 548.265962][ T6804] deactivate_locked_super+0xb5/0x120 [ 548.271526][ T6804] deactivate_super+0xaf/0xe0 [ 548.276217][ T6804] cleanup_mnt+0x45f/0x4e0 [ 548.280640][ T6804] __cleanup_mnt+0x19/0x20 [ 548.285061][ T6804] task_work_run+0x1db/0x240 [ 548.289750][ T6804] ? __cfi_task_work_run+0x10/0x10 [ 548.295048][ T6804] ? __x64_sys_umount+0x125/0x160 [ 548.300105][ T6804] ? __cfi___x64_sys_umount+0x10/0x10 [ 548.305504][ T6804] exit_to_user_mode_loop+0x9b/0xb0 [ 548.310743][ T6804] exit_to_user_mode_prepare+0x5a/0xa0 [ 548.316300][ T6804] syscall_exit_to_user_mode+0x1a/0x30 [ 548.321778][ T6804] do_syscall_64+0x58/0xa0 [ 548.326303][ T6804] ? clear_bhb_loop+0x30/0x80 [ 548.330994][ T6804] ? clear_bhb_loop+0x30/0x80 [ 548.335787][ T6804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.341819][ T6804] RIP: 0033:0x7fd6cab902f7 [ 548.346250][ T6804] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 548.366043][ T6804] RSP: 002b:00007ffff6e702b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 548.374555][ T6804] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd6cab902f7 [ 548.382707][ T6804] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff6e70370 [ 548.390689][ T6804] RBP: 00007ffff6e70370 R08: 0000000000000000 R09: 0000000000000000 [ 548.398662][ T6804] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffff6e71400 [ 548.406649][ T6804] R13: 00007fd6cac11d7d R14: 000000000007c1ff R15: 00007ffff6e71440 [ 548.414676][ T6804] [ 548.417702][ T6804] ================================================================== [ 548.429267][ T3284] r8152-cfgselector 2-1: Unknown version 0x0000 [ 548.470055][ T6804] Disabling lock debugging due to kernel taint [ 548.476527][ T3284] r8152-cfgselector 2-1: bad CDC descriptors [ 548.482762][ T6804] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 548.490668][ T6804] #PF: supervisor write access in kernel mode [ 548.495714][ T28] audit: type=1400 audit(1760904600.415:493): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.496767][ T6804] #PF: error_code(0x0002) - not-present page [ 548.524418][ T6804] PGD 1162ba067 P4D 1162ba067 PUD 0 [ 548.529776][ T6804] Oops: 0002 [#1] PREEMPT SMP KASAN [ 548.535052][ T6804] CPU: 1 PID: 6804 Comm: syz-executor Tainted: G B W syzkaller #0 [ 548.544156][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 548.554300][ T6804] RIP: 0010:ihold+0x26/0x60 [ 548.558821][ T6804] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 548.578544][ T6804] RSP: 0018:ffffc90000997c78 EFLAGS: 00010246 [ 548.584646][ T6804] RAX: ffff88810feb3c00 RBX: 0000000000000000 RCX: ffff88810feb3cc0 [ 548.592646][ T6804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.600708][ T6804] RBP: ffffc90000997c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 548.608724][ T6804] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888112986294 [ 548.616870][ T6804] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 548.624883][ T6804] FS: 000055558da4a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 548.633854][ T6804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.640538][ T6804] CR2: 0000000000000170 CR3: 000000011dbb3000 CR4: 00000000003506a0 [ 548.648632][ T6804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.656803][ T6804] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 548.664797][ T6804] Call Trace: [ 548.668084][ T6804] [ 548.671027][ T6804] vfs_rmdir+0x25f/0x500 [ 548.675282][ T6804] incfs_kill_sb+0x105/0x220 [ 548.679973][ T6804] deactivate_locked_super+0xb5/0x120 [ 548.685355][ T6804] deactivate_super+0xaf/0xe0 [ 548.690127][ T6804] cleanup_mnt+0x45f/0x4e0 [ 548.694548][ T6804] __cleanup_mnt+0x19/0x20 [ 548.699002][ T6804] task_work_run+0x1db/0x240 [ 548.703609][ T6804] ? __cfi_task_work_run+0x10/0x10 [ 548.708832][ T6804] ? __x64_sys_umount+0x125/0x160 [ 548.713892][ T6804] ? __cfi___x64_sys_umount+0x10/0x10 [ 548.719364][ T6804] exit_to_user_mode_loop+0x9b/0xb0 [ 548.724665][ T6804] exit_to_user_mode_prepare+0x5a/0xa0 [ 548.730146][ T6804] syscall_exit_to_user_mode+0x1a/0x30 [ 548.735642][ T6804] do_syscall_64+0x58/0xa0 [ 548.740074][ T6804] ? clear_bhb_loop+0x30/0x80 [ 548.744794][ T6804] ? clear_bhb_loop+0x30/0x80 [ 548.749496][ T6804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.755406][ T6804] RIP: 0033:0x7fd6cab902f7 [ 548.759827][ T6804] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 548.779871][ T6804] RSP: 002b:00007ffff6e702b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 548.788386][ T6804] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd6cab902f7 [ 548.796449][ T6804] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff6e70370 [ 548.804424][ T6804] RBP: 00007ffff6e70370 R08: 0000000000000000 R09: 0000000000000000 [ 548.812489][ T6804] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffff6e71400 [ 548.820479][ T6804] R13: 00007fd6cac11d7d R14: 000000000007c1ff R15: 00007ffff6e71440 [ 548.828469][ T6804] [ 548.831588][ T6804] Modules linked in: [ 548.835480][ T6804] CR2: 0000000000000170 [ 548.839636][ T6804] ---[ end trace 0000000000000000 ]--- [ 548.845174][ T6804] RIP: 0010:ihold+0x26/0x60 [ 548.849878][ T6804] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 548.869577][ T6804] RSP: 0018:ffffc90000997c78 EFLAGS: 00010246 [ 548.875671][ T6804] RAX: ffff88810feb3c00 RBX: 0000000000000000 RCX: ffff88810feb3cc0 [ 548.883673][ T6804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 548.891659][ T6804] RBP: ffffc90000997c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 548.899752][ T6804] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888112986294 [ 548.907739][ T6804] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 548.915906][ T6804] FS: 000055558da4a500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 548.924882][ T6804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.931483][ T6804] CR2: 0000000000000170 CR3: 000000011dbb3000 CR4: 00000000003506a0 [ 548.939641][ T6804] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.947629][ T6804] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 548.956045][ T6804] Kernel panic - not syncing: Fatal exception [ 548.962573][ T6804] Kernel Offset: disabled [ 548.966923][ T6804] Rebooting in 86400 seconds..