last executing test programs: 3m5.767772501s ago: executing program 32 (id=50): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ffc000}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x1}, 0x2b1}) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x802, @private0, 0x5}, {0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1, {[0x0, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0xe1d]}}, 0x5c) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) lseek(r6, 0x6dc4, 0x3) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2m52.534193799s ago: executing program 1 (id=154): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x874fd42a7836ef66, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m50.601601358s ago: executing program 1 (id=164): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0xe, 0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xfd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x4]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x200c, 0x8080000, 0x1, 0xffffffffffffffff, 0x29}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0xffffffdffffffffe, 0x5, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x23, 0x1, 0x6, 0x7, 0x1000, 0x6, {0x1, 0xdc3f, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x5, 0x7, 0x4000, 0xe, r9, 0x0, 0x9, 0x7}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) 2m50.533848395s ago: executing program 33 (id=164): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0xe, 0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xfd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x4]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x200c, 0x8080000, 0x1, 0xffffffffffffffff, 0x29}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0xffffffdffffffffe, 0x5, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x23, 0x1, 0x6, 0x7, 0x1000, 0x6, {0x1, 0xdc3f, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x5, 0x7, 0x4000, 0xe, r9, 0x0, 0x9, 0x7}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) 2m45.182382279s ago: executing program 34 (id=206): syncfs(0xffffffffffffffff) getpid() r0 = syz_clone3(&(0x7f00000009c0)={0xa0000400, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000940)}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000001200)=[{{&(0x7f0000000cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000dc0)=""/238, 0xee}, {&(0x7f0000000ec0)=""/160, 0xa0}, {&(0x7f0000000f80)=""/207, 0xcf}, {&(0x7f0000000580)=""/44, 0x2c}, {&(0x7f0000001080)=""/88, 0x58}, {&(0x7f0000001100)=""/6, 0x6}, {&(0x7f0000001140)=""/55, 0x37}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000001180)=""/106, 0x6a}], 0xa, &(0x7f0000004bc0)=""/138, 0x8a}, 0xfffffffe}], 0x1, 0x12022, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000000000", @ANYBLOB], 0x50) recvmmsg(r4, &(0x7f0000005200)=[{{&(0x7f0000000340)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f00000003c0)=""/69, 0x45}], 0x2, &(0x7f0000000500)=""/26, 0x1a}, 0xe4}, {{&(0x7f0000000d40)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000001740)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000001240)=@x25={0x9, @remote}, 0x80, &(0x7f0000006580)=[{&(0x7f0000001380)=""/148, 0x94}, {0x0}, {&(0x7f0000001440)=""/141, 0x8d}, {&(0x7f0000001500)=""/143, 0x8f}, {&(0x7f00000015c0)=""/15, 0xf}, {&(0x7f0000001600)=""/170, 0xaa}, {&(0x7f00000016c0)=""/5, 0x5}, {&(0x7f0000004e40)=""/241, 0xf1}, {&(0x7f0000004f40)=""/107, 0x6b}, {&(0x7f00000054c0)=""/137, 0x89}, {&(0x7f0000005580)=""/4096, 0x1000}], 0xb, &(0x7f00000037c0)=""/228, 0xe4}, 0x6}, {{&(0x7f00000038c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000003940)=""/222, 0xde}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x2, &(0x7f0000004a80)=""/183, 0xb7}, 0x101}, {{&(0x7f0000004b40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004cc0)=""/108, 0x6c}, {&(0x7f0000004d40)=""/170, 0xaa}], 0x2}, 0x1}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000004fc0)=""/65, 0x41}, {&(0x7f0000005040)=""/253, 0xfd}], 0x2, &(0x7f0000005180)=""/67, 0x43}, 0x6}], 0x6, 0x40, &(0x7f00000053c0)={0x0, 0x3938700}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000005400)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) close(0xffffffffffffffff) lchown(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r8 = syz_open_procfs(r0, 0x0) syz_open_procfs(r2, &(0x7f0000000080)='net/vlan/vlan0\x00') ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3c, &(0x7f0000000280)=0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.736243092s ago: executing program 35 (id=336): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@barrier}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") (async) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000940)={[{@errors_remount}, {@noload}, {@bsdgroups}], [{@euid_gt}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}, 0x4, 0x56d, &(0x7f0000000c00)="$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") (async) r2 = getgid() fchownat(r0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, r2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000074", @ANYRES32=r4], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) syz_open_procfs(0x0, 0x0) (async) pipe(0x0) fsmount(0xffffffffffffffff, 0x0, 0x76) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000090605000000000000000000050000070500010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) inotify_init1(0x800) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 2m20.648349805s ago: executing program 36 (id=394): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sync() setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000140)=ANY=[], 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) mkdir(0x0, 0x0) getpid() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sync() close_range(0xffffffffffffffff, r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e26, 0x0, @rand_addr, 0x1}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b028007561d11773a26cbb200000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) 1m24.695656633s ago: executing program 7 (id=806): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x40000001}, 0x10) write(r4, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000400000008000001a5eb61dc8f335b1f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x6, 0x4}]}, 0x10) sendmmsg$inet(r6, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1m22.427903335s ago: executing program 7 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = inotify_init1(0x800) r2 = socket$inet6(0xa, 0xa, 0x62a1328f) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, r2, 0xfffffffe}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 1m20.405631094s ago: executing program 7 (id=817): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x20080c6, &(0x7f00000000c0), 0x0, 0x571, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095", @ANYRESDEC=r1], 0x0, 0x0, 0xfffffe9f, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f00000004c0)=0x1) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x80000, 0x2d63, 0x6c2, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x1ff}}, 0x50) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r10) creat(&(0x7f0000000640)='./file0\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 1m20.283376876s ago: executing program 7 (id=821): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x6e0, 0x82) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/218) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}], [{@subj_role={'subj_role', 0x3d, '[)$:^('}}, {@fsmagic={'fsmagic', 0x3d, 0xac}}, {@permit_directio}, {@euid_lt={'euid<', r4}}, {@fowner_gt={'fowner>', r6}}]}}, 0x0, 0x0, &(0x7f00000004c0)="2d314bad0ce9f9b3") r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r8, 0x300, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x814) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000680)={0x54, 0x400, 0x9bdc, {0x0, 0x401}, {0x0, 0x5}, @cond=[{0x400, 0x3, 0x81, 0xf32, 0x7, 0xdb40}, {0xb64, 0x8000, 0x2, 0x7, 0x6, 0x6}]}) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r9, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, 0x0, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x73}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x58}}, 0x20440c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@ipv4_getrule={0x1c, 0x22, 0x10, 0x70bd25, 0x25dfdbfb, {0x2, 0x10, 0x4, 0x3, 0x0, 0x0, 0x0, 0x7, 0x2}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), r9) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x88, r10, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x1b, 0xa8, @random="1b9128df3220ccb347ecd9340acfadc9b1b473bbb5549b"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000002d00)={0x0}, &(0x7f0000002d40)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000003140)='./file0\x00', &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r14 = geteuid() syz_fuse_handle_req(r11, &(0x7f0000000b80)="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", 0x2000, &(0x7f00000038c0)={&(0x7f0000002b80)={0x50, 0xfffffffffffffffe, 0x6, {0x7, 0x2b, 0x1, 0x10000000, 0x5, 0x7, 0x3809, 0x8, 0x0, 0x0, 0x2, 0x9}}, &(0x7f0000002c00)={0x18, 0x0, 0x5, {0x5}}, &(0x7f0000002c40)={0x18, 0x0, 0x1, {0x10000}}, &(0x7f0000002c80)={0x18, 0x0, 0xf4a, {0x6}}, &(0x7f0000002cc0)={0x18, 0xfffffffffffffff5, 0xc, {0x1000}}, &(0x7f0000002d80)={0x28, 0x0, 0xaed1, {{0x29, 0x5, 0x0, r12}}}, &(0x7f0000002dc0)={0x60, 0x0, 0x1, {{0x57c, 0x956, 0x10001, 0x9, 0x1, 0x6, 0xfffff416, 0xffffffff}}}, &(0x7f0000002e40)={0x18, 0x0, 0xdb, {0x4}}, &(0x7f0000002e80)={0x11, 0x0, 0x5, {'\x00'}}, &(0x7f0000002ec0)={0x20, 0x0, 0x8, {0x0, 0xa}}, &(0x7f0000002f00)={0x78, 0x0, 0x7000000000000, {0x80, 0x4, 0x0, {0x3, 0x6, 0x2, 0x1, 0x174, 0xdcc0, 0x98, 0x7, 0x0, 0x2000, 0x49, r2, 0x0, 0x5}}}, &(0x7f0000002f80)={0x90, 0x7fffffffffffffff, 0x9, {0x0, 0x1, 0x9, 0x2, 0x2, 0x81, {0x2, 0xac4, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x4, 0x6, 0x8000, 0x0, r2, r7, 0xa, 0x9}}}, &(0x7f0000003040)={0xe0, 0xffffffffffffffda, 0x3, [{0x4, 0x3}, {0x5, 0x1, 0x9, 0x0, 'subj_role'}, {0x3, 0x6, 0x0, 0x6}, {0x2, 0x10001, 0x1, 0x0, '{'}, {0x5, 0xb, 0x0, 0x2}, {0x2, 0x3, 0x7, 0x5c, 'fsmagic'}, {0x3, 0xfa6e, 0x1, 0x8, '\''}]}, &(0x7f0000003200)={0x460, 0x0, 0xa0, [{{0x5, 0x3, 0x8, 0xff8a, 0x6, 0x5f, {0x5, 0x2, 0x8a97, 0x8000000000000000, 0x1, 0x8, 0x7ff, 0x6, 0x2, 0x8000, 0x2, r2, r5, 0x3, 0xa}}, {0x0, 0xfffffffffffffff9, 0x1, 0x100, ':'}}, {{0x6, 0x3, 0x0, 0x8, 0x401, 0x8, {0x5, 0xab7, 0x8, 0x69, 0x0, 0x10, 0x7fffffff, 0xffffff01, 0x6, 0x6000, 0x792c07f, r6, r13, 0x7, 0x4}}, {0x5, 0x1, 0x0, 0x7}}, {{0x6, 0x2, 0x8, 0x8, 0xc, 0x0, {0x2, 0x7fff, 0x0, 0xb, 0xffffffff, 0xf, 0x3, 0xd5, 0x8, 0xc000, 0x0, r4, r7, 0x6, 0xfff}}, {0x1, 0x8, 0x7, 0x4, 'fowner>'}}, {{0x5, 0x0, 0x8000, 0x0, 0x1, 0x26216041, {0x1, 0x7, 0x100, 0x9, 0x9, 0x0, 0x0, 0x9, 0x5, 0x2000, 0x7f, r14, r3, 0x0, 0x1}}, {0x3, 0x0, 0x5, 0x9, ']\'*@^'}}, {{0x4, 0x0, 0x52, 0x6, 0x43, 0x2, {0x6, 0x0, 0x0, 0xffffffff00000001, 0x0, 0xfb9, 0x4, 0xc, 0x3ff, 0x6000, 0x3, r4, r7, 0x6, 0x7}}, {0x1, 0x6, 0x0, 0xfffffffd}}, {{0x5, 0x2, 0x8001, 0x1e, 0x1, 0x10000, {0x5, 0xdfdf, 0x6, 0x2, 0x8000000000000001, 0xb84, 0xa5a7, 0x5de, 0x2, 0xc000, 0x80000001, r4, r5, 0x8, 0x1b6}}, {0x1, 0x0, 0x2, 0xc, 'fd'}}, {{0x2, 0x1, 0x0, 0x2, 0x8000, 0x4, {0x6, 0x8, 0x11a, 0x8, 0xfc40, 0x0, 0x3, 0x0, 0x9e22, 0x1000, 0x3, r2, r3, 0x8, 0x7}}, {0x1, 0xc, 0x8, 0xc, 'group_id'}}]}, &(0x7f0000003680)={0xa0, 0x0, 0x112e9e84, {{0x4, 0x0, 0x8, 0x1ff, 0x56, 0x81, {0x0, 0x4, 0x5, 0x3, 0x3, 0x1d9cc21b, 0x2, 0x7, 0x8, 0x6000, 0x9, r2, r3, 0x9, 0x100}}, {0x0, 0x4}}}, &(0x7f0000003740)={0x20, 0x0, 0x9, {0x91d3, 0x4, 0x2, 0x6}}, &(0x7f0000003780)={0x130, 0x0, 0x8, {0x0, 0x101, 0x0, '\x00', {0x7fe, 0x9, 0x823, 0xfff, r6, r3, 0x8000, '\x00', 0x3, 0x3, 0x7, 0x5, {0xe7b5, 0xfffff4d2}, {0xbd15, 0x7}, {0x27, 0x10}, {0x3, 0x8}, 0x6, 0xc, 0x8, 0x1}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003980)) r15 = syz_open_dev$vcsn(&(0x7f00000039c0), 0x203, 0x82100) write$P9_RGETATTR(r15, &(0x7f0000003a00)={0xa0, 0x19, 0x2, {0xa02, {0x2, 0x2, 0x1}, 0x0, 0x0, r3, 0xffffffffffffff40, 0x8, 0xa82a, 0x5, 0x1, 0x6, 0x5, 0x9, 0x5, 0x0, 0x5, 0xff, 0xffffffff00000000, 0x96, 0xb788}}, 0xa0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000003ac0)={0x8, 0xd49, 0x8, 0x6}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b40), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r9, &(0x7f0000003c80)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x70, r16, 0x706, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r17}, @val={0xc, 0x99, {0xb5, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4000) pwritev(r15, &(0x7f0000004f40)=[{&(0x7f0000003cc0)="a6796e99788721b0c0b8406b2615e2ca588d0e353f1fb056c2556a38326d22e5d22b4e6565ca1b8ebc8bf2229d461c481966d6f621bc63b648e0c8e4cf27fd8e4e9558f469a4a3c2ced29e83558f3e43846a7b3f5a78b0aa420ca12ee9de0a771d933210b888db5d9ab9545bec5c6630074c0e3d7fa1c66558456b5d6044da771b44", 0x82}, {&(0x7f0000003d80)="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", 0x1000}, {&(0x7f0000004d80)="80178185ed8a5bda1cefa73bcdf0bc16955e49445d4544ac39c8c0be76858f604f9869d4ffdf77cde1fbe42295f7431ab339d858db86f493096c959b8d2b181c982827a4603fbcd9e4ed914d865ac4f7108e405913d2e1d3ac6c0180bc9be369501b28f8e5851c7921bca109cf1e1287e093ca481ad6af6407f5c4b4a21228583247edef51146277330138d3f964b78e49d7446ba8d98c191e6d70a5e55340ee9efa62aa830f56965b72c7ae7baaef4018c692ddc73bdebd0d7a5bf271d3fa31ed73f779b321a09d9d50bc8412214a89f6ad34d84f29758ee0185a36d543a0192de1", 0xe2}, {&(0x7f0000004e80)="01e5bfa23527a9bd4f6bd835341fbfb0a280bf69b38c567a13223a16d2c76b91dd711fc2a9a75b1b3982e16dc6fa0ad43a7f39f288219cc7ff34c4b42230397c9daf69cd39518e222ef497d22d0af44eba6c1108a1e8e4d1d2966e3222b860c40f67030e428bf336d1e7428c356295be769d5ef2ad87828391a99594557abc3dec6800a512ecc4203dab54261be603", 0x8f}], 0x4, 0x200, 0x990) openat$full(0xffffffffffffff9c, &(0x7f0000004f80), 0x204000, 0x0) 1m20.106611343s ago: executing program 7 (id=823): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x20, 0x2, 0x97, {0x97, 0xa, "ba099b83f9181aa9deafc0c3c170feb0d438d651250ff0c386717902ee60dfe8b75b7f68d9f0f70bb54fa9d276818248469873400e0fd0b007c2a87ee05f14ead254b64e22bc0dc325ce77e45d48f454af58801399440fbeae1c09ad6df32080197832dd2d027a8a6dbe7c01c307e11079dd8f103f82a67406ff6c1ca50caea195e7bb418962d0d2eba90a35c5d112fb33ed1e20f1"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x0, 0x10, 0x33, "0ee35f1becb0aec3ec44b246130ccb89ed0a8a08b3cc706ba00492de38ba258c9f58237fd09317e73ff499f11092007580a3be"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$uac1(r0, &(0x7f0000000680)={0x14, &(0x7f0000000500)={0x20, 0x23, 0x1d, {0x1d, 0x21, "2df077c9126d1bd346d763e380198cdabacebe0dbc7b58148a92b5"}}, 0x0}, &(0x7f0000000ac0)={0x44, &(0x7f0000000880)={0x20, 0x17, 0x5, "883022f7ed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m16.154912121s ago: executing program 37 (id=768): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa0}}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x8444a8, &(0x7f0000000740)=ANY=[], 0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r5, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x9, 0x2, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x10, 0x74}}, 0x50) write$FUSE_ATTR(r5, &(0x7f0000000480)={0x78, 0x0, 0x0, {0x0, 0xc58, 0x0, {0x6, 0x4, 0x9, 0x5, 0x8, 0x8001, 0x1, 0x0, 0x1, 0x1000, 0x5, 0x0, 0x0, 0x80000001, 0xc0000000}}}, 0x78) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m16.146459752s ago: executing program 7 (id=840): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1m8.119778909s ago: executing program 5 (id=888): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a1, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) 1m7.258263063s ago: executing program 5 (id=892): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000340)={0x4, &(0x7f0000000100)=[{0x406, 0x9, 0x4, 0xfffc0003}, {0xfffd, 0x5, 0x2, 0x7acb}, {0x8, 0x1, 0x7, 0x1c4}, {0xc30, 0x1}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x240040d4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) unshare(0x2040600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRESOCT, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000200000000000000000000000310000a41b0000000000009122c27d757aed12463941595cbc0dd56e6d1ba11d38e49ce91e354e84ed943cc8f8d89fe013f252cf6ba0f7124e629da274ac469ecb13963d33d324140e08b11414e9dd4ff422146d113963005e0553e93f3020a7e07173dc6f860b44847767234a5719cb70907ca25d05b80ea27115c68da2dca4d98fc5b5e1d111164d16c0859358c6e01ea9122dc8b4db95b67a720ecae05cb76234655029a218663dafae4a8358c3c19df038f22a88b3"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0d00000004000000040000000010000001000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000002fe0ff7d2cc5841751057c0000000000000000000000ec3b7c65676be2be7638a005bc4875dd01e5e1caf6aa96d59fd620de5e95bfaa58f259dca4ecdbddd322cc19e7e262df56e38d19969d286d9d5299b5b5a329a2e6f4a3aa7ff39c5fe4e26504f6f27497d706ecadffb24c981f59ca62230d5f7ec170609f5b6b12640c0e3b8da9c21a4420d4b6e1e19a48ac2f4c2172df426c755c7f3d3c2973aae2269eee256245d89e61c8047536e355e9644f0613c6327e572372d86968247ce9fa8ffc570bdd0608d70c529dc84381aaba66ddaf37eb6f639d335cc51211be3e312075100121"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f00000002c0), &(0x7f0000000400)=r4}, 0x20) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x3ff, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000e40)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setuid(0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) 1m6.37566663s ago: executing program 5 (id=898): pipe2$9p(&(0x7f0000001900), 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000005", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000e800000008dd884346e59d56047893542b1a79a41e81e77018e9aaf1dde4c73eca4563d4a40168a38cbb2beff1ee1d951e604738d84de940d01019069"], 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$BLKROGET(r1, 0x125e, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2e0000000600000000000000000005000300000000000000010000000000000005000000000000002b2a3a2b2600"], 0x2e) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x23, 0x0, 0x0, 0x0, 0x0, 0xc90a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x23, 0x0, 0x0, 0x0, 0x0, 0xc90a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff84, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x80000c0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff84, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x80000c0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) 1m6.37527458s ago: executing program 5 (id=899): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000700040061dd0000a265d8a1812418760200000000000005b87f61f13ed68af0d6f9b4f362e53547eb4381cdb06a10000000", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000050000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES16=r1, @ANYRES32=r0, @ANYRESOCT], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) clock_getres(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) 1m2.334416656s ago: executing program 5 (id=916): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000d16) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x1002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1000000000001004, 0xffffffffffffffff, 0x2000000c595, 0x0, 0x4, 0xffffffffffffffff, 0x2000000000000000, 0xcb9, 0x8f], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r5, 0xdcb) copy_file_range(r5, &(0x7f0000000100)=0xb76, 0xffffffffffffffff, 0x0, 0x2aad109b, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r6, 0x0, 0x0, 0x33, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m0.846668672s ago: executing program 38 (id=840): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 59.273976686s ago: executing program 5 (id=934): setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000580)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061193000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x0, 0x1002, 0x0, &(0x7f0000002700)=""/4098, 0x40011, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) sync() 59.083139095s ago: executing program 1 (id=928): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_complete(0x0) ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/185, 0xb9}) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r2, 0x4) syz_emit_ethernet(0x11, &(0x7f00000002c0)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) 57.179224822s ago: executing program 1 (id=946): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000500)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) recvfrom(0xffffffffffffffff, 0x0, 0xfffffffffffffdf8, 0x40010020, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa0}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a2401000000020102132406000006090000000000000000000000000924030000000000070924050000f8431cfd092403000203fc041d0624050400"], 0x0) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "cf2e7d31"}, @local=@item_012={0x1, 0x2, 0x0, "d3"}]}}, 0x0}, 0x0) 54.84777022s ago: executing program 1 (id=964): write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x13c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, 0x0, 0x0, 0xfecc) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.self_freezing\x00', 0x275a, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r12, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r13, r10, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="0107000000000000000022000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd8, r14, 0x4, 0x70bd26, 0x3, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x80) 54.511871134s ago: executing program 1 (id=967): socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000340)=[{0x4, 0x0, 0x0, 0x7fff7ffc}]}) link(0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async, rerun: 64) r1 = epoll_create1(0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xec, 0x0, &(0x7f0000000800)="6ebca58c08000008beca252388f7", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000a3d74f3014e299f2c4c5c7b8", @ANYRESHEX, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESHEX=r2], 0x48) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) ioctl$int_out(r6, 0x5460, &(0x7f0000000040)) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000218110000000000adaad36a6910938dd5c868a2b3ebd1ca887642af82df625338deef6840e3c6308e5c29a51f25463ccb3db0ae1fb04c67ce0f81ef3c1c9340e4403edcfb983cb344541261ccaa9b48b231d81a59696bee467217450c20e620885a915add69de4603008801baa239226d65db44e42be6e9318186e3eeb745663199117d0a08", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='kmem_cache_free\x00'}, 0x18) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000240)='./file0\x00', r0, 0x4000, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000846, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001600)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$selinux_create(r8, &(0x7f0000000080)=@access={'system_u:object_r:traceroute_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x5a) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000a06000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 54.475388987s ago: executing program 39 (id=967): socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000340)=[{0x4, 0x0, 0x0, 0x7fff7ffc}]}) link(0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async, rerun: 64) r1 = epoll_create1(0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xec, 0x0, &(0x7f0000000800)="6ebca58c08000008beca252388f7", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000a3d74f3014e299f2c4c5c7b8", @ANYRESHEX, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESHEX=r2], 0x48) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) ioctl$int_out(r6, 0x5460, &(0x7f0000000040)) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000218110000000000adaad36a6910938dd5c868a2b3ebd1ca887642af82df625338deef6840e3c6308e5c29a51f25463ccb3db0ae1fb04c67ce0f81ef3c1c9340e4403edcfb983cb344541261ccaa9b48b231d81a59696bee467217450c20e620885a915add69de4603008801baa239226d65db44e42be6e9318186e3eeb745663199117d0a08", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='kmem_cache_free\x00'}, 0x18) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000240)='./file0\x00', r0, 0x4000, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000846, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001600)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$selinux_create(r8, &(0x7f0000000080)=@access={'system_u:object_r:traceroute_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x5a) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000a06000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 44.209131624s ago: executing program 40 (id=934): setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c49320f", 0x20) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000580)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061193000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x0, 0x1002, 0x0, &(0x7f0000002700)=""/4098, 0x40011, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) sync() 21.691929482s ago: executing program 2 (id=1174): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x38528d0, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e24, @multicast2}, 0x82, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth1\x00', 0x2a, 0x8, 0x5}) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus/file0\x00') 20.479685911s ago: executing program 2 (id=1178): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x84042, 0x19d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4480, &(0x7f00000000c0), 0x83, 0x22e, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r6 = dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r6, 0xae80, 0x0) io_setup(0x6, &(0x7f0000001000)=0x0) io_destroy(r7) sendfile(r1, r0, 0x0, 0xfffa83) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 20.239086985s ago: executing program 2 (id=1181): sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xc2042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000110ad03da56ca3c400ff1e05f01cfa33"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) (async) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) (async) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$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") 20.115692077s ago: executing program 2 (id=1184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rt_sigtimedwait(0x0, 0x0, 0x0, 0x48cc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x40020) (rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r5, &(0x7f0000003740)=[{&(0x7f0000001440)='deny', 0x4}], 0x1) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async, rerun: 64) r7 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) (rerun: 64) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r7, 0x30}) 20.115164527s ago: executing program 2 (id=1185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01e26f3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a2, 0xc}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001040)}], 0x1}}], 0x1, 0x0) futex(&(0x7f0000000080)=0x7e, 0xc, 0xfffffffe, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) 19.178233179s ago: executing program 2 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0x100}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) accept$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = open(0x0, 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000000240)={0x2, 0x2c, 0xa00, 0x2c, 0x7, 0x2c}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x0, 0xbaa6, 0x4}}, 0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sync() bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8001000002"], 0x50) 4.009321287s ago: executing program 41 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0x100}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) accept$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = open(0x0, 0x121342, 0x0) write$tcp_mem(r4, &(0x7f0000000240)={0x2, 0x2c, 0xa00, 0x2c, 0x7, 0x2c}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x0, 0xbaa6, 0x4}}, 0x28) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sync() bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8001000002"], 0x50) 3.924807145s ago: executing program 0 (id=1329): r0 = socket(0xa, 0x3, 0x3a) sendmmsg$unix(r0, &(0x7f0000004b80)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000000c0)="02a388e2", 0x4}], 0x1, &(0x7f0000003580)=[@cred={{0x18}}], 0x18, 0x40000}}], 0x1, 0x800) 3.851873632s ago: executing program 0 (id=1331): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000040)={[{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x4, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x8001}], 0x2}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000006162636465666745696a6b6c6d737475767778797a3031"], 0x29, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x13020210) keyctl$read(0xb, r3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xf7d) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe0002002}) 3.576507339s ago: executing program 8 (id=1338): r0 = socket(0x1e, 0x4, 0x0) unshare(0x6020480) bind$inet6(r0, &(0x7f0000000000)={0x1e, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x418}, 0x1c) 3.507640126s ago: executing program 8 (id=1340): socket$netlink(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x149002, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1b, 0x0, &(0x7f0000000340)) getpid() connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e25, 0x3, 'lblcr\x00', 0x0, 0x2, 0x6e}, 0x2c) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r2, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) 3.487706998s ago: executing program 8 (id=1341): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) unshare(0x24060400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x1, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x8, 0x10, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x40, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x9, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x4, 0xff, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x80004, 0x3, 0x51, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x1, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x8, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40008, 0xaf, 0x5, 0x6, 0x7, 0x2, 0x5, 0x8, 0x30b1d6d3, 0xff, 0xf3c, 0x400007, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0xd7, 0x1fd, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.35973878s ago: executing program 8 (id=1344): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 2.996239106s ago: executing program 0 (id=1355): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000007d68c5ee17688a2003308020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 2.94929743s ago: executing program 0 (id=1360): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, 0x0, 0x4, 0x0) 2.907287955s ago: executing program 0 (id=1363): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0), 0x4) 2.565331128s ago: executing program 0 (id=1365): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r1, r0, &(0x7f0000002700)=0x23, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$LOOP_CLR_FD(r0, 0x4c01) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x41, 0x107, 0x0, 0x7, {0x3, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}}, 0x4010) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x5b, 0x33, 0x87, 0x10, 0x46d, 0xa0e, 0x9daa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0xee, 0x0, 0x3, 0x0, 0x0, 0x2}}]}}]}}, 0x0) 2.540359691s ago: executing program 8 (id=1366): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.351973399s ago: executing program 8 (id=1371): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f00000019c0)={0x1, [{0x1, 0x108, 0x4c, &(0x7f0000000080)="9c5a9d98954e5bd4d92a99bdd88a0ab8f29ac5743afd8d86e6e088550c137257f8"}, {0x3, 0x0, 0x687, 0x0}, {0x3, 0x0, 0xc, 0x0}, {0x4, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x3ff, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xeaa8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8000, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) 2.351769999s ago: executing program 42 (id=1371): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f00000019c0)={0x1, [{0x1, 0x108, 0x4c, &(0x7f0000000080)="9c5a9d98954e5bd4d92a99bdd88a0ab8f29ac5743afd8d86e6e088550c137257f8"}, {0x3, 0x0, 0x687, 0x0}, {0x3, 0x0, 0xc, 0x0}, {0x4, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x3ff, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xeaa8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8000, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) 2.250051089s ago: executing program 3 (id=1379): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000580)="ac", 0x1) recvmmsg$unix(r1, &(0x7f0000005940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60000103, 0x0) 2.24213036s ago: executing program 3 (id=1380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0xc075}, 0x0) 2.159836028s ago: executing program 3 (id=1381): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d", @ANYRES32], 0x0) 2.159514558s ago: executing program 3 (id=1382): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x4d8b, 0x4) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000036c0)={0xa, 0x4dff, 0x400800, @remote, 0x9}, 0x1c, 0x0}}], 0x1, 0x240000c4) 2.159328268s ago: executing program 3 (id=1383): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000f00)='^,/\x00', &(0x7f0000000f40)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) close(r0) 2.159134338s ago: executing program 3 (id=1384): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) 1.228410279s ago: executing program 6 (id=1403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xc, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 1.143874978s ago: executing program 6 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) 1.143608498s ago: executing program 6 (id=1405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) 1.143350437s ago: executing program 6 (id=1406): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x8, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) syz_emit_ethernet(0x4f, &(0x7f0000000180)=ANY=[], 0x0) 1.143202628s ago: executing program 6 (id=1407): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1.128243699s ago: executing program 6 (id=1408): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000640)) 1.009434371s ago: executing program 9 (id=1413): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x6, 0x4, 0x1, 0x4}, 0x50) 959.714566ms ago: executing program 9 (id=1415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) accept4$unix(r2, 0x0, 0x0, 0x80800) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) write$vga_arbiter(r3, &(0x7f0000000540)=@target={'target ', {'PCI:', '1e', ':', '7', ':', '18', '.', '14'}}, 0x16) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x14, 0x24, 0x8, 0x70bd2d, 0x25dfdbfd, 0x6e}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x712, 0x0, 0xfffffffffffffd25) 81.859782ms ago: executing program 4 (id=1431): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0xb32a, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)='.U', 0x2, 0x12, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 46.523285ms ago: executing program 4 (id=1432): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x16}}, 0x8) socket$netlink(0x10, 0x3, 0x0) close(0x3) 46.299885ms ago: executing program 4 (id=1433): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}], 0x2) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) 45.864476ms ago: executing program 9 (id=1434): futex(&(0x7f0000000280), 0x7, 0x2, 0x0, 0x0, 0x1) 1.29214ms ago: executing program 4 (id=1435): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0x34}], 0x10}}], 0x1, 0x4000900) 820.94µs ago: executing program 9 (id=1436): syz_open_procfs(0x0, &(0x7f0000019080)='net/rt6_stats\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 657.03µs ago: executing program 4 (id=1437): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a80180005"], 0x4c}}, 0x4000804) 531.99µs ago: executing program 9 (id=1438): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000040)='v1\xeful\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) 250.86µs ago: executing program 9 (id=1439): socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="e462e98700", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x3, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xe8}}}}}}, 0x0) 0s ago: executing program 4 (id=1440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x18, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_ACT={0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) 0s ago: executing program 9 (id=1444): bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): ot/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 176.570479][ T30] audit: type=1326 audit(1761565429.913:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.8.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 176.570502][ T30] audit: type=1326 audit(1761565429.913:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.8.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 176.570525][ T30] audit: type=1326 audit(1761565429.913:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3779 comm="syz.8.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 176.758191][ T3796] loop5: detected capacity change from 0 to 128 [ 176.764640][ T6] usbhid 6-1:0.0: can't add hid device: -71 [ 176.770636][ T6] usbhid: probe of 6-1:0.0 failed with error -71 [ 176.777783][ T6] usb 6-1: USB disconnect, device number 15 [ 176.798523][ T3796] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.809260][ T3796] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 176.868402][ T3802] loop8: detected capacity change from 0 to 512 [ 176.888813][ T3803] xt_hashlimit: max too large, truncated to 1048576 [ 176.931643][ T3802] EXT4-fs (loop8): Test dummy encryption mode enabled [ 176.938602][ T3802] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 176.950338][ T3802] EXT4-fs (loop8): 1 truncate cleaned up [ 176.956322][ T3802] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 177.111846][ T3812] netlink: 96 bytes leftover after parsing attributes in process `syz.6.884'. [ 177.193776][ T30] audit: type=1400 audit(1761565430.563:3500): avc: denied { accept } for pid=3805 comm="syz.8.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 177.451038][ T3820] loop6: detected capacity change from 0 to 40427 [ 177.514923][ T3820] F2FS-fs (loop6): invalid crc value [ 177.521806][ T3820] F2FS-fs (loop6): Found nat_bits in checkpoint [ 177.550748][ T3820] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 177.655414][ T971] attempt to access beyond end of device [ 177.655414][ T971] loop6: rw=2049, want=45104, limit=40427 [ 177.782792][ T30] audit: type=1400 audit(1761565431.143:3501): avc: denied { listen } for pid=3827 comm="syz.6.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.829468][ T3829] tipc: Enabled bearer , priority 0 [ 178.609414][ T3827] tipc: Disabling bearer [ 179.221367][ T3854] loop8: detected capacity change from 0 to 256 [ 179.266026][ T3854] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 179.601009][ T20] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 179.628839][ T3880] loop6: detected capacity change from 0 to 512 [ 179.655951][ T3880] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.902: iget: bad i_size value: 38620345925642 [ 179.668848][ T3880] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.902: couldn't read orphan inode 15 (err -117) [ 179.681442][ T3880] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.768167][ T1881] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 179.777402][ T3885] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.902: bg 0: block 5: invalid block bitmap [ 179.790014][ T3885] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 179.802593][ T3885] EXT4-fs (loop6): This should not happen!! Data will be lost [ 179.802593][ T3885] [ 179.812288][ T3885] EXT4-fs (loop6): Total free blocks count 0 [ 179.818264][ T3885] EXT4-fs (loop6): Free/Dirty block details [ 179.824326][ T3885] EXT4-fs (loop6): free_blocks=0 [ 179.829286][ T3885] EXT4-fs (loop6): dirty_blocks=6340 [ 179.834717][ T3885] EXT4-fs (loop6): Block reservation details [ 179.840754][ T3885] EXT4-fs (loop6): i_reserved_data_blocks=6340 [ 180.021100][ T1881] usb 6-1: Using ep0 maxpacket: 16 [ 180.080322][ T348] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 180.093265][ T348] EXT4-fs (loop6): This should not happen!! Data will be lost [ 180.093265][ T348] [ 180.151042][ T1881] usb 6-1: config 0 interface 0 has no altsetting 0 [ 180.160674][ T1881] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 180.169886][ T1881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.214376][ T1881] usb 6-1: config 0 descriptor?? [ 180.231027][ T20] usb 9-1: invalid descriptor for config index 0: type = 0x2, length = 137 [ 180.239736][ T20] usb 9-1: can't read configurations, error -22 [ 180.324187][ T3891] loop6: detected capacity change from 0 to 256 [ 180.363020][ T3891] FAT-fs (loop6): Unrecognized mount option "shortoame=winnt" or missing value [ 180.891531][ T1881] hid (null): global environment stack underflow [ 180.920898][ T1881] hid (null): unknown global tag 0xc [ 180.948888][ T1881] hid (null): report_id 25068 is invalid [ 180.976501][ T1881] hid (null): report_id 0 is invalid [ 181.058142][ T1881] hid (null): global environment stack overflow [ 181.132968][ T1881] hid (null): unknown global tag 0xc [ 181.138295][ T1881] hid (null): unknown global tag 0x58 [ 181.144399][ T3898] mmap: syz.0.906 (3898) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 181.330910][ T3903] netlink: 180 bytes leftover after parsing attributes in process `syz.6.907'. [ 182.099722][ T20] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 182.169219][ T3901] sched: RT throttling activated [ 182.177609][ T3913] syz.6.910[3913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.177721][ T3913] syz.6.910[3913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.241038][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 182.241060][ T30] audit: type=1400 audit(1761565435.603:3516): avc: denied { unmount } for pid=971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 182.470459][ T30] audit: type=1326 audit(1761565435.833:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.6.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 182.494201][ T30] audit: type=1326 audit(1761565435.833:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.6.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 182.551072][ T30] audit: type=1326 audit(1761565435.863:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.6.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 182.691638][ T30] audit: type=1326 audit(1761565435.863:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.6.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 182.715205][ T30] audit: type=1326 audit(1761565435.863:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.6.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 182.738930][ T30] audit: type=1326 audit(1761565435.863:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.6.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 183.073187][ T30] audit: type=1326 audit(1761565435.863:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.6.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 183.097690][ T30] audit: type=1326 audit(1761565435.863:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.6.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 183.121465][ T30] audit: type=1326 audit(1761565435.863:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3920 comm="syz.6.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 183.291005][ T20] usb 9-1: device not accepting address 15, error -71 [ 183.298003][ T20] usb usb9-port1: attempt power cycle [ 183.458996][ T3930] device pim6reg1 entered promiscuous mode [ 183.518748][ T1881] usb 6-1: USB disconnect, device number 16 [ 183.528861][ T3930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3930 comm=syz.6.914 [ 183.541543][ T3930] netlink: 20 bytes leftover after parsing attributes in process `syz.6.914'. [ 183.557457][ T3933] loop8: detected capacity change from 0 to 256 [ 184.081094][ T1881] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 184.322340][ T1881] usb 6-1: Using ep0 maxpacket: 32 [ 184.417665][ T3959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.921'. [ 184.491012][ T1881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.512109][ T1881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.527250][ T3971] loop8: detected capacity change from 0 to 256 [ 184.531079][ T1881] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 184.543887][ T1881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.610745][ T1881] usb 6-1: config 0 descriptor?? [ 184.822089][ T3978] loop8: detected capacity change from 0 to 256 [ 184.872232][ T3978] FAT-fs (loop8): Unrecognized mount option "`ys_immutable" or missing value [ 184.971011][ T3978] loop8: detected capacity change from 0 to 256 [ 184.980559][ T3978] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.991365][ T3978] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 185.007017][ T3978] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 185.105439][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.112683][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.120032][ T3984] device bridge_slave_0 entered promiscuous mode [ 185.127114][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.134370][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.141809][ T3984] device bridge_slave_1 entered promiscuous mode [ 185.219593][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.226669][ T3984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.233987][ T3984] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.241047][ T3984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.252199][ T1881] savu 0003:1E7D:2D5A.0012: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 185.319462][ T3997] syz.0.930[3997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.319775][ T3997] syz.0.930[3997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.732183][ T1881] usb 6-1: USB disconnect, device number 17 [ 186.425051][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.435940][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.468437][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.476063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.483672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.492693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.501130][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.508192][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.517302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.531221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.541244][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.548285][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.560332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.572449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.583361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.591992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.611244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.619919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 186.629128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.637506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.651548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.659156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.667303][ T3984] device veth0_vlan entered promiscuous mode [ 186.680722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.689624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.699291][ T3984] device veth1_macvtap entered promiscuous mode [ 186.710029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.718355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.727626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.752274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 186.762200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.051191][ T3911] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 187.282075][ T4023] loop6: detected capacity change from 0 to 512 [ 187.323924][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 187.323939][ T30] audit: type=1400 audit(1761565440.693:3686): avc: denied { name_bind } for pid=4026 comm="syz.8.940" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 187.353357][ T4028] loop8: detected capacity change from 0 to 128 [ 187.407105][ T4027] attempt to access beyond end of device [ 187.407105][ T4027] loop8: rw=2049, want=1041, limit=128 [ 187.407109][ T4028] attempt to access beyond end of device [ 187.407109][ T4028] loop8: rw=2049, want=713, limit=128 [ 187.431096][ T3911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.447077][ T30] audit: type=1400 audit(1761565440.813:3687): avc: denied { create } for pid=4030 comm="syz.6.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 187.468027][ T3911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.477598][ T4029] attempt to access beyond end of device [ 187.477598][ T4029] loop8: rw=524288, want=369, limit=128 [ 187.488854][ T4029] attempt to access beyond end of device [ 187.488854][ T4029] loop8: rw=0, want=153, limit=128 [ 187.499800][ T4029] attempt to access beyond end of device [ 187.499800][ T4029] loop8: rw=0, want=153, limit=128 [ 187.510484][ T4029] attempt to access beyond end of device [ 187.510484][ T4029] loop8: rw=0, want=153, limit=128 [ 187.521393][ T4029] attempt to access beyond end of device [ 187.521393][ T4029] loop8: rw=0, want=153, limit=128 [ 187.541062][ T3911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 187.550163][ T3911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.558231][ T3911] usb 2-1: SerialNumber: syz [ 187.589541][ T30] audit: type=1400 audit(1761565440.953:3688): avc: denied { watch } for pid=4033 comm="syz.8.941" path="/147/file0" dev="tmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 187.612666][ T30] audit: type=1400 audit(1761565440.973:3689): avc: denied { execute_no_trans } for pid=4033 comm="syz.8.941" path="/147/file0" dev="tmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 187.612831][ T3911] usb 2-1: 0:2 : does not exist [ 187.844531][ T3911] usb 2-1: USB disconnect, device number 5 [ 188.350428][ T4046] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 188.657877][ T4052] loop1: detected capacity change from 0 to 1024 [ 188.696803][ T30] audit: type=1326 audit(1761565442.063:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 188.720852][ T4052] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,delalloc,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 188.737928][ T4063] loop8: detected capacity change from 0 to 512 [ 188.744557][ T30] audit: type=1326 audit(1761565442.063:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 188.745546][ T4052] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.771653][ T30] audit: type=1326 audit(1761565442.083:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 188.801910][ T30] audit: type=1326 audit(1761565442.083:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 188.842625][ T30] audit: type=1326 audit(1761565442.083:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 188.866434][ T30] audit: type=1326 audit(1761565442.083:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4056 comm="syz.6.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 188.872337][ T4063] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.902375][ T4063] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.100969][ T3911] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 189.221005][ T425] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 189.471099][ T3911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.482412][ T3911] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 189.491527][ T3911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.503521][ T3911] usb 7-1: config 0 descriptor?? [ 189.581038][ T425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.590850][ T425] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 189.599984][ T425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.626756][ T425] usb 2-1: config 0 descriptor?? [ 189.831645][ T4105] netlink: 28 bytes leftover after parsing attributes in process `syz.8.957'. [ 189.979717][ T4115] loop8: detected capacity change from 0 to 512 [ 190.009531][ T3911] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 190.134032][ T3911] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0013/input/input14 [ 190.172078][ T4115] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 190.183510][ T4115] EXT4-fs (loop8): 1 truncate cleaned up [ 190.189175][ T4115] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 190.204068][ T4118] UDC core: couldn't find an available UDC or it's busy: -16 [ 190.213510][ T4118] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 190.244223][ T425] hid (null): usage index exceeded [ 190.250797][ T425] hid-led 0003:1294:1320.0014: ignoring exceeding usage max [ 190.259603][ T425] hid-led 0003:1294:1320.0014: usage index exceeded [ 190.266461][ T425] hid-led 0003:1294:1320.0014: item 0 1 2 0 parsing failed [ 190.274264][ T425] hid-led: probe of 0003:1294:1320.0014 failed with error -22 [ 190.285745][ T3911] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 190.399796][ T4129] loop8: detected capacity change from 0 to 512 [ 190.452999][ T728] usb 2-1: USB disconnect, device number 6 [ 190.965189][ T3984] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /1/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 190.986526][ T3984] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /1/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 191.007382][ T3984] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 191.026401][ T3984] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /1/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 191.047276][ T3984] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 191.066455][ T3984] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /1/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 191.087381][ T3984] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 191.106588][ T3984] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /1/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 191.127758][ T3984] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 191.146999][ T3984] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /1/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 191.250483][ T4138] loop8: detected capacity change from 0 to 1024 [ 191.275579][ T4138] EXT4-fs (loop8): mounted filesystem without journal. Opts: lazytime,lazytime,,errors=continue. Quota mode: none. [ 191.312339][ T4138] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3871: comm syz.8.966: Allocating blocks 497-513 which overlap fs metadata [ 191.327447][ T4138] EXT4-fs (loop8): pa ffff88812a47d7e0: logic 256, phys. 385, len 8 [ 191.335550][ T4138] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 191.601639][ T4149] overlayfs: missing 'workdir' [ 191.816363][ T425] usb 7-1: USB disconnect, device number 16 [ 192.318080][ T4145] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.329851][ T4145] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.427715][ T4145] device bridge_slave_0 entered promiscuous mode [ 192.436885][ T4145] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.444187][ T4145] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.454209][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 192.454223][ T30] audit: type=1400 audit(1761565445.823:3804): avc: denied { read } for pid=4163 comm="syz.8.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.473606][ T4145] device bridge_slave_1 entered promiscuous mode [ 192.783987][ T30] audit: type=1400 audit(1761565446.153:3805): avc: denied { listen } for pid=4163 comm="syz.8.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.846815][ T30] audit: type=1400 audit(1761565446.213:3806): avc: denied { ioctl } for pid=4169 comm="syz.0.976" path="socket:[32031]" dev="sockfs" ino=32031 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.901165][ T4145] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.908346][ T4145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.915666][ T4145] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.922718][ T4145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.956154][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.963920][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.971735][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.979313][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.991929][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.000129][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.007181][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.014749][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.023006][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.030078][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.042920][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.064593][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.073211][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.081780][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.089323][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.098551][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.107906][ T684] device bridge_slave_1 left promiscuous mode [ 193.114264][ T684] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.122191][ T684] device bridge_slave_0 left promiscuous mode [ 193.128339][ T684] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.137039][ T684] device veth1_macvtap left promiscuous mode [ 193.143134][ T684] device veth0_vlan left promiscuous mode [ 193.264279][ T4190] loop8: detected capacity change from 0 to 40427 [ 193.284773][ T4145] device veth0_vlan entered promiscuous mode [ 193.299199][ T4145] device veth1_macvtap entered promiscuous mode [ 193.317611][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.326257][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.335116][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.351804][ T4190] F2FS-fs (loop8): fault_injection options not supported [ 193.360782][ T4190] F2FS-fs (loop8): invalid crc value [ 193.381510][ T4190] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 193.508662][ T4203] block device autoloading is deprecated and will be removed. [ 193.516575][ T4203] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 193.618423][ T30] audit: type=1400 audit(1761565446.823:3807): avc: denied { write } for pid=4194 comm="syz.6.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.652994][ T4204] incfs: Can't find or create .index dir in ./file0 [ 193.659720][ T4204] incfs: mount failed -14 [ 193.661527][ T4190] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 193.670776][ T4190] F2FS-fs (loop8): Start checkpoint disabled! [ 193.677771][ T4190] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 193.690550][ T30] audit: type=1400 audit(1761565447.053:3808): avc: denied { ioctl } for pid=4189 comm="syz.8.979" path="/164/bus/file0" dev="loop8" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 193.728023][ T8] attempt to access beyond end of device [ 193.728023][ T8] loop8: rw=2049, want=45104, limit=40427 [ 193.882759][ T4210] loop8: detected capacity change from 0 to 512 [ 193.900235][ T4210] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.984: iget: bad i_size value: 38620345925642 [ 193.913157][ T4210] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.984: couldn't read orphan inode 15 (err -117) [ 193.925685][ T4210] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.939164][ T30] audit: type=1400 audit(1761565447.303:3809): avc: denied { setattr } for pid=4209 comm="syz.8.984" path="pipe:[21527]" dev="pipefs" ino=21527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 194.013820][ T4213] fscrypt (loop8, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 194.363143][ T4222] loop2: detected capacity change from 0 to 256 [ 194.431035][ T425] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 194.791042][ T425] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.800832][ T425] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 194.813725][ T425] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 194.822867][ T425] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.832309][ T425] usb 7-1: config 0 descriptor?? [ 194.973422][ T30] audit: type=1400 audit(1761565448.343:3810): avc: denied { read } for pid=4223 comm="syz.8.988" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.996698][ T30] audit: type=1400 audit(1761565448.343:3811): avc: denied { open } for pid=4223 comm="syz.8.988" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 195.155781][ T30] audit: type=1400 audit(1761565448.523:3812): avc: denied { map } for pid=4230 comm="syz.6.990" path="socket:[32405]" dev="sockfs" ino=32405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 195.193917][ T4236] netlink: 20 bytes leftover after parsing attributes in process `syz.8.989'. [ 195.202891][ T4236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.989'. [ 195.985519][ T4249] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 196.009738][ T4249] overlayfs: failed to set xattr on upper [ 196.063494][ T30] audit: type=1400 audit(1761565449.433:3813): avc: denied { unmount } for pid=3631 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 196.111048][ T425] usbhid 7-1:0.0: can't add hid device: -71 [ 196.117017][ T425] usbhid: probe of 7-1:0.0 failed with error -71 [ 196.131858][ T425] usb 7-1: USB disconnect, device number 17 [ 196.145058][ T4257] loop0: detected capacity change from 0 to 256 [ 196.154418][ T4255] loop8: detected capacity change from 0 to 512 [ 196.189512][ T4260] loop6: detected capacity change from 0 to 256 [ 196.199919][ T4255] EXT4-fs (loop8): dax option not supported [ 196.202084][ T4252] loop2: detected capacity change from 0 to 40427 [ 196.231446][ T4257] exfat: Deprecated parameter 'utf8' [ 196.237005][ T4257] exfat: Deprecated parameter 'namecase' [ 196.245730][ T4260] exFAT-fs (loop6): bogus data start sector [ 196.254858][ T4252] F2FS-fs (loop2): invalid crc value [ 196.264980][ T4260] exFAT-fs (loop6): failed to read boot sector [ 196.275489][ T4252] F2FS-fs (loop2): Found nat_bits in checkpoint [ 196.283971][ T4257] exfat: Deprecated parameter 'namecase' [ 196.289710][ T4260] exFAT-fs (loop6): failed to recognize exfat type [ 196.291023][ T4257] exfat: Deprecated parameter 'utf8' [ 196.314067][ T4257] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 196.333314][ T4252] F2FS-fs (loop2): Start checkpoint disabled! [ 196.355874][ T4252] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 196.597678][ T4266] x_tables: duplicate underflow at hook 3 [ 196.604147][ T684] attempt to access beyond end of device [ 196.604147][ T684] loop2: rw=2049, want=40968, limit=40427 [ 196.822290][ T684] attempt to access beyond end of device [ 196.822290][ T684] loop2: rw=2049, want=40992, limit=40427 [ 197.403811][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 197.413915][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.422310][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 197.430587][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.439904][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.449200][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.457930][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.466840][ T684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.486568][ T4293] loop6: detected capacity change from 0 to 4096 [ 197.505797][ T4293] EXT4-fs (loop6): Test dummy encryption mode enabled [ 197.515168][ T4293] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 197.534942][ T4293] System zones: 0-5 [ 197.543371][ T4293] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 197.841059][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1012'. [ 197.880991][ T425] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 197.905100][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 197.905115][ T30] audit: type=1326 audit(1761565451.273:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.8.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 197.935264][ T30] audit: type=1326 audit(1761565451.283:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.8.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 197.959620][ T30] audit: type=1326 audit(1761565451.293:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.8.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 197.985882][ T30] audit: type=1326 audit(1761565451.293:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.8.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 198.010004][ T30] audit: type=1326 audit(1761565451.293:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.8.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 198.010034][ T30] audit: type=1326 audit(1761565451.293:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.8.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 198.010056][ T30] audit: type=1326 audit(1761565451.303:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.8.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 198.010078][ T30] audit: type=1326 audit(1761565451.303:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.8.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 198.010100][ T30] audit: type=1326 audit(1761565451.303:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.8.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 198.010121][ T30] audit: type=1326 audit(1761565451.303:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4307 comm="syz.8.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 198.442203][ T4313] loop8: detected capacity change from 0 to 40427 [ 198.450694][ T4320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 198.491671][ T4313] F2FS-fs (loop8): Invalid log_blocksize (0), supports only 12 [ 198.491715][ T4313] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 198.498586][ T4313] F2FS-fs (loop8): invalid crc value [ 198.591735][ T4313] F2FS-fs (loop8): Found nat_bits in checkpoint [ 198.626010][ T4313] F2FS-fs (loop8): Start checkpoint disabled! [ 198.635870][ T4313] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 198.642950][ T4313] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 198.686818][ T338] attempt to access beyond end of device [ 198.686818][ T338] loop8: rw=2049, want=40984, limit=40427 [ 198.701104][ T425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.721434][ T425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.731337][ T425] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 198.740407][ T425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.749384][ T425] usb 3-1: config 0 descriptor?? [ 198.813284][ T4327] loop8: detected capacity change from 0 to 512 [ 198.832610][ T4327] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,noload,bsdgroups,. Quota mode: writeback. [ 198.845460][ T4327] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.196470][ T4342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1021'. [ 199.221084][ T2062] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 199.731869][ T425] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 199.738783][ T425] isku 0003:1E7D:319C.0015: unknown main item tag 0x0 [ 199.743115][ T4346] loop6: detected capacity change from 0 to 512 [ 199.746428][ T425] isku 0003:1E7D:319C.0015: item fetching failed at offset 2/7 [ 199.759872][ T425] isku 0003:1E7D:319C.0015: parse failed [ 199.766135][ T425] isku: probe of 0003:1E7D:319C.0015 failed with error -22 [ 199.778067][ T4346] EXT4-fs (loop6): orphan cleanup on readonly fs [ 199.785445][ T4346] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.1022: bad orphan inode 13 [ 199.795957][ T4346] ext4_test_bit(bit=12, block=18) = 1 [ 199.801549][ T4346] is_bad_inode(inode)=0 [ 199.805739][ T4346] NEXT_ORPHAN(inode)=2130706432 [ 199.810613][ T4346] max_ino=32 [ 199.813876][ T4346] i_nlink=1 [ 199.817117][ T4346] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.831610][ T4346] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 199.852128][ T4346] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1022: bg 0: block 248: padding at end of block bitmap is not set [ 199.867468][ T4346] EXT4-fs error (device loop6): ext4_acquire_dquot:6200: comm syz.6.1022: Failed to acquire dquot type 1 [ 199.881607][ T4346] EXT4-fs warning (device loop6): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.932139][ T378] usb 3-1: USB disconnect, device number 6 [ 200.061174][ T2062] usb 9-1: config 9 has an invalid interface descriptor of length 2, skipping [ 200.070340][ T2062] usb 9-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 200.080845][ T2062] usb 9-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 200.201256][ T2062] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 200.210505][ T2062] usb 9-1: New USB device strings: Mfr=0, Product=244, SerialNumber=255 [ 200.219176][ T2062] usb 9-1: Product: syz [ 200.223681][ T2062] usb 9-1: SerialNumber: syz [ 200.541977][ T2062] usb 9-1: USB disconnect, device number 17 [ 200.965766][ T4363] loop6: detected capacity change from 0 to 512 [ 201.488120][ T4363] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2776: inode #11: comm syz.6.1027: corrupted xattr block 95 [ 201.502028][ T4363] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1027: bg 0: block 7: invalid block bitmap [ 201.514548][ T4363] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 201.523659][ T4363] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2942: inode #11: comm syz.6.1027: corrupted xattr block 95 [ 201.536490][ T4363] EXT4-fs warning (device loop6): ext4_evict_inode:303: xattr delete (err -117) [ 201.545703][ T4363] EXT4-fs (loop6): 1 orphan inode deleted [ 201.551702][ T4363] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.190382][ T4391] loop2: detected capacity change from 0 to 1024 [ 202.232349][ T4391] EXT4-fs (loop2): Test dummy encryption mode enabled [ 202.244037][ T4391] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 202.278927][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.302931][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.550214][ T4398] binder: 4392:4398 ioctl 400c620e 200000000280 returned -22 [ 202.554630][ T4387] device bridge_slave_0 entered promiscuous mode [ 202.564593][ T4391] incfs: Options parsing error. -22 [ 202.569885][ T4391] incfs: mount failed -22 [ 202.576315][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.583450][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.591229][ T4387] device bridge_slave_1 entered promiscuous mode [ 202.598384][ T4399] device syzkaller0 entered promiscuous mode [ 202.675535][ T4410] loop8: detected capacity change from 0 to 512 [ 202.695491][ T4410] FAT-fs (loop8): Unrecognized mount option "shorfname=mixed" or missing value [ 202.704751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.712676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.720235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.728718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.737061][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.744113][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.752515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.760855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.769128][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.776175][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.783921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.794707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.802938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.813023][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.823008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.841731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.850606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.865404][ T4387] device veth0_vlan entered promiscuous mode [ 202.872653][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.881769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.897757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.905330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.912935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.921334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.930609][ T4387] device veth1_macvtap entered promiscuous mode [ 202.940856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.949361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.969381][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.988283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.074560][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 203.087281][ T30] audit: type=1400 audit(1761565456.443:4000): avc: denied { unmount } for pid=3631 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.115313][ T30] audit: type=1326 audit(1761565456.483:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.6.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 203.657474][ T4435] loop2: detected capacity change from 0 to 128 [ 203.703750][ T30] audit: type=1326 audit(1761565456.483:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.6.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 203.746555][ T30] audit: type=1326 audit(1761565456.483:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.6.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 203.791080][ T30] audit: type=1326 audit(1761565456.483:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.6.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6a2f3c3fc9 code=0x7ffc0000 [ 203.793894][ T4438] loop8: detected capacity change from 0 to 128 [ 203.822901][ T30] audit: type=1326 audit(1761565456.483:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0518b70fc9 code=0x7ffc0000 [ 203.847662][ T30] audit: type=1326 audit(1761565456.483:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0518b70fc9 code=0x7ffc0000 [ 203.872093][ T30] audit: type=1326 audit(1761565456.483:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0518b70fc9 code=0x7ffc0000 [ 203.895838][ T30] audit: type=1326 audit(1761565456.483:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0518b70fc9 code=0x7ffc0000 [ 203.937212][ T30] audit: type=1326 audit(1761565456.483:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.0.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0518b70fc9 code=0x7ffc0000 [ 203.976674][ T4438] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.994059][ T4438] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.010250][ T4447] loop6: detected capacity change from 0 to 512 [ 204.068807][ T4447] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 204.089551][ T4447] System zones: 1-12 [ 204.096519][ T4447] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1044: error while reading EA inode 32 err=-116 [ 204.109620][ T4447] EXT4-fs (loop6): Remounting filesystem read-only [ 204.125652][ T4447] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1044: error while reading EA inode 32 err=-116 [ 204.162456][ T4447] EXT4-fs (loop6): Remounting filesystem read-only [ 204.171275][ T4447] EXT4-fs (loop6): 1 orphan inode deleted [ 204.179390][ T4447] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,. Quota mode: none. [ 204.248816][ T4447] xt_hashlimit: size too large, truncated to 1048576 [ 204.302364][ T4455] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1044: invalid indirect mapped block 234881024 (level 0) [ 204.369538][ T4455] EXT4-fs (loop6): Remounting filesystem read-only [ 204.750477][ T4467] tipc: Enabling of bearer rejected, failed to enable media [ 204.925626][ T4469] 9pnet: Insufficient options for proto=fd [ 204.947766][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 205.013437][ T4475] syz.3.1051[4475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.013496][ T4475] syz.3.1051[4475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 205.090991][ T60] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 205.442771][ T4502] loop6: detected capacity change from 0 to 1024 [ 205.495659][ T4502] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,dioread_lock,errors=remount-ro,. Quota mode: writeback. [ 205.521351][ T60] usb 9-1: device descriptor read/64, error -71 [ 205.585057][ T4511] loop6: detected capacity change from 0 to 512 [ 205.599454][ T4511] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1061: casefold flag without casefold feature [ 205.612987][ T4511] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1061: couldn't read orphan inode 15 (err -117) [ 205.627464][ T4511] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 205.659204][ T4520] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.715736][ T4540] loop2: detected capacity change from 0 to 128 [ 205.771374][ T4540] EXT4-fs (loop2): Ignoring removed nobh option [ 205.778645][ T4540] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,,errors=continue. Quota mode: none. [ 205.791468][ T4540] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.873998][ T4540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1069'. [ 205.941042][ T60] usb 9-1: device descriptor read/64, error -71 [ 206.025507][ T4566] loop2: detected capacity change from 0 to 512 [ 206.111471][ T4566] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 206.118814][ T4566] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 206.127905][ T4566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 206.135920][ T4566] System zones: 1-12 [ 206.140459][ T4566] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.1074: corrupted in-inode xattr [ 206.152780][ T4566] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1074: couldn't read orphan inode 15 (err -117) [ 206.164924][ T4566] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 206.220984][ T60] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 206.491003][ T60] usb 9-1: device descriptor read/64, error -71 [ 206.587383][ T4573] netlink: 'syz.6.1078': attribute type 27 has an invalid length. [ 206.608770][ T4573] fuse: Invalid rootmode [ 206.844775][ T4576] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 206.852604][ T4576] netlink: 'syz.2.1079': attribute type 2 has an invalid length. [ 206.880989][ T60] usb 9-1: device descriptor read/64, error -71 [ 207.001032][ T60] usb usb9-port1: attempt power cycle [ 207.411000][ T60] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 207.440996][ T1881] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 207.581029][ T60] usb 9-1: device descriptor read/8, error -71 [ 207.811102][ T60] usb 9-1: device descriptor read/8, error -71 [ 207.846946][ T4585] loop8: detected capacity change from 0 to 512 [ 207.931133][ T1881] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.981702][ T4585] EXT4-fs (loop8): orphan cleanup on readonly fs [ 207.990700][ T4585] EXT4-fs error (device loop8): ext4_acquire_dquot:6200: comm syz.8.1081: Failed to acquire dquot type 1 [ 208.005885][ T4585] EXT4-fs (loop8): 1 truncate cleaned up [ 208.020513][ T1881] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.064160][ T4585] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 208.309340][ T1881] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.368297][ T1881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.445072][ T1881] usb 7-1: SerialNumber: syz [ 208.457824][ T4589] incfs: Backing dir is not set, filesystem can't be mounted. [ 208.490280][ T4589] incfs: mount failed -2 [ 208.616439][ T4593] futex_wake_op: syz.2.1083 tries to shift op by 144; fix this program [ 208.747143][ T4595] loop8: detected capacity change from 0 to 1024 [ 208.785235][ T4595] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.1084: Invalid block bitmap block 0 in block_group 0 [ 208.799237][ T4595] __quota_error: 72 callbacks suppressed [ 208.799253][ T4595] Quota error (device loop8): write_blk: dquota write failed [ 208.812667][ T4595] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 208.822810][ T4595] EXT4-fs error (device loop8): ext4_acquire_dquot:6200: comm syz.8.1084: Failed to acquire dquot type 0 [ 208.834284][ T4595] EXT4-fs error (device loop8): ext4_free_blocks:6218: comm syz.8.1084: Freeing blocks not in datazone - block = 0, count = 4096 [ 208.847857][ T4595] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.1084: Invalid inode bitmap blk 0 in block_group 0 [ 208.851058][ T684] Quota error (device loop8): remove_tree: Getting block too big (0 >= 8) [ 208.861011][ T4595] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem [ 208.869111][ T684] EXT4-fs error (device loop8): ext4_release_dquot:6236: comm kworker/u4:6: Failed to release dquot type 0 [ 208.878034][ T4595] EXT4-fs (loop8): 1 orphan inode deleted [ 208.890992][ T378] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 208.895375][ T4595] EXT4-fs (loop8): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 209.140994][ T378] usb 3-1: Using ep0 maxpacket: 8 [ 209.261078][ T378] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 209.272115][ T378] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 209.285274][ T378] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.291913][ T378] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 209.301141][ T378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.309849][ T378] usb 3-1: config 0 descriptor?? [ 209.381005][ T60] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 209.651021][ T60] usb 9-1: Using ep0 maxpacket: 32 [ 209.681267][ T378] usbhid 3-1:0.0: can't add hid device: -71 [ 209.687769][ T378] usbhid: probe of 3-1:0.0 failed with error -71 [ 209.716956][ T378] usb 3-1: USB disconnect, device number 7 [ 209.950500][ T30] audit: type=1326 audit(1761565465.317:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="syz.8.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 209.956636][ T4595] loop8: detected capacity change from 0 to 512 [ 209.974170][ T30] audit: type=1326 audit(1761565465.317:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="syz.8.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 210.004752][ T30] audit: type=1326 audit(1761565465.317:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="syz.8.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 210.028277][ T30] audit: type=1326 audit(1761565465.317:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="syz.8.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 210.051885][ T30] audit: type=1326 audit(1761565465.317:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="syz.8.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 210.065672][ T4595] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.1084: dx entry: limit 0 != root limit 125 [ 210.076858][ T30] audit: type=1326 audit(1761565465.317:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="syz.8.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 210.091058][ T4595] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1084: Corrupt directory, running e2fsck is recommended [ 210.110812][ T30] audit: type=1326 audit(1761565465.317:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4594 comm="syz.8.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 210.124222][ T4595] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 210.155076][ T4595] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2229: inode #15: comm syz.8.1084: corrupted in-inode xattr [ 210.168264][ T4595] EXT4-fs (loop8): Remounting filesystem read-only [ 210.175062][ T4595] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.1084: couldn't read orphan inode 15 (err -117) [ 210.187460][ T4595] EXT4-fs (loop8): Remounting filesystem read-only [ 210.194094][ T4595] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,user_xattr,user_xattr,grpjquota=.max_batch_time=0x0000000000000001,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 210.216896][ T1881] usb 7-1: 0:2 : does not exist [ 210.229245][ T1881] usb 7-1: USB disconnect, device number 18 [ 210.249248][ T4612] fuse: Bad value for 'group_id' [ 210.291015][ T60] usb 9-1: unable to get BOS descriptor or descriptor too short [ 210.351017][ T60] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 210.358651][ T60] usb 9-1: can't read configurations, error -71 [ 210.593853][ T4618] loop2: detected capacity change from 0 to 40427 [ 210.634515][ T4618] F2FS-fs (loop2): Found nat_bits in checkpoint [ 210.659669][ T4618] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 210.695889][ T4623] netlink: 'syz.2.1090': attribute type 5 has an invalid length. [ 210.706219][ T4623] device ip6erspan0 entered promiscuous mode [ 210.731070][ T4370] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 210.746356][ T4370] EXT4-fs (loop8): Remounting filesystem read-only [ 211.212936][ T425] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 211.220852][ T425] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 211.228549][ T425] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 211.246293][ T425] hid-generic 0003:0004:0000.0016: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 211.261081][ T60] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 211.270815][ T4630] fido_id[4630]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 211.551012][ T60] usb 9-1: device descriptor read/64, error -71 [ 211.950994][ T60] usb 9-1: device descriptor read/64, error -71 [ 212.002150][ T4666] loop6: detected capacity change from 0 to 1024 [ 212.012651][ T4666] EXT4-fs (loop6): Ignoring removed orlov option [ 212.021164][ T4666] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 212.071077][ T60] usb usb9-port1: attempt power cycle [ 212.093396][ T4671] tmpfs: Unknown parameter '01777777777777777777777Xcv:Q' [ 212.104780][ T4671] netlink: 'syz.0.1095': attribute type 6 has an invalid length. [ 212.339081][ T4680] loop6: detected capacity change from 0 to 256 [ 212.374448][ T4680] exfat: Unknown parameter '0x0000000000000000' [ 212.491093][ T60] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 212.671033][ T60] usb 9-1: device descriptor read/8, error -71 [ 212.780510][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.787629][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.795308][ T4693] device bridge_slave_0 entered promiscuous mode [ 212.802490][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.809520][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.817039][ T4693] device bridge_slave_1 entered promiscuous mode [ 212.850988][ T20] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 212.867405][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.874462][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.881791][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.888820][ T4693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.909562][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.917313][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.924861][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.936224][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.944634][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.951705][ T4632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.960616][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.969077][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.971115][ T60] usb 9-1: device descriptor read/8, error -71 [ 212.976133][ T4632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.996462][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.006028][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.020118][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.036186][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.044297][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.052039][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.060426][ T4693] device veth0_vlan entered promiscuous mode [ 213.071023][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.083000][ T4693] device veth1_macvtap entered promiscuous mode [ 213.093296][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.103492][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.211069][ T20] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 213.220353][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.230091][ T338] device bridge_slave_1 left promiscuous mode [ 213.241032][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.252469][ T338] device bridge_slave_0 left promiscuous mode [ 213.258900][ T20] usb 3-1: config 0 descriptor?? [ 213.263932][ T60] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 213.264939][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.289845][ T338] device veth1_macvtap left promiscuous mode [ 213.301554][ T20] usb 3-1: selecting invalid altsetting 1 [ 213.302331][ T338] device veth0_vlan left promiscuous mode [ 213.307517][ T20] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 213.451015][ T60] usb 9-1: device descriptor read/8, error -71 [ 213.504621][ T4690] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1101'. [ 213.513821][ T4690] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 213.560728][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'. [ 213.570164][ T455] usb 3-1: USB disconnect, device number 8 [ 213.721072][ T60] usb 9-1: device descriptor read/8, error -71 [ 213.848505][ T60] usb usb9-port1: unable to enumerate USB device [ 213.889908][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.898907][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.909376][ T4728] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1106'. [ 213.921915][ T4728] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1106'. [ 213.935853][ T4727] kernel profiling enabled (shift: 17) [ 213.958575][ T30] kauditd_printk_skb: 321 callbacks suppressed [ 213.958591][ T30] audit: type=1400 audit(1761565469.327:4408): avc: denied { connect } for pid=4734 comm="syz.8.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 213.994050][ T30] audit: type=1326 audit(1761565469.357:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 214.021707][ T4737] FAULT_INJECTION: forcing a failure. [ 214.021707][ T4737] name failslab, interval 1, probability 0, space 0, times 1 [ 214.034748][ T4737] CPU: 0 PID: 4737 Comm: syz.3.1112 Not tainted syzkaller #0 [ 214.035418][ T30] audit: type=1326 audit(1761565469.357:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 214.042133][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 214.042161][ T4737] Call Trace: [ 214.042168][ T4737] [ 214.042175][ T4737] __dump_stack+0x21/0x30 [ 214.065782][ T30] audit: type=1326 audit(1761565469.357:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 214.075630][ T4737] dump_stack_lvl+0xee/0x150 [ 214.075654][ T4737] ? show_regs_print_info+0x20/0x20 [ 214.079516][ T30] audit: type=1326 audit(1761565469.367:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 214.081837][ T4737] dump_stack+0x15/0x20 [ 214.081858][ T4737] should_fail+0x3c1/0x510 [ 214.097179][ T30] audit: type=1326 audit(1761565469.367:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 214.109333][ T4737] __should_failslab+0xa4/0xe0 [ 214.109361][ T4737] should_failslab+0x9/0x20 [ 214.109377][ T4737] slab_pre_alloc_hook+0x3b/0xe0 [ 214.109394][ T4737] ? audit_log_start+0x3a4/0x8b0 [ 214.109409][ T4737] kmem_cache_alloc+0x44/0x260 [ 214.109427][ T4737] audit_log_start+0x3a4/0x8b0 [ 214.109443][ T4737] ? audit_serial+0x30/0x30 [ 214.109455][ T4737] ? signal_setup_done+0x339/0x440 [ 214.109472][ T4737] ? ptrace_signal+0x460/0x460 [ 214.109486][ T4737] ? fpregs_set+0x540/0x540 [ 214.121905][ T30] audit: type=1326 audit(1761565469.387:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 214.142593][ T4737] ? migrate_enable+0x192/0x260 [ 214.142620][ T4737] ? migrate_disable+0x180/0x180 [ 214.142635][ T4737] audit_seccomp+0x62/0x160 [ 214.142652][ T4737] ? migrate_disable+0xd6/0x180 [ 214.146903][ T30] audit: type=1326 audit(1761565469.387:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 214.151172][ T4737] __seccomp_filter+0xb06/0x1900 [ 214.151196][ T4737] ? __secure_computing+0x290/0x290 [ 214.184441][ T30] audit: type=1326 audit(1761565469.387:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 214.188834][ T4737] ? get_sigframe_size+0x10/0x10 [ 214.188861][ T4737] ? __ia32_sys_read+0x90/0x90 [ 214.188878][ T4737] __secure_computing+0xea/0x290 [ 214.194166][ T30] audit: type=1326 audit(1761565469.387:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 214.198524][ T4737] syscall_trace_enter+0xcf/0x180 [ 214.198546][ T4737] syscall_enter_from_user_mode+0x1f/0x30 [ 214.370212][ T4737] do_int80_syscall_32+0x34/0xb0 [ 214.375142][ T4737] ? clear_bhb_loop+0x50/0xa0 [ 214.379802][ T4737] ? clear_bhb_loop+0x50/0xa0 [ 214.384461][ T4737] entry_INT80_compat+0x93/0x98 [ 214.389303][ T4737] RIP: 0033:0x200000000006 [ 214.393708][ T4737] Code: Unable to access opcode bytes at RIP 0x1fffffffffdc. [ 214.401050][ T4737] RSP: 002b:00007fb06ea22a78 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 214.409447][ T4737] RAX: ffffffffffffffda RBX: 00007fb070211fa0 RCX: 00007fb06ffbafc9 [ 214.417495][ T4737] RDX: 00007fb06ea22a80 RSI: 00007fb06ea22bb0 RDI: 000000000000000d [ 214.425538][ T4737] RBP: 00007fb06ea23090 R08: 0000000000000000 R09: 0000000000000000 [ 214.433496][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.441449][ T4737] R13: 00007fb070212038 R14: 00007fb070211fa0 R15: 00007ffea91bcac8 [ 214.449406][ T4737] [ 214.509381][ T4751] loop2: detected capacity change from 0 to 256 [ 214.539406][ T4754] input: syz0 as /devices/virtual/input/input15 [ 214.569971][ T4759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 214.580277][ T4759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1118'. [ 214.973248][ T4774] kernel read not supported for file /policy (pid: 4774 comm: syz.0.1122) [ 214.989946][ T4779] input: syz0 as /devices/virtual/input/input17 [ 215.619313][ T4785] loop3: detected capacity change from 0 to 512 [ 215.681937][ T4785] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 215.728488][ T4785] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 215.752275][ T4785] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.827920][ T4790] FAULT_INJECTION: forcing a failure. [ 215.827920][ T4790] name failslab, interval 1, probability 0, space 0, times 0 [ 215.862227][ T4796] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.877403][ T4790] CPU: 0 PID: 4790 Comm: syz.2.1127 Not tainted syzkaller #0 [ 215.884810][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.894875][ T4790] Call Trace: [ 215.898160][ T4790] [ 215.901092][ T4790] __dump_stack+0x21/0x30 [ 215.905430][ T4790] dump_stack_lvl+0xee/0x150 [ 215.910112][ T4790] ? show_regs_print_info+0x20/0x20 [ 215.915314][ T4790] dump_stack+0x15/0x20 [ 215.919471][ T4790] should_fail+0x3c1/0x510 [ 215.923888][ T4790] __should_failslab+0xa4/0xe0 [ 215.928674][ T4790] should_failslab+0x9/0x20 [ 215.933180][ T4790] slab_pre_alloc_hook+0x3b/0xe0 [ 215.938120][ T4790] ? audit_log_start+0x3a4/0x8b0 [ 215.943058][ T4790] kmem_cache_alloc+0x44/0x260 [ 215.947819][ T4790] audit_log_start+0x3a4/0x8b0 [ 215.952584][ T4790] ? audit_serial+0x30/0x30 [ 215.957429][ T4790] ? signal_setup_done+0x339/0x440 [ 215.962539][ T4790] ? ptrace_signal+0x460/0x460 [ 215.967303][ T4790] ? fpregs_set+0x540/0x540 [ 215.971803][ T4790] ? migrate_enable+0x192/0x260 [ 215.976653][ T4790] ? migrate_disable+0x180/0x180 [ 215.981584][ T4790] audit_seccomp+0x62/0x160 [ 215.986085][ T4790] ? migrate_disable+0xd6/0x180 [ 215.990928][ T4790] __seccomp_filter+0xb06/0x1900 [ 215.995858][ T4790] ? __secure_computing+0x290/0x290 [ 216.001053][ T4790] ? get_sigframe_size+0x10/0x10 [ 216.005980][ T4790] __secure_computing+0xea/0x290 [ 216.010901][ T4790] syscall_trace_enter+0xcf/0x180 [ 216.015912][ T4790] syscall_enter_from_user_mode+0x1f/0x30 [ 216.021616][ T4790] do_int80_syscall_32+0x34/0xb0 [ 216.026544][ T4790] ? clear_bhb_loop+0x50/0xa0 [ 216.031210][ T4790] ? clear_bhb_loop+0x50/0xa0 [ 216.035869][ T4790] entry_INT80_compat+0x93/0x98 [ 216.040714][ T4790] RIP: 0033:0x200000000006 [ 216.045118][ T4790] Code: Unable to access opcode bytes at RIP 0x1fffffffffdc. [ 216.052547][ T4790] RSP: 002b:00007f1b0e6e0a78 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 216.060948][ T4790] RAX: ffffffffffffffda RBX: 00007f1b0fecffa0 RCX: 00007f1b0fc78fc9 [ 216.068906][ T4790] RDX: 00007f1b0e6e0a80 RSI: 00007f1b0e6e0bb0 RDI: 000000000000000d [ 216.076865][ T4790] RBP: 00007f1b0e6e1090 R08: 0000000000000000 R09: 0000000000000000 [ 216.084925][ T4790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.092886][ T4790] R13: 00007f1b0fed0038 R14: 00007f1b0fecffa0 R15: 00007ffe3c831b28 [ 216.100869][ T4790] [ 216.146902][ T4802] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 216.170999][ T1881] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 216.306727][ T4799] overlayfs: unrecognized mount option "uuid=null" or missing value [ 216.473362][ T4816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1134'. [ 216.621132][ T1881] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 216.639952][ T1881] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 216.726809][ T1881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.736358][ T1881] usb 9-1: config 0 descriptor?? [ 216.761137][ T4792] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 216.984824][ T4827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1135'. [ 216.995092][ T4827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'. [ 217.431086][ T378] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 217.441155][ T4830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4830 comm=syz.3.1139 [ 217.457109][ T4830] netlink: 'syz.3.1139': attribute type 27 has an invalid length. [ 217.935048][ T4830] device veth0_vlan left promiscuous mode [ 217.946989][ T4830] device veth0_vlan entered promiscuous mode [ 217.954123][ T4830] device veth1_macvtap left promiscuous mode [ 217.960913][ T4830] device veth1_macvtap entered promiscuous mode [ 217.972251][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.980227][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.989411][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.007754][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.014844][ T4639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.022631][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.031211][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.039529][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.046578][ T4639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.054817][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.063194][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 218.071576][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.079750][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 218.088160][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.096478][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.104792][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.113120][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.121418][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.129523][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.138095][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.146614][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.155133][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.164310][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.173886][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.182286][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.190364][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.198840][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.208034][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.216668][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.224967][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.233082][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.240568][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.248963][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.256876][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.265501][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.274728][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.282889][ T4639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0.257: link becomes ready [ 218.450221][ T1881] hid-generic 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 218.522422][ T378] usb 3-1: Using ep0 maxpacket: 8 [ 218.580415][ T1881] usb 9-1: USB disconnect, device number 26 [ 219.051480][ T378] usb 3-1: config index 0 descriptor too short (expected 546, got 34) [ 219.068862][ T378] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 219.077221][ T378] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.087757][ T378] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 219.096709][ T378] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 219.106067][ T378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.115188][ T378] usb 3-1: config 0 descriptor?? [ 219.413819][ T6] usb 3-1: USB disconnect, device number 9 [ 219.787481][ T4881] loop7: detected capacity change from 0 to 16384 [ 220.087056][ T4863] loop3: detected capacity change from 0 to 131072 [ 220.096265][ T4863] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 220.109185][ T4863] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 220.135154][ T4863] F2FS-fs (loop3): invalid crc value [ 220.642324][ T4863] F2FS-fs (loop3): Found nat_bits in checkpoint [ 220.765114][ T4863] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 220.794355][ T4863] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 220.831913][ T4863] overlayfs: unrecognized mount option "verity=require" or missing value [ 220.842058][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 220.842073][ T30] audit: type=1400 audit(1761565476.217:4633): avc: denied { setattr } for pid=4862 comm="syz.3.1147" path="/19/bus/file0" dev="loop3" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 220.926304][ T30] audit: type=1326 audit(1761565476.297:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 220.950206][ T30] audit: type=1326 audit(1761565476.307:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 220.975075][ T30] audit: type=1326 audit(1761565476.307:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 220.998919][ T30] audit: type=1326 audit(1761565476.307:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 221.023302][ T30] audit: type=1326 audit(1761565476.307:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 221.054009][ T30] audit: type=1326 audit(1761565476.317:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 221.077698][ T30] audit: type=1326 audit(1761565476.347:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 221.121346][ T30] audit: type=1326 audit(1761565476.397:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 221.181063][ T30] audit: type=1326 audit(1761565476.397:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4897 comm="syz.8.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e33927fc9 code=0x7ffc0000 [ 221.711056][ T1881] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 222.151032][ T1881] usb 3-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 222.160188][ T1881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.168956][ T1881] usb 3-1: config 0 descriptor?? [ 222.211387][ T1881] usb-storage 3-1:0.0: USB Mass Storage device detected [ 222.219183][ T1881] usb-storage 3-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 222.219183][ T1881] Please send a copy of this message to and [ 222.311031][ T60] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 222.413450][ T4900] loop2: detected capacity change from 0 to 256 [ 222.464147][ T4900] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 222.486066][ T455] usb 3-1: USB disconnect, device number 10 [ 222.550978][ T60] usb 7-1: Using ep0 maxpacket: 32 [ 222.751084][ T60] usb 7-1: config 1 interface 0 altsetting 252 bulk endpoint 0x82 has invalid maxpacket 8 [ 222.761519][ T60] usb 7-1: config 1 interface 0 altsetting 252 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 222.774628][ T60] usb 7-1: config 1 interface 0 has no altsetting 0 [ 222.851847][ T4946] loop8: detected capacity change from 0 to 128 [ 222.883578][ T4946] FAT-fs (loop8): bogus sectors per cluster 0 [ 222.889726][ T4946] FAT-fs (loop8): Can't find a valid FAT filesystem [ 222.951059][ T60] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.960174][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.968271][ T60] usb 7-1: Product: syz [ 222.972989][ T60] usb 7-1: Manufacturer: Й [ 222.977517][ T60] usb 7-1: SerialNumber: syz [ 222.983111][ T60] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 223.000026][ T60] usb 7-1: no configuration chosen from 1 choice [ 223.030681][ T4950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1169'. [ 223.871337][ T4954] loop2: detected capacity change from 0 to 1024 [ 223.906886][ T4954] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 223.906886][ T4954] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 223.906886][ T4954] [ 223.952989][ T4954] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 223.970386][ T4954] netlink: 'syz.2.1171': attribute type 4 has an invalid length. [ 224.249455][ T4971] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1173'. [ 225.082039][ T4971] loop3: detected capacity change from 0 to 40427 [ 225.164303][ T4974] loop2: detected capacity change from 0 to 256 [ 225.177287][ T20] usb 7-1: USB disconnect, device number 19 [ 225.186835][ T4971] F2FS-fs (loop3): Found nat_bits in checkpoint [ 225.226877][ T4971] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 225.241843][ T4971] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 225.263581][ T4969] overlayfs: conflicting lowerdir path [ 225.305957][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'. [ 225.331954][ T4982] device bridge_slave_1 left promiscuous mode [ 225.341789][ T4986] loop2: detected capacity change from 0 to 128 [ 225.343348][ T4982] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.356438][ T4982] device bridge_slave_0 left promiscuous mode [ 225.362836][ T4982] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.428433][ T4387] attempt to access beyond end of device [ 225.428433][ T4387] loop3: rw=2049, want=45112, limit=40427 [ 225.462747][ T4988] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.470025][ T4988] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.500071][ T4988] device bridge_slave_1 left promiscuous mode [ 225.506731][ T4988] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.516305][ T4988] device bridge_slave_0 left promiscuous mode [ 225.522893][ T4988] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.531678][ T4978] loop6: detected capacity change from 0 to 40427 [ 225.594750][ T4978] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 225.604172][ T4978] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 225.621965][ T4978] F2FS-fs (loop6): invalid crc value [ 225.671805][ T4978] F2FS-fs (loop6): Found nat_bits in checkpoint [ 225.678496][ T4999] loop8: detected capacity change from 0 to 512 [ 225.882780][ T4978] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 225.890014][ T4978] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 225.898257][ T4999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 225.906367][ T4999] System zones: 1-12 [ 225.940375][ T4999] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1182: invalid indirect mapped block 8 (level 2) [ 226.154891][ T4999] EXT4-fs (loop8): Remounting filesystem read-only [ 226.211244][ T4999] EXT4-fs (loop8): 1 truncate cleaned up [ 226.217007][ T4999] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none. [ 226.318173][ T5004] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 226.463646][ T5028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5028 comm=syz.8.1188 [ 227.045721][ T5035] loop2: detected capacity change from 0 to 512 [ 227.101912][ T5035] EXT4-fs (loop2): Test dummy encryption mode enabled [ 227.159395][ T5035] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 227.176623][ T5035] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 227.190995][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 227.191012][ T30] audit: type=1326 audit(1761565482.547:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 227.251029][ T5035] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x0000000000000100,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 227.290731][ T30] audit: type=1326 audit(1761565482.547:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 227.320302][ T30] audit: type=1326 audit(1761565482.547:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 227.381664][ T30] audit: type=1326 audit(1761565482.547:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 227.426412][ T30] audit: type=1326 audit(1761565482.547:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 227.450526][ T30] audit: type=1326 audit(1761565482.547:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 227.478031][ T30] audit: type=1326 audit(1761565482.547:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 227.502049][ T30] audit: type=1326 audit(1761565482.547:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 227.526195][ T30] audit: type=1326 audit(1761565482.547:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 227.550829][ T30] audit: type=1326 audit(1761565482.547:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5036 comm="syz.3.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 227.684140][ T5054] loop3: detected capacity change from 0 to 8192 [ 227.725933][ T5054] loop3: p1 < > p3 p4 < > [ 227.733337][ T5054] loop3: p3 size 2051506176 extends beyond EOD, truncated [ 227.787520][ T335] udevd[335]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 227.787558][ T334] udevd[334]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 227.802195][ T3367] udevd[3367]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 227.850497][ T5067] loop3: detected capacity change from 0 to 256 [ 227.911780][ T5070] loop3: detected capacity change from 0 to 128 [ 227.947081][ T5070] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.957998][ T5070] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.160512][ T5073] tipc: Started in network mode [ 228.165580][ T5073] tipc: Node identity ac14140f, cluster identity 4711 [ 228.172949][ T5073] tipc: New replicast peer: 255.255.255.255 [ 228.179566][ T5073] tipc: Enabled bearer , priority 10 [ 228.191522][ T5073] tipc: MTU too low for tipc bearer [ 229.127809][ T5088] loop8: detected capacity change from 0 to 2048 [ 229.291024][ T2062] tipc: Node number set to 2886997007 [ 229.447768][ T5088] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.914139][ T5080] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 230.043914][ T5080] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 230.056282][ T5080] EXT4-fs (loop8): This should not happen!! Data will be lost [ 230.056282][ T5080] [ 230.066079][ T5080] EXT4-fs (loop8): Total free blocks count 0 [ 230.080749][ T5080] EXT4-fs (loop8): Free/Dirty block details [ 230.095109][ T5080] EXT4-fs (loop8): free_blocks=2415919504 [ 230.106663][ T5080] EXT4-fs (loop8): dirty_blocks=16 [ 230.118132][ T5080] EXT4-fs (loop8): Block reservation details [ 230.135829][ T5080] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 230.171563][ T5104] loop8: detected capacity change from 0 to 512 [ 230.231689][ T5111] netlink: 'syz.0.1210': attribute type 4 has an invalid length. [ 230.244443][ T5115] loop8: detected capacity change from 0 to 512 [ 230.248950][ T5111] netlink: 'syz.0.1210': attribute type 4 has an invalid length. [ 230.273344][ T5115] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 230.284487][ T5115] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.406283][ T425] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 230.475694][ T5133] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 230.483882][ T5133] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 230.588677][ T5137] netlink: 'syz.8.1216': attribute type 27 has an invalid length. [ 230.630991][ T60] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 230.664865][ T5137] device veth0_vlan left promiscuous mode [ 230.671297][ T5137] device veth0_vlan entered promiscuous mode [ 230.678210][ T5137] device veth1_macvtap left promiscuous mode [ 230.685237][ T5137] device veth1_macvtap entered promiscuous mode [ 230.696072][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.703943][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.712463][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.720796][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.729285][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.737562][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.746027][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.754442][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.762917][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.771284][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.779393][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.781076][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.787647][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.798496][ T425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.810618][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.815594][ T425] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.836577][ T425] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.845676][ T425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.855837][ T425] usb 4-1: config 0 descriptor?? [ 231.031046][ T60] usb 7-1: not running at top speed; connect to a high speed hub [ 231.111210][ T60] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 231.122321][ T60] usb 7-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.135267][ T60] usb 7-1: config 1 interface 0 has no altsetting 0 [ 231.250147][ T5145] SELinux: security_context_str_to_sid(E:) failed for (dev ?, type ?) errno=-22 [ 231.296247][ T5148] incfs: Can't find or create .index dir in ./file0 [ 231.302976][ T5148] incfs: mount failed -14 [ 231.321348][ T60] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.330410][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.338855][ T60] usb 7-1: Product: syz [ 231.343217][ T60] usb 7-1: Manufacturer: syz [ 231.347851][ T60] usb 7-1: SerialNumber: syz [ 231.362028][ T425] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 231.375158][ T425] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 231.381313][ T5124] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 231.403676][ T5124] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 231.921675][ T60] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 231.929539][ T60] usb 7-1: USB disconnect, device number 20 [ 232.312289][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 232.312303][ T30] audit: type=1400 audit(1761565487.687:4774): avc: denied { read } for pid=5162 comm="syz.8.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.362723][ T30] audit: type=1400 audit(1761565487.737:4775): avc: denied { setopt } for pid=5162 comm="syz.8.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 232.386103][ T5163] Illegal XDP return value 4294967282, expect packet loss! [ 232.395702][ T5163] 9pnet: Insufficient options for proto=fd [ 232.442777][ T30] audit: type=1107 audit(1761565487.817:4776): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 232.458910][ T5170] loop6: detected capacity change from 0 to 128 [ 232.740986][ T425] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 232.801023][ T60] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 232.991156][ T425] usb 9-1: Using ep0 maxpacket: 32 [ 233.041275][ T60] usb 7-1: Using ep0 maxpacket: 32 [ 233.121056][ T425] usb 9-1: config 2 has an invalid interface number: 194 but max is 0 [ 233.129288][ T425] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 233.139395][ T425] usb 9-1: config 2 has no interface number 0 [ 233.145499][ T425] usb 9-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 233.156467][ T425] usb 9-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 233.161042][ T60] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 233.167713][ T425] usb 9-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 233.176145][ T60] usb 7-1: config 4 has no interface number 0 [ 233.188873][ T425] usb 9-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 233.195268][ T60] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.203991][ T425] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.215360][ T60] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.233062][ T60] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 233.242125][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.251421][ T5177] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 233.291615][ T60] hub 7-1:4.128: USB hub found [ 233.346947][ T5181] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 233.355875][ T5181] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 233.366941][ T5181] loop3: detected capacity change from 0 to 1024 [ 233.410433][ T5183] netlink: 'syz.0.1230': attribute type 6 has an invalid length. [ 233.423809][ T5181] EXT4-fs (loop3): Ignoring removed orlov option [ 233.432622][ T5181] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsddf,nolazytime,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,barrier=0x0000000000000006,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 233.463418][ T30] audit: type=1326 audit(1761565488.837:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 233.486894][ T30] audit: type=1326 audit(1761565488.837:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 233.510739][ T30] audit: type=1326 audit(1761565488.837:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 233.534202][ T60] hub 7-1:4.128: 2 ports detected [ 233.534238][ T60] hub 7-1:4.128: Using single TT (err -22) [ 233.539323][ T425] usb 9-1: string descriptor 0 read error: -71 [ 233.545577][ T30] audit: type=1326 audit(1761565488.837:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 233.565849][ T425] usb 9-1: USB disconnect, device number 27 [ 233.584414][ T30] audit: type=1326 audit(1761565488.837:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 233.609918][ T2062] usb 4-1: USB disconnect, device number 6 [ 233.616370][ T30] audit: type=1326 audit(1761565488.837:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 233.640011][ T30] audit: type=1326 audit(1761565488.837:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5180 comm="syz.3.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb06ffbafc9 code=0x7ffc0000 [ 233.678580][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1231'. [ 234.116121][ T60] usb 7-1: USB disconnect, device number 21 [ 235.087900][ T5205] loop3: detected capacity change from 0 to 131072 [ 235.133280][ T5205] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 235.141503][ T5205] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 235.150630][ T5205] F2FS-fs (loop3): invalid crc value [ 235.157772][ T5205] F2FS-fs (loop3): Found nat_bits in checkpoint [ 235.179286][ T5205] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 235.186396][ T5205] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 235.201295][ T5205] overlayfs: failed to resolve './bus': -2 [ 235.621179][ T5221] loop6: detected capacity change from 0 to 512 [ 236.503411][ T5237] loop3: detected capacity change from 0 to 128 [ 236.583571][ T5237] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.594431][ T5237] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.641221][ T378] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 236.895762][ T5263] loop6: detected capacity change from 0 to 256 [ 236.901062][ T378] usb 9-1: Using ep0 maxpacket: 16 [ 236.908322][ T5263] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.002191][ T5266] loop6: detected capacity change from 0 to 2048 [ 237.021055][ T378] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 237.064153][ T5266] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 237.082559][ T5266] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 237.181088][ T378] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 237.190163][ T378] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.198182][ T378] usb 9-1: Product: syz [ 237.202827][ T378] usb 9-1: Manufacturer: syz [ 237.207412][ T378] usb 9-1: SerialNumber: syz [ 237.212603][ T378] usb 9-1: config 0 descriptor?? [ 237.251714][ T378] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 237.259480][ T378] usb 9-1: Detected FT232RL [ 237.387946][ T5274] loop3: detected capacity change from 0 to 512 [ 237.401155][ T425] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 237.423894][ T5274] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.440010][ T5274] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 237.471049][ T378] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 237.481742][ T5277] loop3: detected capacity change from 0 to 128 [ 237.731049][ T378] ftdi_sio 9-1:0.0: GPIO initialisation failed: -5 [ 237.740977][ T378] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 237.761081][ T425] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.771810][ T425] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.861085][ T425] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 237.870557][ T425] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.878935][ T425] usb 7-1: SerialNumber: syz [ 238.019148][ T5223] loop8: detected capacity change from 0 to 40427 [ 238.092967][ T5223] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(32256) [ 238.101540][ T5223] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 238.109804][ T5223] F2FS-fs (loop8): fault_injection options not supported [ 238.117114][ T5223] F2FS-fs (loop8): fault_type options not supported [ 238.124897][ T5223] F2FS-fs (loop8): invalid crc value [ 238.131661][ T5223] F2FS-fs (loop8): Found nat_bits in checkpoint [ 238.151867][ T425] usb 7-1: 0:2 : does not exist [ 238.154311][ T5223] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 238.156811][ T425] usb 7-1: unit 5: unexpected type 0x09 [ 238.164161][ T5223] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 238.183155][ T425] usb 7-1: USB disconnect, device number 22 [ 238.319196][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 238.319213][ T30] audit: type=1400 audit(1761565493.687:4850): avc: denied { checkpoint_restore } for pid=5298 comm="syz.0.1266" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.098959][ T5328] loop3: detected capacity change from 0 to 128 [ 239.165340][ T5328] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 239.670092][ T378] usb 9-1: USB disconnect, device number 28 [ 239.681651][ T1728] attempt to access beyond end of device [ 239.681651][ T1728] loop8: rw=2049, want=45104, limit=40427 [ 239.688335][ T378] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 239.709958][ T378] ftdi_sio 9-1:0.0: device disconnected [ 239.864232][ T5354] loop8: detected capacity change from 0 to 1024 [ 239.892577][ T5354] EXT4-fs (loop8): test_dummy_encryption requires encrypt feature [ 240.020967][ T425] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 240.152440][ T5364] loop3: detected capacity change from 0 to 512 [ 240.212815][ T5364] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 240.224950][ T5364] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.238330][ T5364] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 240.325105][ T5394] tipc: Enabling of bearer rejected, failed to enable media [ 240.361005][ T378] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 240.391058][ T425] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.400991][ T425] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 240.413409][ T5408] loop3: detected capacity change from 0 to 512 [ 240.414455][ T425] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.426788][ T425] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 240.435887][ T425] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.445006][ T425] usb 7-1: config 0 descriptor?? [ 240.448255][ T5408] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1312: iget: bad i_size value: 38620345925642 [ 240.462921][ T5408] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1312: couldn't read orphan inode 15 (err -117) [ 240.475033][ T5408] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.548475][ T5410] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1312: bg 0: block 5: invalid block bitmap [ 240.561203][ T5410] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 240.573744][ T5410] EXT4-fs (loop3): This should not happen!! Data will be lost [ 240.573744][ T5410] [ 240.583626][ T5410] EXT4-fs (loop3): Total free blocks count 0 [ 240.589607][ T5410] EXT4-fs (loop3): Free/Dirty block details [ 240.595573][ T5410] EXT4-fs (loop3): free_blocks=0 [ 240.600520][ T5410] EXT4-fs (loop3): dirty_blocks=7360 [ 240.605906][ T5410] EXT4-fs (loop3): Block reservation details [ 240.611932][ T5410] EXT4-fs (loop3): i_reserved_data_blocks=7360 [ 240.621112][ T378] usb 9-1: Using ep0 maxpacket: 16 [ 240.647830][ T4633] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 240.660583][ T4633] EXT4-fs (loop3): This should not happen!! Data will be lost [ 240.660583][ T4633] [ 240.801035][ T378] usb 9-1: unable to get BOS descriptor or descriptor too short [ 240.881069][ T378] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.891219][ T378] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 240.900181][ T378] usb 9-1: config 1 has no interface number 1 [ 240.912640][ T425] hid-led 0003:0FC5:B080.0019: item fetching failed at offset 0/5 [ 240.914344][ T378] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 240.926129][ T425] hid-led: probe of 0003:0FC5:B080.0019 failed with error -22 [ 240.940514][ T3367] udevd[3367]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 241.321307][ T425] usb 7-1: USB disconnect, device number 23 [ 241.348468][ T378] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.357621][ T378] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.365680][ T378] usb 9-1: Product: ช㘦鸚䭊敫倵嚀蓉㢩챵썺瓌㽍霹燜⶜☍但䐹楨굨෺ឈ抟ꂨ곥ﶡ谵생㹛膺′䵪┵ᄦ৴ﯕ茸워㋘ [ 241.380997][ T378] usb 9-1: Manufacturer: 孟檠믭쪍﷼畸䭋⩙莢㟄끜ࣃ㔙ꊊ붔堓镀皒슉맒繆慬몬β튺ٜꦑ쏴初巕ⴘ⠜ꂍ [ 241.394604][ T378] usb 9-1: SerialNumber: 㩠倐랔紀圙䶨迪䟊ᑦ읲袶ﻜু힓관驖ᬾ⽣襵ⳮ䙈믄ʸ叔统 [ 241.583082][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 241.674534][ T5433] loop3: detected capacity change from 0 to 40427 [ 241.721840][ T5433] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 241.729642][ T5433] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 241.738983][ T5433] F2FS-fs (loop3): invalid crc value [ 241.745883][ T5433] F2FS-fs (loop3): Found nat_bits in checkpoint [ 241.767408][ T5433] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 241.774759][ T378] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor [ 241.782654][ T5433] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 241.863095][ T378] usb 9-1: USB disconnect, device number 29 [ 241.972954][ T5453] device erspan0 entered promiscuous mode [ 242.014913][ T30] audit: type=1326 audit(1761565497.387:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5458 comm="syz.6.1332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a2f3c3fc9 code=0x0 [ 242.089519][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.092139][ T5466] loop8: detected capacity change from 0 to 7 [ 242.097134][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.111087][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 242.140468][ T5451] device bridge_slave_0 entered promiscuous mode [ 242.148147][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.155870][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.199188][ T5451] device bridge_slave_1 entered promiscuous mode [ 242.315569][ T30] audit: type=1400 audit(1761565497.687:4852): avc: denied { create } for pid=5480 comm="syz.8.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 242.336309][ T30] audit: type=1400 audit(1761565497.697:4853): avc: denied { bind } for pid=5479 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.356006][ T30] audit: type=1400 audit(1761565497.697:4854): avc: denied { listen } for pid=5479 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.384508][ T30] audit: type=1400 audit(1761565497.697:4855): avc: denied { read } for pid=5479 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.422582][ T30] audit: type=1400 audit(1761565497.747:4856): avc: denied { shutdown } for pid=5479 comm="syz.3.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 242.438403][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.443379][ T30] audit: type=1400 audit(1761565497.797:4857): avc: denied { create } for pid=5490 comm="syz.3.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 242.449874][ T5451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.449977][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.483547][ T5451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.509672][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.517744][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.526230][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.543008][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.543459][ T5501] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 242.551370][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.575561][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.584837][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.593566][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.600629][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.617361][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.625685][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.641940][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.654669][ T5451] device veth0_vlan entered promiscuous mode [ 242.668984][ T5451] device veth1_macvtap entered promiscuous mode [ 242.676812][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.685149][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.693502][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.702071][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.729746][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.738668][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.773167][ T5514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1349'. [ 242.793562][ T30] audit: type=1400 audit(1761565498.167:4858): avc: denied { append } for pid=5515 comm="syz.3.1351" name="loop6" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.866539][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.915651][ T30] audit: type=1400 audit(1761565498.287:4859): avc: denied { watch watch_reads } for pid=5538 comm="syz.6.1361" path="pipe:[38051]" dev="pipefs" ino=38051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 243.024403][ T5548] tipc: Enabled bearer , priority 0 [ 243.032976][ T5548] +: renamed from syzkaller0 [ 243.038709][ T5548] tipc: Disabling bearer [ 243.165138][ T5549] block device autoloading is deprecated and will be removed. [ 243.173052][ T5549] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 243.530389][ T5572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1377'. [ 243.586188][ T5575] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.593543][ T5575] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.602142][ T5575] device bridge_slave_0 entered promiscuous mode [ 243.609866][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.617118][ T5575] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.624778][ T5575] device bridge_slave_1 entered promiscuous mode [ 243.706263][ T5575] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.713328][ T5575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.720597][ T5575] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.727638][ T5575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.750760][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.758901][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.767417][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.807955][ T5575] device veth0_vlan entered promiscuous mode [ 243.818720][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.828371][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.836758][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.845525][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.853638][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.862413][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.869442][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.877199][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.885846][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.892911][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.900555][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.908687][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.925217][ T5575] device veth1_macvtap entered promiscuous mode [ 243.934345][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.958154][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.966884][ T20] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 243.978183][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.986859][ T5610] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1391'. [ 244.164901][ T5634] UDC core: couldn't find an available UDC or it's busy: -16 [ 244.192721][ T5634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 244.230964][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 244.351083][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.362167][ T20] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.371495][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.380457][ T20] usb 4-1: config 0 descriptor?? [ 244.646426][ T5644] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1403'. [ 244.990985][ T20] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 245.351097][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.366404][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.376923][ T20] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.390629][ T20] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.400389][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.426597][ T20] usb 7-1: config 0 descriptor?? [ 245.433232][ T30] audit: type=1400 audit(1761565500.807:4860): avc: denied { ioctl } for pid=5691 comm="syz.4.1424" path="socket:[39275]" dev="sockfs" ino=39275 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 245.898412][ T5734] ================================================================== [ 245.906500][ T5734] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 245.915721][ T5734] Read of size 1 at addr ffff8881258bdbf8 by task syz.9.1444/5734 [ 245.923689][ T5734] [ 245.926008][ T5734] CPU: 0 PID: 5734 Comm: syz.9.1444 Not tainted syzkaller #0 [ 245.933363][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.943412][ T5734] Call Trace: [ 245.946675][ T5734] [ 245.949589][ T5734] __dump_stack+0x21/0x30 [ 245.953914][ T5734] dump_stack_lvl+0xee/0x150 [ 245.958492][ T5734] ? show_regs_print_info+0x20/0x20 [ 245.963675][ T5734] ? load_image+0x3a0/0x3a0 [ 245.968163][ T5734] ? unwind_get_return_address+0x4d/0x90 [ 245.973783][ T5734] print_address_description+0x7f/0x2c0 [ 245.979315][ T5734] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 245.985807][ T5734] kasan_report+0xf1/0x140 [ 245.990214][ T5734] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 245.996703][ T5734] __asan_report_load1_noabort+0x14/0x20 [ 246.002324][ T5734] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 246.008641][ T5734] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 246.014786][ T5734] ? xfrm_netlink_rcv+0x72/0x90 [ 246.019723][ T5734] ? netlink_unicast+0x876/0xa40 [ 246.024646][ T5734] ? netlink_sendmsg+0x86a/0xb70 [ 246.029566][ T5734] ? ____sys_sendmsg+0x5a2/0x8c0 [ 246.034505][ T5734] ? ___sys_sendmsg+0x1f0/0x260 [ 246.039384][ T5734] ? x64_sys_call+0x4b/0x9a0 [ 246.043963][ T5734] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.050300][ T5734] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 246.056470][ T5734] xfrm_policy_inexact_insert+0x70/0x1130 [ 246.062187][ T5734] ? __get_hash_thresh+0x10c/0x420 [ 246.067287][ T5734] ? policy_hash_bysel+0x110/0x4f0 [ 246.072388][ T5734] xfrm_policy_insert+0x126/0x9a0 [ 246.077396][ T5734] ? xfrm_policy_construct+0x54f/0x1f00 [ 246.082934][ T5734] xfrm_add_policy+0x4d1/0x830 [ 246.087694][ T5734] ? xfrm_dump_sa_done+0xc0/0xc0 [ 246.092621][ T5734] xfrm_user_rcv_msg+0x45c/0x6e0 [ 246.097549][ T5734] ? xfrm_netlink_rcv+0x90/0x90 [ 246.102393][ T5734] ? avc_has_perm_noaudit+0x460/0x460 [ 246.107775][ T5734] ? x64_sys_call+0x4b/0x9a0 [ 246.112355][ T5734] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 246.117717][ T5734] netlink_rcv_skb+0x1e0/0x430 [ 246.122467][ T5734] ? xfrm_netlink_rcv+0x90/0x90 [ 246.127311][ T5734] ? netlink_ack+0xb60/0xb60 [ 246.131894][ T5734] ? wait_for_completion_killable_timeout+0x10/0x10 [ 246.138472][ T5734] ? __netlink_lookup+0x387/0x3b0 [ 246.143483][ T5734] xfrm_netlink_rcv+0x72/0x90 [ 246.148147][ T5734] netlink_unicast+0x876/0xa40 [ 246.152899][ T5734] netlink_sendmsg+0x86a/0xb70 [ 246.157654][ T5734] ? netlink_getsockopt+0x530/0x530 [ 246.162837][ T5734] ? sock_alloc_file+0xba/0x260 [ 246.167676][ T5734] ? security_socket_sendmsg+0x82/0xa0 [ 246.173151][ T5734] ? netlink_getsockopt+0x530/0x530 [ 246.178338][ T5734] ____sys_sendmsg+0x5a2/0x8c0 [ 246.183113][ T5734] ? __sys_sendmsg_sock+0x40/0x40 [ 246.188126][ T5734] ? import_iovec+0x7c/0xb0 [ 246.192617][ T5734] ___sys_sendmsg+0x1f0/0x260 [ 246.197290][ T5734] ? __sys_sendmsg+0x250/0x250 [ 246.202047][ T5734] ? __fdget+0x1a1/0x230 [ 246.206280][ T5734] __x64_sys_sendmsg+0x1e2/0x2a0 [ 246.211213][ T5734] ? ___sys_sendmsg+0x260/0x260 [ 246.216050][ T5734] ? __kasan_check_write+0x14/0x20 [ 246.221156][ T5734] ? switch_fpu_return+0x15d/0x2c0 [ 246.226259][ T5734] x64_sys_call+0x4b/0x9a0 [ 246.230662][ T5734] do_syscall_64+0x4c/0xa0 [ 246.235063][ T5734] ? clear_bhb_loop+0x50/0xa0 [ 246.239724][ T5734] ? clear_bhb_loop+0x50/0xa0 [ 246.244385][ T5734] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.250272][ T5734] RIP: 0033:0x7f68c9872fc9 [ 246.254765][ T5734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.274359][ T5734] RSP: 002b:00007f68c82db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.282763][ T5734] RAX: ffffffffffffffda RBX: 00007f68c9ac9fa0 RCX: 00007f68c9872fc9 [ 246.290724][ T5734] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 246.298680][ T5734] RBP: 00007f68c98f5f91 R08: 0000000000000000 R09: 0000000000000000 [ 246.306639][ T5734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.314597][ T5734] R13: 00007f68c9aca038 R14: 00007f68c9ac9fa0 R15: 00007ffec5f21248 [ 246.322569][ T5734] [ 246.325585][ T5734] [ 246.327901][ T5734] Allocated by task 5734: [ 246.332216][ T5734] __kasan_kmalloc+0xda/0x110 [ 246.336888][ T5734] __kmalloc+0x13d/0x2c0 [ 246.341121][ T5734] sk_prot_alloc+0xed/0x320 [ 246.345618][ T5734] sk_alloc+0x38/0x430 [ 246.349673][ T5734] pfkey_create+0x12a/0x660 [ 246.354171][ T5734] __sock_create+0x38d/0x7a0 [ 246.358754][ T5734] __sys_socket+0xec/0x190 [ 246.363157][ T5734] __x64_sys_socket+0x7a/0x90 [ 246.367819][ T5734] x64_sys_call+0x8c5/0x9a0 [ 246.372395][ T5734] do_syscall_64+0x4c/0xa0 [ 246.376799][ T5734] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.382680][ T5734] [ 246.384988][ T5734] The buggy address belongs to the object at ffff8881258bd800 [ 246.384988][ T5734] which belongs to the cache kmalloc-1k of size 1024 [ 246.399020][ T5734] The buggy address is located 1016 bytes inside of [ 246.399020][ T5734] 1024-byte region [ffff8881258bd800, ffff8881258bdc00) [ 246.412458][ T5734] The buggy address belongs to the page: [ 246.418082][ T5734] page:ffffea0004962e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1258b8 [ 246.428323][ T5734] head:ffffea0004962e00 order:3 compound_mapcount:0 compound_pincount:0 [ 246.436632][ T5734] flags: 0x4000000000010200(slab|head|zone=1) [ 246.442725][ T5734] raw: 4000000000010200 ffffea000466c400 0000000500000005 ffff888100043080 [ 246.451294][ T5734] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 246.459853][ T5734] page dumped because: kasan: bad access detected [ 246.466242][ T5734] page_owner tracks the page as allocated [ 246.471933][ T5734] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4830, ts 217468847083, free_ts 214553660436 [ 246.492060][ T5734] post_alloc_hook+0x192/0x1b0 [ 246.496817][ T5734] prep_new_page+0x1c/0x110 [ 246.501301][ T5734] get_page_from_freelist+0x2cc5/0x2d50 [ 246.506831][ T5734] __alloc_pages+0x18f/0x440 [ 246.511404][ T5734] new_slab+0xa1/0x4d0 [ 246.515459][ T5734] ___slab_alloc+0x381/0x810 [ 246.520033][ T5734] __slab_alloc+0x49/0x90 [ 246.524361][ T5734] __kmalloc_track_caller+0x169/0x2c0 [ 246.529719][ T5734] __alloc_skb+0x21a/0x740 [ 246.534124][ T5734] inet6_rt_notify+0x287/0x470 [ 246.538875][ T5734] fib6_del+0xbf9/0xf60 [ 246.543023][ T5734] fib6_clean_node+0x296/0x520 [ 246.547771][ T5734] fib6_walk_continue+0x4fc/0x700 [ 246.552782][ T5734] fib6_walk+0x153/0x290 [ 246.557019][ T5734] fib6_clean_all+0x16a/0x230 [ 246.561684][ T5734] rt6_disable_ip+0x119/0x700 [ 246.566346][ T5734] page last free stack trace: [ 246.570994][ T5734] free_unref_page_prepare+0x542/0x550 [ 246.576469][ T5734] free_unref_page+0xa2/0x550 [ 246.581132][ T5734] __free_pages+0x6c/0x100 [ 246.585533][ T5734] __vunmap+0x84d/0x9e0 [ 246.589668][ T5734] vfree+0x8b/0xc0 [ 246.593368][ T5734] kcov_mmap+0x8f/0x130 [ 246.597507][ T5734] mmap_file+0x60/0xb0 [ 246.601559][ T5734] mmap_region+0x101c/0x1800 [ 246.606135][ T5734] do_mmap+0x812/0xf10 [ 246.610186][ T5734] vm_mmap_pgoff+0x1ce/0x410 [ 246.614758][ T5734] ksys_mmap_pgoff+0x161/0x1d0 [ 246.619507][ T5734] __x64_sys_mmap+0xfa/0x110 [ 246.624083][ T5734] x64_sys_call+0x83/0x9a0 [ 246.628487][ T5734] do_syscall_64+0x4c/0xa0 [ 246.632891][ T5734] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 246.638771][ T5734] [ 246.641074][ T5734] Memory state around the buggy address: [ 246.646718][ T5734] ffff8881258bda80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.654760][ T5734] ffff8881258bdb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.662803][ T5734] >ffff8881258bdb80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 246.670840][ T5734] ^ [ 246.678881][ T5734] ffff8881258bdc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.686928][ T5734] ffff8881258bdc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.694965][ T5734] ================================================================== [ 246.703001][ T5734] Disabling lock debugging due to kernel taint [ 246.728742][ T20] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 246.736674][ T30] audit: type=1400 audit(1761565502.087:4861): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[14546]" dev="pipefs" ino=14546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 246.819639][ T30] audit: type=1400 audit(1761565502.157:4862): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 246.841908][ T30] audit: type=1400 audit(1761565502.157:4863): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.847250][ T20] plantronics 0003:047F:FFFF.001A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 246.863372][ T30] audit: type=1400 audit(1761565502.157:4864): avc: denied { append } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.863402][ T30] audit: type=1400 audit(1761565502.157:4865): avc: denied { open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.863423][ T30] audit: type=1400 audit(1761565502.157:4866): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 246.972001][ T3911] usb 4-1: USB disconnect, device number 7 [ 247.071219][ T425] usb 7-1: USB disconnect, device number 24 [ 247.901824][ T4633] device bridge_slave_1 left promiscuous mode [ 247.907936][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.915594][ T4633] device bridge_slave_0 left promiscuous mode [ 247.922030][ T4633] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.929730][ T4633] device veth1_macvtap left promiscuous mode [ 247.935884][ T4633] device veth0_vlan left promiscuous mode [ 248.482734][ T4633] tipc: Left network mode [ 249.223533][ T4633] device gretap0 left promiscuous mode [ 249.229011][ T4633] bridge0: port 3(gretap0) entered disabled state [ 249.492329][ T4633] device bridge_slave_1 left promiscuous mode [ 249.498456][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.505946][ T4633] device bridge_slave_0 left promiscuous mode [ 249.512086][ T4633] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.519912][ T4633] device veth1_macvtap left promiscuous mode [ 249.525988][ T4633] device veth0_vlan left promiscuous mode