last executing test programs: 5.854490124s ago: executing program 3 (id=118): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) 5.435672283s ago: executing program 3 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x70}}, 0x0) 5.386073753s ago: executing program 3 (id=125): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d00)={0x0, 0xc, 0x6, "e569904a7a8b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1912c50000"], 0x0, 0x0}) dup(r2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 4.745170274s ago: executing program 1 (id=137): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911a800000000001e8705cee760a3e9990d2ac97da92a34"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r4 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x8, &(0x7f0000000280)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r7}, 0x4) openat(0xffffffffffffff9c, 0x0, 0x181441, 0x148) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.467621566s ago: executing program 0 (id=143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001002bbd7000fddbdf2502000000", @ANYRES32=0x0, @ANYBLOB="04efff0514000100000000000800000000ff00000001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f00000001c0)=""/201, 0xc9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x34, r3, 0x1, 0x70bd28, 0x25dfdc00, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x1000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000000000)={[{@gid}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x50, r8, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xe, 0x4}, {0x4, 0x7}, {0x10}, {0x9, 0x2}], "6862a7fe0fe36468"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x5, 0x6}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x6}, {0x94, 0x2}, {0x7f}, {0x4, 0x1}, {0xe, 0x4}, {0x8, 0x3}, {0x9, 0x1}], "1c9f9810dac9ff99"}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80005}, 0x80) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r9, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000200)={0x3, 0x2, 0xfefffffc, 0x3, 0xfffffffe}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000000)='3', 0x4e) 4.23827879s ago: executing program 4 (id=148): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r0, 0x1, 0x1, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty=0x4000}}, {0x54, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x65, 0x1, 0x4, [{@remote}, {@remote, 0x10000}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x7, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000200)={{0xffffff87, 0xd}, 0x100, './file0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000440)=@ethtool_rxnfc={0x2f, 0x1, 0x2, {0x6, @esp_ip6_spec={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xaf7, 0x6}, {0x0, @remote, 0x2, 0xe, [0x2, 0x3]}, @esp_ip4_spec={@local, @multicast1, 0x7, 0x5}, {0x0, @local, 0x800, 0x1, [0x400, 0x8]}, 0x4, 0xd}}}) 4.199734806s ago: executing program 4 (id=149): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d00)={0x0, 0xc, 0x6, "e569904a7a8b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1912c50000"], 0x0, 0x0}) dup(r2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 4.185683109s ago: executing program 0 (id=150): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000901000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000291000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00003c3000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000627000/0x4000)=nil, &(0x7f00005cb000/0x4000)=nil, 0x0, 0x5}, 0x68) r0 = userfaultfd(0x801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) 4.091749367s ago: executing program 0 (id=151): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d00)={0x0, 0xc, 0x6, "e569904a7a8b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1912c50000"], 0x0, 0x0}) dup(r2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) 3.896923284s ago: executing program 1 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) r2 = add_key$fscrypt_provisioning(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000000000618870616161616161616161616161056161616161f65961616161616161c66161613131313131313131bb315331313131310e0e313131313131313131313131313131"], 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000002c0)={@id={0x2, 0x0, @c}, 0x40, r2, '\x00', @b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000006200)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0x7, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4, 0xdf, 0x1, 0x8}]}}}], 0x20}}], 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xffffffffffffffa1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000003540)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff, 0x0, 0xffff}}}}}}}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) io_setup(0x7, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000240)='\xf2K', 0x2, 0x0) 2.498305828s ago: executing program 2 (id=161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001002bbd7000fddbdf2502000000", @ANYRES32=0x0, @ANYBLOB="04efff0514000100000000000800000000ff00000001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f00000001c0)=""/201, 0xc9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x34, r3, 0x1, 0x70bd28, 0x25dfdc00, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000140)={[{@stripe={'stripe', 0x3d, 0x4}}, {}, {@sysvgroups}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x1000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0xa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000000000)={[{@gid}]}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x50, r8, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xe, 0x4}, {0x4, 0x7}, {0x10}, {0x9, 0x2}], "6862a7fe0fe36468"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x5, 0x6}, {0x3, 0x5}, {0x0, 0x7}, {0x7, 0x6}, {0x94, 0x2}, {0x7f}, {0x4, 0x1}, {0xe, 0x4}, {0x8, 0x3}, {0x9, 0x1}], "1c9f9810dac9ff99"}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80005}, 0x80) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf2502075bff", @ANYRES32=r9, @ANYBLOB="080002007f00000108000400ac1e0001140003"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000200)={0x3, 0x2, 0xfefffffc, 0x3, 0xfffffffe}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000000)='3', 0x4e) 2.407881775s ago: executing program 1 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x4f5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x120, 0x0) getitimer(0x1, &(0x7f0000000040)) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001700)={{{@in6=@private1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001840)=0x0) r8 = getpid() r9 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4e9, &(0x7f0000000200)="$eJzs3c1rG2caAPBHku3EjnfzscuSZGETyEL2g1j+YIm9u7DsaXcPgWUDe2khdW3FTS1bxpLT2OTgtLcceigtLZQeeu9f0EtzaiiUnlt6LT2UlDZ1oS20qGgkOf6QHMdxrMTz+4Gid96R9byvxPNm5p0ZTQCpdbr2TyaiPyI+iojD9cX1Lzhdf1q5e32i9shEtXrxq0zyutpy86XNvzsUEcsRcTAi/veviGczm+OWF5emx4vFwnxjOV+ZmcuXF5fOXZkZnypMFWaHRs+PjY0OjgyP7bBnP22qufny8zcvvPufnne+e+nO7Vfef6/WrP7GurX92E31rnfH0TV1XRHx90cRrANyjf70droh7Ejt+/tVRJxJ8v9w5JJvE0iDarVa/bF6oN3q5Sqwb2WTbeBMdiAi6uVsdmCgvg3/6+jLFkvlyp8vlxZmJ+vbykeiO3v5SrEw2NhXOBLdmdryUFK+tzy8YXkkItkGfjXXmywPTJSKk3s71AEbHNqQ/9/m6vkPpIRdfkgv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+m1Vf737GE7gD313wsXao9q/fr3bExeXVyYLl09N1koTw/MLEwMTJTm5wamSqWp5Jqdmfu9X7FUmhv6Syxcy1cK5Uq+vLh0aaa0MFu5lFzXf6nQvTfdArbh6Klbn2QiYvmvvckj1vyXL1dhf6tWM9Hpa5CBzsh1egACOsbUP6TXA+zjt/2RMODJ1uInetc52Lr6HzH3SMIBeyDb6QYAHXP2hON/kFbm/yG9zP9DetnGB3Y4/x/3m/83vsDjy/w/pFd/m/t//WLNvbsGI+KXEfFxrvtA815fwH6Q/SLT2P4/e/j3/RvX9mS+Tw4R9ETEC29efP3aeKUyP1Sr/3q1vvJGo364E+0HtquZp808BgDSa+Xu9YnmYy/jdv2zfhLC5vhdjbnJg8kxhL6VzLpzFTK7dO7C8o2ION4qfqZxv/P6kY++ldym+Mcaz5n6WyTt7Urum7438U+sif+7NfFPPvSnAulwqzb+DLbKv2yS07Gaf+vHn/5dOrb5ZdvxL7s6/uXajH+n1r3TctsYz7314udt49+IOLkav9aje+NPVyN+pkX8WtvObrOPd57+/2/arau+XX+fVuNfU62Ur8zM5cuLS+eS35GbKswOjZ4fGxsdHBkeyydz1PnmTPVmfzv+4e2t+t/XJn69v5+27H+t7o/b7P8Pv/3gqdNbxP/Dmdbf/7HkufXn3xsRf9pm/G+GP3um3bpa/Mk2/c9uEb9WN7LN+OXX/u3aYQB4jJQXl6bHi8XC/E4LPRHxEH+u8ACF3sejGQppKNxv5Gi/vwk8Ge4lfadbAgAAAAAAAAAAAGxX29OAmxe37sLpxB3uIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAvvBzAAAA//+iBtBZ") fstat(r9, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000780)='./file1\x00', r10, 0x0) fstat(r2, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r12, &(0x7f0000000080)={0x40000010}) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001900)='./binderfs/custom1\x00', 0xc00, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001940)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0, 0x0}, &(0x7f0000001ac0)=0xc) sendmmsg$unix(r4, &(0x7f0000001c00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000300)="e164bf1e16977ad0d991500c5791802c4b75af702fa937a68bda07fee1588b52e0b35baf42dd3d4f52a3abfc8ad9abdec95b0a7452e1d514b4365f51674fe46a512d0ae4427ea5fabc8cd80f084e5e11b9f37e8a71b283b4d503bb42a5fe69bb833853a1c047193e99e1b39a337ddba1342569d269583004d20becad38a76522639fdf8bc1aa4caa9088af0b6db81af7ba8e9610e755484e61467b71c3f81aa567a4ab34fc", 0xa5}, {&(0x7f00000003c0)="0d3ae691eb596faedde9b81f598ca5a794b85997e9d3946e78b866f2bb503ff90a36909d00c4811b24a1fe73f950a4110875159308d25402d5e29267fe4dd7c329d47327c4f418020e5138ca2f87afc0963e42ff5171633193ea286169d060d2b9460229a26ca856fbb815e417778c63f446b2661b6484b9dfd9ba713426b6ed40dff0c153d15d3a86eac487556ec892f887b54192c6d55ed4c1bfa431e12acd96d56b3ff5443b1ca53aa2348d1a9687b1f520491b71deba165d477a89522697496328488f9ebddc2e5b358df3f2221a9f106b0921a35afe72f5822a4ee26842db74", 0xe2}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="3d6fa8e7a819fec759630d8b0dd243636c8b2c0a979c3c25d4df72b2509b74c21065626363c661e26de2388129418b0368a1242cf837b4e650ff19fbaacbd75c5fdf424ef5675b2bbd3736fed433114e45e2338a2c716b0521d2a53ae844385fecd355be820047c319a9d4d7", 0x6c}, {&(0x7f0000001540)="cbd08697e2a21f390079469820f06560f94f6c54cdf7aba589be7c7886ffedb8072f5b1b2e58b2d4df0916c28687708f4fff643fa182913a649504abdcb507b428a88007f6559187a7f6fdd47e4fb63a54eb49a6f90dedb56df9a10a16c31dacfd2cafb6ea1245f7676e1f235e99159b825e7d6a327169cb69a3cd9346bf3a863e", 0x81}, {&(0x7f0000001600)="e67be9721e02427d7f87b452715ecbc100d0a3aba79944eb3f26539d1e85e652a1900403e1385360edf53aa681dec7420996fdd5628a18a850a6539524", 0x3d}, {&(0x7f0000001640)="21f5495661b79cda485d4613", 0xc}], 0x7, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {r0, r5, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r3, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @rights={{0x18, 0x1, 0x1, [r1, r12]}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r2, r3, r13]}}, @cred={{0x1c, 0x1, 0x2, {r0, r14, r15}}}], 0xe0, 0x20000000}}], 0x1, 0x33ba2e474b39b3bd) 2.341803008s ago: executing program 3 (id=163): r0 = userfaultfd(0x801) signalfd4(r0, 0x0, 0x0, 0x1000) (async) socket(0x18, 0x5b6da3ee53df22e8, 0x0) r1 = socket(0xf, 0x803, 0x2) syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1000048, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x552e, &(0x7f0000005880)="$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") (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000019c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x8, @empty, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYBLOB="ff"], 0x28}}], 0x1, 0x40000) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f00000001c0)={[0x2, 0x100, 0x1, 0x7, 0x0, 0x6, 0xad29, 0x2, 0xfff, 0xd, 0x0, 0x2, 0x9, 0x75fd, 0xf8df, 0x2, 0x2, 0x6, 0x3, 0x0, 0x5, 0x81, 0x7f, 0x5570, 0x10, 0x800, 0x7, 0x7, 0x81, 0x3d, 0x0, 0x8000, 0x0, 0x6, 0x9, 0x6, 0xcc, 0x8000044, 0x4, 0xe946, 0x3, 0x2, 0x6, 0xe, 0x4000, 0x2, 0xeeea, 0x9a2, 0x8, 0x6c0a, 0xa5d, 0x8, 0x8, 0x2, 0x2, 0x9, 0x3ff, 0x8, 0xfd, 0xb42a, 0x2, 0x7, 0x4, 0x682, 0x1, 0x3199d408, 0x9, 0x2, 0x8, 0x3, 0x4, 0x4, 0x6, 0x5, 0x6, 0x3, 0x39, 0x2, 0x1, 0x9df1, 0x10000002, 0xfffffffe, 0x2, 0x7, 0x51, 0x0, 0x0, 0x1, 0xaf96, 0x1, 0x9, 0x9, 0x2, 0xc8, 0x2312, 0x7f, 0x3, 0x7, 0x4, 0x8, 0x5, 0x3, 0x0, 0x6, 0xaa, 0x8, 0xa, 0x40000, 0x7, 0x3, 0x1ff, 0x2, 0xb, 0x63, 0x7, 0x7, 0xfffffff3, 0x100, 0xe7, 0x5, 0x5, 0x1, 0x2, 0x65c2, 0x7, 0x4, 0x3, 0x3, 0xffffffff, 0x9, 0x81, 0x8, 0x3ca, 0x7, 0x5, 0x8, 0x80000001, 0x8c, 0x1, 0x3ff, 0x0, 0x1, 0x8, 0x4, 0x3, 0x6, 0x7fffffff, 0x7, 0x4, 0x8, 0x101, 0x0, 0x68, 0x4, 0x401, 0x3, 0x6, 0x6, 0xfffffff9, 0x6, 0x0, 0x43, 0x8c50, 0x9, 0x1, 0x61, 0x401, 0x72, 0xc000, 0x9, 0x9, 0x8, 0x8, 0x759, 0x1, 0x10000, 0x0, 0x200, 0x400, 0xbd7, 0x1000, 0x2, 0x2c71, 0x8, 0x6, 0x80000000, 0xf7fe, 0x9, 0x3, 0x2, 0x9, 0x2, 0x8, 0x2, 0xac3, 0x400, 0x3, 0x9, 0x224, 0x1, 0xfffffeff, 0x8, 0x4, 0x7, 0x20ba3972, 0x3, 0x8, 0x9, 0x40, 0x4, 0x200, 0xfffffffe, 0x5, 0xb, 0xd0f8, 0xfffffffd, 0x3, 0x4, 0x2e, 0x101, 0x4, 0x0, 0x6, 0x4, 0x4, 0x1, 0x0, 0x6, 0x9, 0x1, 0x4, 0x6, 0x9, 0xd5a, 0x5, 0xc4, 0xc, 0xae, 0x0, 0x3, 0x654000, 0x4, 0x7, 0x9, 0x8, 0x8, 0x67c, 0x9, 0x100, 0x8, 0xff, 0x7, 0xe, 0x3, 0x6, 0xffff4ac1, 0x1, 0x5, 0x7, 0xc, 0x1e24, 0x4, 0x1, 0x7, 0x7, 0x0, 0x7fff, 0x8, 0x5, 0x9, 0x5, 0x10000, 0x1, 0x9, 0x7, 0x80, 0x2, 0x200, 0x3a8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x5, 0x8000, 0x7, 0x9, 0x5, 0x5, 0x7, 0x8001, 0x1, 0xc318, 0x7, 0x8, 0xfffffffd, 0xfff, 0x401, 0xfffffffa, 0x1c, 0x3, 0x0, 0x5, 0x1, 0x9, 0x4, 0x5, 0x7, 0xfffffffd, 0xffff66e5, 0x8, 0x4, 0x1, 0x40000000, 0x4, 0xd1, 0x7c, 0xf, 0x6, 0x80, 0x401, 0xf, 0xffffff81, 0x5, 0x558, 0x8, 0x8, 0xfffffff7, 0x9, 0x8001, 0x7, 0xc8a0, 0x3, 0x1e, 0x2, 0x5, 0x5685fc67, 0x0, 0x3, 0x18000000, 0x5, 0x6, 0x9, 0x1, 0x401, 0x8, 0x1, 0x2, 0x4, 0x438, 0x2, 0x16, 0x4, 0x0, 0x2, 0x4fb, 0x8, 0x1, 0x7, 0x7f, 0x3b, 0x3, 0x5, 0x0, 0x3834, 0xb1, 0xe, 0x2, 0x8, 0xe03, 0x8001, 0x5, 0x40, 0x7ffe, 0x2, 0x9, 0x9, 0x24f4, 0x77e4, 0x200, 0x1, 0xeef, 0x6, 0x7, 0x3, 0x3, 0x1, 0x8e3, 0x7, 0x4, 0x4, 0xabe4, 0x6, 0xff, 0x1, 0x9, 0x96f, 0xfffff317, 0x4, 0x3, 0x7, 0x2, 0x14e, 0x5, 0x881, 0x6, 0x3, 0x0, 0x1ff, 0x4, 0x4, 0x3a17c0, 0x7, 0x446, 0xfffffffc, 0x0, 0x9c1b, 0x1000, 0x7, 0x1ff, 0x6, 0x5, 0x0, 0x3, 0x7, 0xc8c6, 0x800, 0x935c, 0x97, 0x800, 0x2, 0xf, 0x0, 0x6, 0x9, 0x10, 0x1ff, 0x9, 0x8, 0x9, 0x7, 0x1, 0x46f, 0xfffffc7b, 0x3, 0x1, 0xe, 0x9, 0x10000, 0x0, 0x7fffffff, 0xd, 0x1, 0xffff8001, 0x0, 0x0, 0xfffffff6, 0xf25d, 0x54f1, 0x2, 0x7fffffff, 0x7ff, 0x9, 0x7ff, 0x1, 0x3, 0x4, 0x1, 0x2, 0x4, 0x264, 0x8da0, 0x0, 0x7ff, 0x4, 0x7, 0x3ff, 0x4, 0x40000000, 0xfffffff9, 0x9, 0x5, 0x0, 0x1, 0x2008000, 0x1, 0x2, 0x9, 0x8001, 0x73e, 0x63, 0x1, 0xf0cf, 0x2, 0x2, 0x8, 0x10, 0x38, 0x3eda, 0x1, 0xfffffffb, 0x200, 0xfffffffc, 0x5139c4cb, 0x5, 0x19, 0x9, 0xfffffff2, 0x1, 0x5, 0x1, 0x8, 0x6fe, 0xd0, 0x1, 0x7f, 0x8, 0x9, 0x7, 0xfffffffa, 0x0, 0x5, 0xb74, 0xfffffffe, 0xe, 0x7fffffff, 0x240, 0x6, 0x6, 0x9, 0x7, 0xfffff819, 0xffffffff, 0x3, 0x5, 0x189f, 0x1, 0x8, 0x3, 0x4, 0x8, 0xdf, 0x9b2, 0x1000, 0x2, 0x2, 0x10001, 0x9, 0x5, 0xed, 0xffffff81, 0xf9d0, 0x40, 0xfffffff7, 0x9, 0x7, 0x4, 0x4, 0x1ff, 0x7, 0x4, 0xa8, 0x4, 0x7fffffff, 0xa230, 0xd6b5, 0x4, 0xf, 0x5, 0x7, 0x0, 0x8, 0xfffffff8, 0xff, 0x6, 0x9, 0x5, 0xd7d, 0x2c7, 0x4e4, 0x10, 0x400, 0x2, 0x7d6a, 0x3, 0x1, 0x4, 0x8000, 0xc33, 0x8, 0x6, 0xa69c, 0x2, 0xffffffff, 0x8, 0x7, 0x10001, 0x0, 0x80000001, 0x1, 0x6, 0x39, 0x6, 0x2, 0x7, 0x7, 0xbf2a, 0x8, 0x8fc, 0x1, 0x9, 0x713c, 0xafd, 0x3, 0x80000000, 0x700b, 0x6, 0x4, 0x1, 0x4, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x6, 0x0, 0x2a93df5b, 0x9, 0x0, 0x81, 0x6, 0xb5c4, 0x2, 0x10, 0x2, 0x1000, 0x3, 0xfffffff8, 0x3, 0x2, 0x5, 0xffffcf39, 0x1, 0x7, 0x8, 0x7, 0x340, 0x8f, 0x5, 0x7fff, 0x0, 0x8, 0x4, 0x9, 0xb21, 0x9, 0x1, 0x10001, 0x5bcc, 0x8, 0x3502, 0x7fffffff, 0x40, 0x2, 0x2, 0x1, 0x6, 0x7f, 0x5, 0x200, 0x3, 0xa8, 0xbf, 0x6, 0x6e, 0x7fff, 0xfffffffb, 0x5, 0x7, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x1, 0x3, 0xfffffffb, 0xfff, 0x1, 0x3, 0x4, 0xa, 0xde, 0x80000000, 0x5, 0x2, 0x0, 0xa021, 0x3, 0x3, 0x0, 0x7, 0x2, 0x7aa, 0xd035, 0x7, 0xff, 0x7fff, 0x1, 0x657, 0x9, 0x8, 0x9f13, 0xe, 0x2, 0xb, 0x5, 0xff, 0xa, 0x10, 0x8, 0x826d, 0x3acd, 0x6, 0xa73, 0xd, 0x4, 0x80000001, 0xb, 0x7, 0x3, 0xb, 0x3bb5, 0xfffffffd, 0x2, 0x1, 0xfffffff8, 0x2, 0x6, 0x6, 0x100, 0xe08f, 0x120, 0x3, 0x4, 0xfffeffff, 0x400, 0x3, 0x8, 0x101, 0xce, 0x9, 0x2, 0x3, 0x2, 0x2, 0x24, 0x3, 0x5, 0x1, 0x0, 0x6, 0x200, 0xf, 0x9, 0xfd, 0x7, 0x2, 0xde, 0x0, 0x1, 0x3, 0x10001, 0x1, 0x0, 0x4e, 0x2, 0x0, 0x1, 0x7, 0x9, 0x9, 0xd9, 0xbd, 0xf73, 0x7, 0x40, 0x5, 0x8, 0xca, 0x200, 0x1, 0x2, 0x6, 0x1, 0x4, 0x10001, 0x9, 0x8001, 0x7, 0x3, 0x9, 0x3, 0x2, 0x4, 0x8, 0x1, 0x9, 0x61, 0x2, 0xfff, 0xfffffff7, 0x1ff, 0xfffffff9, 0x7, 0x88, 0x1bc, 0x10000, 0x800, 0xff, 0xa4, 0x8, 0x5, 0x9, 0x9, 0xfffffff8, 0x6, 0x600, 0x971, 0x0, 0x200, 0x6, 0x8, 0x411, 0x3, 0x4, 0x6, 0x10001, 0x2, 0x1, 0x4, 0xc, 0x6, 0x7fff, 0x0, 0x3, 0x9, 0x7ff, 0x0, 0xc20, 0x7ff, 0x6, 0x8, 0x5, 0x4, 0xb, 0xe27, 0x3ff, 0x5, 0x6b58d850, 0x1, 0xcf, 0x6, 0x5, 0x40, 0x599, 0xfffffff8, 0x9, 0x9, 0xfffffff9, 0x6, 0xa, 0x6, 0x4, 0x1ff, 0x1, 0x49c, 0x4, 0x7, 0x4f0, 0xfff, 0x4, 0x52, 0x7, 0x2, 0x8000, 0x4, 0x7, 0x6, 0x6523, 0xe1dc, 0x6, 0xf, 0x0, 0x8, 0x6, 0x3, 0x9, 0x800, 0xfff, 0x2, 0x2, 0x81e, 0x3, 0x8b, 0x1, 0x7ff, 0x82, 0x9, 0x98b, 0xbffd, 0x3, 0x8510, 0x1, 0x7d, 0xc77, 0xe, 0x7, 0x800, 0x6, 0x4, 0x10001, 0x8000, 0xfffffff7, 0x8001, 0x80000001, 0x7, 0x69b, 0x3, 0x4, 0x7, 0x7fffffff, 0x10, 0x3, 0x7, 0x5, 0xe980, 0x7, 0x81, 0x7, 0x1, 0x40, 0x8, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x3, 0x7, 0x2, 0xfffffff7, 0x998d, 0x9, 0x8000, 0x0, 0x5, 0xfffff801, 0x1ff, 0xb, 0x101, 0x0, 0xc7e, 0x5, 0x7, 0x2, 0x7, 0xc, 0x8, 0x409, 0x21, 0x0, 0x1, 0x7b7d, 0x2, 0xffffffff, 0x5, 0xfffffffd, 0xd, 0xdcd9, 0x6, 0x101, 0x5, 0x5, 0x5, 0x6, 0xfffffff8, 0x8, 0x1, 0x1, 0xffff, 0x8, 0x20000000, 0x7ff, 0x7, 0x10, 0xfffffffd, 0x7b92, 0x5, 0x0, 0x7f, 0x8, 0x6, 0x7f, 0x84, 0x1, 0x9, 0x3, 0xa4c, 0x8, 0x6, 0x6, 0x6, 0x1, 0xf, 0x9, 0x1, 0xfffff0b3, 0xd, 0x0, 0x2, 0x9, 0xac]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, 0x0, 0x0) (async) close(0x3) timerfd_create(0x5, 0x80c00) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) timerfd_gettime(r9, &(0x7f0000000000)) 2.315340703s ago: executing program 2 (id=164): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = getpid() syz_pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, 0x0) 1.58716507s ago: executing program 2 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000800) 1.531110561s ago: executing program 2 (id=166): r0 = socket$can_raw(0x1d, 0x3, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c200000000009500001200000000d87d023c44b7ca5498c326"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) io_submit(0x0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}], 0x10) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f0000000000)=0xfffffd5c) 1.435848509s ago: executing program 2 (id=167): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603553d030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) (async) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) chdir(&(0x7f0000000040)='./file0\x00') 1.435319749s ago: executing program 2 (id=168): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r7}}], [], 0x6b}}) 1.308202213s ago: executing program 4 (id=169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1], 0x70}}, 0x0) 1.297916055s ago: executing program 4 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x7) 1.255927303s ago: executing program 1 (id=171): syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @rand_addr=0x64010102, @broadcast, {[@timestamp_addr={0x44, 0x14, 0x65, 0x1, 0x4, [{@remote}, {@remote, 0x10000}]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x7, [{@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) 1.179304297s ago: executing program 0 (id=172): socket(0x10, 0x803, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x80000000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00"/11], 0x50) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f0000000140), 0x800) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x2, 0x2, 0x7fffffff, 0x43, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0xb, 0x100000001, 0x6, 0x6, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000440)=0x5, 0x4) 1.126051397s ago: executing program 0 (id=173): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) ptrace$getsig(0x4202, r0, 0x0, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0xb0090199) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.122357578s ago: executing program 1 (id=174): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet_tcp(0x2, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0xdd12}], 0x1}, 0x20040051) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.075740467s ago: executing program 1 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x6020400) flistxattr(r2, &(0x7f0000000400)=""/236, 0xec) 668.164934ms ago: executing program 3 (id=176): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = getpid() syz_pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000300)=ANY=[]) 661.220635ms ago: executing program 3 (id=177): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@nat={'nat\x00', 0x670, 0x2, 0x448, 0x250, 0x0, 0xfeffffff, 0x250, 0x2f8, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@remote, @empty, 0xffffff00, 0x2b8e93a624eed692, 'ip6gretap0\x00', 'dvmrp1\x00', {}, {0xff}, 0x2f, 0x0, 0xc}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv4=@broadcast, @ipv6=@remote, @gre_key=0x5, @port=0x4e23}}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'hsr0\x00'}, 0x0, 0x70, 0x198, 0x0, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:restorecond_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}, @gre_key, @icmp_id}}}}, {{@ip={@multicast1, @loopback, 0x0, 0x0, 'veth1_virt_wifi\x00', 'lo\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xd, @ipv4=@local, @ipv6=@mcast2, @port=0x4e21, @icmp_id=0x67}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f00000002c0)={r6, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x20) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x70bd28, 0x25dfdbfc, {{@in=@multicast2, @in6=@private1, 0x1, 0x0, 0x4e21, 0x6, 0x2, 0x0, 0x0, 0x5c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x32}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffffffd, 0x86, 0x1, 0x4, 0x1, 0xdb99}, {0x4, 0x3ff, 0x5, 0x100000000ebe4}, {0x20000007}, 0x70bd2c, 0x0, 0xa, 0x4, 0x1, 0x58}, [@encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e21, @in=@multicast2}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 161.814ms ago: executing program 0 (id=178): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200004, 0x3, 0x6, 0x9, 0x7ffd}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xf2b31a58d7850b6e, 0x0) read$FUSE(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000d40)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@quota}, {@noload}, {@user_xattr}, {@mblk_io_submit}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000000300)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x650ce4b086bd44e9) symlinkat(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r5, 0x0) 78.490285ms ago: executing program 4 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xa, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x2002}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x5, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001500)={r0, &(0x7f0000001640), 0x0}, 0x20) 0s ago: executing program 4 (id=180): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000d00)={0x0, 0xc, 0x6, "e569904a7a8b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1912c50000"], 0x0, 0x0}) dup(r2) close(0xffffffffffffffff) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 23.176456][ T30] audit: type=1400 audit(1791015596.078:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.179910][ T277] cgroup: Unknown subsys name 'net' [ 23.199121][ T30] audit: type=1400 audit(1791015596.078:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.226482][ T30] audit: type=1400 audit(1791015596.108:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.226801][ T277] cgroup: Unknown subsys name 'devices' [ 23.374789][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.380414][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.519654][ T30] audit: type=1400 audit(1791015596.418:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.542842][ T30] audit: type=1400 audit(1791015596.418:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.567705][ T30] audit: type=1400 audit(1791015596.418:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.568717][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.599648][ T30] audit: type=1400 audit(1791015596.498:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.619225][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.625071][ T30] audit: type=1400 audit(1791015596.498:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.659377][ T30] audit: type=1400 audit(1791015596.518:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.684901][ T30] audit: type=1400 audit(1791015596.518:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.605883][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.613165][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.620588][ T286] device bridge_slave_0 entered promiscuous mode [ 24.628294][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.635466][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.642883][ T286] device bridge_slave_1 entered promiscuous mode [ 24.705776][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.713002][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.720360][ T288] device bridge_slave_0 entered promiscuous mode [ 24.730321][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.737521][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.745003][ T288] device bridge_slave_1 entered promiscuous mode [ 24.751621][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.758941][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.766395][ T285] device bridge_slave_0 entered promiscuous mode [ 24.785145][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.792296][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.799791][ T285] device bridge_slave_1 entered promiscuous mode [ 24.818946][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.826043][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.833427][ T287] device bridge_slave_0 entered promiscuous mode [ 24.840502][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.847600][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.855138][ T287] device bridge_slave_1 entered promiscuous mode [ 24.883338][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.890426][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.897963][ T289] device bridge_slave_0 entered promiscuous mode [ 24.928892][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.936041][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.943493][ T289] device bridge_slave_1 entered promiscuous mode [ 25.073860][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.080937][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.088270][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.095354][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.116147][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.123244][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.130566][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.137656][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.156043][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.163129][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.170398][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.177475][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.196385][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.203467][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.210909][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.217971][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.228117][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.235188][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.242488][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.249550][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.266138][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.282794][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.290100][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.297603][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.304977][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.312184][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.319537][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.327180][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.334479][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.341696][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.348987][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.375181][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.382912][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.390292][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.398717][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.405811][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.427241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.435494][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.442519][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.450059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.458328][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.465408][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.473194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.481132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.489347][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.496439][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.503917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.540730][ T286] device veth0_vlan entered promiscuous mode [ 25.549148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.556782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.564649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.573277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.581625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.589806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.597425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.605175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.613509][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.620532][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.628001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.636380][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.643443][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.650812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.659244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.667335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.675527][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.682547][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.689936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.698097][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.705167][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.727682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.736220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.744668][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.751742][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.759295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.767927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.776131][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.783167][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.790563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.799085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.807531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.815672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.823667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.831630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.846608][ T289] device veth0_vlan entered promiscuous mode [ 25.857981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.866383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.874548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.882383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.890626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.898817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.906919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.915153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.924753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.932302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.940069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.948199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.957152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.965499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.978432][ T289] device veth1_macvtap entered promiscuous mode [ 25.986595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.994887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.003693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.011691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.020243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.030722][ T286] device veth1_macvtap entered promiscuous mode [ 26.043707][ T285] device veth0_vlan entered promiscuous mode [ 26.049911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.057963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.066107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.075202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.082795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.090239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.098652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.110109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.118594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.132420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.141152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.149586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.158072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.170360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.178660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.188079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.196444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.210691][ T287] device veth0_vlan entered promiscuous mode [ 26.218539][ T285] device veth1_macvtap entered promiscuous mode [ 26.227170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.235074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.243943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.252308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.260402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.268679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.276695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.284872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.292307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.299912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.307763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.317157][ T288] device veth0_vlan entered promiscuous mode [ 26.330909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.339301][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.353825][ T288] device veth1_macvtap entered promiscuous mode [ 26.361747][ T287] device veth1_macvtap entered promiscuous mode [ 26.370636][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 26.380502][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.388981][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.397404][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.405200][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.413484][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.421753][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.430223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.458282][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.467142][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.476065][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.485294][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.494085][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.502466][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.517618][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.528305][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.867884][ T336] process 'syz.3.11' launched './file0' with NULL argv: empty string added [ 28.052619][ C0] sched: RT throttling activated [ 28.212773][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 28.212790][ T30] audit: type=1400 audit(1791015600.998:111): avc: denied { write } for pid=341 comm="syz.1.15" name="001" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 28.392329][ T30] audit: type=1400 audit(1791015601.288:112): avc: denied { create } for pid=348 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 28.413909][ T30] audit: type=1400 audit(1791015601.318:113): avc: denied { create } for pid=348 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.662788][ T30] audit: type=1400 audit(1791015602.528:114): avc: denied { write } for pid=354 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.683285][ T30] audit: type=1400 audit(1791015602.528:115): avc: denied { nlmsg_write } for pid=354 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.995809][ T30] audit: type=1400 audit(1791015602.888:116): avc: denied { create } for pid=368 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.015262][ T30] audit: type=1400 audit(1791015602.888:117): avc: denied { bind } for pid=368 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.063448][ T30] audit: type=1400 audit(1791015602.888:118): avc: denied { read write } for pid=368 comm="syz.3.23" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.090487][ T30] audit: type=1400 audit(1791015602.888:119): avc: denied { open } for pid=368 comm="syz.3.23" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.124810][ T30] audit: type=1400 audit(1791015602.888:120): avc: denied { ioctl } for pid=368 comm="syz.3.23" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.237101][ T373] ======================================================= [ 30.237101][ T373] WARNING: The mand mount option has been deprecated and [ 30.237101][ T373] and is ignored by this kernel. Remove the mand [ 30.237101][ T373] option from the mount to silence this warning. [ 30.237101][ T373] ======================================================= [ 30.912113][ T383] loop2: detected capacity change from 0 to 512 [ 31.183625][ T383] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.195624][ T383] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.232058][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.742731][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 32.094335][ T20] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 32.300321][ T20] usb 4-1: config 0 has no interface number 0 [ 33.070645][ T20] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 33.080740][ T20] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 33.155008][ T20] usb 4-1: string descriptor 0 read error: -71 [ 33.161364][ T20] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 33.180775][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.190262][ T20] usb 4-1: config 0 descriptor?? [ 33.457918][ T20] usb 4-1: can't set config #0, error -71 [ 33.464940][ T20] usb 4-1: USB disconnect, device number 2 [ 35.513833][ T451] 9pnet: Insufficient options for proto=fd [ 35.669692][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 35.669706][ T30] audit: type=1400 audit(1791015608.568:133): avc: denied { create } for pid=461 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.124541][ T472] overlayfs: overlapping lowerdir path [ 41.868087][ T30] audit: type=1400 audit(1791015614.768:134): avc: denied { mmap_zero } for pid=530 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 42.073581][ T533] loop3: detected capacity change from 0 to 512 [ 42.276145][ T533] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.287621][ T533] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.529529][ T542] netlink: 100 bytes leftover after parsing attributes in process `syz.2.76'. [ 42.803686][ T30] audit: type=1400 audit(1791015615.708:135): avc: denied { setopt } for pid=550 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.869936][ T30] audit: type=1400 audit(1791015615.768:136): avc: denied { write } for pid=550 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.017804][ T565] tipc: Started in network mode [ 43.034307][ T565] tipc: Node identity ac14140f, cluster identity 4711 [ 43.055608][ T565] tipc: New replicast peer: 255.255.255.255 [ 43.067443][ T565] tipc: Enabled bearer , priority 10 [ 43.076555][ T559] overlayfs: overlapping lowerdir path [ 43.084651][ T565] tipc: MTU too low for tipc bearer [ 43.099407][ T565] loop3: detected capacity change from 0 to 1024 [ 43.133954][ T565] EXT4-fs (loop3): Ignoring removed oldalloc option [ 43.150008][ T565] EXT4-fs (loop3): Ignoring removed oldalloc option [ 43.164095][ T565] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.199001][ T565] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 43.223406][ T30] audit: type=1400 audit(1791015616.128:137): avc: denied { write } for pid=564 comm="syz.3.86" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.289901][ T30] audit: type=1400 audit(1791015616.148:138): avc: denied { add_name } for pid=564 comm="syz.3.86" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.314305][ T30] audit: type=1400 audit(1791015616.148:139): avc: denied { create } for pid=564 comm="syz.3.86" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.346610][ T30] audit: type=1400 audit(1791015616.148:140): avc: denied { read append open } for pid=564 comm="syz.3.86" path="/12/file1/blkio.bfq.io_wait_time_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.372993][ T30] audit: type=1400 audit(1791015616.168:141): avc: denied { map } for pid=564 comm="syz.3.86" path="/12/file1/blkio.bfq.io_wait_time_recursive" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.398757][ T577] tipc: Enabling of bearer rejected, already enabled [ 43.407391][ T577] tipc: MTU too low for tipc bearer [ 43.416581][ T577] loop3: detected capacity change from 0 to 1024 [ 43.423631][ T30] audit: type=1400 audit(1791015616.168:142): avc: denied { mounton } for pid=564 comm="syz.3.86" path="/12/file1" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.457205][ T30] audit: type=1400 audit(1791015616.168:143): avc: denied { create } for pid=564 comm="syz.3.86" name="proc" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.543656][ T577] EXT4-fs (loop3): Ignoring removed oldalloc option [ 43.558607][ T577] EXT4-fs (loop3): Ignoring removed oldalloc option [ 43.578448][ T577] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.695456][ T577] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 44.062674][ T20] tipc: Node number set to 2886997007 [ 44.162571][ T591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.94'. [ 44.172519][ T591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.94'. [ 44.985499][ T603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 45.012654][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 45.043455][ T603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 45.057437][ T605] syz.2.98 (605) used greatest stack depth: 21896 bytes left [ 45.089216][ T603] syz.0.97 (603) used greatest stack depth: 21888 bytes left [ 45.100518][ T608] Zero length message leads to an empty skb [ 45.292692][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 45.813589][ T20] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 45.894747][ T20] usb 2-1: config 0 has no interface number 0 [ 45.901931][ T20] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 46.010684][ T20] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 46.412790][ T20] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 46.432057][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.452272][ T20] usb 2-1: Product: syz [ 46.472473][ T20] usb 2-1: Manufacturer: syz [ 46.482578][ T20] usb 2-1: SerialNumber: syz [ 46.494072][ T20] usb 2-1: config 0 descriptor?? [ 46.512739][ T595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.522803][ T595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.692705][ T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 46.751319][ T595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.764450][ T630] tipc: Started in network mode [ 46.769457][ T595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 46.779559][ T630] tipc: Node identity ac14140f, cluster identity 4711 [ 46.793381][ T630] tipc: New replicast peer: 255.255.255.255 [ 46.799528][ T630] tipc: Enabled bearer , priority 10 [ 46.815827][ T630] tipc: MTU too low for tipc bearer [ 46.831318][ T630] loop4: detected capacity change from 0 to 1024 [ 46.863320][ T630] EXT4-fs (loop4): Ignoring removed oldalloc option [ 46.870063][ T630] EXT4-fs (loop4): Ignoring removed oldalloc option [ 46.876721][ T630] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.932853][ T630] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 46.962668][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 47.002770][ T20] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 47.092766][ T60] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 47.100974][ T60] usb 4-1: config 0 has no interface number 0 [ 47.112699][ T60] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 47.133501][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 47.133514][ T30] audit: type=1400 audit(1791015620.038:154): avc: denied { read } for pid=635 comm="syz.4.108" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.163425][ T636] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 47.172705][ T60] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 47.202893][ T30] audit: type=1400 audit(1791015620.038:155): avc: denied { open } for pid=635 comm="syz.4.108" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.260563][ T30] audit: type=1400 audit(1791015620.068:156): avc: denied { ioctl } for pid=635 comm="syz.4.108" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.452851][ T60] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 47.467428][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.484343][ T60] usb 4-1: Product: syz [ 47.492835][ T60] usb 4-1: Manufacturer: syz [ 47.500562][ T60] usb 4-1: SerialNumber: syz [ 47.520907][ T60] usb 4-1: config 0 descriptor?? [ 47.562695][ T625] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 47.571845][ T625] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 47.672711][ T20] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 47.692257][ T20] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 47.752709][ T20] asix: probe of 2-1:0.34 failed with error -71 [ 47.764619][ T20] usb 2-1: USB disconnect, device number 2 [ 47.792754][ T601] tipc: Node number set to 2886997007 [ 47.799525][ T625] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 47.811726][ T625] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 48.072771][ T60] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 48.253126][ T646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.110'. [ 48.309253][ T648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.111'. [ 48.360231][ T649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 48.712698][ T60] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 48.727262][ T60] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 48.772728][ T60] asix: probe of 4-1:0.34 failed with error -71 [ 48.785246][ T60] usb 4-1: USB disconnect, device number 3 [ 49.460547][ T657] tipc: Started in network mode [ 49.543626][ T657] tipc: Node identity ac14140f, cluster identity 4711 [ 49.765820][ T657] tipc: New replicast peer: 255.255.255.255 [ 49.870537][ T660] loop1: detected capacity change from 0 to 1024 [ 49.949946][ T657] tipc: Enabled bearer , priority 10 [ 50.091226][ T670] tipc: Enabling of bearer rejected, already enabled [ 50.162968][ T660] EXT4-fs (loop1): Ignoring removed oldalloc option [ 50.169618][ T660] EXT4-fs (loop1): Ignoring removed oldalloc option [ 50.182983][ T660] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.195617][ T671] tipc: MTU too low for tipc bearer [ 50.208130][ T670] loop4: detected capacity change from 0 to 1024 [ 50.245114][ T670] EXT4-fs (loop4): Ignoring removed oldalloc option [ 50.251753][ T670] EXT4-fs (loop4): Ignoring removed oldalloc option [ 50.272672][ T675] tipc: Started in network mode [ 50.277592][ T675] tipc: Node identity ac14140f, cluster identity 4711 [ 50.282950][ T670] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.297165][ T660] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 50.304379][ T675] tipc: New replicast peer: 255.255.255.255 [ 50.324300][ T675] tipc: Enabled bearer , priority 10 [ 50.332772][ T677] tipc: MTU too low for tipc bearer [ 50.389912][ T670] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 50.444821][ T682] tipc: Started in network mode [ 50.449746][ T682] tipc: Node identity ac14140f, cluster identity 4711 [ 50.459777][ T682] tipc: New replicast peer: 255.255.255.255 [ 50.487117][ T682] tipc: Enabled bearer , priority 10 [ 50.501554][ T684] tipc: Enabling of bearer rejected, already enabled [ 50.518444][ T684] tipc: MTU too low for tipc bearer [ 50.528368][ T684] loop1: detected capacity change from 0 to 1024 [ 50.533474][ T682] tipc: MTU too low for tipc bearer [ 50.555054][ T682] loop0: detected capacity change from 0 to 1024 [ 50.581324][ T684] EXT4-fs (loop1): Ignoring removed oldalloc option [ 50.593513][ T684] EXT4-fs (loop1): Ignoring removed oldalloc option [ 50.600211][ T684] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.633258][ T684] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 50.656285][ T682] EXT4-fs (loop0): Ignoring removed oldalloc option [ 50.688048][ T682] EXT4-fs (loop0): Ignoring removed oldalloc option [ 50.708212][ T682] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.726647][ T30] audit: type=1400 audit(1791015623.628:157): avc: denied { connect } for pid=704 comm="syz.4.131" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.763015][ T30] audit: type=1400 audit(1791015623.658:158): avc: denied { write } for pid=704 comm="syz.4.131" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.796926][ T682] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 51.034189][ T713] tipc: Enabling of bearer rejected, already enabled [ 51.109545][ T306] tipc: Node number set to 2886997007 [ 51.117691][ T716] tipc: MTU too low for tipc bearer [ 51.151426][ T658] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 51.190505][ T713] loop4: detected capacity change from 0 to 1024 [ 51.233831][ T30] audit: type=1400 audit(1791015624.138:159): avc: denied { read } for pid=721 comm="syz.0.136" dev="nsfs" ino=4026532289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.239182][ T713] EXT4-fs (loop4): Ignoring removed oldalloc option [ 51.257289][ T30] audit: type=1400 audit(1791015624.138:160): avc: denied { open } for pid=721 comm="syz.0.136" path="net:[4026532289]" dev="nsfs" ino=4026532289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.272425][ T713] EXT4-fs (loop4): Ignoring removed oldalloc option [ 51.287667][ T30] audit: type=1400 audit(1791015624.138:161): avc: denied { create } for pid=721 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.310851][ T30] audit: type=1400 audit(1791015624.158:162): avc: denied { bind } for pid=721 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.336681][ T20] tipc: Node number set to 2886997007 [ 51.342729][ T713] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.365401][ T30] audit: type=1400 audit(1791015624.188:163): avc: denied { setopt } for pid=721 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.394179][ T713] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 51.422724][ T658] usb 4-1: Using ep0 maxpacket: 16 [ 51.449490][ T735] 9pnet: Insufficient options for proto=fd [ 51.468426][ T737] tipc: Enabling of bearer rejected, already enabled [ 51.476763][ T737] tipc: MTU too low for tipc bearer [ 51.486093][ T737] loop0: detected capacity change from 0 to 1024 [ 51.562776][ T658] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 51.586647][ T737] EXT4-fs (loop0): Ignoring removed oldalloc option [ 51.596589][ T658] usb 4-1: config 0 has no interface number 0 [ 51.611102][ T658] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 51.612845][ T737] EXT4-fs (loop0): Ignoring removed oldalloc option [ 51.626617][ T658] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 51.637797][ T737] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.646617][ T60] tipc: Node number set to 2886997007 [ 51.671847][ T737] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 51.698099][ T750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.148'. [ 51.707339][ T750] tipc: Invalid UDP bearer configuration [ 51.707360][ T750] tipc: Enabling of bearer rejected, failed to enable media [ 51.822885][ T658] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 51.832554][ T658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.840927][ T658] usb 4-1: Product: syz [ 51.845275][ T658] usb 4-1: Manufacturer: syz [ 51.849920][ T658] usb 4-1: SerialNumber: syz [ 51.861736][ T658] usb 4-1: config 0 descriptor?? [ 51.882904][ T688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 51.890137][ T688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 52.012637][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 52.096648][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.105544][ T688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 52.113370][ T688] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 52.223905][ T761] SELinux: Context òK is not valid (left unmapped). [ 52.230815][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 52.230826][ T30] audit: type=1400 audit(1791015625.128:173): avc: denied { relabelto } for pid=758 comm="syz.1.152" name="net_prio.prioidx" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=F24B [ 52.281656][ T30] audit: type=1400 audit(1791015625.148:174): avc: denied { associate } for pid=758 comm="syz.1.152" name="net_prio.prioidx" dev="tmpfs" ino=159 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=F24B [ 52.307422][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 52.342636][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 52.352880][ T658] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 52.442740][ T60] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 52.455225][ T60] usb 5-1: config 0 has no interface number 0 [ 52.462680][ T26] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 52.469071][ T60] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 52.481219][ T26] usb 1-1: config 0 has no interface number 0 [ 52.487401][ T26] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 52.492033][ T60] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 52.507630][ T26] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 52.682753][ T26] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 52.702718][ T60] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 52.711915][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.717357][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.720230][ T26] usb 1-1: Product: syz [ 52.739679][ T60] usb 5-1: Product: syz [ 52.748302][ T60] usb 5-1: Manufacturer: syz [ 52.752595][ T26] usb 1-1: Manufacturer: syz [ 52.757511][ T26] usb 1-1: SerialNumber: syz [ 52.764305][ T26] usb 1-1: config 0 descriptor?? [ 52.772620][ T60] usb 5-1: SerialNumber: syz [ 52.782679][ T757] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 52.789918][ T60] usb 5-1: config 0 descriptor?? [ 52.799794][ T757] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 52.822720][ T752] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 52.829738][ T752] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 52.922918][ T761] syz.1.152 (761) used greatest stack depth: 21736 bytes left [ 53.023855][ T757] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 53.030870][ T757] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 53.038102][ T658] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 53.052761][ T658] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 53.063886][ T752] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 53.070874][ T752] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 53.122703][ T658] asix: probe of 4-1:0.34 failed with error -71 [ 53.139212][ T658] usb 4-1: USB disconnect, device number 4 [ 53.151125][ T768] 9pnet: Insufficient options for proto=fd [ 53.185480][ T30] audit: type=1400 audit(1791015626.088:175): avc: denied { watch } for pid=774 comm="syz.2.157" path="/43" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.322694][ T60] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 53.323895][ T26] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 53.398930][ T782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.160'. [ 53.407943][ T782] tipc: Invalid UDP bearer configuration [ 53.407964][ T782] tipc: Enabling of bearer rejected, failed to enable media [ 53.437510][ T784] tipc: Enabling of bearer rejected, already enabled [ 53.445484][ T784] tipc: MTU too low for tipc bearer [ 53.477988][ T30] audit: type=1400 audit(1791015626.378:176): avc: denied { unlink } for pid=286 comm="syz-executor" name="net_prio.prioidx" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=F24B [ 53.555461][ T30] audit: type=1400 audit(1791015626.378:177): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.594243][ T30] audit: type=1400 audit(1791015626.498:178): avc: denied { write } for pid=789 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.622686][ T30] audit: type=1400 audit(1791015626.498:179): avc: denied { getattr } for pid=789 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.745345][ T796] loop1: detected capacity change from 0 to 512 [ 53.916107][ T796] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.927639][ T796] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.072883][ T26] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 54.093330][ T60] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 54.105757][ T60] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 54.105821][ T26] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 54.227432][ T60] asix: probe of 5-1:0.34 failed with error -71 [ 54.243528][ T26] asix: probe of 1-1:0.34 failed with error -71 [ 54.281017][ T26] usb 1-1: USB disconnect, device number 2 [ 54.348938][ T60] usb 5-1: USB disconnect, device number 2 [ 54.417385][ T30] audit: type=1400 audit(1791015627.318:180): avc: denied { create } for pid=805 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.454521][ T30] audit: type=1400 audit(1791015627.338:181): avc: denied { setopt } for pid=805 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.490873][ T30] audit: type=1400 audit(1791015627.338:182): avc: denied { getopt } for pid=805 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 55.786517][ T841] capability: warning: `syz.0.178' uses 32-bit capabilities (legacy support in use) [ 55.838951][ T841] loop0: detected capacity change from 0 to 512 [ 55.884837][ T841] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 55.913254][ T841] EXT4-fs error (device loop0): ext4_iget_extra_inode:4604: inode #15: comm syz.0.178: corrupted in-inode xattr [ 55.934520][ T841] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.178: couldn't read orphan inode 15 (err -117) [ 55.959855][ T841] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,inode_readahead_blks=0x0000000008000000,quota,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,max_dir_size_kb=0x0000000000000009,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 56.085412][ T848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 56.152770][ T841] ================================================================== [ 56.160882][ T841] BUG: KASAN: use-after-free in enqueue_to_backlog+0x139/0xb20 [ 56.162757][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.168466][ T841] Read of size 8 at addr ffff8881274e0038 by task syz.0.178/841 [ 56.168486][ T841] [ 56.168491][ T841] CPU: 0 PID: 841 Comm: syz.0.178 Not tainted syzkaller #0 [ 56.193095][ T841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 56.203188][ T841] Call Trace: [ 56.206485][ T841] [ 56.209443][ T841] __dump_stack+0x21/0x30 [ 56.213812][ T841] dump_stack_lvl+0x110/0x170 [ 56.218508][ T841] ? show_regs_print_info+0x20/0x20 [ 56.223728][ T841] ? load_image+0x3f0/0x3f0 [ 56.228346][ T841] ? __kasan_slab_alloc+0xc9/0xe0 [ 56.233392][ T841] print_address_description+0x7f/0x2c0 [ 56.238951][ T841] ? enqueue_to_backlog+0x139/0xb20 [ 56.244170][ T841] kasan_report+0x10f/0x150 [ 56.248710][ T841] ? __kasan_check_write+0x14/0x20 [ 56.253928][ T841] ? enqueue_to_backlog+0x139/0xb20 [ 56.259156][ T841] kasan_check_range+0x249/0x2a0 [ 56.264116][ T841] __kasan_check_read+0x11/0x20 [ 56.269034][ T841] enqueue_to_backlog+0x139/0xb20 [ 56.274078][ T841] ? get_rps_cpu+0x840/0x840 [ 56.278692][ T841] netif_rx_internal+0xb3/0x370 [ 56.283564][ T841] ? dev_forward_skb+0x60/0x60 [ 56.288342][ T841] ? dst_init+0x2bb/0x3c0 [ 56.292698][ T841] netif_rx_ni+0x2d/0x2a0 [ 56.297052][ T841] dev_loopback_xmit+0x32d/0x480 [ 56.302017][ T841] ip_mc_finish_output+0x186/0x3f0 [ 56.307162][ T841] ip_mc_output+0x24a/0x8d0 [ 56.311688][ T841] ? ip_build_and_send_pkt+0xac0/0xac0 [ 56.317180][ T841] ? nf_hook_slow+0x1af/0x200 [ 56.321880][ T841] ? __ip_local_out+0x414/0x420 [ 56.326748][ T841] ? ip_send_check+0xf0/0xf0 [ 56.331359][ T841] ? ip_mc_output+0x8d0/0x8d0 [ 56.336071][ T841] ip_send_skb+0xb4/0x140 [ 56.340450][ T841] udp_send_skb+0x8e6/0x10f0 [ 56.345079][ T841] udp_sendmsg+0x176a/0x2110 [ 56.349699][ T841] ? ip_skb_dst_mtu+0x650/0x650 [ 56.354571][ T841] ? udp_cmsg_send+0x330/0x330 [ 56.359367][ T841] ? kasan_check_range+0x1c2/0x2a0 [ 56.364513][ T841] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 56.370435][ T841] ? inet_send_prepare+0x60/0x4c0 [ 56.375487][ T841] inet_sendmsg+0xa5/0xc0 [ 56.379861][ T841] ? inet_send_prepare+0x4c0/0x4c0 [ 56.384999][ T841] ____sys_sendmsg+0x5be/0x8f0 [ 56.389799][ T841] ? __sys_sendmsg_sock+0x40/0x40 [ 56.394847][ T841] ? import_iovec+0x7c/0xb0 [ 56.399377][ T841] ___sys_sendmsg+0x236/0x2e0 [ 56.404076][ T841] ? exc_page_fault+0x5e/0xb0 [ 56.408789][ T841] ? __sys_sendmsg+0x280/0x280 [ 56.413579][ T841] __sys_sendmmsg+0x2ba/0x4e0 [ 56.418288][ T841] ? __ia32_sys_sendmsg+0x2d0/0x2d0 [ 56.422762][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 56.423523][ T841] ? __kasan_check_write+0x14/0x20 [ 56.433785][ T841] ? switch_fpu_return+0x15d/0x2c0 [ 56.438922][ T841] __x64_sys_sendmmsg+0xa0/0xb0 [ 56.443793][ T841] x64_sys_call+0x6c6/0x9a0 [ 56.448335][ T841] do_syscall_64+0x4c/0xa0 [ 56.452780][ T841] ? clear_bhb_loop+0x50/0xa0 [ 56.457475][ T841] ? clear_bhb_loop+0x50/0xa0 [ 56.462168][ T841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.468076][ T841] RIP: 0033:0x7fe777bdb159 [ 56.472510][ T841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.492231][ T841] RSP: 002b:00007fe776634028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.500699][ T841] RAX: ffffffffffffffda RBX: 00007fe777e62fa0 RCX: 00007fe777bdb159 [ 56.508690][ T841] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 56.516710][ T841] RBP: 00007fe777c7206b R08: 0000000000000000 R09: 0000000000000000 [ 56.524701][ T841] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 56.532690][ T841] R13: 00007fe777e63038 R14: 00007fe777e62fa0 R15: 00007fffdbb8de68 [ 56.540680][ T841] [ 56.542820][ T26] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 56.543711][ T841] [ 56.543716][ T841] The buggy address belongs to the page: [ 56.543739][ T841] page:ffffea00049d3800 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1274e0 [ 56.559750][ T26] usb 5-1: config 0 has no interface number 0 [ 56.560129][ T841] flags: 0x4000000000000000(zone=1) [ 56.581654][ T841] raw: 4000000000000000 ffffea0004586f08 ffff8881f703c5f0 0000000000000000 [ 56.590239][ T841] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 56.598817][ T841] page dumped because: kasan: bad access detected [ 56.605233][ T841] page_owner tracks the page as freed [ 56.610610][ T841] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO), pid 285, ts 24546393630, free_ts 56152694366 [ 56.629802][ T841] post_alloc_hook+0x192/0x1b0 [ 56.634585][ T841] prep_new_page+0x1c/0x110 [ 56.639111][ T841] get_page_from_freelist+0x2c3a/0x2cd0 [ 56.644666][ T841] __alloc_pages+0x1a2/0x460 [ 56.649266][ T841] kmalloc_order+0x4c/0x160 [ 56.653770][ T841] kmalloc_order_trace+0x18/0xb0 [ 56.658719][ T841] __kmalloc+0x199/0x2c0 [ 56.662974][ T841] kvmalloc_node+0x211/0x320 [ 56.667586][ T841] alloc_netdev_mqs+0x8d/0xe20 [ 56.672352][ T841] tun_set_iff+0x55d/0xe70 [ 56.676778][ T841] __tun_chr_ioctl+0x870/0x1f40 [ 56.681634][ T841] tun_chr_ioctl+0x2a/0x40 [ 56.686077][ T841] __se_sys_ioctl+0x121/0x1a0 [ 56.690758][ T841] __x64_sys_ioctl+0x7b/0x90 [ 56.695353][ T841] x64_sys_call+0x2f/0x9a0 [ 56.699770][ T841] do_syscall_64+0x4c/0xa0 [ 56.704225][ T841] page last free stack trace: [ 56.708909][ T841] free_unref_page_prepare+0x5fa/0x600 [ 56.714374][ T841] free_unref_page+0xae/0x540 [ 56.719054][ T841] __free_pages+0x6c/0x100 [ 56.723481][ T841] free_nonslab_page+0x86/0xc0 [ 56.728245][ T841] kfree+0x19a/0x270 [ 56.732141][ T841] kvfree+0x35/0x40 [ 56.735953][ T841] netdev_freemem+0x3f/0x60 [ 56.740463][ T841] netdev_release+0x7f/0xb0 [ 56.744975][ T841] device_release+0x96/0x1c0 [ 56.749587][ T841] kobject_put+0x18a/0x270 [ 56.754004][ T841] netdev_run_todo+0x7dc/0x950 [ 56.758768][ T841] rtnetlink_rcv_msg+0xa38/0xcb0 [ 56.763708][ T841] netlink_rcv_skb+0x1e9/0x430 [ 56.768483][ T841] rtnetlink_rcv+0x1c/0x20 [ 56.772909][ T841] netlink_unicast+0x86c/0xa30 [ 56.777695][ T841] netlink_sendmsg+0x879/0xb80 [ 56.782470][ T841] [ 56.784794][ T841] Memory state around the buggy address: [ 56.790446][ T841] ffff8881274dff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 56.798723][ T841] ffff8881274dff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 56.806794][ T841] >ffff8881274e0000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.814858][ T841] ^ [ 56.820756][ T841] ffff8881274e0080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.828852][ T841] ffff8881274e0100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.836936][ T841] ================================================================== [ 56.844994][ T841] Disabling lock debugging due to kernel taint [ 56.898690][ T26] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 56.909115][ T26] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 57.072721][ T26] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 57.091923][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.112644][ T26] usb 5-1: Product: syz [ 57.116836][ T26] usb 5-1: Manufacturer: syz [ 57.121440][ T26] usb 5-1: SerialNumber: syz [ 57.142840][ T26] usb 5-1: config 0 descriptor?? [ 57.162752][ T845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 57.169839][ T845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 57.383125][ T845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 57.390252][ T845] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 57.612738][ T26] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 58.272720][ T26] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 58.282883][ T26] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 58.322709][ T26] asix: probe of 5-1:0.34 failed with error -71 [ 58.329942][ T26] usb 5-1: USB disconnect, device number 3