last executing test programs: 8m21.995647242s ago: executing program 32 (id=257): r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x9, 0x60000) openat(r0, 0x0, 0x0, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x4, 0x300, 0x4, 0x106, 0x300}}) r5 = socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x80002, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000040)) epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1, 0x200, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0xfffffffb) fchown(r6, 0xee01, 0xffffffffffffffff) 8m17.898522321s ago: executing program 33 (id=271): r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x4f}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f00000018c0)=""/234, 0xea}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/83, 0x53}, {&(0x7f0000002bc0)=""/189, 0xbd}, {&(0x7f0000002d40)=""/65, 0x41}, {&(0x7f0000002e40)=""/151, 0x97}], 0x7}, 0x6}], 0x2, 0x100, 0x0) 8m10.761652111s ago: executing program 34 (id=286): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) read$FUSE(r1, 0x0, 0x49) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = syz_usb_connect$uac1(0x6, 0x108, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf6, 0x3, 0x1, 0x44, 0x60, 0xf2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x9}, [@selector_unit={0xb, 0x24, 0x5, 0x5, 0x1, "d4ae24f999b3"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x2, 0x3, 0x1}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x0, 0x9, "62d9358f24"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x6, 0x7, 0x6, 0x40, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x4, 0x4, 0x1ff, 0x4, 0x6}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x3, 0x6, [0x4, 0x2, 0x7, 0x7, 0x0, 0x2], 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0x0, "ebaab9", "5f99"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9e, 0x4, 0x6a, 0x0, "99df47"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x9, 0x64, {0x7, 0x25, 0x1, 0x40, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1002}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xa, 0x4, 0x5, 0xc3, "3347571540404e79"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0xf, 0x7, "051674"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3ff, 0x0, 0xd, "8029b4d01cf0ae41a5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfe, 0x8, 0x7, {0x7, 0x25, 0x1, 0x2, 0x0, 0xbfa5}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x7, 0x6e, 0x5, 0x10, 0xf7}, 0x5d, &(0x7f0000000240)={0x5, 0xf, 0x5d, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "f6183a275c7d73a534228063b5c81f4d"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0xf6, 0x8, 0x2, 0x68}, @wireless={0xb, 0x10, 0x1, 0x4, 0x24, 0x7, 0x10, 0x4, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x0, 0x9}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0x0, 0x0, [0x0, 0x3f00, 0xff3f00, 0x1f80, 0xfff0, 0x3f00]}]}, 0x2, [{0x9e, &(0x7f00000002c0)=@string={0x9e, 0x3, "0ead5e97e1ae97e2f90cdf6d19bd039aa9257ad34ef864557f3fdec948aedf676e01539f313cb2aeb20bfafc3a4f73c005355050e00c1d1ed2364c8ab90e347ab31c1438306d13809d19b3b41d77b372c91050ba6945359b6da90c3af5b1982a59ec53a47785795c1b489d72d52f4e2e1111ba4c785e6a48651e52ebf1ea9772de2800fdb525f358fc322bedd766edd3f3bbada2520bb649dd1f436c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x420}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000540)={0x14, &(0x7f0000000400)={0x20, 0xd, 0x31, {0x31, 0x7, "97be68eb2e1c6e793356fe74154aaccdaa3096bbc393882838367436fb97bbf072831be601a368b861eb3741b62cf2"}}, &(0x7f0000000440)={0x0, 0x3, 0xee, @string={0xee, 0x3, "572e330968d640e7dd137b33cf91c0d722c2b0505a13bb8a7c2c321e4563b34cdb78cdcdf0cc675349932ec66af770c21a0e0198c70bf7edaa482577e2944b5cc8fdef6e9bddb165667ecefca93de09df38b15c3e74f9ad7f1107be0645ddf21872280166a0283b67ca36da17a0b3ff04185101210c7136f3b7dc33d23b4c5c9bb3a6f8791e3729187a741ad7deb04299a1908d720abc87d8ae4eedf881bc4a116052e1814f41f1b0c92238fa8617c9b0f53577075c2a09061efdd584683d3ffdd8e54ab21eb10eb046c69d7eb8b509240f4bf6dbc09cc7e888fd42a5f1e70b4ebfa7091727f7c87b0a7583c"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x0, 0xc, 0x4, "29d9bcc7"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x81, 0x1, '.'}, &(0x7f0000000680)={0x20, 0x82, 0x2, "4db2"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, 'a'}, &(0x7f0000000700)={0x20, 0x84, 0x4, "f22e3f9a"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "9a39cd"}}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) 8m6.322869613s ago: executing program 35 (id=300): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0x1, 0x2ee, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair(0x8, 0x4, 0x8, &(0x7f0000000180)) syz_mount_image$fuse(0x0, 0x0, 0x10500b2, 0x0, 0x40, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) preadv(r2, &(0x7f0000001780)=[{&(0x7f00000021c0)=""/4096, 0x1000}], 0x1, 0x402, 0x6) 8m1.572916116s ago: executing program 36 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair(0x8, 0x4, 0x8, &(0x7f0000000180)) syz_mount_image$fuse(0x0, 0x0, 0x10500b2, 0x0, 0x40, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) 7m44.499366246s ago: executing program 37 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0xe6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="757466383d302c756e695f786c6174653d302c6e66732c636865636b3d7374726963742c696f636861727365743d6d61636761656c69632c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c696f193b636861727365743d6d61636761656c69632c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c757466383d302c756e695f786c6174663d312c00"], 0x26, 0x336, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x80000001}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e05, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x601) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000bc0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r7, &(0x7f0000001600)=""/4081, 0x7, 0x12) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 7m40.513794304s ago: executing program 38 (id=392): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r1 = dup(r0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000004c0)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x35}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x8}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800b00010062726964676500800c00028005002b0043000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000040)=0x6, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x48) fcntl$setown(r6, 0x8, 0x0) 7m36.8302279s ago: executing program 39 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'macsec0\x00', 0x200}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001c0005ddffffffffffffff000a000000", @ANYRES32=r5, @ANYBLOB="a1009400180001"], 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) lseek(r7, 0xc6c3, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) pipe2$9p(&(0x7f00000000c0), 0x0) write$FUSE_OPEN(r3, &(0x7f0000000000)={0x20, 0x0, r9}, 0x20) 7m36.120924055s ago: executing program 9 (id=413): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@sb={'sb', 0x3d, 0x102b}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@sysvgroups}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000180), 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) socket$inet(0x2, 0x2, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) 7m34.617835445s ago: executing program 9 (id=420): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001100), 0x4043, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000001140)=""/98) syz_read_part_table(0x1052, &(0x7f0000000000)="$eJzsz80JwkAUBOBJND/gISXYgVeb8OrZVlKPDYoirCQmdiB6+L7L7vB2Fl74rTqPUkqp19ze0yZ9DnPaJk3yLMfdp7BJGdsk1ZxKNyzVJut56ZfrPmN16vrpu2nwfjjc1nGV8/X7CwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/3sFAAD//1mTDqU=") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49e0, 0xffff, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) pipe2(&(0x7f00000010c0), 0x80880) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000011c0)={0x3, 0x7, 0x3, 0x8, 0xb, "73a3b0401b7aea661795cae2045cc29003267f"}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x44) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='pimreg\x00', 0x10) 7m34.036240089s ago: executing program 9 (id=424): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r1 = dup(r0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000004c0)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x35}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x8}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800b00010062726964676500800c00028005002b0043000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000040)=0x6, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x48) fcntl$setown(r6, 0x8, 0x0) 7m34.03601802s ago: executing program 40 (id=424): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) r1 = dup(r0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000004c0)) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x35}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x8}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800b00010062726964676500800c00028005002b0043000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000040)=0x6, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x48) fcntl$setown(r6, 0x8, 0x0) 7m21.357853849s ago: executing program 41 (id=468): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') sync() socket(0x10, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) sendfile(r0, r0, 0x0, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') (async) sync() (async) socket(0x10, 0x803, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) (async) sendfile(r0, r0, 0x0, 0x6) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) (async) 7m14.610303816s ago: executing program 42 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'macsec0\x00', 0x200}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$FUSE_OPEN(r3, &(0x7f0000000000)={0x20}, 0x20) 7m12.865675409s ago: executing program 43 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (fail_nth: 3) socket$inet_tcp(0x2, 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x2000000000000099, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=") 7m2.817293039s ago: executing program 44 (id=535): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000016c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f"], 0x4, 0x2fd, &(0x7f0000001700)="$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") syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x1a, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='pimreg\x00', 0x10) memfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="421c00000000040024000e80090081007866726d000000001400028008000100030000000800400002000000140003007866726d3000"/64], 0x58}}, 0x0) 6m44.393067559s ago: executing program 45 (id=634): chdir(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r0}, 0x18) 6m43.602775064s ago: executing program 46 (id=637): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0xfffffffffffffd75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000540)='./file1\x00', 0x800000, &(0x7f0000000040)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}]}, 0xda, 0x52e, &(0x7f0000000e00)="$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") r2 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="1d", 0x1}], 0x1, 0x7fff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000002c0)={[{@stripe}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@grpjquota}, {@noload}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}]}, 0xfe, 0x473, &(0x7f0000000940)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m40.349349827s ago: executing program 9 (id=635): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r3, 0x0, 0x400000000000000, 0x7) 6m38.266215542s ago: executing program 9 (id=642): r0 = gettid() capget(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000180)={0x0, 0x7, 0x7fff, 0xffffffc1, 0x2, 0x10000}) unshare(0x20000400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4030ae7b, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='attr/exec\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000002c0)=@arm64_sve={0x60800004001503c9, &(0x7f0000000280)=0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f00000000c0), 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1008494, &(0x7f0000000340)={[{@nfs_export_on}], [], 0x2c}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x12, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "07a255397a104da2", "a10baf9b219692d2605c59c3edfc5327", "6fb01616", "02c611f53a8ed752"}, 0x28) sendto$inet(r8, &(0x7f0000001340)="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", 0x295, 0x20000000, 0x0, 0x0) ptrace(0x8, r7) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 6m38.019288794s ago: executing program 9 (id=644): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r3}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) (fail_nth: 3) 6m35.078899784s ago: executing program 47 (id=609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}, {@in=@local, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x1, 0x0, 0xffffffffeffeffff, 0x0, 0x1, 0x6}, {0xfffffffffffff461}, {0x1, 0x2}, 0x70bd2d, 0x0, 0x2, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 6m33.333613787s ago: executing program 48 (id=621): ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, &(0x7f0000ffcffc)) 6m31.607674309s ago: executing program 1 (id=656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c000780080005"], 0x38}}, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x40002) ioctl$EVIOCGREP(r3, 0x80084503, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @empty}}}}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xf7) accept(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000100)=0x80) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=@newae={0x1b0, 0x1e, 0x2, 0x70bd2d, 0x25dfd9fd, {{@in=@loopback, 0x4d5, 0x2, 0x6c}, @in6=@private2, 0x9}, [@lastused={0xc, 0xf, 0x2108cc22}, @algo_crypt={0x13b, 0x2, {{'xts-aes-neonbs\x00'}, 0x798, "e7ca2fd78074add166809f0a43a43561bcf0c07005afe0858cb5008b8e5783ab9264c29c921cee618521a847e35e84fd1cdd131020f4959d0086552c0175ea8e32fe272dbf105983358e1e9950b8b37aa5629b51fcff4ee7dc3e047ae746f2f91f347488ae4261eb818a51129622eab7bec2c38f8b282a79dc9c6347848c94e5da142b627d3b248cc039c249be48f37e8302ce46099ead41257f29336c1bffb4e033ced205ccaea4b282cdd023bd9835d2c4efa048d6501cde96b2d84a6756622a822ce6efbe02ec17865f87d8a534a0eb0e7ce35bb683af2a2c95636d9c57f212f22a6647363f4bf5ea5e018d95f900f2cb33"}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd25, 0x70bd2c, 0x70bd2b, 0x70bd28, 0x9, [0x7, 0x76c, 0x4]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x860}, 0xc0c0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x9) 6m31.48943453s ago: executing program 1 (id=661): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000180)={0xa, 0x4e22, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @local}, 0xd}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000400)=0xf6, 0x4) eventfd(0x7ffc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xe9}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000080)=""/180, 0xb4, 0x140, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x84042, 0x1fb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000000000000000009030000000000000000000001050000000800000001000000000000070000000000000000000000030000000001000000020000000000000000610056cae6bd5459ce662bef9bb3f28407ff5642cc76cebf8dcc4c7799a8688079cfe64a6bb3313a35b489a9230ad0d0394f0d454ae8ebb58b24de237ad899d451e30fcb4916"], 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000004c0)=0x400) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000000)={0x2c, 0x2, r1, 0x11, r3}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x280) r6 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000"]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8b04"]) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x4000010, r4, 0x0) fdatasync(r5) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000200)={r3}, 0x1) bind$unix(r2, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m30.544082197s ago: executing program 1 (id=664): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000016c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x2fd, &(0x7f0000001700)="$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") syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0x1a, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='pimreg\x00', 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000008600), 0x2000, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000009940)={0x1, 0x2, 0x6, 0xffffffffffffffff}) memfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x4e24, @loopback=0x7f000000}}) 6m29.088601207s ago: executing program 1 (id=667): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x1, 0x0) chdir(&(0x7f0000000080)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000300)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 6m28.989749647s ago: executing program 1 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0xe6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="757466383d302c756e695f786c6174653d302c6e66732c636865636b3d7374726963742c696f636861727365743d6d61636761656c69632c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c696f193b636861727365743d6d61636761656c69632c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c757466383d302c756e695f786c6174663d312c00"], 0x26, 0x336, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x80000001}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e05, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x601) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000bc0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r7, &(0x7f0000001600)=""/4081, 0x7, 0x12) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 6m28.795143679s ago: executing program 1 (id=670): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x1}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x6, 0x0, 0x20000000, 0x0, 0xffff7ffe, 0x0, 0x0, 0x2}}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@bh}, {@nolazytime}]}, 0x1, 0x4ef, &(0x7f0000000580)="$eJzs3c9vG1kdAPDvTOImzWY3WViJHwK2LAsFVXUSdzda7Wm5gNBqJcSKE4dsSNwoih1HsVOaUIn0xD+ARCVO8CdwQOKA1BN3bnDjUg5IBSpQU4mD0djjNKRxElrHpvbnIz35vXmT+b5Xa+a53zZ+AYysKxGxHxGXIuKTiJjJjyd5iQ/aJTvv8aM7KweP7qwk0Wx+/Pek1Z8diyM/k3klv+ZkRHzv2xE/TJ6NW9/d21iuVMrbeXuuUd2aq+/uXV+vLq+V18qbpdLiwuL8ezfeLfVsrm9Wf/3wW+sffv93v/3igz/sf+PH2bCm876j8+il9tQLh3Ey4xHx4UUEG4CxfD6XBj0QnksaEZ+KiLda9/9MjLXezfM54bYGAF4CzeZMNGeOtgGAYZe2cmBJWsxzAdORpsViO4f3RkyllVq9ce1mbWdztZ0rm41CenO9Up7Pc4WzUUiy9kKr/rRdOta+ERGvR8TPJi632sWV8+cZAIDeeuXY+v+vifb6DwAMucmzTljqzzgAgP45c/0HAIaO9R8ARo/1HwBGj/UfAEaP9R8ARk++/o8NehwAQF9896OPstI8yL//evXW7s5G7db11XJ9o1jdWSmu1La3imu12lqlXFypVc+6XmUithbeiZ3bc41yvTFX391bqtZ2NhtLre/1XioX+jIrAOA0r795/09JROy/f7lV4sheDtZqGG7poAcADIycP4wu38INo8vf8YGz9vLs+l+E7z1HsOZPnuOHgF67+jn5fxhV8v8wuuT/YXTJ/8PoajaTbnv+p4enAABDRY4f6Ou//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCQmG6VJC3me4FPR5oWixGvRsRsFJKb65XyfES8FhF/nChMZO2FQQ8aAHhB6V+TfP+vqzNvTx/vvZQ8mWi9RsSPfvHxz28vNxrbC9nxfxweb9zLj5cGMX4A4Cyddbqzjnc8fnRnpVP6OZ6H32xvLprFPchLu2c8xluvk1GIiKl/Jnm7Lfu8MtaD+Pt3I+KzJ80/aeVGZvOdT4/Hz2K/2tf46X/FT1t90TqW/Vl8+n+IebjX65N8E+gezANeRvez588HJ91/aVxpvU6euPnxZH7vvajO8+/gmedfevj8G+vy/Lty3hjv/P47XfvuRnx+/KT4yWH8pEv8t88Z/89f+NJb3fqav4y4GifHPxprrlHdmqvv7l1fry6vldfKm6XS4sLi/Hs33i1djojy/FwnU/2sv71/7bXT5j/VJf7kGfP/6qmzbk50ar/69yc/+PIp8b/+lZPf/zdOiZ+tiV87Nf5Ty1O/6bp9dxZ/tT3/u+d8/3/ayRdcO2f8B3/ZWz3nqQBAH9R39zaWK5Xydk8rhejxBY9Ukgsas8qQV7LP4y96nc/kKbP/g+lcdGXQTybgoj296Qc9EgAAAAAAAAAAAAAAoJsL/3WidNAzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJj9JwAA//9qf9Bs") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003400)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000540)=""/147, 0x93}], 0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) creat(&(0x7f0000000040)='./file1\x00', 0x80) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 6m28.425143371s ago: executing program 49 (id=670): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x1}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x6, 0x0, 0x20000000, 0x0, 0xffff7ffe, 0x0, 0x0, 0x2}}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@bh}, {@nolazytime}]}, 0x1, 0x4ef, &(0x7f0000000580)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003400)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000540)=""/147, 0x93}], 0x1, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) creat(&(0x7f0000000040)='./file1\x00', 0x80) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 6m22.680662651s ago: executing program 50 (id=644): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r3}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) (fail_nth: 3) 4m45.033883999s ago: executing program 2 (id=1101): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) lsetxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)='):]#(\x97\x00', 0x7, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="f8ffffff1e00000600000000950000000000000000000000c5612099754178ce78e72d92d497612812f988f78e53280cead13617b93e3545d200a54f815ea5b7c6eb1d932a8667"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_bond\x00', 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x2b, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d93, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x1, 0x0, 0x0, 0x80, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0d, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xef86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) readv(r5, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000040)=""/60, 0x3c}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m44.103279155s ago: executing program 2 (id=1104): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00"], 0x40c}}, 0x0) 4m43.957367586s ago: executing program 2 (id=1108): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00010002000000fddbdf2507000000", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) (fail_nth: 1) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = getpid() r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r5 = accept$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$unix(r5, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x810) sched_setscheduler(r3, 0x2, 0x0) 4m42.631073115s ago: executing program 2 (id=1113): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00010002000000fddbdf2507000000", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = getpid() r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r5 = accept$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000240)={[{@nobh}, {@stripe={'stripe', 0x3d, 0x10000}}, {@dioread_nolock}]}, 0x1, 0x3f0, &(0x7f00000008c0)="$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") r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1390, 0xffffffff, 0x0, 0x11d8, 0x10f8, 0xffffffff, 0xffffffff, 0x1300, 0x1300, 0x1300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x10d0, 0x10f8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x130000, 0x2, 0x0, 0x7}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.net/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'erspan0\x00', 'ip6erspan0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13f8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x2, 0x4010, 0x9, 0x3, 0xe, 0x3, 0x0, 0x0, 0x20, 0x25}}, 0x50) syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$unix(r5, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x810) sched_setscheduler(r3, 0x2, 0x0) 4m41.189542685s ago: executing program 2 (id=1128): openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {}, {@errors_remount}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpid}, {@norecovery}]}, 0x0, 0x45f, &(0x7f0000001940)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 4m40.716822749s ago: executing program 2 (id=1122): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x804810, &(0x7f0000000100)={[{@block_validity}, {@bsdgroups}, {@nomblk_io_submit}, {@nodelalloc}, {@abort}]}, 0x4, 0x756, &(0x7f00000002c0)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1fed, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0x1, 0x2ee, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) 4m40.716137139s ago: executing program 51 (id=1122): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x804810, &(0x7f0000000100)={[{@block_validity}, {@bsdgroups}, {@nomblk_io_submit}, {@nodelalloc}, {@abort}]}, 0x4, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1fed, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0x1, 0x2ee, &(0x7f00000006c0)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji2ZaTA1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpGUBKaRG+n4TMYe49nXtnBnLuhGHzzuvHxbyt5fWKhONKQiIiWyLDEhZfyNuG3TgmO72QiwPfPv5/6+69G5lsdmJaqcnMzKW0Umpo5N2TZwmv21q/bAw/2Pya/rLx98a/mz9nHhVsVbBVqVxRupotf67os6ah5gt2UVNqyjR021CFkm1Y9fZyvT1vlhcWqkovzQ8mFyzDtpVeqqqiUVWVsqpYVRV5qBdKStM0NZgUHCS3PD2tZ9pMnuvwYHBMLCujR0Qksaslt9yTAQEAgJ5qrf/DojpZ/6+cW68M3F4d8ur/tVhQ/X/5U/2zmur/uIgE1v/+8QPrf/1w9f/uiuhsOVL9j5NhJLZrV6gR1hqtjJ70fn5dL++vjLoB9T8AAAAAAAAAAAAAAAAAAAAAAH+CLcdJOY6T8rf+V7+IxEXE/z4gNSIiV3swZHTQEa4/ToHGi3vRIRHz1WJuMVffeh3WRcQUQ0YlJT/c+8FTi/03j1TNsLw3l7z8pcVcxG3J5KXg5o9Jqk9a8x1n8np2YkzVNef3SXJnflpS8ldwfjowPyYXzu/I1yQlH+akLKbMu+No5D8fU+razWxLfsLtBwAAAADAaaCpbYHrd03bq72ev72+bn0+EGmsr0cD1+dR+S/a27kDAAAAAHBW2NWnRd00DWufICEH92k/iB7TJ/sz/N0s/28Zjm+m+wT+wZua4t7Ojp+W0CFOyx5BWNrJGqnNRh11Fv5jo736yNR4965g0zD+efP2e+cOcWU1fsBM2w8i+98AfV37BQQAAACgaxpFv79nvLcDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADgDOrGv0nr9RwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk+JXAAAA//+qDgR1") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) 1m33.620753934s ago: executing program 4 (id=2305): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x3) setreuid(0x0, 0xee00) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x12) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6000) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c240203010104030700ff070c240296bbbba4446780c9f858382c060002050502"], 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xe, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x6, 0xc, 0xffffffffffffffc0, 0x4}, @call={0x85, 0x0, 0x0, 0xad}, @call={0x85, 0x0, 0x0, 0x6f}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}], &(0x7f0000000200)='GPL\x00', 0x2, 0x1000, &(0x7f0000000c00)=""/4096, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, r0, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xa, 0x1fc}, 0x10, 0x0, r0, 0x1, &(0x7f00000002c0)=[r0], &(0x7f0000000300)=[{0x5, 0x4, 0xf, 0x3}], 0x10, 0x7, @void, @value}, 0x94) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xffffffffffffffc0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffed5) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000580)={@dev, 0x0}, &(0x7f00000005c0)=0x14) r7 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) connect$unix(r7, &(0x7f0000000140)=@file={0x1, '.\x02\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002040)={'gretap0\x00', &(0x7f0000001fc0)={'syztnl2\x00', r6, 0x78d0, 0x7, 0x3, 0x8, {{0x9, 0x4, 0x2, 0x3, 0x24, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x5, @multicast2, {[@rr={0x7, 0xf, 0x65, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) setreuid(r1, 0xffffffffffffffff) syz_read_part_table(0x5d5, &(0x7f0000000600)="$eJzs3L9rZFUUB/Dve/N7WclWVoKBLXaxMIKlBldhN9otop3g+gdEZK1lZljBKlY2tqKFUUhhm0JBgprOUgmmsLCysTCF8uT9mokoFkbUhc+neJxz7rnn3pDXzgv3t2ojqYo6Wq6Lw7J+Tlb58uWnm3ScZKOr1Xte3L9567nN28VkVauri2510vQ3+mCYzS46HGZvf+ett995oMgix+W8LS+S0cfjDJurtfve/eOlz4pmFv+5659W7T9inK+TL5+4tFsMMusWP0iuZNqEW0kGKdv6KHXLYP16/H0H20fLp7p4lu5NG7XZNNeqx9IfWZ1+++OdzK/2OwfJQ09u3f2zoc3+5e9KVVWNLvd7y66lrjaa5L0vTudZPryannNrOZklr508/2izq2hnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/3P99Uc+G/fJjeZZdNknzzz7Ycp16yL5pY83p//Q+QfbRxv33rxbZpDk1Te+3/khPyUZZGvncjJZ9d2pH/1Fx8MueHB20fN3fy3HH73/+XpON7pIvrr6zdmVa135ZNWwvlO2y4seDwAAAAAAAAAAAAAAAAAAAI2bt16Z3S7zQlLkpaTsf2NfZZoU/acA6qSqqurnqpU8fjjc3Rvn3qV2/fi77rMBVTE4N/1GMurjbtaimTSsW+f/zp/IX/gtAAD//32+ZvM=") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x2f, 0xf4, 0xf8, 0x7cf, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x805f, 0x5}}) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000001c00)=@polexpire={0x3a4, 0x1b, 0x4, 0x70bd27, 0x25dfdbfd, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast2, 0x4e21, 0x7, 0x4e23, 0x0, 0x2, 0x80, 0x80, 0x0, r8, r1}, {0x709, 0xcf, 0x8, 0x64, 0x3, 0xa1, 0x0, 0x3}, {0x80000000, 0x9, 0x897, 0x7}, 0x8, 0x6e6bbc, 0x2, 0x1}, 0x2}, [@algo_auth={0x134, 0x1, {{'digest_null-generic\x00'}, 0x760, "55ab20e10029d882d8840f0e1e6f0635f6a8e8c2c459fb783c9c227783184fb998cf75b69c2aa417658671f55c6fc343a1f9275aedf4b905c0d1e3645e353bd0e792e178c4467b67d774b54053202a708b31a472870ee9f2ed576469ac5f8d8e7c8705f41ea4dc1a41dc92e0bea68717e6342cb4244d6bf20a1bc80a8af274a8370bac4b2ff0c866d24567cbf3b5f794f953b63d47b38a5a171edc7e4a47e270f055744bc31c2c38aa256cbf7cc851676aa626a09e0d609a9d65c4f5118f7f41f640c6b803bae49b72657940e2c9756cb089117c7d2bbcc109c0b85b51d19c44d0a66a446805628c95f44922"}}, @sec_ctx={0xa1, 0x8, {0x9d, 0x8, 0x1, 0xc, 0x95, "1f1fba248a6b44619d0a09ee0f5c4dffe39259c9f9b3ef8404f78b3622f46be84de8c4d36df3afe0057357f6b62ea312704b7d31ea65bdb3d4e38188cc24e24cc963fcad7e5864ea7dce25f3ff4095c5c16033419696804b3d331cc6a4dba54a8ed6d29fd9ea592313c2b5ba702af12f0d9204d0232d7aa198a02b50d26f9ae28942d49f2f494d9b223b1044262ef65f9362fc7edc"}}, @sa={0xe4, 0x6, {{@in6=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x1, 0x4e24, 0x800, 0xa, 0x100, 0x80, 0x29, 0x0, r1}, {@in=@rand_addr=0x64010102, 0x4d3, 0x33}, @in=@loopback, {0xdf9, 0x9, 0x81, 0x10001, 0x4, 0x3, 0x5, 0x1}, {0x8, 0x7, 0xff, 0x8}, {0xfff, 0x2, 0x4f}, 0x70bd2c, 0x0, 0x2, 0x4, 0xf, 0x80}}, @address_filter={0x28, 0x1a, {@in=@private=0xa010100, @in=@multicast2, 0x2, 0xc, 0x4}}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x20080811}, 0x4000000) 1m32.925928569s ago: executing program 4 (id=2310): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7c000}], 0x1, 0x33000, 0x0, 0x3) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x20) syz_emit_ethernet(0x82, &(0x7f00000004c0)={@random="599c423f6544", @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x16, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x0, 0x2}, @cipso={0x86, 0x3f, 0x6558, [{0x0, 0x8, "2b47ee54ca09"}, {0x0, 0xc, "a9f657ead349e675e462"}, {0x0, 0x10, "cbd63c38a9ec826fd00918a9774a"}, {0x0, 0x8, "9872201dd386"}, {0x0, 0x2}, {0x0, 0xb, "56baaff6986b10ae1d"}]}]}}}}}}}, 0x0) 1m32.297945964s ago: executing program 4 (id=2315): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000002c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x100000, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m32.293547213s ago: executing program 4 (id=2317): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r1, 0x3, &(0x7f0000000040)=0x10000) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000fc0), 0x8080, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000001040)={0x1, 0x1, 0x100000000, 0x8000000000000001}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@data_err_abort}, {@noinit_itable}]}, 0xfe, 0x585, &(0x7f0000001500)="$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") chdir(&(0x7f0000004340)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[], 0xfd14) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x104}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x8, &(0x7f0000000080)=""/197) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0) 1m32.164331704s ago: executing program 4 (id=2318): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x1, 0x3a, 'K{[,$,{\xb4\\', 0x3a, '#(*@-%', 0x3a, './file0', 0x3a, [0x4f, 0x43]}, 0x38) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1m31.983983905s ago: executing program 4 (id=2319): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pwritev2(r1, &(0x7f0000000480)=[{&(0x7f0000000100)="b6", 0x1}], 0x1, 0x2, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x102, 0x4, 0x3e0, 0x110, 0x1f8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac, @multicast1, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x4094ba5b8e98b50f}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 1m31.983871615s ago: executing program 52 (id=2319): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pwritev2(r1, &(0x7f0000000480)=[{&(0x7f0000000100)="b6", 0x1}], 0x1, 0x2, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x102, 0x4, 0x3e0, 0x110, 0x1f8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac, @multicast1, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x4094ba5b8e98b50f}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 1m28.154045182s ago: executing program 6 (id=2349): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000002c0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x100000, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m28.148300183s ago: executing program 6 (id=2350): r0 = socket$nl_route(0x10, 0x3, 0x0) lseek(r0, 0x4, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x10196, 0xa080}, [@IFLA_LINKMODE={0x5, 0x11, 0x9}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3, 0x0, 0x8001}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c841}, 0x0) 1m28.092320773s ago: executing program 6 (id=2351): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) syz_emit_ethernet(0xfed1, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x3, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @local}, {0x1, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "1a3c84fcd4c02841ab75cc29a19b8883ab4956e5465a199648fc9f4a61ce608d", "79b9306b95bee1b3a5a7bb2a18de1da9", {"ef91cabd236d910b3dd7e62b0783c29c", "e0f1688e5dc2a66509b86fbd9a21407b"}}}}}}}, 0x0) 1m28.090807513s ago: executing program 6 (id=2352): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd600a3ff200140600fe8000000000000000000000000000bb"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x278, 0x178, 0x178, 0x278, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x23}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x198, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@local, [], @ipv4=@multicast1, [], @ipv4=@multicast2}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001800010000000000000001000000000a1c000000090a010400000000000000000700000008000f4000000002140000001000010000000000000000000084000a"], 0x44}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa}}, 0x1c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x200400c0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m27.389060948s ago: executing program 6 (id=2353): r0 = socket(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) 1m27.125836559s ago: executing program 6 (id=2358): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r1, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xa8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f0ffffffffffffff000000000000ff41e5044fc100000000000000002bd958d2981b7a3ce648edcb315e7f6125d2bc6b336b5dd3f873e8d8b8d1a4124470f90a7f03fd79088df33daa50a39102f04f0dd70d0d8831f3518c90e9f8591e5c88eaf0f03eec3bbb4794a1d6bb8bd0c0f174ce05b6613171ddc28e22892a7830dfabe14253231db72093250dfb4e631dcfb0817d22bc4927ca249b916c3e13feca1ee1cc9e1cba085a1e6f8267b325a5"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m27.12566378s ago: executing program 53 (id=2358): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r1, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xa8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f0ffffffffffffff000000000000ff41e5044fc100000000000000002bd958d2981b7a3ce648edcb315e7f6125d2bc6b336b5dd3f873e8d8b8d1a4124470f90a7f03fd79088df33daa50a39102f04f0dd70d0d8831f3518c90e9f8591e5c88eaf0f03eec3bbb4794a1d6bb8bd0c0f174ce05b6613171ddc28e22892a7830dfabe14253231db72093250dfb4e631dcfb0817d22bc4927ca249b916c3e13feca1ee1cc9e1cba085a1e6f8267b325a5"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.092541894s ago: executing program 5 (id=3097): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0xc2340, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0xb, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000eec88c63ffffffffffffff0085000000270000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004500), 0x0, 0x814) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0314f9f4070009040002000000010000000000000008", 0x1d) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$incfs(r3, &(0x7f0000000200)='.pending_reads\x00', 0x0, 0x41) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], &(0x7f0000000600)=""/4096, 0x36, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40106726, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) dup(0xffffffffffffffff) io_uring_setup(0x2aa0, &(0x7f0000000000)={0x0, 0x0, 0x1}) syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090470e96808dcdad30905031010007404060904"], 0x0) 3.828407423s ago: executing program 3 (id=3111): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e80"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.802805133s ago: executing program 3 (id=3112): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 3.785702383s ago: executing program 3 (id=3113): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000001c0)={0x6, 'veth1_to_hsr\x00', {}, 0xa}) pwritev2(r1, &(0x7f0000000480)=[{&(0x7f0000000100)="b6", 0x1}], 0x1, 0x2, 0x3, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x102, 0x4, 0x3e0, 0x110, 0x1f8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac, @multicast1, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x4094ba5b8e98b50f}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 3.784585133s ago: executing program 3 (id=3114): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)={0x3, 0x0, [{0x1, 0x63, &(0x7f0000000180)=""/99}, {0x2000, 0xa0, &(0x7f0000000980)=""/160}, {0xd000, 0x5, &(0x7f00000005c0)=""/5}]}) 3.774738904s ago: executing program 3 (id=3115): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/186, 0xba}], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = fsopen(&(0x7f0000002240)='bdev\x00', 0x1) read(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20000000180c200000008004500005800001400002f90"], 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x240) r4 = socket(0x11, 0x3, 0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xe000202b}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = socket(0x10, 0x803, 0x0) write(r8, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000001640), 0x4) sendmmsg$inet6(r8, &(0x7f0000000240)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @empty, 0xffffffff}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000001c0)="050b25b7b8282d9f82b7898e2fc36b310aaa40146029b430d8c9c3f4d6a8df3a8844a105bbc3d0aa3344f8c38556c86d816f9e2514e19048", 0x38}, {&(0x7f00000022c0)="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", 0x1000}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x178}}], 0x1, 0x20000040) sendmsg$nl_route_sched(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r9 = dup3(r4, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f0000000300)={0x200f}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x17, 0x0, 0x88) syz_usb_connect$uac1(0x1, 0xdc, &(0x7f0000001680)=ANY=[@ANYRESOCT=r9, @ANYBLOB="071a4fad8e0b46d2f512596649f06b38ec333b70c6b9a5409df9f8c4147290d2598100f099d1601b7d109a54b952f66dbe78c5c41330185e766602e9772591fe6eb806432b456e70af839e09b6d397738e8929824b9ee8fc975fb9036be7e2c137d82444af01e6b7394472dc83fc8eaa056403707955ed1d42d66f5e9d6c822b45ca3b90cf94f864fa1c1e411fd48d49812cd69ed89cbb14865a9e8942689bb8b4455387b53df7d02f68bd57db5f3d"], 0x0) 2.457869743s ago: executing program 7 (id=3125): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000001c0)={0x6, 'veth1_to_hsr\x00', {}, 0xa}) pwritev2(r1, &(0x7f0000000480)=[{&(0x7f0000000100)="b6", 0x1}], 0x1, 0x2, 0x3, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x102, 0x4, 0x3e0, 0x110, 0x1f8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac, @multicast1, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x4094ba5b8e98b50f}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 2.453605323s ago: executing program 7 (id=3126): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0xf6, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.309749724s ago: executing program 7 (id=3128): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x4, 0x0, 0x2, 0xeffffe02, 0x0, [{0x4, 0xff}, {0x19, 0x3, 0x5}, {0x8, 0x0, 0x2}, {0x0, 0x0, 0x7f}, {0x0, 0x0, 0x4, '\x00', 0xd8}, {0x81, 0x65, 0xff}, {0x0, 0xff, 0x7, '\x00', 0x3}, {0x0, 0x2}, {0x0, 0x33, 0x3, '\x00', 0x8}, {0x2, 0x5, 0x0, '\x00', 0x1}, {0x0, 0x5}, {0x0, 0x88, 0x1, '\x00', 0xfa}, {0x0, 0x0, 0x3}, {0x3, 0x0, 0x0, '\x00', 0x3}, {0x80, 0x12, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x0, 0x2, 0x1}, {0x0, 0x29, 0x0, '\x00', 0x40}, {0x0, 0x0, 0x15, '\x00', 0x5}, {0x4, 0x1, 0x0, '\x00', 0x26}, {0x58, 0x6, 0x0, '\x00', 0x5}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0xe, 0x7, '\x00', 0x1}]}}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d01"], 0xb4}}, 0x0) 2.220165715s ago: executing program 7 (id=3130): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x5) 2.152958355s ago: executing program 7 (id=3134): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e80"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.032228806s ago: executing program 5 (id=3138): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r2, 0x3a, 0xcf, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f00000000c0)=0x7, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0xc000000, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000100000000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x1000001, 0x1010, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@float={0x2, 0x0, 0x0, 0x10, 0x2}, @enum={0x5, 0x9, 0x0, 0x6, 0x4, [{0x8, 0x2}, {0xe, 0x2}, {0x4, 0x180}, {0x3, 0x8000}, {0x4, 0x101}, {0xa, 0x2}, {0x8, 0x6}, {0x5, 0x7}, {0xb, 0xfcee}]}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000240)=""/157, 0x7c, 0x9d, 0x0, 0x40, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x101, 0x8000, 0xcc, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.018053026s ago: executing program 7 (id=3139): syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000400)='./file3\x00', 0x40c000, &(0x7f0000000040)=ANY=[], 0x1, 0x1d2, &(0x7f0000000900)="$eJzslT3L01AUx//3JqaNiB/AxcEHfBxMk1TF5QG7ODkIvhQHwWJjqaZW2gy2INpP4O7m4OZXEHT1Q0h10UGd1PXKfUlyi0FLaW3hOT/ozS+5uSen58K5IAji0PLp48+5+HHwuQ7gGPZQM8+/OOU73Hr/Q/37k3dXLref3371vjYP/KqYQiz/fRfA25aDrFi7uHrPXK+DF34DHGeMt8EQGL8DjpvGEzDcMn7f8qF8Pwju9dMkuDtMu1JCOURyiOXQXMiPgWHG0LXyY9b8eDJ90EnTZLRB+Vf9vrU4Dqz87P0KoLMNrfpF4IiMN8FwzfhF1PLa6JLk8WcMJ9wyvrP4/38d0WrS9bD5iqxLPACrLQfYf9n7ShFYV0AHSvId3YlNWVLYn1M+8idfYQTuDqSqxd9IeT0pby7p/cunxFN9v6ZPLB3nuPWk7E/iJcNpqz+56kR5oY6aRjZ41BhPpmf7g04v6SUP47h5ITwXhufjhmpEevxL//NVfzpaxq88kyQe8/C4k2WjSI/FfazHqo7L8QyYceyfAvDaqYxbt5yZH1dXafvViwiCILbMSTDVk1VfzsWcJsWEEPHVLedJEARBEARBEARBEMTq/A4AAP//yx1a3A==") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x2000, 0x0) read(r0, &(0x7f0000000b00)=""/4096, 0x1000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect(0x6, 0x9f6, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x94, 0xde, 0xa2, 0x10, 0x5c6, 0x903d, 0x43d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e4, 0x4, 0x5, 0xfe, 0xa0, 0x9, [{{0x9, 0x4, 0x6, 0x80, 0x2, 0x43, 0x3f, 0x3b, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "f2"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x9, 0x8, 0x5}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x0, 0x1}, @obex={0x5, 0x24, 0x15, 0x3}]}], [{{0x9, 0x5, 0x1, 0x8, 0x10, 0x8, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xffbc}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x8}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x8, 0x4a, 0xd}}]}}, {{0x9, 0x4, 0xf9, 0x4, 0x8, 0x6d, 0xe4, 0xca, 0xa9, [], [{{0x9, 0x5, 0x81, 0x0, 0x400, 0x1, 0x2d, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x5, 0x2, 0x9}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x2e, 0x9, 0xf7, [@generic={0xf9, 0x3, "747ba4d7c96493ebe8e6d3acecc6062a4ba3c43d3c9b77cd1902094dbad146e00347aefccc14b0752b8d26d2db0e04a0a3b4ef21d6ac1c4a3f45a660fdd4a0deb80c6c5b983ea1ac7324ee35904e0a0f805e7b09c64510fc02755e0e0e05eed790011d4713fd24199f9a3fd694c3b2c858a7585f712dbbe8c972d8ecf53d6d67a62f1e9c00957b2619c951dbe5347ab514b11320fb92cb771063c3efc246a8cef72c9fdb8dce42a0b9301f9e2f750460b1a3560c20886fdbd442205997349f16bf69043e9b35671a536b55055698b8b60c8936abe49a27dd5869b02944a77564497f54cb899861ee2c61021abc1e589c0494508ffa5d88"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x81}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x2, 0x5, 0x3}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x3, 0x10, 0x7f, [@generic={0x2d, 0x23, "0c6ad1bd18cafed821b7da479f596dfe74e7790f497b986ec91dacf059731a4753ea12908bb50a23d97e01"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x1, 0x10, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x1}, @generic={0xd0, 0xa, "1944cc37291b8618f5ca68e7f9b576675310ba6373e6018795219d4b7cac19686e0a72ce572634d4ee8be57defa64676d1df53cea456a534a66ff25ced1483f581211656a13886184cb639c322047b9274cefff94e2a481feaa73f74fdca11a5a8bca3f02dce12ba570c53f0d1627c5936240cf3c3ca43aeed5b7bfcb150a1395b85d1591d0e656d1c78304aa1ec31936fd5a1854bc52f852d1aea3aeda35aec3fd6aa64947a0a5b7c68022530f294d26407f0ee2f7640d3a8079c6848457e8e8d1b1dbf1e3e37b633e4c92a8cbb"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0xa2, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x2}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0xff, 0x5, 0x2}}]}}, {{0x9, 0x4, 0x27, 0x3, 0x3, 0x67, 0xbf, 0x39, 0x6, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4, 0xf, 0x3, "54000727fb04"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x3, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x2, 0x4e, 0xfa, 'r', "11aa"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x6, 0x4, 0x37, 0xf9, "97e43fe551d43708"}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'G'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xfff, 0x6113, 0x8}, {0x6, 0x24, 0x1a, 0x17, 0x5}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @obex={0x5, 0x24, 0x15, 0x49c5}, @obex={0x5, 0x24, 0x15, 0x5}]}], [{{0x9, 0x5, 0xc, 0x11, 0x400, 0xf4, 0x1, 0x71}}, {{0x9, 0x5, 0x2, 0x2, 0x8, 0xd, 0x1, 0x3}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x0, 0x7f, 0x4a, [@generic={0xa3, 0x5, "f7e66645d481bbd6390687f24064158383268022b218d36d5f689403c9829a6b429d6286f0e9ffa2efb8198fe438f0fe95c3c12108e50333f6c416fff54e3bc935251fc7dee7c2b5e45d9b60d25a20d431563bfae9a3ee19aa8bd6bca6b8ad6a561d0ee370a0ce32d54fc97ab682b2891879b0957792f5062d35cfb8d9db249ec727128303023cfc8af0881939f4bc526b4993b1d08fc1992b223e6179611f265c"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xd0, 0xffff}]}}]}}, {{0x9, 0x4, 0x91, 0xb, 0x10, 0x32, 0xd3, 0x44, 0x8, [], [{{0x9, 0x5, 0x8, 0x4, 0x10, 0x7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x81}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x0, 0x5, 0x6, [@generic={0xb, 0xe, "107786fd9db85153b3"}, @generic={0xc9, 0xd, "42ebe576bafd71087179b116f0d9d243ed095de50a5bf1c8ebecef0ef915f3e1acb84c39d0866036ad659b7bd36d5281beacb9b7d90194ece94da02cf3a6a73909572d1197a51ebc2f8b6149d1f3934eef28b82ccc08a9349cd28cbaa88508ecad907f2376936f306d6b0e2cc5641d144bf9aac64fa5d7244d5240c60f662c88fd979c56a133688868424cfeb12529796d82e4bafde54e54544c2d5dac9e40483f0b223ae3d2ca437bb4d44a6fdb21b50a089f4ed09f0fdb0cc4988541b4b6d9084788b204ae86"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x7, 0x3, 0xc, [@generic={0x7b, 0xf, "651c631850ea15e877505db040aa153407ca44b4bcee8c70f4d2a5848d70f197cb6e33108bd5c175a76947708d804efd186b674218404d515b26f8f31c7d17d91fb605e07b39b62d742373d60e5376127b1ffff9ee7434d6802617419598b66ce70b6e90092e2af257cf0150beaea0687c5fde95b5b557d52b"}, @generic={0xac, 0x23, "56efcda5cfcb95533408d42fcf03c88be25e1b9f17fdefe7c470da7b93cb0500ab1c2d7410f89d65cf2bf0fce23eebf4d5172bd5bef0ff78eae832b5062d2f71cc25d3b1c44c41471ec5d45ae47d707127b5b96ed3859aca3979f3de70556de3bfe114688c97796a551c2fca3b48db13d70f92e9c185a707bea67c0ab2faca465b1965382b774fafb60837e12b01389d73bccdc0b2db72837b59ab9bbcc7a33782b5bac747acfa7a7937"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9b, 0xf}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0xa, 0x5, 0x4, [@generic={0x9a, 0x22, "bb364715590a9419fa076be3af528818cf23bb680adc349e435e4fb09d5dc3b7a6c1c505c765e06b31f352c4677d6725affc744aad2c6ea034c6c9aa79c5e6a92c44f2916752d8baea19522dc05f54cb65beb13404c8508b9d368bd2cdbacc306019df51182cc39634f3250e9d652334d00c8984b7337e95d9c4fd380c5643696104a4f4d15fff2828f3fa59ae7737998a9389d37b5ddfd6"}]}}, {{0x9, 0x5, 0x5, 0xa, 0x200, 0x4, 0x8, 0x7, [@generic={0x63, 0x24, "45aac44d88dbcdbb2007249ecfe073f50068f94b2eebe0ae2f9a2dff4645dd8fd8b7a09474fb2e51ac9f96d6ef0319bd05dbe665adf66e2a4399e6c1c278b0825bf3a72d3fbde5af51f226f31adbb32a649271e3b3cfffe8e71c657ffc3c42f9ca"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x9, 0x4}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xd, 0x2, 0x7}}, {{0x9, 0x5, 0x2, 0x4, 0x400, 0x2, 0x8, 0x4}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x7, 0x0, 0x1}}, {{0x9, 0x5, 0xf, 0x4, 0x20, 0x1, 0xe4, 0x81, [@generic={0xa0, 0x24, "f82b4afa8ac9aef2f9e1ecde2a886ea7378a123d7878148ef8a58f94e4f432f44c7e744e86e8aad72b6a32e9a1a7ae6fe175a083c29f882a947f44ccf6b1e919f44c9150693b3aceb895275f4a944877ebfa49910fb8c06c05b98b481cfbcd7ed543e1cd257d3e50835b3f604aafb0fffeeb5affdbd44f842a28b2d84daef461a32003a87c5529f72880060de33063a8a80da1d9d0c322a66320a1125739"}, @generic={0x50, 0x21, "652f1cceaa37ed7cbd974a85a4c4cabcd69dbd38a6d53bbdabf089ad825075b9d7bcc1c54f64b69415881886bbb2867846abb2d6965339349b6997dda6820046db9eacd3b9798a477a870a72c61e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x5, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x94, 0xd40}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x4, 0x3, 0x1b, [@generic={0x38, 0x0, "7312c1401b7ea649ce892a40f8de4b2cfe329fdc6aac0725bf9cae069f5b94f87a1007c13a5b05de8e2efd7b0d74fd8f6acf198a531e"}, @generic={0x5, 0x22, "b65a14"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x6c, 0x10}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x5, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfe, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x8001}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x3c, 0x0, 0x6, [@generic={0x71, 0x136b5e3719ac1de5, "67e57c68c3044e8a6cdc2502d14f48f3741f015c3feebdad3639a021a59b1fd7e2ede87bfe78d5cc14a8347e0c077d84f4b5cc621228a9af41d8f55e2c923e22f610c0e7265a48cc685318c199aaebf2a9107bb82bd2ef68c0c1cc81f43f659441876a8c925ff0b850e189ca7943fc"}, @generic={0x73, 0x31, "855ff7d8fcdfd24bbf23d0d8da7c5ac68560f93be15fde46c3c453e05fcc29e7d562c657ca5cb55649b1bad18436130df59ff1c6656eb6396f3cf641a071f869e39915bc62167486790f5e9b5a18cf2bc8d31ac0883919380574e2da21a74711098bfdb7c3e483616d08c11b1320b012ca"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x9, 0x6, 0x0, [@generic={0xe, 0x10, "d6378d9818233a9ef6f30a7e"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0xa, 0xa, 0x52, 0x8, 0x2}, 0x2f, &(0x7f00000000c0)={0x5, 0xf, 0x2f, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x5, 0x3, 0x7, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x1, 0x9, 0xffff}, @generic={0x4, 0x10, 0x3, "cd"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x1, 0xa, 0x8001}]}, 0x1, [{0xa1, &(0x7f0000000100)=@string={0xa1, 0x3, "7daaeb06557e98c9a809f38bb4aa802bb4ace38dfc9542811ffbe58943c45ac1523ab81d80032f1efe879ba9944c89ffb8c84f38c4855ba90de5ad480df46949664bf6e994f869cf0f865d29de6295d3be7fefb147e69f00522898c255e115cd4e23c8c3dad56b6689bb0a40ee570d4a9a33a09d01f313261bc0660a8d57a17bbd8f15065def3d67eb9cda302911911f6dc88d5a447d57c979aa2b6250d265"}}]}) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000c78ed1d426e53f070c000000000000009307eb0100274cdc9522"], 0x0}, 0x0) 1.901684417s ago: executing program 0 (id=3140): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (fail_nth: 5) 1.825145267s ago: executing program 5 (id=3141): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x4, 0x0, 0x2, 0xeffffe02, 0x0, [{0x4, 0xff}, {0x19, 0x3, 0x5}, {0x8, 0x0, 0x2}, {0x0, 0x0, 0x7f}, {0x0, 0x0, 0x4, '\x00', 0xd8}, {0x81, 0x65, 0xff}, {0x0, 0xff, 0x7, '\x00', 0x3}, {0x0, 0x2}, {0x0, 0x33, 0x3, '\x00', 0x8}, {0x2, 0x5, 0x0, '\x00', 0x1}, {0x0, 0x5}, {0x0, 0x88, 0x1, '\x00', 0xfa}, {0x0, 0x0, 0x3}, {0x3, 0x0, 0x0, '\x00', 0x3}, {0x80, 0x12, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x0, 0x2, 0x1}, {0x0, 0x29, 0x0, '\x00', 0x40}, {0x0, 0x0, 0x15, '\x00', 0x5}, {0x4, 0x1, 0x0, '\x00', 0x26}, {0x58, 0x6, 0x0, '\x00', 0x5}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0xe, 0x7, '\x00', 0x1}]}}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d01"], 0xb4}}, 0x0) 1.754353598s ago: executing program 5 (id=3143): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@discard}]}, 0x1, 0x787, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000e550000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.026033383s ago: executing program 0 (id=3144): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.025747193s ago: executing program 0 (id=3145): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0}]) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='autofs\x00', 0x437060, &(0x7f0000000280)='mounts\x00') 898.080634ms ago: executing program 0 (id=3146): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x5) 889.522384ms ago: executing program 0 (id=3147): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000001c0)={0x6, 'veth1_to_hsr\x00', {}, 0xa}) pwritev2(r1, &(0x7f0000000480)=[{&(0x7f0000000100)="b6", 0x1}], 0x1, 0x2, 0x3, 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x102, 0x4, 0x3e0, 0x110, 0x1f8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @mac, @multicast1, @local}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1, 0x4094ba5b8e98b50f}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6_vti0\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 638.584445ms ago: executing program 3 (id=3148): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0xc2340, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0xb, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000eec88c63ffffffffffffff0085000000270000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004500), 0x0, 0x814) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0314f9f4070009040002000000010000000000000008", 0x1d) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$incfs(r3, &(0x7f0000000200)='.pending_reads\x00', 0x0, 0x41) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], &(0x7f0000000600)=""/4096, 0x36, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x40106726, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) dup(0xffffffffffffffff) io_uring_setup(0x2aa0, &(0x7f0000000000)={0x0, 0x0, 0x1}) syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090470e96808dcdad30905031010007404060904"], 0x0) 470.764757ms ago: executing program 5 (id=3149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e80"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 391.512447ms ago: executing program 8 (id=3150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) 217.899838ms ago: executing program 8 (id=3151): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x3, 0x2, 0x10, @private1, @private1, 0x8000, 0x700, 0x7, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0500000071108100000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 137.606399ms ago: executing program 5 (id=3152): r0 = gettid() capget(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000180)={0x0, 0x7, 0x7fff, 0xffffffc1, 0x2, 0x10000}) unshare(0x20000400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4030ae7b, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='attr/exec\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f00000002c0)=@arm64_sve={0x60800004001503c9, &(0x7f0000000280)=0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f00000000c0), 0x0}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x1008494, &(0x7f0000000340)={[{@nfs_export_on}], [], 0x2c}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x12, 0x0, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "07a255397a104da2", "a10baf9b219692d2605c59c3edfc5327", "6fb01616", "02c611f53a8ed752"}, 0x28) sendto$inet(r8, &(0x7f0000001340)="1b1bccfa4484aca2216be07e823002a7b3ae2747eb529adf14e2e7f0e394a0305349faa69474a7ec1fae69095352d0def56f95b9ba6a4e8beef813df0d899bfe01c788d3ebac015dd96e747317c55b7f22e69f90d82000478151bd91aa8c794646c87f6b2f91010cb135338036d2671ed954f80a4d0e7a24304ba5fb567daf60bb1570da7a0b17d719cda32cc47fc23ad1a7595744d863093406b684a482caf992f05925ecbeed9eb9ac9fc531c786057f1beb6b2eeec50ecfcaa56501d82564eea7904176702efcd1e19229fec8c016c79ead53bb3470a5d617848c6f04aa792ff87c093e9f502f0e015087d0b4152c1fba6fde773cc817b98f1cb782248bde12f2e2924cbb6d7abd68bc7995381e0e9292cc5f7ebda910329d5caf4d3631c10b5de49ab909b9a0876df525f7fea2bddd97c5ba2f71ec4a987d7a5d2b66f51e95c4a1c2aa65be99e0aa20d5407b84367e718472a575ddfbfc4f979a001f0eff0fbd24d6e4c16299421db3d4c1859f925e4a43d830c0ccf5a93e35b99c76889b8efbc78b0b39c2f137fd1ae68b1a17a63a9044f47570bf9413d46e38c9a8ed6254db3f7582bbfe7e52a95a160c3bcf96fe88425af623f7d40cc225c3bd42e429b8a6b09b1f4dd9b941f064d14df9271a54e2ac56d1bae4bd2552dcb4f1fd8e8977c8a40eafcf7fd7437425a185056ad040d6ea0dd2a8db133b3660d6b12a28ad0542e2706ffe5476792785b2a10ec71674ed3d2670eeac826561f5464358df79284ca0df7dec46298689f0c2ee69c7b5263b05e88495c6a4f3c486faf73d449c78065566c6856e76c6755ae9e14872b2d87cc12fcb24fe03ce7507825e0ad7a0514a6bc8f65218fe67dcce19ca02c7c2ae36040f297fa1777c290d966961b6f3db59f0d74dd7adeba31347880b6c547e0b24b481f6", 0x295, 0x20000000, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x8, r7) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 130.785259ms ago: executing program 8 (id=3153): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x4, 0x0, 0x2, 0xeffffe02, 0x0, [{0x4, 0xff}, {0x19, 0x3, 0x5}, {0x8, 0x0, 0x2}, {0x0, 0x0, 0x7f}, {0x0, 0x0, 0x4, '\x00', 0xd8}, {0x81, 0x65, 0xff}, {0x0, 0xff, 0x7, '\x00', 0x3}, {0x0, 0x2}, {0x0, 0x33, 0x3, '\x00', 0x8}, {0x2, 0x5, 0x0, '\x00', 0x1}, {0x0, 0x5}, {0x0, 0x88, 0x1, '\x00', 0xfa}, {0x0, 0x0, 0x3}, {0x3, 0x0, 0x0, '\x00', 0x3}, {0x80, 0x12, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x0, 0x2, 0x1}, {0x0, 0x29, 0x0, '\x00', 0x40}, {0x0, 0x0, 0x15, '\x00', 0x5}, {0x4, 0x1, 0x0, '\x00', 0x26}, {0x58, 0x6, 0x0, '\x00', 0x5}, {0x0, 0x0, 0x41}, {0x0, 0x0, 0x9}, {0x0, 0xe, 0x7, '\x00', 0x1}]}}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d"], 0xb4}}, 0x0) 109.752479ms ago: executing program 8 (id=3154): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000200)='.pending_reads\x00', 0x0, 0x41) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000000600)=""/4096, 0x36, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, 0x0) 53.8675ms ago: executing program 8 (id=3155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000002740)=ANY=[@ANYBLOB="18000000000000000000000000000000c3070000000000009565539517f3519a3c6700000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x881) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 47.082369ms ago: executing program 0 (id=3156): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) io_setup(0x4, &(0x7f00000014c0)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x3, r2, 0x0}]) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='autofs\x00', 0x437060, &(0x7f0000000280)='mounts\x00') 0s ago: executing program 8 (id=3157): r0 = getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sched_setscheduler(r0, 0x5, &(0x7f0000000180)=0x5) kernel console output (not intermixed with test programs): parsing attributes in process `syz.0.2643'. [ 571.976054][T12733] FAULT_INJECTION: forcing a failure. [ 571.976054][T12733] name failslab, interval 1, probability 0, space 0, times 0 [ 571.989565][T12733] CPU: 0 PID: 12733 Comm: syz.0.2649 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 571.999316][T12733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 572.009997][T12733] Call Trace: [ 572.013342][T12733] dump_stack+0x1d8/0x241 [ 572.017495][T12733] ? panic+0x89d/0x89d [ 572.021403][T12733] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 572.027058][T12733] ? filename_parentat+0x46f/0x650 [ 572.032000][T12733] should_fail+0x71f/0x880 [ 572.036598][T12733] ? setup_fault_attr+0x3d0/0x3d0 [ 572.041557][T12733] ? getname_flags+0xb8/0x4e0 [ 572.046333][T12733] should_failslab+0x5/0x20 [ 572.050675][T12733] kmem_cache_alloc+0x28/0x250 [ 572.055265][T12733] getname_flags+0xb8/0x4e0 [ 572.059689][T12733] do_renameat2+0x3a4/0x1250 [ 572.064119][T12733] ? __kernel_write+0x350/0x350 [ 572.068824][T12733] ? check_preemption_disabled+0x9f/0x320 [ 572.074363][T12733] ? debug_smp_processor_id+0x20/0x20 [ 572.080115][T12733] ? __sb_end_write+0xc4/0x120 [ 572.084773][T12733] ? may_open+0x340/0x340 [ 572.089032][T12733] ? check_preemption_disabled+0x153/0x320 [ 572.094774][T12733] ? debug_smp_processor_id+0x20/0x20 [ 572.100002][T12733] ? __ia32_sys_read+0x80/0x80 [ 572.104575][T12733] ? __do_page_fault+0x725/0xbb0 [ 572.109351][T12733] __x64_sys_rename+0x64/0x70 [ 572.114046][T12733] do_syscall_64+0xca/0x1c0 [ 572.118464][T12733] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 572.124182][T12733] RIP: 0033:0x7f79116f2169 [ 572.128449][T12733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.148068][T12733] RSP: 002b:00007f790fd1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 572.156428][T12733] RAX: ffffffffffffffda RBX: 00007f791190b160 RCX: 00007f79116f2169 [ 572.164677][T12733] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 572.172496][T12733] RBP: 00007f790fd1a090 R08: 0000000000000000 R09: 0000000000000000 [ 572.180478][T12733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.188556][T12733] R13: 0000000000000001 R14: 00007f791190b160 R15: 00007fff5ff540a8 [ 572.700335][T12739] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2652'. [ 572.719909][T12740] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2653'. [ 572.750432][T12739] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 572.757386][T12740] netlink: 'syz.0.2653': attribute type 6 has an invalid length. [ 572.786202][T12740] netlink: 'syz.0.2653': attribute type 5 has an invalid length. [ 572.834302][T12743] fuse: Bad value for 'user_id' [ 572.839251][T12740] netlink: 'syz.0.2653': attribute type 4 has an invalid length. [ 572.860372][T12743] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2654'. [ 573.152072][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 573.233451][T12760] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,,errors=continue [ 573.403436][T12773] input: syz0 as /devices/virtual/input/input132 [ 573.555768][T12745] EXT4-fs (loop8): Unrecognized mount option "euid=00000000000000000001" or missing value [ 573.573889][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 573.587653][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 573.633887][T12780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2665'. [ 573.645602][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 573.650152][T12780] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 573.664817][T12760] EXT4-fs error (device loop7): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 573.849467][T12795] fuse: Bad value for 'user_id' [ 573.977011][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 574.018522][T12826] fuse: Bad value for 'user_id' [ 574.024278][T12809] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,,errors=continue [ 574.047440][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 574.154123][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system [ 574.166193][T12818] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000001" or missing value [ 574.184882][T12809] EXT4-fs error (device loop8): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 574.571635][ T9] device bridge_slave_1 left promiscuous mode [ 574.577741][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.585278][ T9] device bridge_slave_0 left promiscuous mode [ 574.591276][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.601366][ T2298] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 574.845467][T12859] fuse: Bad value for 'user_id' [ 574.851037][T12859] __nla_validate_parse: 5 callbacks suppressed [ 574.851044][T12859] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2695'. [ 574.879852][T12861] netlink: 160 bytes leftover after parsing attributes in process `syz.7.2696'. [ 574.961239][ T2298] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.971682][ T2298] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 575.015964][T12871] attempt to access beyond end of device [ 575.015964][T12871] loop7: rw=2049, want=1041, limit=128 [ 575.033827][T12871] attempt to access beyond end of device [ 575.033827][T12871] loop7: rw=524288, want=369, limit=128 [ 575.044833][T12871] attempt to access beyond end of device [ 575.044833][T12871] loop7: rw=0, want=153, limit=128 [ 575.055642][T12871] attempt to access beyond end of device [ 575.055642][T12871] loop7: rw=0, want=153, limit=128 [ 575.061275][ T2298] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 575.066267][T12871] attempt to access beyond end of device [ 575.066267][T12871] loop7: rw=0, want=153, limit=128 [ 575.075826][ T2298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 575.086288][T12871] attempt to access beyond end of device [ 575.086288][T12871] loop7: rw=0, want=153, limit=128 [ 575.094461][ T2298] usb 4-1: SerialNumber: syz [ 575.104877][T12871] attempt to access beyond end of device [ 575.104877][T12871] loop7: rw=0, want=153, limit=128 [ 575.119844][T12871] attempt to access beyond end of device [ 575.119844][T12871] loop7: rw=0, want=153, limit=128 [ 575.130460][T12871] attempt to access beyond end of device [ 575.130460][T12871] loop7: rw=0, want=153, limit=128 [ 575.141184][T12871] attempt to access beyond end of device [ 575.141184][T12871] loop7: rw=0, want=153, limit=128 [ 575.342230][T12843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 575.356135][T12843] SELinux: duplicate or incompatible mount options [ 575.372201][T12843] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 575.422262][ T2298] usb 4-1: invalid UAC_HEADER (v1) [ 575.427567][ T2298] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 575.455947][ T2298] usb 4-1: USB disconnect, device number 37 [ 575.898120][T12891] fuse: Bad value for 'user_id' [ 575.913022][T12891] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2707'. [ 575.971918][T12897] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2709'. [ 576.265279][ T23] kauditd_printk_skb: 8 callbacks suppressed [ 576.265291][ T23] audit: type=1400 audit(1742463669.134:976): avc: denied { create } for pid=12912 comm="syz.0.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 576.411357][T12921] fuse: Bad value for 'user_id' [ 576.416621][T12921] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2719'. [ 576.498418][T12925] input: syz0 as /devices/virtual/input/input133 [ 576.720677][ T23] audit: type=1400 audit(1742463669.584:977): avc: denied { name_bind } for pid=12942 comm="syz.0.2727" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 576.761129][ T13] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 577.301341][ T13] usb 9-1: Using ep0 maxpacket: 32 [ 577.441212][ T13] usb 9-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 577.615414][T12964] input: syz0 as /devices/virtual/input/input134 [ 577.931238][ T13] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 577.944327][ T13] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.031140][ T2298] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 578.047342][ T13] usb 9-1: Product: syz [ 578.061144][ T13] usb 9-1: Manufacturer: syz [ 578.072021][ T13] usb 9-1: SerialNumber: syz [ 578.090969][ T13] usb 9-1: config 0 descriptor?? [ 578.131871][ T13] usb 9-1: bad CDC descriptors [ 578.137703][ T13] usb 9-1: unsupported MDLM descriptors [ 578.311943][T12983] input: syz0 as /devices/virtual/input/input135 [ 578.511218][ T2298] usb 8-1: Using ep0 maxpacket: 8 [ 578.608966][T12909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 578.631462][ T388] usb 9-1: USB disconnect, device number 10 [ 578.661769][ T2298] usb 8-1: config 0 has an invalid interface number: 150 but max is 0 [ 578.686474][ T2298] usb 8-1: config 0 has an invalid interface number: 112 but max is 0 [ 578.715121][ T2298] usb 8-1: config 0 has an invalid interface number: 110 but max is 0 [ 578.725206][ T2298] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 578.735266][ T2298] usb 8-1: config 0 has no interface number 0 [ 578.742568][ T23] audit: type=1400 audit(1742463671.614:978): avc: denied { write } for pid=146 comm="syslogd" name="/" dev="tmpfs" ino=9632 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.764412][ T23] audit: type=1400 audit(1742463671.614:979): avc: denied { remove_name } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=83879 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.764592][ T2176] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 578.788358][ T23] audit: type=1400 audit(1742463671.614:980): avc: denied { rename } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=83879 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 578.795641][ T2298] usb 8-1: config 0 has no interface number 1 [ 578.818680][ T23] audit: type=1400 audit(1742463671.614:981): avc: denied { add_name } for pid=146 comm="syslogd" name="messages.0" dev="tmpfs" ino=73315 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.824187][ T2298] usb 8-1: config 0 has no interface number 2 [ 578.847142][ T23] audit: type=1400 audit(1742463671.614:982): avc: denied { unlink } for pid=146 comm="syslogd" name="messages.0" dev="tmpfs" ino=73315 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 578.852702][ T2298] usb 8-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 578.875296][ T23] audit: type=1400 audit(1742463671.614:983): avc: denied { create } for pid=146 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 578.888334][ T2298] usb 8-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 578.920830][ T2298] usb 8-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 578.934195][ T2298] usb 8-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 578.946532][ T2298] usb 8-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 578.960350][ T2298] usb 8-1: config 0 interface 150 has no altsetting 0 [ 578.967208][ T2298] usb 8-1: config 0 interface 112 has no altsetting 0 [ 578.973848][ T2298] usb 8-1: config 0 interface 110 has no altsetting 0 [ 578.980421][ T2298] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 578.989299][ T2298] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.999419][ T2298] usb 8-1: config 0 descriptor?? [ 579.069125][T12996] FAULT_INJECTION: forcing a failure. [ 579.069125][T12996] name failslab, interval 1, probability 0, space 0, times 0 [ 579.082641][ T2176] usb 4-1: Using ep0 maxpacket: 8 [ 579.091237][T12996] CPU: 0 PID: 12996 Comm: syz.5.2740 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 579.100923][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 579.111011][T12996] Call Trace: [ 579.114236][T12996] dump_stack+0x1d8/0x241 [ 579.118706][T12996] ? panic+0x89d/0x89d [ 579.122811][T12996] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 579.128553][T12996] should_fail+0x71f/0x880 [ 579.132982][T12996] ? setup_fault_attr+0x3d0/0x3d0 [ 579.137928][T12996] ? check_preemption_disabled+0x9f/0x320 [ 579.143478][T12996] ? getname_flags+0xb8/0x4e0 [ 579.148002][T12996] should_failslab+0x5/0x20 [ 579.152429][T12996] kmem_cache_alloc+0x28/0x250 [ 579.157020][T12996] getname_flags+0xb8/0x4e0 [ 579.161362][T12996] user_path_at_empty+0x28/0x50 [ 579.166138][T12996] path_setxattr+0xae/0x240 [ 579.170768][T12996] ? check_preemption_disabled+0x153/0x320 [ 579.176506][T12996] ? simple_xattr_list_add+0xf0/0xf0 [ 579.181876][T12996] ? __ia32_sys_read+0x80/0x80 [ 579.187187][T12996] ? ksys_mount+0xe0/0xf0 [ 579.191343][T12996] __x64_sys_setxattr+0xb7/0xd0 [ 579.196035][T12996] do_syscall_64+0xca/0x1c0 [ 579.200557][T12996] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 579.206281][T12996] RIP: 0033:0x7f4c70e78169 [ 579.210611][T12996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.230417][T12996] RSP: 002b:00007f4c6f4e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 579.238662][T12996] RAX: ffffffffffffffda RBX: 00007f4c71090fa0 RCX: 00007f4c70e78169 [ 579.246745][T12996] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000300 [ 579.254642][T12996] RBP: 00007f4c6f4e2090 R08: 0000000000000003 R09: 0000000000000000 [ 579.262625][T12996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.270524][T12996] R13: 0000000000000000 R14: 00007f4c71090fa0 R15: 00007fffe89318a8 [ 579.306643][T12998] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2741'. [ 579.337152][ T23] audit: type=1400 audit(1742463672.204:984): avc: denied { setopt } for pid=13002 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 579.358538][ T23] audit: type=1400 audit(1742463672.224:985): avc: denied { write } for pid=13002 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 579.379787][ T2176] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 579.388360][ T2176] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 579.396820][ T2176] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 579.404958][ T2176] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 579.414282][ T2176] usb 4-1: config 0 has no interface number 0 [ 579.420543][T13003] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2743'. [ 579.420838][ T2176] usb 4-1: config 0 has no interface number 1 [ 579.432336][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'. [ 579.435981][ T2176] usb 4-1: config 0 has no interface number 2 [ 579.458238][ T2176] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 579.473852][ T2176] usb 4-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 579.486044][ T2176] usb 4-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 579.499793][ T2176] usb 4-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 579.511933][ T2176] usb 4-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 579.525502][ T2176] usb 4-1: config 0 interface 150 has no altsetting 0 [ 579.548118][T13014] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2747'. [ 579.599944][ T2176] usb 4-1: config 0 interface 112 has no altsetting 0 [ 579.606903][ T2176] usb 4-1: config 0 interface 110 has no altsetting 0 [ 579.613799][ T2176] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 579.622929][ T2176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.632277][ T2176] usb 4-1: config 0 descriptor?? [ 579.717219][T13022] input: syz0 as /devices/virtual/input/input136 [ 580.411217][T13030] netlink: 'syz.8.2752': attribute type 4 has an invalid length. [ 580.421381][ T2298] usb 8-1: string descriptor 0 read error: -71 [ 580.448192][ T2298] usb 8-1: USB disconnect, device number 9 [ 580.465235][T13030] netlink: 'syz.8.2752': attribute type 4 has an invalid length. [ 580.537189][T13031] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 580.548446][T13031] FAT-fs (loop7): Filesystem has been set read-only [ 580.557868][T13031] handle_bad_sector: 49231 callbacks suppressed [ 580.557878][T13031] attempt to access beyond end of device [ 580.557878][T13031] loop7: rw=524288, want=2073, limit=128 [ 580.576790][T13031] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 580.585708][T13031] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 580.596160][T13032] FAULT_INJECTION: forcing a failure. [ 580.596160][T13032] name failslab, interval 1, probability 0, space 0, times 0 [ 580.612348][T13032] CPU: 0 PID: 13032 Comm: syz.7.2753 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 580.622139][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 580.632650][T13032] Call Trace: [ 580.636049][T13032] dump_stack+0x1d8/0x241 [ 580.640304][T13032] ? panic+0x89d/0x89d [ 580.644564][T13032] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 580.650283][T13032] should_fail+0x71f/0x880 [ 580.654623][T13032] ? setup_fault_attr+0x3d0/0x3d0 [ 580.659788][T13032] ? netlink_dump+0x2e3/0x1340 [ 580.664476][T13032] should_failslab+0x5/0x20 [ 580.668975][T13032] __kmalloc_track_caller+0x4f/0x2b0 [ 580.674289][T13032] ? kmem_cache_alloc+0xd9/0x250 [ 580.679400][T13032] ? netlink_dump+0x2e3/0x1340 [ 580.684376][T13032] __alloc_skb+0xb4/0x4d0 [ 580.689134][T13032] netlink_dump+0x2e3/0x1340 [ 580.693704][T13032] ? refcount_inc+0x80/0x80 [ 580.698615][T13032] ? kmem_cache_free+0x10b/0x2c0 [ 580.703832][T13032] ? skb_free_datagram+0x24/0xe0 [ 580.708588][T13032] netlink_recvmsg+0x69d/0x11a0 [ 580.713536][T13032] ? netlink_sendmsg+0xcf0/0xcf0 [ 580.718492][T13032] ? import_iovec+0x1bb/0x380 [ 580.722998][T13032] ? security_socket_recvmsg+0x86/0xb0 [ 580.728284][T13032] ? sock_recvmsg+0x7d/0x110 [ 580.732724][T13032] ___sys_recvmsg+0x6a7/0xa60 [ 580.737421][T13032] ? __sys_recvmsg+0x280/0x280 [ 580.742498][T13032] ? kstrtouint_from_user+0x20a/0x2a0 [ 580.747695][T13032] ? proc_fail_nth_read+0x210/0x210 [ 580.752817][T13032] do_recvmmsg+0x418/0x940 [ 580.757069][T13032] ? __sys_recvmmsg+0x270/0x270 [ 580.761752][T13032] ? __fsnotify_parent+0x310/0x310 [ 580.766867][T13032] ? __sb_end_write+0xc4/0x120 [ 580.771476][T13032] ? vfs_write+0x41a/0x4e0 [ 580.775739][T13032] __x64_sys_recvmmsg+0x195/0x240 [ 580.775753][T13032] ? do_recvmmsg+0x940/0x940 [ 580.775772][T13032] do_syscall_64+0xca/0x1c0 [ 580.789455][T13032] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 580.789471][T13032] RIP: 0033:0x7f30ac7e8169 [ 580.799923][T13032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.799939][T13032] RSP: 002b:00007f30aae52038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 580.828135][T13032] RAX: ffffffffffffffda RBX: 00007f30aca00fa0 RCX: 00007f30ac7e8169 [ 580.836263][T13032] RDX: 0000000000000003 RSI: 0000200000000b00 RDI: 0000000000000006 [ 580.844187][T13032] RBP: 00007f30aae52090 R08: 0000000000000000 R09: 0000000000000000 [ 580.852106][T13032] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 580.860263][T13032] R13: 0000000000000000 R14: 00007f30aca00fa0 R15: 00007ffdcda59b48 [ 580.932039][T13048] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2759'. [ 580.951468][ T2176] usb 4-1: string descriptor 0 read error: -71 [ 580.968924][ T440] udevd[440]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 580.985115][ T2176] usb 4-1: USB disconnect, device number 38 [ 580.997046][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 581.001330][T13042] EXT4-fs (loop8): Unrecognized mount option "euid=00000000000000000001" or missing value [ 581.220660][T13060] input: syz0 as /devices/virtual/input/input137 [ 581.254392][ T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.150/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 581.437881][T13070] netlink: 'syz.3.2766': attribute type 4 has an invalid length. [ 581.451546][T13070] netlink: 'syz.3.2766': attribute type 4 has an invalid length. [ 581.713002][T13078] FAULT_INJECTION: forcing a failure. [ 581.713002][T13078] name failslab, interval 1, probability 0, space 0, times 0 [ 581.725647][T13078] CPU: 1 PID: 13078 Comm: syz.3.2767 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 581.735320][T13078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 581.745210][T13078] Call Trace: [ 581.748351][T13078] dump_stack+0x1d8/0x241 [ 581.752514][T13078] ? panic+0x89d/0x89d [ 581.756410][T13078] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 581.762291][T13078] ? __balance_callback+0x86/0xe0 [ 581.767398][T13078] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 581.773046][T13078] should_fail+0x71f/0x880 [ 581.777293][T13078] ? setup_fault_attr+0x3d0/0x3d0 [ 581.782154][T13078] ? ___neigh_create+0x6d2/0x1ae0 [ 581.787094][T13078] should_failslab+0x5/0x20 [ 581.791438][T13078] __kmalloc+0x51/0x2e0 [ 581.795467][T13078] ? ip6t_do_table+0x162c/0x1800 [ 581.800307][T13078] ___neigh_create+0x6d2/0x1ae0 [ 581.805167][T13078] ? reschedule_interrupt+0xa/0x20 [ 581.810572][T13078] ip6_finish_output2+0x8b1/0x1640 [ 581.815684][T13078] ? __ip6_finish_output+0x790/0x790 [ 581.820798][T13078] ? ip6_mtu+0xe2/0x130 [ 581.824796][T13078] ? __ip6_finish_output+0x5e4/0x790 [ 581.830051][T13078] ip6_output+0x1b3/0x430 [ 581.834168][T13078] ? asan.module_dtor+0x20/0x20 [ 581.838857][T13078] ? ip6table_mangle_hook+0x25b/0x750 [ 581.844143][T13078] ? ip6_output+0x430/0x430 [ 581.848574][T13078] ? nf_hook_slow+0x196/0x1e0 [ 581.853441][T13078] ip6_local_out+0x1ff/0x490 [ 581.857973][T13078] ? dst_output+0x80/0x80 [ 581.862124][T13078] ? __ip6_local_out+0x420/0x420 [ 581.866883][T13078] ? ip6_make_skb+0x6ec/0x7c0 [ 581.871576][T13078] ? preempt_schedule_notrace+0x140/0x140 [ 581.877155][T13078] ip6_send_skb+0xa5/0x1b0 [ 581.881469][T13078] udp_v6_send_skb+0xa3d/0x1440 [ 581.886165][T13078] udpv6_sendmsg+0x2265/0x3150 [ 581.890777][T13078] ? ip_do_fragment+0x2200/0x2200 [ 581.895882][T13078] ? udp_v6_early_demux+0xd30/0xd30 [ 581.900929][T13078] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 581.906313][T13078] ? selinux_socket_accept+0x5b0/0x5b0 [ 581.911606][T13078] ? inet_send_prepare+0x5c/0x4a0 [ 581.916461][T13078] ? inet6_ioctl+0x160/0x160 [ 581.920981][T13078] ____sys_sendmsg+0x5ac/0x8f0 [ 581.925659][T13078] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 581.930685][T13078] ? __balance_callback+0x86/0xe0 [ 581.935548][T13078] ? __schedule+0xd0c/0x1320 [ 581.940337][T13078] __sys_sendmmsg+0x3c3/0x700 [ 581.944841][T13078] ? __ia32_sys_sendmsg+0x90/0x90 [ 581.949785][T13078] ? preempt_schedule_irq+0xe7/0x140 [ 581.954994][T13078] ? cpupri_find+0xe5/0x2a0 [ 581.959342][T13078] ? pick_next_pushable_task+0x210/0x210 [ 581.964984][T13078] ? proc_fail_nth_write+0x20b/0x290 [ 581.970193][T13078] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 581.975687][T13078] ? push_rt_tasks+0x7c5/0x8a0 [ 581.980283][T13078] ? check_preemption_disabled+0x9f/0x320 [ 581.986004][T13078] ? debug_smp_processor_id+0x20/0x20 [ 581.991209][T13078] ? debug_smp_processor_id+0x20/0x20 [ 581.996509][T13078] ? rto_push_irq_work_func+0x3c0/0x3c0 [ 582.001971][T13078] ? switch_mm_irqs_off+0x325/0xab0 [ 582.007094][T13078] ? plist_check_list+0x1f8/0x220 [ 582.012388][T13078] ? __balance_callback+0x86/0xe0 [ 582.017539][T13078] ? check_preemption_disabled+0x153/0x320 [ 582.023359][T13078] ? switch_fpu_return+0x1d4/0x410 [ 582.028296][T13078] ? fpu__clear+0x3c0/0x3c0 [ 582.033372][T13078] __x64_sys_sendmmsg+0x9c/0xb0 [ 582.038097][T13078] do_syscall_64+0xca/0x1c0 [ 582.042627][T13078] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 582.048340][T13078] RIP: 0033:0x7fe661d85169 [ 582.052590][T13078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.072540][T13078] RSP: 002b:00007fe6603ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 582.080983][T13078] RAX: ffffffffffffffda RBX: 00007fe661f9e160 RCX: 00007fe661d85169 [ 582.089301][T13078] RDX: 0000000000000062 RSI: 0000200000002940 RDI: 0000000000000006 [ 582.097119][T13078] RBP: 00007fe6603ad090 R08: 0000000000000000 R09: 0000000000000000 [ 582.105013][T13078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.112827][T13078] R13: 0000000000000000 R14: 00007fe661f9e160 R15: 00007ffc19b55c38 [ 582.446350][T13086] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2770'. [ 582.498271][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 582.498281][ T23] audit: type=1400 audit(1742463675.364:988): avc: denied { bind } for pid=13083 comm="syz.7.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 582.693063][T13091] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue [ 582.743697][T13074] F2FS-fs (loop8): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 582.801177][T13074] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 582.832478][T13074] F2FS-fs (loop8): Unrecognized mount option "Âë" or missing value [ 582.843076][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-uuid/ae71b7fd-767a-4c88-a53b-ea5e39a5f101.tmp-b7:8' failed: Read-only file system [ 582.884217][ T2298] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 582.977382][T13100] EXT4-fs error (device loop5): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 583.069057][T13102] input: syz0 as /devices/virtual/input/input138 [ 583.195988][ T2298] usb 8-1: Using ep0 maxpacket: 16 [ 583.235231][ T108] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 583.334420][T13108] FAULT_INJECTION: forcing a failure. [ 583.334420][T13108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 583.381396][T13108] CPU: 0 PID: 13108 Comm: syz.8.2776 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 583.391720][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 583.401694][T13108] Call Trace: [ 583.404837][T13108] dump_stack+0x1d8/0x241 [ 583.409270][T13108] ? panic+0x89d/0x89d [ 583.413691][T13108] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 583.419513][T13108] should_fail+0x71f/0x880 [ 583.423865][T13108] ? setup_fault_attr+0x3d0/0x3d0 [ 583.428875][T13108] ? nf_nat_ipv4_local_fn+0x1c2/0x520 [ 583.434111][T13108] ? ip_fragment+0x210/0x210 [ 583.438598][T13108] __alloc_pages_nodemask+0x1b4/0x840 [ 583.443893][T13108] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 583.449706][T13108] wp_page_copy+0x20f/0x1820 [ 583.454133][T13108] ? check_preemption_disabled+0x153/0x320 [ 583.459866][T13108] ? __kunmap_atomic+0x80/0x80 [ 583.465071][T13108] ? _raw_spin_unlock+0x49/0x60 [ 583.470014][T13108] ? do_wp_page+0x4d7/0xae0 [ 583.474356][T13108] handle_mm_fault+0x1888/0x4920 [ 583.479218][T13108] ? finish_fault+0x230/0x230 [ 583.483766][T13108] ? down_read_trylock+0x179/0x1d0 [ 583.488853][T13108] ? vmacache_find+0x205/0x4b0 [ 583.493462][T13108] __do_page_fault+0x509/0xbb0 [ 583.498142][T13108] page_fault+0x2f/0x40 [ 583.502135][T13108] RIP: 0010:__put_user_4+0x1c/0x30 [ 583.507254][T13108] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 80 8d 02 00 48 8b 9b 98 0b 00 00 48 83 eb 03 48 39 d9 73 3f 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 583.527139][T13108] RSP: 0018:ffff8881cd20f9d8 EFLAGS: 00050293 [ 583.533297][T13108] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000200000007ff8 [ 583.541378][T13108] RDX: 0000200000007fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 583.549362][T13108] RBP: ffff8881cd20fee0 R08: ffffffff83776ca0 R09: ffffffff83b8c23a [ 583.557835][T13108] R10: ffff8881cc70cec0 R11: 0000000000000002 R12: 1ffff11039a41f48 [ 583.565847][T13108] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11039a41f74 [ 583.574094][T13108] ? udp_sendmsg+0x80a/0x2aa0 [ 583.578604][T13108] ? __sys_sendmmsg+0x500/0x700 [ 583.583385][T13108] __sys_sendmmsg+0x51d/0x700 [ 583.587903][T13108] ? __ia32_sys_sendmsg+0x90/0x90 [ 583.592849][T13108] ? proc_fail_nth_write+0x20b/0x290 [ 583.598130][T13108] ? proc_fail_nth_read+0x210/0x210 [ 583.604213][T13108] ? proc_fail_nth_read+0x210/0x210 [ 583.609515][T13108] ? memset+0x1f/0x40 [ 583.613760][T13108] ? fsnotify+0x1280/0x1340 [ 583.618654][T13108] ? __kernel_write+0x350/0x350 [ 583.623496][T13108] ? check_preemption_disabled+0x9f/0x320 [ 583.629242][T13108] ? debug_smp_processor_id+0x20/0x20 [ 583.634539][T13108] ? debug_smp_processor_id+0x20/0x20 [ 583.639839][T13108] ? __ia32_sys_read+0x80/0x80 [ 583.644519][T13108] __x64_sys_sendmmsg+0x9c/0xb0 [ 583.649206][T13108] do_syscall_64+0xca/0x1c0 [ 583.653631][T13108] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 583.659469][T13108] RIP: 0033:0x7f342d690169 [ 583.664226][T13108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.684285][T13108] RSP: 002b:00007f342bcfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 583.692608][T13108] RAX: ffffffffffffffda RBX: 00007f342d8a8fa0 RCX: 00007f342d690169 [ 583.700511][T13108] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 583.708411][T13108] RBP: 00007f342bcfa090 R08: 0000000000000000 R09: 0000000000000000 [ 583.716398][T13108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.724734][T13108] R13: 0000000000000000 R14: 00007f342d8a8fa0 R15: 00007ffcae77bd48 [ 583.781137][ T108] usb 4-1: Using ep0 maxpacket: 8 [ 583.791366][ T2298] usb 8-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 583.800794][ T2298] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.809148][ T2298] usb 8-1: Product: syz [ 583.814190][ T2298] usb 8-1: Manufacturer: syz [ 583.822630][ T2298] usb 8-1: SerialNumber: syz [ 583.829152][ T2298] usb 8-1: config 0 descriptor?? [ 583.871750][ T2298] uvcvideo: Found UVC 0.00 device syz (046d:0721) [ 583.878138][ T2298] uvcvideo: No valid video chain found. [ 583.911270][ T108] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 583.920382][ T108] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 583.928634][ T108] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 583.937150][ T108] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 583.946497][ T108] usb 4-1: config 0 has no interface number 0 [ 583.952431][ T108] usb 4-1: config 0 has no interface number 1 [ 583.958593][ T108] usb 4-1: config 0 has no interface number 2 [ 583.964964][ T108] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.978949][ T108] usb 4-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 583.990021][ T108] usb 4-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 584.004208][ T108] usb 4-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 584.012425][ T440] udevd[440]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 584.015663][ T108] usb 4-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 584.032923][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 584.040419][ T108] usb 4-1: config 0 interface 150 has no altsetting 0 [ 584.059565][ T108] usb 4-1: config 0 interface 112 has no altsetting 0 [ 584.066581][ T108] usb 4-1: config 0 interface 110 has no altsetting 0 [ 584.070624][T13110] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,,errors=continue [ 584.078412][T13118] netlink: 'syz.5.2778': attribute type 4 has an invalid length. [ 584.092696][ T108] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 584.102169][ T108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.103682][ T2298] usb 8-1: USB disconnect, device number 10 [ 584.116847][ T108] usb 4-1: config 0 descriptor?? [ 584.131828][T13119] netlink: 'syz.5.2778': attribute type 4 has an invalid length. [ 584.174967][T13110] EXT4-fs error (device loop8): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 584.293778][T13126] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 584.295351][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 584.318660][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 584.326977][T13126] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000c018, mo2=0002] [ 584.338256][T13126] System zones: 0-2, 18-18, 34-35 [ 584.345051][T13126] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,block_validity,debug,jqfmt=vfsv1,,errors=continue [ 584.358143][T13126] ext4 filesystem being mounted at /80/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 584.383253][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 584.453581][T13132] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 584.468548][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 584.487923][T13132] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000c018, mo2=0002] [ 584.495974][T13132] System zones: 0-2, 18-18, 34-35 [ 584.503227][T13132] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,block_validity,debug,jqfmt=vfsv1,,errors=continue [ 584.516485][T13132] ext4 filesystem being mounted at /81/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 584.587295][T13132] FAULT_INJECTION: forcing a failure. [ 584.587295][T13132] name failslab, interval 1, probability 0, space 0, times 0 [ 584.600739][T13132] CPU: 0 PID: 13132 Comm: syz.8.2781 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 584.611590][T13132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 584.621844][T13132] Call Trace: [ 584.625695][T13132] dump_stack+0x1d8/0x241 [ 584.630050][T13132] ? panic+0x89d/0x89d [ 584.634282][T13132] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 584.640192][T13132] ? memset+0x1f/0x40 [ 584.644182][T13132] ? fsnotify+0x1280/0x1340 [ 584.648920][T13132] should_fail+0x71f/0x880 [ 584.653436][T13132] ? setup_fault_attr+0x3d0/0x3d0 [ 584.658283][T13132] ? __fsnotify_parent+0x310/0x310 [ 584.663228][T13132] ? getname_flags+0xb8/0x4e0 [ 584.667836][T13132] should_failslab+0x5/0x20 [ 584.672173][T13132] kmem_cache_alloc+0x28/0x250 [ 584.676864][T13132] getname_flags+0xb8/0x4e0 [ 584.681465][T13132] do_mkdirat+0xbb/0x2c0 [ 584.685563][T13132] ? vfs_mkdir+0x690/0x690 [ 584.689978][T13132] do_syscall_64+0xca/0x1c0 [ 584.694298][T13132] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 584.700057][T13132] RIP: 0033:0x7f342d690169 [ 584.704489][T13132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.724531][T13132] RSP: 002b:00007f342bcfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 584.732957][T13132] RAX: ffffffffffffffda RBX: 00007f342d8a8fa0 RCX: 00007f342d690169 [ 584.740855][T13132] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 584.749333][T13132] RBP: 00007f342bcfa090 R08: 0000000000000000 R09: 0000000000000000 [ 584.757839][T13132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.766249][T13132] R13: 0000000000000000 R14: 00007f342d8a8fa0 R15: 00007ffcae77bd48 [ 585.076427][T13153] input: syz0 as /devices/virtual/input/input139 [ 585.238457][T13142] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 585.251902][T13142] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 585.270868][T13142] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 585.617747][T13142] EXT4-fs error (device loop7) in ext4_orphan_del:3257: error 27 [ 585.621639][ T108] usb 4-1: string descriptor 0 read error: -71 [ 585.634886][T13142] EXT4-fs error (device loop7) in ext4_do_update_inode:5534: error 27 [ 585.644838][T13142] EXT4-fs error (device loop7) in ext4_orphan_cleanup:2816: error 27 [ 585.652883][ T108] usb 4-1: USB disconnect, device number 39 [ 585.655771][T13142] EXT4-fs (loop7): 1 truncate cleaned up [ 585.673119][T13142] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 585.688634][T13142] ext4 filesystem being mounted at /92/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 585.909179][T13171] netlink: 'syz.8.2792': attribute type 4 has an invalid length. [ 586.015565][T13179] device syzkaller0 entered promiscuous mode [ 586.087683][ T23] audit: type=1400 audit(1742463678.954:989): avc: denied { write } for pid=13184 comm="syz.3.2798" name="001" dev="devtmpfs" ino=10654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 586.111567][T13185] FAULT_INJECTION: forcing a failure. [ 586.111567][T13185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 586.135380][T13185] CPU: 0 PID: 13185 Comm: syz.3.2798 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 586.145710][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 586.155777][T13185] Call Trace: [ 586.159228][T13185] dump_stack+0x1d8/0x241 [ 586.163677][T13185] ? panic+0x89d/0x89d [ 586.167754][T13185] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 586.173486][T13185] ? __fsnotify_parent+0x310/0x310 [ 586.178438][T13185] should_fail+0x71f/0x880 [ 586.183187][T13185] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 586.189242][T13185] ? setup_fault_attr+0x3d0/0x3d0 [ 586.194297][T13185] ? do_dentry_open+0xcad/0x1130 [ 586.199042][T13185] __alloc_pages_nodemask+0x1b4/0x840 [ 586.204255][T13185] ? stack_trace_save+0x1c0/0x1c0 [ 586.209309][T13185] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 586.214761][T13185] __get_free_pages+0xa/0x30 [ 586.219274][T13185] proc_control+0x2dc/0xf00 [ 586.223865][T13185] ? kstrtouint_from_user+0x20a/0x2a0 [ 586.229595][T13185] ? usbdev_do_ioctl+0x1e40/0x1e40 [ 586.234803][T13185] ? mutex_lock+0xa5/0x110 [ 586.240234][T13185] usbdev_do_ioctl+0x1428/0x1e40 [ 586.245617][T13185] ? destroy_async+0x1e0/0x1e0 [ 586.251129][T13185] ? memset+0x1f/0x40 [ 586.254984][T13185] usbdev_ioctl+0x1e/0x30 [ 586.260119][T13185] ? usbdev_poll+0x1e0/0x1e0 [ 586.264728][T13185] do_vfs_ioctl+0x742/0x1720 [ 586.269360][T13185] ? ioctl_preallocate+0x250/0x250 [ 586.274467][T13185] ? __fget+0x407/0x490 [ 586.278816][T13185] ? fget_many+0x20/0x20 [ 586.283304][T13185] ? debug_smp_processor_id+0x20/0x20 [ 586.289274][T13185] ? security_file_ioctl+0x7d/0xa0 [ 586.294808][T13185] __x64_sys_ioctl+0xd4/0x110 [ 586.299870][T13185] do_syscall_64+0xca/0x1c0 [ 586.304661][T13185] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 586.310849][T13185] RIP: 0033:0x7fe661d85169 [ 586.316303][T13185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.338726][T13185] RSP: 002b:00007fe6603ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.347821][T13185] RAX: ffffffffffffffda RBX: 00007fe661f9dfa0 RCX: 00007fe661d85169 [ 586.355813][T13185] RDX: 0000200000000240 RSI: 00000000c0185500 RDI: 0000000000000004 [ 586.363873][T13185] RBP: 00007fe6603ef090 R08: 0000000000000000 R09: 0000000000000000 [ 586.371686][T13185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.379507][T13185] R13: 0000000000000000 R14: 00007fe661f9dfa0 R15: 00007ffc19b55c38 [ 586.414036][ T23] audit: type=1400 audit(1742463679.284:990): avc: denied { create } for pid=13190 comm="syz.3.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 586.442676][ T351] udevd[351]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 586.442759][T13181] EXT4-fs (loop7): orphan cleanup on readonly fs [ 586.520210][T13202] input: syz0 as /devices/virtual/input/input140 [ 586.531676][T13181] EXT4-fs error (device loop7): ext4_ext_check_inode:543: inode #3: comm syz.7.2795: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 586.659180][T13181] EXT4-fs error (device loop7): ext4_quota_enable:6059: comm syz.7.2795: Bad quota inode: 3, type: 0 [ 586.668882][ T351] udevd[351]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 586.675423][T13181] EXT4-fs warning (device loop7): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 586.698059][T13181] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 586.704974][T13181] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,max_batch_time=0x000000000000000b,,errors=continue [ 586.734559][T13208] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2813'. [ 586.744874][T13208] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 586.901946][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 587.415118][T13218] FAULT_INJECTION: forcing a failure. [ 587.415118][T13218] name failslab, interval 1, probability 0, space 0, times 0 [ 587.427604][T13218] CPU: 1 PID: 13218 Comm: syz.8.2806 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 587.437249][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 587.447232][T13218] Call Trace: [ 587.450371][T13218] dump_stack+0x1d8/0x241 [ 587.454711][T13218] ? panic+0x89d/0x89d [ 587.458612][T13218] ? __wake_up+0x120/0x1c0 [ 587.462886][T13218] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 587.468588][T13218] ? remove_wait_queue+0x120/0x120 [ 587.473545][T13218] should_fail+0x71f/0x880 [ 587.477791][T13218] ? kmem_cache_free+0x10b/0x2c0 [ 587.482568][T13218] ? setup_fault_attr+0x3d0/0x3d0 [ 587.487438][T13218] ? memcpy+0x38/0x50 [ 587.491348][T13218] ? fdb_create+0x37/0xd80 [ 587.496023][T13218] should_failslab+0x5/0x20 [ 587.500449][T13218] kmem_cache_alloc+0x28/0x250 [ 587.505262][T13218] fdb_create+0x37/0xd80 [ 587.509851][T13218] ? br_fdb_find_rcu+0x30/0x30 [ 587.514628][T13218] ? call_rcu+0x10/0x10 [ 587.518693][T13218] fdb_insert+0x143/0x260 [ 587.522984][T13218] br_fdb_changeaddr+0x17d/0x1b0 [ 587.528006][T13218] br_device_event+0x3b7/0x790 [ 587.532703][T13218] ? br_boolopt_multi_get+0xb0/0xb0 [ 587.537920][T13218] ? packet_notifier+0x828/0x840 [ 587.542965][T13218] raw_notifier_call_chain+0x95/0x110 [ 587.548348][T13218] call_netdevice_notifiers+0xe3/0x140 [ 587.553721][T13218] ? netdev_adjacent_rename_links+0x460/0x460 [ 587.560000][T13218] ? rcu_read_unlock_special+0x10b/0x5a0 [ 587.565894][T13218] dev_ifsioc+0x55f/0xa60 [ 587.570322][T13218] ? mutex_lock+0xa5/0x110 [ 587.574642][T13218] ? dev_ioctl+0xb40/0xb40 [ 587.578984][T13218] ? __rcu_read_unlock+0x95/0x110 [ 587.584027][T13218] dev_ioctl+0x505/0xb40 [ 587.588189][T13218] sock_do_ioctl+0x295/0x3a0 [ 587.592824][T13218] ? sock_splice_read+0xf0/0xf0 [ 587.597623][T13218] ? check_preemption_disabled+0x9f/0x320 [ 587.603338][T13218] ? debug_smp_processor_id+0x20/0x20 [ 587.608805][T13218] ? check_preemption_disabled+0x9f/0x320 [ 587.614799][T13218] ? debug_smp_processor_id+0x20/0x20 [ 587.620214][T13218] ? check_preemption_disabled+0x9f/0x320 [ 587.626019][T13218] sock_ioctl+0x4a4/0x760 [ 587.630179][T13218] ? sock_poll+0x310/0x310 [ 587.634890][T13218] ? __schedule+0xb0d/0x1320 [ 587.639741][T13218] ? sock_poll+0x310/0x310 [ 587.644523][T13218] do_vfs_ioctl+0x742/0x1720 [ 587.649306][T13218] ? is_mmconf_reserved+0x430/0x430 [ 587.654935][T13218] ? ioctl_preallocate+0x250/0x250 [ 587.660010][T13218] ? preempt_schedule_irq+0xe7/0x140 [ 587.665250][T13218] ? __fget+0x407/0x490 [ 587.669192][T13218] ? fget_many+0x20/0x20 [ 587.673308][T13218] ? do_syscall_64+0x7f/0x1c0 [ 587.678144][T13218] ? security_file_ioctl+0x7d/0xa0 [ 587.683497][T13218] __x64_sys_ioctl+0xd4/0x110 [ 587.688084][T13218] do_syscall_64+0xca/0x1c0 [ 587.692447][T13218] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 587.698681][T13218] RIP: 0033:0x7f342d690169 [ 587.702926][T13218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.722798][T13218] RSP: 002b:00007f342bcfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.731048][T13218] RAX: ffffffffffffffda RBX: 00007f342d8a8fa0 RCX: 00007f342d690169 [ 587.739030][T13218] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000007 [ 587.746841][T13218] RBP: 00007f342bcfa090 R08: 0000000000000000 R09: 0000000000000000 [ 587.754922][T13218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.762818][T13218] R13: 0000000000000000 R14: 00007f342d8a8fa0 R15: 00007ffcae77bd48 [ 587.794018][T13226] netlink: 'syz.8.2809': attribute type 4 has an invalid length. [ 587.875785][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 587.902086][T13228] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 587.921062][T13228] ext4 filesystem being mounted at /89/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 587.923810][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 587.947658][ T23] audit: type=1400 audit(1742463680.814:991): avc: denied { getopt } for pid=13227 comm="syz.8.2810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.979179][T13228] EXT4-fs error (device loop8): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 587.996720][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 588.020170][T13228] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 588.037461][ T23] audit: type=1400 audit(1742463680.884:992): avc: denied { append } for pid=13227 comm="syz.8.2810" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 588.071599][T13228] EXT4-fs (loop8): This should not happen!! Data will be lost [ 588.071599][T13228] [ 588.088566][T13228] EXT4-fs (loop8): Total free blocks count 0 [ 588.095459][T13228] EXT4-fs (loop8): Free/Dirty block details [ 588.101457][T13228] EXT4-fs (loop8): free_blocks=4293918720 [ 588.118103][T13228] EXT4-fs (loop8): dirty_blocks=16 [ 588.123563][ T397] udevd[397]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system [ 588.125960][T13228] EXT4-fs (loop8): Block reservation details [ 588.141433][T13243] EXT4-fs (loop5): Unrecognized mount option "euid=00000000000000000001" or missing value [ 588.145445][T13249] FAULT_INJECTION: forcing a failure. [ 588.145445][T13249] name failslab, interval 1, probability 0, space 0, times 0 [ 588.165347][T13228] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 588.175960][T13249] CPU: 0 PID: 13249 Comm: syz.7.2816 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 588.185940][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 588.196760][T13249] Call Trace: [ 588.200703][T13249] dump_stack+0x1d8/0x241 [ 588.205081][T13249] ? panic+0x89d/0x89d [ 588.208939][T13249] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 588.214899][T13249] ? pcpu_block_update_hint_alloc+0x8fe/0xc70 [ 588.221410][T13249] should_fail+0x71f/0x880 [ 588.225834][T13249] ? pcpu_alloc_area+0x658/0x750 [ 588.230784][T13249] ? setup_fault_attr+0x3d0/0x3d0 [ 588.235822][T13249] ? find_next_bit+0xc3/0x100 [ 588.240601][T13249] ? cpumask_next+0xc/0x20 [ 588.244862][T13249] ? selinux_tun_dev_alloc_security+0x4d/0x130 [ 588.250932][T13249] should_failslab+0x5/0x20 [ 588.255274][T13249] kmem_cache_alloc_trace+0x28/0x260 [ 588.260411][T13249] selinux_tun_dev_alloc_security+0x4d/0x130 [ 588.266302][T13249] security_tun_dev_alloc_security+0x5d/0x90 [ 588.272221][T13249] tun_net_init+0x1bc/0x540 [ 588.277276][T13249] ? dev_get_valid_name+0x2d1/0x300 [ 588.282468][T13249] register_netdevice+0x1c0/0x12a0 [ 588.287708][T13249] ? netdev_update_lockdep_key+0x10/0x10 [ 588.293778][T13249] ? memset+0x1f/0x40 [ 588.297762][T13249] tun_set_iff+0x7f7/0xdc0 [ 588.302274][T13249] __tun_chr_ioctl+0x8a9/0x1d00 [ 588.306958][T13249] ? tun_flow_create+0x250/0x250 [ 588.311734][T13249] ? memset+0x1f/0x40 [ 588.315652][T13249] ? fsnotify+0x1280/0x1340 [ 588.320017][T13249] ? tun_chr_poll+0x670/0x670 [ 588.324672][T13249] do_vfs_ioctl+0x742/0x1720 [ 588.329272][T13249] ? ioctl_preallocate+0x250/0x250 [ 588.334310][T13249] ? __fget+0x407/0x490 [ 588.338306][T13249] ? fget_many+0x20/0x20 [ 588.342464][T13249] ? debug_smp_processor_id+0x20/0x20 [ 588.347753][T13249] ? security_file_ioctl+0x7d/0xa0 [ 588.352816][T13249] __x64_sys_ioctl+0xd4/0x110 [ 588.357414][T13249] do_syscall_64+0xca/0x1c0 [ 588.361751][T13249] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 588.367554][T13249] RIP: 0033:0x7f30ac7e8169 [ 588.371815][T13249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.391908][T13249] RSP: 002b:00007f30aae52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.400412][T13249] RAX: ffffffffffffffda RBX: 00007f30aca00fa0 RCX: 00007f30ac7e8169 [ 588.408413][T13249] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 588.416731][T13249] RBP: 00007f30aae52090 R08: 0000000000000000 R09: 0000000000000000 [ 588.424623][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.432957][T13249] R13: 0000000000000000 R14: 00007f30aca00fa0 R15: 00007ffdcda59b48 [ 588.601174][ T5] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 588.752403][T13257] input: syz0 as /devices/virtual/input/input141 [ 588.762990][T13256] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2818'. [ 588.871878][T13256] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 589.011111][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 589.204862][T13267] input: syz0 as /devices/virtual/input/input142 [ 589.351187][ T5] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 589.366373][ T5] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 589.381112][ T5] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 589.398829][ T5] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 589.421956][ T5] usb 4-1: config 0 has no interface number 0 [ 589.425700][T13265] EXT4-fs (loop5): orphan cleanup on readonly fs [ 589.436340][ T5] usb 4-1: config 0 has no interface number 1 [ 589.448821][ T5] usb 4-1: config 0 has no interface number 2 [ 589.455012][T13265] EXT4-fs error (device loop5): ext4_ext_check_inode:543: inode #3: comm syz.5.2821: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 589.459878][ T5] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.488357][ T5] usb 4-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 589.493942][T13265] EXT4-fs error (device loop5): ext4_quota_enable:6059: comm syz.5.2821: Bad quota inode: 3, type: 0 [ 589.502303][ T5] usb 4-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 589.512641][T13265] EXT4-fs warning (device loop5): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 589.524687][ T5] usb 4-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 589.545280][T13265] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 589.556047][ T5] usb 4-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 589.565608][T13265] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000009,max_batch_time=0x000000000000000b,,errors=continue [ 589.579685][T13283] netlink: 'syz.8.2827': attribute type 4 has an invalid length. [ 589.596998][ T5] usb 4-1: config 0 interface 150 has no altsetting 0 [ 589.603644][ T5] usb 4-1: config 0 interface 112 has no altsetting 0 [ 589.620980][ T5] usb 4-1: config 0 interface 110 has no altsetting 0 [ 589.627662][ T5] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 589.636643][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.648383][ T5] usb 4-1: config 0 descriptor?? [ 589.656507][ T23] audit: type=1400 audit(1742463682.524:993): avc: denied { accept } for pid=13284 comm="syz.8.2828" path="socket:[95854]" dev="sockfs" ino=95854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 589.881222][ T5] usb 4-1: string descriptor 0 read error: -71 [ 589.891656][ T5] usb 4-1: USB disconnect, device number 40 [ 589.997685][ T2176] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 590.500342][T13295] input: syz0 as /devices/virtual/input/input143 [ 590.701127][ T2298] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 590.831115][ T2176] usb 8-1: Using ep0 maxpacket: 16 [ 590.951261][ T2176] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.961784][ T2176] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.051299][ T2176] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.060504][ T2176] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 591.068506][ T2298] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 591.082524][ T2176] usb 8-1: SerialNumber: syz [ 591.161268][ T2298] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.170524][ T2298] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 591.178585][ T2298] usb 9-1: SerialNumber: syz [ 591.361637][ T2176] cdc_acm 8-1:1.0: Control and data interfaces are not separated! [ 591.369701][ T2176] cdc_acm 8-1:1.0: This needs exactly 3 endpoints [ 591.376177][ T2176] cdc_acm: probe of 8-1:1.0 failed with error -22 [ 591.385875][ T2176] usb 8-1: USB disconnect, device number 11 [ 591.537360][T13302] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue [ 591.621365][T13302] EXT4-fs error (device loop5): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 592.060930][ T13] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 592.104089][ T2298] cdc_ether 9-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 592.280203][T13341] input: syz0 as /devices/virtual/input/input144 [ 592.557786][T13358] FAULT_INJECTION: forcing a failure. [ 592.557786][T13358] name failslab, interval 1, probability 0, space 0, times 0 [ 592.591133][T13358] CPU: 1 PID: 13358 Comm: syz.0.2845 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 592.601643][T13358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 592.611887][T13358] Call Trace: [ 592.615019][T13358] dump_stack+0x1d8/0x241 [ 592.619270][T13358] ? panic+0x89d/0x89d [ 592.623419][T13358] ? do_syscall_64+0xca/0x1c0 [ 592.627936][T13358] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 592.634292][T13358] should_fail+0x71f/0x880 [ 592.639496][T13358] ? setup_fault_attr+0x3d0/0x3d0 [ 592.644959][T13358] ? __alloc_skb+0x7a/0x4d0 [ 592.649763][T13358] should_failslab+0x5/0x20 [ 592.654185][T13358] kmem_cache_alloc+0x28/0x250 [ 592.658891][T13358] __alloc_skb+0x7a/0x4d0 [ 592.663209][T13358] ? kmem_cache_alloc+0xd9/0x250 [ 592.667957][T13358] audit_log_start+0x49a/0x9a0 [ 592.672664][T13358] ? audit_serial+0x30/0x30 [ 592.677084][T13358] ? slow_avc_audit+0x3c0/0x3c0 [ 592.682127][T13358] common_lsm_audit+0xd8/0x17e0 [ 592.686940][T13358] ? avc_audit_pre_callback+0x290/0x290 [ 592.692452][T13358] ? ipv6_skb_to_auditdata+0xe80/0xe80 [ 592.698698][T13358] ? avc_update_node+0x897/0x960 [ 592.703928][T13358] ? _raw_spin_unlock_irqrestore+0x57/0x80 [ 592.710118][T13358] ? avc_denied+0x15c/0x1d0 [ 592.714596][T13358] slow_avc_audit+0x26c/0x3c0 [ 592.719634][T13358] ? avc_get_hash_stats+0x1a0/0x1a0 [ 592.725507][T13358] ? avc_has_perm_noaudit+0x2f1/0x3d0 [ 592.730821][T13358] avc_has_perm+0x1f5/0x260 [ 592.735219][T13358] ? kmem_cache_free+0x10b/0x2c0 [ 592.740167][T13358] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 592.745631][T13358] ? filename_lookup+0x50e/0x6e0 [ 592.750675][T13358] ? hashlen_string+0x110/0x110 [ 592.755362][T13358] selinux_mount+0x3fa/0x560 [ 592.759968][T13358] ? selinux_sb_statfs+0x250/0x250 [ 592.764912][T13358] ? getname_flags+0x1ec/0x4e0 [ 592.769509][T13358] security_sb_mount+0x88/0xc0 [ 592.774126][T13358] do_mount+0x187/0xe10 [ 592.778228][T13358] ? page_fault+0x2f/0x40 [ 592.782537][T13358] ? copy_mount_string+0x30/0x30 [ 592.787478][T13358] ? copy_mount_options+0x1c6/0x300 [ 592.792515][T13358] ? copy_mount_options+0x29a/0x300 [ 592.797547][T13358] ksys_mount+0xc2/0xf0 [ 592.802086][T13358] __x64_sys_mount+0xb1/0xc0 [ 592.806977][T13358] do_syscall_64+0xca/0x1c0 [ 592.811299][T13358] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 592.817045][T13358] RIP: 0033:0x7f79116f2169 [ 592.821806][T13358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.842180][T13358] RSP: 002b:00007f790fd5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 592.850552][T13358] RAX: ffffffffffffffda RBX: 00007f791190afa0 RCX: 00007f79116f2169 [ 592.858360][T13358] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 592.866604][T13358] RBP: 00007f790fd5c090 R08: 0000200000000180 R09: 0000000000000000 [ 592.874967][T13358] R10: 0000000002204c7b R11: 0000000000000246 R12: 0000000000000001 [ 592.882946][T13358] R13: 0000000000000000 R14: 00007f791190afa0 R15: 00007fff5ff540a8 [ 592.896284][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system [ 592.909826][T13350] EXT4-fs (loop7): Unrecognized mount option "euid=00000000000000000001" or missing value [ 592.915956][T13358] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 592.927533][T13358] audit: out of memory in audit_log_start [ 593.053905][T13370] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 593.061699][T13370] 9pnet: Insufficient options for proto=fd [ 593.070905][T13370] 9pnet: Insufficient options for proto=fd [ 593.091492][T13327] EXT4-fs (loop8): Ignoring removed oldalloc option [ 593.094914][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 593.120695][T13327] EXT4-fs (loop8): orphan cleanup on readonly fs [ 593.128209][T13327] Quota error (device loop8): find_tree_dqentry: Getting block too big (196613 >= 6) [ 593.140204][T13327] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 593.149797][ T23] audit: type=1400 audit(1742463686.004:994): avc: denied { set_context_mgr } for pid=13376 comm="syz.5.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 593.171772][T13327] EXT4-fs (loop8): 1 truncate cleaned up [ 593.172257][T13377] binder: BINDER_SET_CONTEXT_MGR already set [ 593.177565][T13327] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 593.183216][T13377] binder: 13376:13377 ioctl 4018620d 2000000002c0 returned -16 [ 593.189581][T13377] input: syz0 as /devices/virtual/input/input145 [ 593.200306][ T23] audit: type=1400 audit(1742463686.044:995): avc: denied { write } for pid=13376 comm="syz.5.2851" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 593.222721][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 593.237079][ T23] audit: type=1400 audit(1742463686.044:996): avc: denied { map } for pid=13376 comm="syz.5.2851" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 593.272350][ T23] audit: type=1400 audit(1742463686.054:997): avc: denied { create } for pid=13376 comm="syz.5.2851" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 593.491481][T13385] input: syz0 as /devices/virtual/input/input146 [ 593.998269][T13390] input: syz0 as /devices/virtual/input/input147 [ 594.304453][ T5] usb 9-1: USB disconnect, device number 11 [ 594.322777][ T5] cdc_ether 9-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 594.665479][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 594.680184][T13446] EXT4-fs (loop7): mounted filesystem without journal. Opts: discard,,errors=continue [ 594.681809][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 594.747462][T13446] EXT4-fs error (device loop7): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 594.844020][ T23] audit: type=1400 audit(1742463687.714:998): avc: denied { create } for pid=13453 comm="syz.7.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 594.851129][ T5] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 594.886704][ T23] audit: type=1400 audit(1742463687.754:999): avc: denied { map } for pid=13455 comm="syz.7.2863" path="socket:[97060]" dev="sockfs" ino=97060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 594.910440][ T23] audit: type=1400 audit(1742463687.754:1000): avc: denied { read } for pid=13455 comm="syz.7.2863" path="socket:[97060]" dev="sockfs" ino=97060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 594.996434][ T23] audit: type=1400 audit(1742463687.864:1001): avc: denied { block_suspend } for pid=13455 comm="syz.7.2863" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 595.000627][T13458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=13458 comm=syz.7.2863 [ 595.044404][T13457] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 595.061261][ T108] Bluetooth: hci0: command 0x1003 tx timeout [ 595.067223][T13371] Bluetooth: hci0: sending frame failed (-49) [ 595.141369][T13460] incfs: Backing dir is not set, filesystem can't be mounted. [ 595.149573][T13460] incfs: mount failed -2 [ 595.231261][ T5] usb 9-1: config 0 has an invalid interface number: 23 but max is 0 [ 595.239448][ T5] usb 9-1: config 0 has no interface number 0 [ 595.247302][ T5] usb 9-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 595.257971][ T5] usb 9-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 595.285162][T13463] EXT4-fs (loop5): orphan cleanup on readonly fs [ 595.292577][T13463] EXT4-fs error (device loop5): ext4_validate_block_bitmap:418: comm syz.5.2865: bg 0: block 248: padding at end of block bitmap is not set [ 595.308286][T13463] EXT4-fs (loop5): 1 truncate cleaned up [ 595.315044][T13463] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue [ 595.421292][ T5] usb 9-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 595.430488][ T5] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.438655][ T5] usb 9-1: Product: syz [ 595.442880][ T5] usb 9-1: Manufacturer: syz [ 595.447225][ T5] usb 9-1: SerialNumber: syz [ 595.452727][ T5] usb 9-1: config 0 descriptor?? [ 595.471218][T13417] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 595.477943][T13417] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 595.492151][ T5] ums-usbat 9-1:0.23: USB Mass Storage device detected [ 595.700792][T13417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 595.751858][ T5] ums-usbat: probe of 9-1:0.23 failed with error 3 [ 595.769842][ T5] usb 9-1: USB disconnect, device number 12 [ 595.779351][T13470] device syzkaller0 entered promiscuous mode [ 596.150895][T13470] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 596.158771][T13470] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 596.167501][T13470] F2FS-fs (loop7): Unrecognized mount option "©" or missing value [ 596.179727][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 596.397493][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 596.415176][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 596.432333][T13495] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,,errors=continue [ 596.452734][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 596.501253][ T2298] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 596.560521][T13495] EXT4-fs error (device loop8): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 596.711264][ T5] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 596.781107][ T2298] usb 6-1: Using ep0 maxpacket: 16 [ 596.925379][T13507] incfs: Backing dir is not set, filesystem can't be mounted. [ 596.933806][T13507] incfs: mount failed -2 [ 596.961136][ T5] usb 8-1: Using ep0 maxpacket: 8 [ 597.021300][ T2298] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 597.030195][ T2298] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.040413][ T2298] usb 6-1: config 0 has no interface number 0 [ 597.091514][ T5] usb 8-1: config 0 has an invalid interface number: 150 but max is 0 [ 597.099652][ T5] usb 8-1: config 0 has an invalid interface number: 112 but max is 0 [ 597.107942][ T5] usb 8-1: config 0 has an invalid interface number: 110 but max is 0 [ 597.122192][ T5] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 597.131270][ T5] usb 8-1: config 0 has no interface number 0 [ 597.137295][ T5] usb 8-1: config 0 has no interface number 1 [ 597.141374][ T2176] Bluetooth: hci0: command 0x1001 tx timeout [ 597.143662][ T5] usb 8-1: config 0 has no interface number 2 [ 597.155660][ T5] usb 8-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.159505][T13371] Bluetooth: hci0: sending frame failed (-49) [ 597.168738][ T5] usb 8-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 597.186219][ T5] usb 8-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 597.199773][ T5] usb 8-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 597.211277][ T2298] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 597.213130][ T5] usb 8-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 597.222403][ T2298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.235540][ T5] usb 8-1: config 0 interface 150 has no altsetting 0 [ 597.235552][ T5] usb 8-1: config 0 interface 112 has no altsetting 0 [ 597.235563][ T5] usb 8-1: config 0 interface 110 has no altsetting 0 [ 597.235591][ T5] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 597.244309][ T2298] usb 6-1: Product: syz [ 597.250539][ T5] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.257530][ T2298] usb 6-1: Manufacturer: syz [ 597.272783][ T5] usb 8-1: config 0 descriptor?? [ 597.286782][ T2298] usb 6-1: SerialNumber: syz [ 597.300509][ T2298] usb 6-1: config 0 descriptor?? [ 597.567782][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 597.568474][ T108] usb 6-1: USB disconnect, device number 38 [ 597.592736][T13528] EXT4-fs (loop8): mounted filesystem without journal. Opts: discard,,errors=continue [ 597.656892][T13528] EXT4-fs error (device loop8): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 597.955248][T13536] input: syz0 as /devices/virtual/input/input148 [ 599.026015][T13565] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue [ 599.139241][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 599.139251][ T23] audit: type=1400 audit(1742463692.004:1005): avc: denied { create } for pid=13574 comm="syz.3.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 599.165901][T13565] EXT4-fs error (device loop5): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 599.166224][ T23] audit: type=1400 audit(1742463692.014:1006): avc: denied { setopt } for pid=13574 comm="syz.3.2897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 599.231159][ T2298] Bluetooth: hci0: command 0x1009 tx timeout [ 599.285241][ T23] audit: type=1400 audit(1742463692.154:1007): avc: denied { unmount } for pid=13576 comm="syz.3.2898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 599.321185][ T5] usb 8-1: string descriptor 0 read error: -71 [ 599.344865][ T5] usb 8-1: USB disconnect, device number 12 [ 599.481252][T13594] netlink: 'syz.8.2906': attribute type 4 has an invalid length. [ 599.778846][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 599.791840][T13605] EXT4-fs (loop8): Unrecognized mount option "euid=00000000000000000001" or missing value [ 599.812054][ T397] udevd[397]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 600.461294][ T5] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 600.492601][T13628] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2916'. [ 600.502916][T13628] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 600.534957][T13632] netlink: 'syz.7.2918': attribute type 4 has an invalid length. [ 600.711108][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 600.721829][ T351] udevd[351]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 600.803131][T13640] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 600.833751][ T351] udevd[351]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 600.861286][ T5] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 600.869643][ T5] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 600.878069][ T5] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 600.886643][ T5] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 600.896417][ T5] usb 4-1: config 0 has no interface number 0 [ 600.902675][ T5] usb 4-1: config 0 has no interface number 1 [ 600.908657][ T5] usb 4-1: config 0 has no interface number 2 [ 600.915077][ T5] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.928234][ T5] usb 4-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 600.940256][ T5] usb 4-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 600.953795][ T5] usb 4-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 600.964838][ T5] usb 4-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 600.978285][ T5] usb 4-1: config 0 interface 150 has no altsetting 0 [ 600.985178][ T5] usb 4-1: config 0 interface 112 has no altsetting 0 [ 600.992264][ T5] usb 4-1: config 0 interface 110 has no altsetting 0 [ 600.999036][ T5] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 601.008171][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.021289][ T5] usb 4-1: config 0 descriptor?? [ 601.802961][ T351] udevd[351]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 601.855988][T13663] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 601.883278][ T351] udevd[351]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 602.101685][T13668] input: syz0 as /devices/virtual/input/input149 [ 602.307012][T13671] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2928'. [ 602.316574][T13671] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 602.364538][T13675] FAULT_INJECTION: forcing a failure. [ 602.364538][T13675] name failslab, interval 1, probability 0, space 0, times 0 [ 602.395571][T13676] fuse: Bad value for 'fd' [ 602.397498][T13675] CPU: 0 PID: 13675 Comm: syz.7.2927 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 602.409729][T13675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 602.419693][T13675] Call Trace: [ 602.423004][T13675] dump_stack+0x1d8/0x241 [ 602.427161][T13675] ? panic+0x89d/0x89d [ 602.431241][T13675] ? do_dentry_open+0xcad/0x1130 [ 602.436331][T13675] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 602.442061][T13675] ? check_preemption_disabled+0x9f/0x320 [ 602.447610][T13675] ? __unwind_start+0x708/0x890 [ 602.452374][T13675] should_fail+0x71f/0x880 [ 602.456733][T13675] ? setup_fault_attr+0x3d0/0x3d0 [ 602.461584][T13675] ? stack_trace_save+0x1c0/0x1c0 [ 602.466713][T13675] ? __kernel_text_address+0x94/0x100 [ 602.472146][T13675] ? kvmalloc_node+0x7e/0xf0 [ 602.476592][T13675] should_failslab+0x5/0x20 [ 602.481318][T13675] __kmalloc+0x51/0x2e0 [ 602.485378][T13675] kvmalloc_node+0x7e/0xf0 [ 602.489616][T13675] seq_read+0x23c/0xe60 [ 602.493979][T13675] ? kstrtol_from_user+0x310/0x310 [ 602.499022][T13675] ? seq_open+0x150/0x150 [ 602.503155][T13675] proc_reg_read+0x233/0x340 [ 602.507762][T13675] ? proc_reg_llseek+0x320/0x320 [ 602.512693][T13675] ? proc_reg_llseek+0x320/0x320 [ 602.517971][T13675] __vfs_read+0x103/0x730 [ 602.522487][T13675] ? rw_verify_area+0x360/0x360 [ 602.527161][T13675] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 602.533933][T13675] ? __fsnotify_parent+0x310/0x310 [ 602.538962][T13675] ? security_file_permission+0x1dc/0x2f0 [ 602.544700][T13675] vfs_read+0x148/0x360 [ 602.548789][T13675] ksys_read+0x199/0x2c0 [ 602.553208][T13675] ? debug_smp_processor_id+0x20/0x20 [ 602.558921][T13675] ? vfs_write+0x4e0/0x4e0 [ 602.563636][T13675] ? __do_page_fault+0x725/0xbb0 [ 602.568662][T13675] do_syscall_64+0xca/0x1c0 [ 602.573093][T13675] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 602.579089][T13675] RIP: 0033:0x7f30ac7e8169 [ 602.583360][T13675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.603653][T13675] RSP: 002b:00007f30aae10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 602.612165][T13675] RAX: ffffffffffffffda RBX: 00007f30aca01160 RCX: 00007f30ac7e8169 [ 602.620141][T13675] RDX: 0000000000002020 RSI: 0000200000000840 RDI: 0000000000000004 [ 602.628302][T13675] RBP: 00007f30aae10090 R08: 0000000000000000 R09: 0000000000000000 [ 602.636120][T13675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.644192][T13675] R13: 0000000000000001 R14: 00007f30aca01160 R15: 00007ffdcda59b48 [ 602.745634][T13674] EXT4-fs (loop8): Unrecognized mount option "euid=00000000000000000000" or missing value [ 602.757501][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 603.011146][ T5] usb 4-1: string descriptor 0 read error: -71 [ 603.058934][ T5] usb 4-1: USB disconnect, device number 42 [ 603.090528][T13693] netlink: 'syz.5.2935': attribute type 4 has an invalid length. [ 603.285518][ T23] audit: type=1400 audit(1742463696.154:1008): avc: denied { ioctl } for pid=13701 comm="syz.5.2938" path="socket:[98168]" dev="sockfs" ino=98168 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 603.312856][T13707] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2939'. [ 603.322873][T13707] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 603.397596][T13715] fuse: Bad value for 'fd' [ 603.436348][T13719] FAULT_INJECTION: forcing a failure. [ 603.436348][T13719] name failslab, interval 1, probability 0, space 0, times 0 [ 603.449276][T13719] CPU: 0 PID: 13719 Comm: syz.7.2944 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 603.459596][T13719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 603.469684][T13719] Call Trace: [ 603.472901][T13719] dump_stack+0x1d8/0x241 [ 603.477233][T13719] ? panic+0x89d/0x89d [ 603.481594][T13719] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 603.487385][T13719] should_fail+0x71f/0x880 [ 603.491645][T13719] ? setup_fault_attr+0x3d0/0x3d0 [ 603.496492][T13719] ? __alloc_skb+0x7a/0x4d0 [ 603.500830][T13719] should_failslab+0x5/0x20 [ 603.505169][T13719] kmem_cache_alloc+0x28/0x250 [ 603.509856][T13719] __alloc_skb+0x7a/0x4d0 [ 603.514026][T13719] ? netlink_autobind+0x143/0x180 [ 603.519061][T13719] netlink_sendmsg+0x797/0xcf0 [ 603.523669][T13719] ? netlink_getsockopt+0x550/0x550 [ 603.528927][T13719] ? import_iovec+0x1bb/0x380 [ 603.533614][T13719] ? security_socket_sendmsg+0x7d/0xa0 [ 603.539055][T13719] ? netlink_getsockopt+0x550/0x550 [ 603.544086][T13719] ____sys_sendmsg+0x5ac/0x8f0 [ 603.548692][T13719] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 603.553723][T13719] ? proc_fail_nth_read+0x210/0x210 [ 603.559223][T13719] __sys_sendmsg+0x28b/0x380 [ 603.564006][T13719] ? ____sys_sendmsg+0x8f0/0x8f0 [ 603.568919][T13719] ? check_preemption_disabled+0x9f/0x320 [ 603.574634][T13719] ? fput_many+0x15e/0x1b0 [ 603.578923][T13719] ? check_preemption_disabled+0x153/0x320 [ 603.584515][T13719] ? __do_page_fault+0x725/0xbb0 [ 603.589380][T13719] do_syscall_64+0xca/0x1c0 [ 603.593827][T13719] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 603.600151][T13719] RIP: 0033:0x7f30ac7e8169 [ 603.604400][T13719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.624673][T13719] RSP: 002b:00007f30aae52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.633105][T13719] RAX: ffffffffffffffda RBX: 00007f30aca00fa0 RCX: 00007f30ac7e8169 [ 603.641293][T13719] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 603.649371][T13719] RBP: 00007f30aae52090 R08: 0000000000000000 R09: 0000000000000000 [ 603.657633][T13719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.666665][T13719] R13: 0000000000000000 R14: 00007f30aca00fa0 R15: 00007ffdcda59b48 [ 603.702736][T13715] EXT4-fs (loop5): Unrecognized mount option "euid=00000000000000000000" or missing value [ 603.831976][T13737] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2952'. [ 603.841494][T13737] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 603.867541][T13739] syz.0.2953[13739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.867598][T13739] syz.0.2953[13739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.179302][T13743] netlink: 'syz.8.2948': attribute type 4 has an invalid length. [ 604.211109][ T5] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 604.270981][T13748] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2955'. [ 604.280395][T13748] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 604.307596][ T23] audit: type=1400 audit(1742463697.174:1009): avc: denied { remount } for pid=13738 comm="syz.0.2953" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 604.335268][T13739] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2953'. [ 604.344515][T13739] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 604.510665][ T5] usb 8-1: Using ep0 maxpacket: 8 [ 604.636555][T13773] input: syz0 as /devices/virtual/input/input150 [ 604.784822][T13769] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 604.796156][T13769] ext4 filesystem being mounted at /434/bus supports timestamps until (%ptR?) (0x7fffffff) [ 604.851170][ T5] usb 8-1: config 0 has an invalid interface number: 150 but max is 0 [ 604.860062][ T5] usb 8-1: config 0 has an invalid interface number: 112 but max is 0 [ 604.869003][ T5] usb 8-1: config 0 has an invalid interface number: 110 but max is 0 [ 604.877243][ T5] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 604.886064][ T5] usb 8-1: config 0 has no interface number 0 [ 604.892037][ T5] usb 8-1: config 0 has no interface number 1 [ 604.898235][ T5] usb 8-1: config 0 has no interface number 2 [ 604.904257][ T5] usb 8-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.917252][ T5] usb 8-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 604.928400][ T5] usb 8-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 604.928415][ T5] usb 8-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 604.928439][ T5] usb 8-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 604.928451][ T5] usb 8-1: config 0 interface 150 has no altsetting 0 [ 604.928460][ T5] usb 8-1: config 0 interface 112 has no altsetting 0 [ 604.928469][ T5] usb 8-1: config 0 interface 110 has no altsetting 0 [ 604.928493][ T5] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 604.928506][ T5] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.943149][ T5] usb 8-1: config 0 descriptor?? [ 605.011439][T13780] fuse: Bad value for 'fd' [ 605.070792][T13785] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2966'. [ 605.080562][T13785] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 605.107541][T13787] netlink: 'syz.0.2968': attribute type 4 has an invalid length. [ 605.117335][T13791] FAULT_INJECTION: forcing a failure. [ 605.117335][T13791] name fail_futex, interval 1, probability 0, space 0, times 0 [ 605.133449][T13791] CPU: 1 PID: 13791 Comm: syz.8.2969 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 605.143246][T13791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 605.153336][T13791] Call Trace: [ 605.156476][T13791] dump_stack+0x1d8/0x241 [ 605.160764][T13791] ? panic+0x89d/0x89d [ 605.164639][T13791] ? switch_mm_irqs_off+0x6b5/0xab0 [ 605.169787][T13791] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 605.175404][T13791] ? _raw_spin_unlock_irq+0x4a/0x60 [ 605.180604][T13791] ? finish_task_switch+0x130/0x590 [ 605.185839][T13791] should_fail+0x71f/0x880 [ 605.190439][T13791] ? setup_fault_attr+0x3d0/0x3d0 [ 605.195539][T13791] ? is_mmconf_reserved+0x430/0x430 [ 605.200506][T13791] get_futex_key+0x216/0xf80 [ 605.205192][T13791] ? plist_add+0x3f2/0x490 [ 605.209490][T13791] ? futex_wait_restart+0x250/0x250 [ 605.214478][T13791] ? futex_wait_queue_me+0x378/0x690 [ 605.219661][T13791] futex_wait_setup+0x41/0x6c0 [ 605.224928][T13791] ? check_preemption_disabled+0x9f/0x320 [ 605.231011][T13791] futex_wait+0x2b8/0x890 [ 605.235232][T13791] ? timerqueue_add+0x258/0x280 [ 605.240352][T13791] ? check_preemption_disabled+0x9f/0x320 [ 605.246087][T13791] ? do_futex+0x19f0/0x19f0 [ 605.250614][T13791] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 605.256334][T13791] ? check_preemption_disabled+0x9f/0x320 [ 605.262380][T13791] do_futex+0x13c1/0x19f0 [ 605.266556][T13791] ? debug_smp_processor_id+0x20/0x20 [ 605.272036][T13791] ? fpu__restore_sig+0x6b7/0x1400 [ 605.276977][T13791] ? debug_smp_processor_id+0x20/0x20 [ 605.282454][T13791] ? copy_fpstate_to_sigframe+0xbc0/0xbc0 [ 605.288090][T13791] ? futex_exit_release+0x1e0/0x1e0 [ 605.293126][T13791] ? _copy_from_user+0xa6/0xe0 [ 605.297728][T13791] ? restore_altstack+0x274/0x400 [ 605.302798][T13791] ? _raw_spin_unlock_irq+0x4a/0x60 [ 605.308335][T13791] ? blkcg_maybe_throttle_current+0x181/0xa90 [ 605.315487][T13791] __se_sys_futex+0x355/0x470 [ 605.320491][T13791] ? __blkcg_punt_bio_submit+0x170/0x170 [ 605.326126][T13791] ? __x64_sys_futex+0xf0/0xf0 [ 605.330719][T13791] ? setup_sigcontext+0x3f0/0x3f0 [ 605.335593][T13791] ? __do_page_fault+0x725/0xbb0 [ 605.340539][T13791] ? __x64_sys_futex+0x1d/0xf0 [ 605.345130][T13791] do_syscall_64+0xca/0x1c0 [ 605.349657][T13791] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 605.355457][T13791] RIP: 0033:0x7f342d690169 [ 605.359788][T13791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.380363][T13791] RSP: 002b:00007f342bcfa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 605.388870][T13791] RAX: ffffffffffffffda RBX: 00007f342d8a8fa0 RCX: 00007f342d690169 [ 605.396697][T13791] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000020000000cffc [ 605.405027][T13791] RBP: 00007f342bcfa090 R08: 0000000000000000 R09: 0000000000000001 [ 605.413092][T13791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.422726][T13791] R13: 0000000000000000 R14: 00007f342d8a8fa0 R15: 00007ffcae77bd48 [ 605.684052][T13809] input: syz0 as /devices/virtual/input/input151 [ 605.961248][ T440] udevd[440]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 605.972679][T13819] EXT4-fs (loop8): Unrecognized mount option "euid=00000000000000000000" or missing value [ 605.982007][T13807] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 605.995787][T13807] ext4 filesystem being mounted at /438/bus supports timestamps until (%ptR?) (0x7fffffff) [ 606.007420][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/\x86\x5b.tmp-b7:8' failed: Read-only file system [ 606.114265][T13830] netlink: 'syz.5.2982': attribute type 4 has an invalid length. [ 606.411202][T11874] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 607.540248][T11874] usb 6-1: device descriptor read/64, error 18 [ 607.551258][ T5] usb 8-1: string descriptor 0 read error: -71 [ 607.561722][ T5] usb 8-1: USB disconnect, device number 13 [ 607.649827][ T23] audit: type=1400 audit(1742463700.514:1010): avc: denied { ioctl } for pid=13864 comm="syz.7.2994" path="socket:[100552]" dev="sockfs" ino=100552 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 607.676568][ T23] audit: type=1400 audit(1742463700.514:1011): avc: denied { create } for pid=13864 comm="syz.7.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 607.701103][ T23] audit: type=1400 audit(1742463700.524:1012): avc: denied { read } for pid=13864 comm="syz.7.2994" name="ppp" dev="devtmpfs" ino=10648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 607.722189][T13866] netlink: 'syz.0.2995': attribute type 4 has an invalid length. [ 607.725326][ T23] audit: type=1400 audit(1742463700.524:1013): avc: denied { open } for pid=13864 comm="syz.7.2994" path="/dev/ppp" dev="devtmpfs" ino=10648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 607.756050][ T23] audit: type=1400 audit(1742463700.524:1014): avc: denied { ioctl } for pid=13864 comm="syz.7.2994" path="/dev/ppp" dev="devtmpfs" ino=10648 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 607.786929][ T397] udevd[397]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.150/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 608.098772][T13891] input: syz0 as /devices/virtual/input/input152 [ 608.245801][T11874] usb 6-1: device descriptor read/64, error 18 [ 608.591122][ T372] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 608.631176][T11874] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 608.831139][ T372] usb 9-1: Using ep0 maxpacket: 8 [ 608.951463][ T372] usb 9-1: config 0 has an invalid interface number: 150 but max is 0 [ 608.960058][ T372] usb 9-1: config 0 has an invalid interface number: 112 but max is 0 [ 608.968538][ T372] usb 9-1: config 0 has an invalid interface number: 110 but max is 0 [ 608.976775][ T372] usb 9-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 608.986264][ T372] usb 9-1: config 0 has no interface number 0 [ 608.992460][ T372] usb 9-1: config 0 has no interface number 1 [ 608.999177][ T372] usb 9-1: config 0 has no interface number 2 [ 609.005685][ T372] usb 9-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.019552][ T372] usb 9-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 609.031183][ T372] usb 9-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 609.050187][ T372] usb 9-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 609.062673][ T372] usb 9-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 609.077366][ T372] usb 9-1: config 0 interface 150 has no altsetting 0 [ 609.084913][ T372] usb 9-1: config 0 interface 112 has no altsetting 0 [ 609.093200][ T372] usb 9-1: config 0 interface 110 has no altsetting 0 [ 609.100379][ T372] usb 9-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 609.111807][ T372] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.142036][ T372] usb 9-1: config 0 descriptor?? [ 609.640628][T13913] netlink: 'syz.0.3011': attribute type 4 has an invalid length. [ 609.774900][ T23] audit: type=1400 audit(1742463702.644:1015): avc: denied { setattr } for pid=13923 comm="syz.3.3017" name="/" dev="configfs" ino=9514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 610.047683][T13933] input: syz0 as /devices/virtual/input/input153 [ 610.437551][ T23] audit: type=1400 audit(1742463703.304:1016): avc: denied { wake_alarm } for pid=13931 comm="syz.3.3019" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 610.627068][ T351] udevd[351]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system [ 610.807730][T13944] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 610.879265][T13944] EXT4-fs error (device loop5): __ext4_iget:5217: inode #2: block 1: comm syz.5.3022: invalid block [ 610.881206][ T372] usb 9-1: string descriptor 0 read error: -71 [ 610.896634][T13944] EXT4-fs (loop5): Remounting filesystem read-only [ 610.920388][T13944] EXT4-fs (loop5): get root inode failed [ 610.926928][T13954] netlink: 'syz.8.3024': attribute type 4 has an invalid length. [ 610.931212][T13944] EXT4-fs (loop5): mount failed [ 610.950573][ T372] usb 9-1: USB disconnect, device number 13 [ 611.018623][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system [ 611.030729][T13965] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 611.044449][T13965] EXT4-fs error (device loop7): __ext4_iget:5217: inode #2: block 1: comm syz.7.3030: invalid block [ 611.142152][T13965] EXT4-fs (loop7): Remounting filesystem read-only [ 611.148500][T13965] EXT4-fs (loop7): get root inode failed [ 611.154474][T13965] EXT4-fs (loop7): mount failed [ 611.271836][T13974] input: syz0 as /devices/virtual/input/input154 [ 611.399179][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system [ 611.827532][T14005] netlink: 'syz.8.3042': attribute type 4 has an invalid length. [ 611.903955][T14017] FAULT_INJECTION: forcing a failure. [ 611.903955][T14017] name failslab, interval 1, probability 0, space 0, times 0 [ 611.904428][T13965] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 611.917169][T14017] CPU: 0 PID: 14017 Comm: syz.8.3044 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 611.925742][ T372] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 611.935771][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 611.935776][T14017] Call Trace: [ 611.935800][T14017] dump_stack+0x1d8/0x241 [ 611.935817][T14017] ? panic+0x89d/0x89d [ 611.964777][T14017] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 611.970411][T14017] ? deref_stack_reg+0x15c/0x1f0 [ 611.975191][T14017] ? get_reg+0x220/0x220 [ 611.979422][T14017] ? deref_stack_reg+0x15c/0x1f0 [ 611.984281][T14017] should_fail+0x71f/0x880 [ 611.988528][T14017] ? setup_fault_attr+0x3d0/0x3d0 [ 611.993390][T14017] ? __nla_validate_parse+0x1af2/0x2180 [ 611.998771][T14017] ? fib_nl2rule+0x36d/0x1ab0 [ 612.003281][T14017] should_failslab+0x5/0x20 [ 612.007619][T14017] __kmalloc+0x51/0x2e0 [ 612.011609][T14017] fib_nl2rule+0x36d/0x1ab0 [ 612.015959][T14017] ? fib_nl_newrule+0x1f10/0x1f10 [ 612.020989][T14017] ? __nla_parse+0x3a/0x50 [ 612.025181][T14017] fib_nl_delrule+0x4f6/0x1e30 [ 612.029838][T14017] ? avc_has_perm_noaudit+0x2f1/0x3d0 [ 612.035594][T14017] ? notify_rule_change+0x200/0x200 [ 612.040639][T14017] ? selinux_capable+0x1d9/0x430 [ 612.045671][T14017] ? selinux_capable+0x2f1/0x430 [ 612.050578][T14017] ? mutex_lock+0xa5/0x110 [ 612.054995][T14017] ? mutex_trylock+0xa0/0xa0 [ 612.060021][T14017] ? security_capable+0x86/0xb0 [ 612.065234][T14017] ? notify_rule_change+0x200/0x200 [ 612.070259][T14017] rtnetlink_rcv_msg+0x983/0xc70 [ 612.075607][T14017] ? 0xffffffffa0098000 [ 612.079951][T14017] ? rtnetlink_bind+0x80/0x80 [ 612.084402][T14017] ? __kernel_text_address+0x94/0x100 [ 612.089613][T14017] ? unwind_get_return_address+0x49/0x80 [ 612.095702][T14017] ? arch_stack_walk+0xf5/0x140 [ 612.101177][T14017] ? avc_has_perm_noaudit+0x2f1/0x3d0 [ 612.106667][T14017] ? avc_denied+0x1d0/0x1d0 [ 612.111203][T14017] ? avc_has_perm+0xd2/0x260 [ 612.115618][T14017] ? avc_has_perm+0x16f/0x260 [ 612.120414][T14017] ? avc_has_perm_noaudit+0x3d0/0x3d0 [ 612.125696][T14017] ? iov_iter_advance+0x258/0xb20 [ 612.130659][T14017] netlink_rcv_skb+0x1d5/0x420 [ 612.135333][T14017] ? rtnetlink_bind+0x80/0x80 [ 612.140021][T14017] ? nla_put_string+0x30/0x30 [ 612.144539][T14017] ? __netlink_lookup+0x369/0x390 [ 612.149755][T14017] netlink_unicast+0x936/0xb20 [ 612.154530][T14017] ? netlink_detachskb+0x90/0x90 [ 612.159481][T14017] ? __virt_addr_valid+0x20e/0x2a0 [ 612.164510][T14017] netlink_sendmsg+0xa18/0xcf0 [ 612.169199][T14017] ? netlink_getsockopt+0x550/0x550 [ 612.174236][T14017] ? import_iovec+0x1bb/0x380 [ 612.178928][T14017] ? security_socket_sendmsg+0x7d/0xa0 [ 612.181125][ T372] usb 4-1: Using ep0 maxpacket: 8 [ 612.184666][T14017] ? netlink_getsockopt+0x550/0x550 [ 612.194807][T14017] ____sys_sendmsg+0x5ac/0x8f0 [ 612.199523][T14017] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 612.204756][T14017] ? proc_fail_nth_read+0x210/0x210 [ 612.209758][T14017] __sys_sendmsg+0x28b/0x380 [ 612.214189][T14017] ? ____sys_sendmsg+0x8f0/0x8f0 [ 612.219042][T14017] ? check_preemption_disabled+0x9f/0x320 [ 612.224916][T14017] ? fput_many+0x15e/0x1b0 [ 612.229100][T14017] ? check_preemption_disabled+0x153/0x320 [ 612.235102][T14017] do_syscall_64+0xca/0x1c0 [ 612.239719][T14017] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 612.245799][T14017] RIP: 0033:0x7f342d690169 [ 612.250032][T14017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.270612][T14017] RSP: 002b:00007f342bcfa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.278885][T14017] RAX: ffffffffffffffda RBX: 00007f342d8a8fa0 RCX: 00007f342d690169 [ 612.287580][T14017] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 612.295596][T14017] RBP: 00007f342bcfa090 R08: 0000000000000000 R09: 0000000000000000 [ 612.301297][ T372] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 612.303783][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.303791][T14017] R13: 0000000000000000 R14: 00007f342d8a8fa0 R15: 00007ffcae77bd48 [ 612.337410][T14018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 612.360032][ T372] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 612.373372][T14018] FAT-fs (loop5): Filesystem has been set read-only [ 612.379967][T14018] attempt to access beyond end of device [ 612.379967][T14018] loop5: rw=524288, want=2073, limit=128 [ 612.391848][ T372] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 612.393691][T14018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 612.399985][ T372] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 612.400000][ T372] usb 4-1: config 0 has no interface number 0 [ 612.408271][T14018] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 612.417283][ T372] usb 4-1: config 0 has no interface number 1 [ 612.424817][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 612.431144][ T372] usb 4-1: config 0 has no interface number 2 [ 612.442148][T14029] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 612.449799][ T372] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.462198][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 612.478859][ T372] usb 4-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 612.491124][T14029] FAT-fs (loop8): Filesystem has been set read-only [ 612.502289][ T372] usb 4-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 612.505184][T14029] attempt to access beyond end of device [ 612.505184][T14029] loop8: rw=524288, want=2073, limit=128 [ 612.522957][ T372] usb 4-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 612.534027][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 612.546602][ T372] usb 4-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 612.558074][T14029] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 612.571592][ T372] usb 4-1: config 0 interface 150 has no altsetting 0 [ 612.579951][ T397] udevd[397]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 612.586116][ T372] usb 4-1: config 0 interface 112 has no altsetting 0 [ 612.605332][ T372] usb 4-1: config 0 interface 110 has no altsetting 0 [ 612.605525][T14029] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 612.612497][ T372] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 612.628907][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.637916][ T372] usb 4-1: config 0 descriptor?? [ 612.675266][T14030] attempt to access beyond end of device [ 612.675266][T14030] loop8: rw=0, want=2073, limit=128 [ 612.686691][T14030] attempt to access beyond end of device [ 612.686691][T14030] loop8: rw=0, want=2073, limit=128 [ 612.697376][T14030] attempt to access beyond end of device [ 612.697376][T14030] loop8: rw=0, want=2073, limit=128 [ 612.707945][T14030] attempt to access beyond end of device [ 612.707945][T14030] loop8: rw=0, want=2073, limit=128 [ 612.814446][T14039] netlink: 'syz.8.3054': attribute type 4 has an invalid length. [ 612.911004][ T351] udevd[351]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 612.931015][T14041] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 612.949637][T14041] ext4 filesystem being mounted at /137/bus supports timestamps until (%ptR?) (0x7fffffff) [ 613.000294][T14058] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 613.011476][ T440] udevd[440]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 613.035512][T14058] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000c018, mo2=0002] [ 613.040094][T14066] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.044843][T14058] System zones: 0-2, 18-18, 34-35 [ 613.050912][T14066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.064041][T14058] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,block_validity,debug,jqfmt=vfsv1,,errors=continue [ 613.081853][T14058] ext4 filesystem being mounted at /455/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 613.097999][T14066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.116529][ T23] audit: type=1400 audit(1742463705.984:1017): avc: denied { bind } for pid=14065 comm="syz.8.3063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 613.169218][ T351] udevd[351]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 613.219265][T14074] netlink: 'syz.8.3067': attribute type 4 has an invalid length. [ 613.276001][T14075] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 613.289077][T14075] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a000c018, mo2=0002] [ 613.297491][T14075] System zones: 0-2, 18-18, 34-35 [ 613.309358][T14075] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,block_validity,debug,jqfmt=vfsv1,,errors=continue [ 613.322282][T14075] ext4 filesystem being mounted at /456/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 613.362581][T14078] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 613.365768][T14075] FAULT_INJECTION: forcing a failure. [ 613.365768][T14075] name failslab, interval 1, probability 0, space 0, times 0 [ 613.372774][T14078] EXT4-fs (loop8): Unrecognized mount option "permit_directio" or missing value [ 613.384453][T14075] CPU: 1 PID: 14075 Comm: syz.5.3064 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 613.403047][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 613.412939][T14075] Call Trace: [ 613.416074][T14075] dump_stack+0x1d8/0x241 [ 613.420226][T14075] ? panic+0x89d/0x89d [ 613.424137][T14075] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 613.429788][T14075] ? memset+0x1f/0x40 [ 613.433597][T14075] ? fsnotify+0x1280/0x1340 [ 613.438112][T14075] should_fail+0x71f/0x880 [ 613.442406][T14075] ? setup_fault_attr+0x3d0/0x3d0 [ 613.447572][T14075] ? __fsnotify_parent+0x310/0x310 [ 613.452541][T14075] ? getname_flags+0xb8/0x4e0 [ 613.457222][T14075] should_failslab+0x5/0x20 [ 613.461847][T14075] kmem_cache_alloc+0x28/0x250 [ 613.466501][T14075] getname_flags+0xb8/0x4e0 [ 613.471128][T14075] do_mkdirat+0xbb/0x2c0 [ 613.475192][T14075] ? vfs_mkdir+0x690/0x690 [ 613.479446][T14075] do_syscall_64+0xca/0x1c0 [ 613.483902][T14075] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 613.490046][T14075] RIP: 0033:0x7f4c70e78169 [ 613.494547][T14075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.514597][T14075] RSP: 002b:00007f4c6f4e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 613.523123][T14075] RAX: ffffffffffffffda RBX: 00007f4c71090fa0 RCX: 00007f4c70e78169 [ 613.531368][T14075] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 613.539510][T14075] RBP: 00007f4c6f4e2090 R08: 0000000000000000 R09: 0000000000000000 [ 613.548455][T14075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.557020][T14075] R13: 0000000000000000 R14: 00007f4c71090fa0 R15: 00007fffe89318a8 [ 613.576124][T14083] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 613.585571][ T381] udevd[381]: symlink '../../loop7' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:7' failed: Read-only file system [ 613.646668][ T23] audit: type=1400 audit(1742463706.514:1018): avc: denied { watch watch_reads } for pid=14081 comm="syz.7.3069" path="/139/file1" dev="loop7" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.724113][T14094] erofs: (device loop7): fill_inode_lazy: unsupported physical clusterbits 13 for nid 36, please upgrade kernel [ 613.736441][T14094] erofs: (device loop7): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 613.780387][T14094] erofs: (device loop7): fill_inode_lazy: unsupported physical clusterbits 13 for nid 36, please upgrade kernel [ 613.793156][T14097] futex_wake_op: syz.5.3075 tries to shift op by -1; fix this program [ 613.802669][T14094] erofs: (device loop7): z_erofs_vle_normalaccess_readpage: failed to read, err [-95] [ 613.813126][T14094] erofs: (device loop7): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 613.891385][T14101] netlink: 'syz.5.3078': attribute type 4 has an invalid length. [ 614.022983][T14104] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 614.033938][T14104] ext4 filesystem being mounted at /160/bus supports timestamps until (%ptR?) (0x7fffffff) [ 614.097910][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3081'. [ 614.131377][T14119] FAULT_INJECTION: forcing a failure. [ 614.131377][T14119] name fail_futex, interval 1, probability 0, space 0, times 0 [ 614.146531][T14119] CPU: 1 PID: 14119 Comm: syz.8.3082 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 614.156502][T14119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 614.166581][T14119] Call Trace: [ 614.169932][T14119] dump_stack+0x1d8/0x241 [ 614.174206][T14119] ? panic+0x89d/0x89d [ 614.178190][T14119] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 614.183925][T14119] ? 0xffffffffa0098000 [ 614.188002][T14119] ? is_bpf_text_address+0x24c/0x260 [ 614.193431][T14119] should_fail+0x71f/0x880 [ 614.197767][T14119] ? setup_fault_attr+0x3d0/0x3d0 [ 614.202849][T14119] ? _kstrtoull+0x390/0x4a0 [ 614.207256][T14119] get_futex_key+0x216/0xf80 [ 614.211680][T14119] ? futex_wait_restart+0x250/0x250 [ 614.217107][T14119] do_futex+0x396/0x19f0 [ 614.221643][T14119] ? proc_fail_nth_read+0x210/0x210 [ 614.228032][T14119] ? proc_fail_nth_read+0x210/0x210 [ 614.233142][T14119] ? memset+0x1f/0x40 [ 614.237140][T14119] ? fsnotify+0x1280/0x1340 [ 614.241476][T14119] ? futex_exit_release+0x1e0/0x1e0 [ 614.246518][T14119] ? check_preemption_disabled+0x9f/0x320 [ 614.252065][T14119] ? debug_smp_processor_id+0x20/0x20 [ 614.257270][T14119] ? __sb_end_write+0xc4/0x120 [ 614.262043][T14119] __se_sys_futex+0x355/0x470 [ 614.266732][T14119] ? fput_many+0x15e/0x1b0 [ 614.270989][T14119] ? __x64_sys_futex+0xf0/0xf0 [ 614.271121][T11874] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 614.275707][T14119] ? __ia32_sys_read+0x80/0x80 [ 614.275717][T14119] ? __do_page_fault+0x725/0xbb0 [ 614.275735][T14119] ? __x64_sys_futex+0x1d/0xf0 [ 614.297428][T14119] do_syscall_64+0xca/0x1c0 [ 614.301982][T14119] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 614.307706][T14119] RIP: 0033:0x7f342d690169 [ 614.312138][T14119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.332379][T14119] RSP: 002b:00007f342bcfa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 614.341179][T14119] RAX: ffffffffffffffda RBX: 00007f342d8a8fa0 RCX: 00007f342d690169 [ 614.349168][T14119] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000080 [ 614.357244][T14119] RBP: 00007f342bcfa090 R08: 0000200000000000 R09: 00000000b1ffffff [ 614.365144][T14119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.373104][T14119] R13: 0000000000000001 R14: 00007f342d8a8fa0 R15: 00007ffcae77bd48 [ 614.481203][ T372] usb 4-1: string descriptor 0 read error: -71 [ 614.498185][ T372] usb 4-1: USB disconnect, device number 43 [ 614.535652][T14135] netlink: 'syz.8.3089': attribute type 4 has an invalid length. [ 614.561252][T11874] usb 8-1: device descriptor read/64, error 18 [ 614.802360][T14144] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 614.820837][T14144] ext4 filesystem being mounted at /166/bus supports timestamps until (%ptR?) (0x7fffffff) [ 614.991162][T11874] usb 8-1: device descriptor read/64, error 18 [ 615.271190][T11874] usb 8-1: new low-speed USB device number 15 using dummy_hcd [ 615.561117][T11874] usb 8-1: device descriptor read/64, error 18 [ 615.571122][ T5] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 615.595660][T14159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3096'. [ 615.696947][ T23] audit: type=1326 audit(1742463708.564:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14181 comm="syz.8.3105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f342d690169 code=0x0 [ 615.746285][T14186] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 615.781182][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.811104][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 615.851426][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 616.114607][ T5] usb 6-1: config 0 has an invalid interface number: 150 but max is 0 [ 616.122753][T11874] usb 8-1: device descriptor read/64, error 18 [ 616.128882][ T5] usb 6-1: config 0 has an invalid interface number: 112 but max is 0 [ 616.137092][ T5] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 616.145230][ T5] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 616.153953][ T5] usb 6-1: config 0 has no interface number 0 [ 616.159924][ T5] usb 6-1: config 0 has no interface number 1 [ 616.166129][ T5] usb 6-1: config 0 has no interface number 2 [ 616.172256][ T5] usb 6-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.185203][ T5] usb 6-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 616.196485][ T5] usb 6-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 616.209646][ T5] usb 6-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 616.220602][ T5] usb 6-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 616.233724][ T5] usb 6-1: config 0 interface 150 has no altsetting 0 [ 616.240502][ T5] usb 6-1: config 0 interface 112 has no altsetting 0 [ 616.247489][T11874] usb usb8-port1: attempt power cycle [ 616.253442][ T5] usb 6-1: config 0 interface 110 has no altsetting 0 [ 616.260148][ T5] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 616.269065][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.277548][ T5] usb 6-1: config 0 descriptor?? [ 616.360749][T14199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3111'. [ 616.369963][T14199] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 616.433271][T14208] device syzkaller0 entered promiscuous mode [ 616.628202][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 616.644664][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 616.655118][T14215] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3117'. [ 616.659153][T14210] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 616.677137][T11874] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 616.678298][T14210] ext4 filesystem being mounted at /174/bus supports timestamps until (%ptR?) (0x7fffffff) [ 616.702072][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 616.721115][ T2023] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 616.821181][T11874] usb 8-1: Invalid ep0 maxpacket: 115 [ 617.131163][T11874] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 617.405133][T14232] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3122'. [ 617.416409][T14232] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 617.691105][T11874] usb 8-1: device not accepting address 17, error -71 [ 617.701859][T11874] usb usb8-port1: unable to enumerate USB device [ 617.800890][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 617.819148][T14236] EXT4-fs (loop8): mounted filesystem without journal. Opts: acl,,errors=continue [ 617.837983][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 617.849255][ T23] audit: type=1400 audit(1742463710.714:1020): avc: denied { link } for pid=14235 comm="syz.8.3124" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 617.901098][ T2023] usb 4-1: device descriptor read/64, error 18 [ 617.932070][T14251] netlink: 160 bytes leftover after parsing attributes in process `syz.7.3128'. [ 617.995172][T14257] fuse: Bad value for 'group_id' [ 618.071460][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 618.077929][T14265] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3134'. [ 618.088717][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 618.106766][T14265] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 618.159073][T14261] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 618.171342][ T5] usb 6-1: string descriptor 0 read error: -71 [ 618.180669][ T5] usb 6-1: USB disconnect, device number 41 [ 618.187859][T14261] ext4 filesystem being mounted at /179/bus supports timestamps until (%ptR?) (0x7fffffff) [ 618.205168][ T23] audit: type=1400 audit(1742463711.074:1021): avc: denied { getopt } for pid=14274 comm="syz.5.3138" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 618.323508][ T2023] usb 4-1: device descriptor read/64, error 18 [ 618.373718][T14284] FAULT_INJECTION: forcing a failure. [ 618.373718][T14284] name failslab, interval 1, probability 0, space 0, times 0 [ 618.384682][ T381] udevd[381]: symlink '../../loop7' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:7' failed: Read-only file system [ 618.386842][T14284] CPU: 0 PID: 14284 Comm: syz.0.3140 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 618.409247][T14286] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3141'. [ 618.411225][T14284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 618.411230][T14284] Call Trace: [ 618.411252][T14284] dump_stack+0x1d8/0x241 [ 618.411261][T14284] ? panic+0x89d/0x89d [ 618.411270][T14284] ? alloc_vmap_area+0x19b4/0x1ac0 [ 618.411288][T14284] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 618.454898][T14284] should_fail+0x71f/0x880 [ 618.459340][T14284] ? setup_fault_attr+0x3d0/0x3d0 [ 618.464550][T14284] ? kmem_cache_alloc_trace+0xdc/0x260 [ 618.469985][T14284] ? __get_vm_area_node+0x183/0x310 [ 618.475271][T14284] ? __vmalloc_node_range+0x2bd/0x710 [ 618.481174][T14284] should_failslab+0x5/0x20 [ 618.485928][T14284] __kmalloc+0x51/0x2e0 [ 618.490048][T14284] __vmalloc_node_range+0x2bd/0x710 [ 618.495904][T14284] ? prealloc_init+0x12f/0x800 [ 618.500963][T14284] __vmalloc_node_flags_caller+0x78/0x90 [ 618.507389][T14284] ? prealloc_init+0x12f/0x800 [ 618.512239][T14284] prealloc_init+0x12f/0x800 [ 618.516924][T14284] htab_map_alloc+0x638/0x930 [ 618.521431][T14284] __se_sys_bpf+0x3291/0xbcb0 [ 618.526596][T14284] ? stack_trace_save+0x1c0/0x1c0 [ 618.531460][T14284] ? __kernel_text_address+0x94/0x100 [ 618.536946][T14284] ? unwind_get_return_address+0x49/0x80 [ 618.543317][T14284] ? arch_stack_walk+0xf5/0x140 [ 618.548557][T14284] ? _kstrtoull+0x390/0x4a0 [ 618.553220][T14284] ? __x64_sys_bpf+0x80/0x80 [ 618.558345][T14284] ? kstrtouint_from_user+0x20a/0x2a0 [ 618.563805][T14284] ? kstrtol_from_user+0x310/0x310 [ 618.569061][T14284] ? get_pid_task+0xde/0x130 [ 618.573865][T14284] ? proc_fail_nth_write+0x20b/0x290 [ 618.579265][T14284] ? proc_fail_nth_read+0x210/0x210 [ 618.584723][T14284] ? proc_fail_nth_read+0x210/0x210 [ 618.590796][T14284] ? memset+0x1f/0x40 [ 618.591157][ T2023] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 618.595076][T14284] ? fsnotify+0x1280/0x1340 [ 618.595088][T14284] ? __kernel_write+0x350/0x350 [ 618.595100][T14284] ? check_preemption_disabled+0x9f/0x320 [ 618.595109][T14284] ? debug_smp_processor_id+0x20/0x20 [ 618.595118][T14284] ? __fsnotify_parent+0x310/0x310 [ 618.595137][T14284] ? __sb_end_write+0xc4/0x120 [ 618.637653][T14284] ? vfs_write+0x41a/0x4e0 [ 618.642481][T14284] ? fput_many+0x15e/0x1b0 [ 618.647530][T14284] ? check_preemption_disabled+0x153/0x320 [ 618.653341][T14284] ? __do_page_fault+0x725/0xbb0 [ 618.658183][T14284] do_syscall_64+0xca/0x1c0 [ 618.662728][T14284] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 618.668710][T14284] RIP: 0033:0x7f79116f2169 [ 618.673154][T14284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.694965][T14284] RSP: 002b:00007f790fd3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.703633][T14284] RAX: ffffffffffffffda RBX: 00007f791190b080 RCX: 00007f79116f2169 [ 618.711617][T14284] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 618.719699][T14284] RBP: 00007f790fd3b090 R08: 0000000000000000 R09: 0000000000000000 [ 618.727862][T14284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.736199][T14284] R13: 0000000000000000 R14: 00007f791190b080 R15: 00007fff5ff540a8 [ 618.751730][ T351] udevd[351]: symlink '../../loop8' '/dev/disk/by-label/syzkaller.tmp-b7:8' failed: Read-only file system [ 618.765904][T14278] erofs: (device loop7): mounted with opts: , root inode @ nid 36. [ 618.776562][ T440] udevd[440]: symlink '../../loop7' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:7' failed: Read-only file system [ 618.803358][T14278] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 1 @ nid 89 [ 618.819902][T14278] erofs: (device loop7): z_erofs_vle_normalaccess_readpages: readahead error at page 0 @ nid 89 [ 618.981193][ T2023] usb 4-1: device descriptor read/64, error 18 [ 618.988179][T14291] EXT4-fs (loop8): Unrecognized mount option "euid=00000000000000000000" or missing value [ 618.992146][T14290] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,,errors=continue [ 619.105977][ T372] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 619.134992][T14299] fuse: Bad value for 'group_id' [ 619.391159][ T2023] usb 4-1: device descriptor read/64, error 18 [ 619.401122][ T372] usb 8-1: Using ep0 maxpacket: 16 [ 619.511245][ T2023] usb usb4-port1: attempt power cycle [ 619.521229][ T372] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.533192][ T372] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.545508][ T372] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 619.563425][ T372] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 619.573747][ T372] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.585494][ T372] usb 8-1: config 0 descriptor?? [ 620.015823][T14314] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3149'. [ 620.025428][ T2023] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 620.032863][T14314] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 620.058207][T14320] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3153'. [ 620.121240][ T2023] usb 4-1: Using ep0 maxpacket: 8 [ 620.151741][T14326] fuse: Bad value for 'group_id' [ 620.159142][T14328] netlink: 'syz.8.3155': attribute type 4 has an invalid length. [ 620.169454][T14318] ================================================================== [ 620.177960][T14318] BUG: KASAN: use-after-free in __ext4_iget+0x384/0x4330 [ 620.185171][T14318] Read of size 8 at addr ffff8881cf639ff0 by task syz.5.3152/14318 [ 620.193304][T14318] [ 620.195580][T14318] CPU: 0 PID: 14318 Comm: syz.5.3152 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 620.210473][T14318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 620.221467][T14318] Call Trace: [ 620.224890][T14318] dump_stack+0x1d8/0x241 [ 620.229495][T14318] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 620.235750][T14318] ? printk+0xd1/0x111 [ 620.240351][T14318] ? __ext4_iget+0x384/0x4330 [ 620.241175][ T2023] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 620.245474][T14318] print_address_description+0x8c/0x600 [ 620.245488][T14318] ? _raw_spin_lock+0xa4/0x1b0 [ 620.245505][T14318] ? _raw_spin_trylock_bh+0x190/0x190 [ 620.261716][ T2023] usb 4-1: config 0 has an invalid interface number: 112 but max is 0 [ 620.264469][T14318] ? __ext4_iget+0x384/0x4330 [ 620.264479][T14318] __kasan_report+0xf3/0x120 [ 620.264494][T14318] ? __ext4_iget+0x384/0x4330 [ 620.280606][ T2023] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 620.284227][T14318] kasan_report+0x30/0x60 [ 620.284240][T14318] __ext4_iget+0x384/0x4330 [ 620.284257][T14318] ? idr_replace+0x230/0x230 [ 620.284266][T14318] ? ext4_get_projid+0x140/0x140 [ 620.284277][T14318] ? _raw_write_lock+0xa4/0x170 [ 620.284286][T14318] ? __proc_create+0x65a/0xa00 [ 620.284304][T14318] ext4_enable_quotas+0x528/0x940 [ 620.289425][ T2023] usb 4-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 620.293462][T14318] ? ext4_fill_flex_info+0x5e0/0x5e0 [ 620.293475][T14318] ? proc_create+0x230/0x230 [ 620.293487][T14318] ? ext4_fill_flex_info+0x53b/0x5e0 [ 620.293496][T14318] ? ext4_register_sysfs+0x1d9/0x210 [ 620.293514][T14318] ext4_fill_super+0x84f0/0x8d90 [ 620.313325][ T2023] usb 4-1: config 0 has no interface number 0 [ 620.316959][T14318] ? ext4_mount+0x40/0x40 [ 620.316980][T14318] ? vscnprintf+0x80/0x80 [ 620.332046][ T2023] usb 4-1: config 0 has no interface number 1 [ 620.337127][T14318] mount_bdev+0x267/0x370 [ 620.337141][T14318] ? ext4_mount+0x40/0x40 [ 620.337159][T14318] legacy_get_tree+0xdf/0x170 [ 620.409349][T14318] ? ext4_lazyinit_thread+0xc60/0xc60 [ 620.414649][T14318] vfs_get_tree+0x85/0x260 [ 620.419049][T14318] do_new_mount+0x292/0x570 [ 620.423612][T14318] ? do_move_mount_old+0x160/0x160 [ 620.429608][T14318] ? security_capable+0x86/0xb0 [ 620.434508][T14318] do_mount+0x688/0xe10 [ 620.439372][T14318] ? copy_mount_string+0x30/0x30 [ 620.444499][T14318] ? copy_mount_options+0x29a/0x300 [ 620.449539][T14318] ksys_mount+0xc2/0xf0 [ 620.453514][T14318] __x64_sys_mount+0xb1/0xc0 [ 620.457986][T14318] do_syscall_64+0xca/0x1c0 [ 620.462280][T14318] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 620.468366][T14318] RIP: 0033:0x7f4c70e7990a [ 620.472587][T14318] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.493743][T14318] RSP: 002b:00007f4c6f4e1e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 620.503214][T14318] RAX: ffffffffffffffda RBX: 00007f4c6f4e1ef0 RCX: 00007f4c70e7990a [ 620.511476][T14318] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f4c6f4e1eb0 [ 620.519721][T14318] RBP: 0000200000000180 R08: 00007f4c6f4e1ef0 R09: 000000000021081e [ 620.528272][T14318] R10: 000000000021081e R11: 0000000000000246 R12: 0000200000000000 [ 620.538096][T14318] R13: 00007f4c6f4e1eb0 R14: 00000000000004fa R15: 00002000000001c0 [ 620.547236][T14318] [ 620.549579][T14318] Allocated by task 9724: [ 620.553909][T14318] __kasan_kmalloc+0x171/0x210 [ 620.558967][T14318] kmem_cache_alloc+0xd9/0x250 [ 620.564084][T14318] f2fs_alloc_inode+0x22/0x3c0 [ 620.568826][T14318] iget_locked+0x143/0x790 [ 620.573243][T14318] f2fs_iget+0x52/0x4cf0 [ 620.578378][T14318] f2fs_fill_super+0x6909/0x8330 [ 620.583419][T14318] mount_bdev+0x267/0x370 [ 620.588379][T14318] legacy_get_tree+0xdf/0x170 [ 620.593227][T14318] vfs_get_tree+0x85/0x260 [ 620.597664][T14318] do_new_mount+0x292/0x570 [ 620.602620][T14318] do_mount+0x688/0xe10 [ 620.607215][T14318] ksys_mount+0xc2/0xf0 [ 620.611640][T14318] __x64_sys_mount+0xb1/0xc0 [ 620.616059][T14318] do_syscall_64+0xca/0x1c0 [ 620.621110][T14318] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 620.627268][T14318] [ 620.629432][T14318] Freed by task 9820: [ 620.633451][T14318] __kasan_slab_free+0x1b5/0x270 [ 620.638565][T14318] kmem_cache_free+0x10b/0x2c0 [ 620.643379][T14318] rcu_do_batch+0x492/0xa00 [ 620.647818][T14318] rcu_core+0x4c8/0xcb0 [ 620.652007][T14318] __do_softirq+0x23b/0x6b7 [ 620.657228][T14318] [ 620.659656][T14318] The buggy address belongs to the object at ffff8881cf639b30 [ 620.659656][T14318] which belongs to the cache f2fs_inode_cache of size 1264 [ 620.675197][T14318] The buggy address is located 1216 bytes inside of [ 620.675197][T14318] 1264-byte region [ffff8881cf639b30, ffff8881cf63a020) [ 620.690584][T14318] The buggy address belongs to the page: [ 620.696563][T14318] page:ffffea00073d8e00 refcount:1 mapcount:0 mapping:ffff8881f0f93b80 index:0xffff8881cf63e1e0 compound_mapcount: 0 [ 620.709494][T14318] flags: 0x8000000000010200(slab|head) [ 620.714966][T14318] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f0f93b80 [ 620.723738][T14318] raw: ffff8881cf63e1e0 0000000080170008 00000001ffffffff 0000000000000000 [ 620.732534][T14318] page dumped because: kasan: bad access detected [ 620.739526][T14318] page_owner tracks the page as allocated [ 620.745915][T14318] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 620.763941][T14318] prep_new_page+0x18f/0x370 [ 620.768351][T14318] get_page_from_freelist+0x2d13/0x2d90 [ 620.773999][T14318] __alloc_pages_nodemask+0x393/0x840 [ 620.779369][T14318] alloc_slab_page+0x39/0x3c0 [ 620.784057][T14318] new_slab+0x97/0x440 [ 620.788744][T14318] ___slab_alloc+0x2fe/0x490 [ 620.793176][T14318] __slab_alloc+0x62/0xa0 [ 620.797333][T14318] kmem_cache_alloc+0x109/0x250 [ 620.802018][T14318] f2fs_alloc_inode+0x22/0x3c0 [ 620.807047][T14318] iget_locked+0x143/0x790 [ 620.811660][T14318] f2fs_iget+0x52/0x4cf0 [ 620.815940][T14318] f2fs_fill_super+0x4d1b/0x8330 [ 620.821097][T14318] mount_bdev+0x267/0x370 [ 620.825357][T14318] legacy_get_tree+0xdf/0x170 [ 620.830258][T14318] vfs_get_tree+0x85/0x260 [ 620.834802][T14318] do_new_mount+0x292/0x570 [ 620.839299][T14318] page_owner free stack trace missing [ 620.844825][T14318] [ 620.846941][T14318] Memory state around the buggy address: [ 620.852726][T14318] ffff8881cf639e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 620.861330][T14318] ffff8881cf639f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 620.869923][T14318] >ffff8881cf639f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 620.878814][T14318] ^ [ 620.886536][T14318] ffff8881cf63a000: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 620.894607][T14318] ffff8881cf63a080: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 620.902576][T14318] ================================================================== [ 620.910570][T14318] Disabling lock debugging due to kernel taint [ 620.925176][T14318] EXT4-fs warning (device loop5): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 620.926023][ T2023] usb 4-1: config 0 has no interface number 2 [ 620.946633][ T2023] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.957378][T14318] EXT4-fs (loop5): mount failed [ 620.960508][ T2023] usb 4-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 620.978419][ T2023] usb 4-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 620.992241][ T372] usbhid 8-1:0.0: can't add hid device: -71 [ 620.998120][ T372] usbhid: probe of 8-1:0.0 failed with error -71 [ 621.004594][ T2023] usb 4-1: too many endpoints for config 0 interface 110 altsetting 99: 114, using maximum allowed: 30 [ 621.023805][ T372] usb 8-1: USB disconnect, device number 18 [ 621.030915][ T2023] usb 4-1: config 0 interface 110 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 114 [ 621.045443][ T2023] usb 4-1: config 0 interface 150 has no altsetting 0 [ 621.056095][ T2023] usb 4-1: config 0 interface 112 has no altsetting 0 [ 621.064096][ T2023] usb 4-1: config 0 interface 110 has no altsetting 0 [ 621.070704][ T2023] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 621.080242][ T2023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.087041][T14334] F2FS-fs (loop8): Fix alignment : internally, start(4096) end(16896) block(12288) [ 621.101300][ T2023] usb 4-1: config 0 descriptor?? [ 621.102638][T14334] F2FS-fs (loop8): Unrecognized mount option "dont_measure" or missing value [ 622.541222][ T2023] usb 4-1: string descriptor 0 read error: -71 [ 622.551914][ T2023] usb 4-1: USB disconnect, device number 46