last executing test programs: 2m0.831540386s ago: executing program 32 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) fcntl$getown(r4, 0x9) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="010008"]) 2m0.589568419s ago: executing program 33 (id=135): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0x5e, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}, 0x20) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x1020002, &(0x7f0000000000)={[{@metacopy_off}, {@upperdir, 0x5c}]}) sendto$inet6(r0, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2", 0x595, 0x0, &(0x7f0000000000)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) 1m51.061588931s ago: executing program 34 (id=205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fsmount(r2, 0x0, 0x4) (async) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000200)={0x0, [{0x5, 0x0, 0x40a, 0x0}, {0x1, 0x0, 0x100, 0x0}, {0x2, 0x0, 0xffffff80, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x1, 0x0, 0xa, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xc89, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x36d5, 0x0}, {0x886197f8bc8dd445, 0x0, 0xfffffff3, 0x0}, {0x2, 0x8, 0x6, &(0x7f00000003c0)="e6"}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m50.833268932s ago: executing program 35 (id=209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc, &(0x7f0000000cc0)=[{&(0x7f0000003a80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x5d8}, {&(0x7f00000014c0)=ANY=[@ANYBLOB="a8250000200000042cbd7000fedbdf2580119e80e403acc28493fbb3112f676e8748ac47d06013816043b19919ac674417f77fa0738834f0cf6f89666b7c64ae3a22f46e9ec33474aefe6f2a17c1858f55201740fe73f44c126b1bf5d4d63de89f8a9697655eac9e8e5f20135f9a978d585b4bf3b2a5904d280a9a542d36ea5dec41666d8ab7c3873497ae268bae8216bb5c03f7ba9994b0d8b5e9640d0ccbf0155a74cbd39ca30326236f801ea76de82adef33b1a01346d0f154b656663f892f0d682498aa4de23ee658e870800bf00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x25a8}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES64=r0, @ANYRES16=r2, @ANYRES32, @ANYBLOB="2c000000000000a66ed462fcd833000100000001000000", @ANYRES16, @ANYRESHEX=r0, @ANYBLOB="d48a6d351b6c2a23", @ANYRES32=r2, @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x8c0}, 0x44) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000000104000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000000)={0x7, {{0xa, 0x4e23, 0x5, @mcast1, 0x8}}}, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) close(0x3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) timer_create(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, @thr={&(0x7f0000000300)="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", &(0x7f0000000580)="d937a13166ec9751a8721019e2f74e3f3f9f7f85c50af7f34ae43c1403a93603c59f937d0cce412eec8632c7233f3154080c6fc2eca13914965b927b42661db8df56962d7a93c5fb28968045a0e82aa9aede4362c58a802e3171cd3d22db2cb4621c5b76aeb01b8a874f3712520f7ad511d847304828f5ad481c572de5d0630fc1f1"}}, &(0x7f0000000280)=0x0) timer_settime(r8, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) 1m47.303133611s ago: executing program 36 (id=240): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x0, 0xa, 0xee0d, 0x9, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4000800) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000004008500000082000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095f7c67fae542374560e2904f558dfc3a4ea21cb974732f0fdcf"], &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r7}]}]}, 0x28}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x6e}], 0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x2040, 0x4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x8}, 0x0) getdents64(r4, &(0x7f0000000340)=""/243, 0xf3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1m46.021070493s ago: executing program 37 (id=257): getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000a00)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00\n\x009_'], 0x48) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") 1m38.598178544s ago: executing program 38 (id=320): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffa3, 0x0, 0xffffffffffffffff, 0x24}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) connect$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) fallocate(r3, 0x22, 0x9, 0x800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x20003, 0x1, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m26.342179057s ago: executing program 39 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) utimes(&(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x56, 0x20, 0xe}, 0x19) accept$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fe00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000950000000000000027b3ad5f93dffcf0a1c1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e00, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) 1m23.301658178s ago: executing program 40 (id=443): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x1000404, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x506, &(0x7f0000000f40)="$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") r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r2, r2, 0x0, 0x800000009) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42402, 0x14a) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)={0x14, r5, 0x703, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) fallocate(r3, 0x8, 0x0, 0x8000) 1m0.851676766s ago: executing program 2 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="4282f8a4fcc4b382a653cb9faedeb3fb83bdfeccc804a112a509699d1ad7d1be5ad73950fade5a3c585198f69d83f1c34ab9a4929440272308c84d8df11681466a176e9101e2697d453bf5815b796f9ce5a9ae25c584137033125b859061ee005818fad10700100000dbb91da66faa66a6169f1bb69a149f755e9adfa2b891ded9aa1c2f16f91d390f0d222a6d04ac4704c3e0abf3ff0fd44ee7e958e1fdd796ed97c74621c27f113a2b20be41695068d8075ae45dea4b7cc05a6e78382cd9415fc33a9e5614fd050000001d7d01bc8594785ee8cd5c52bbcbbf8c3a496bea6633315f0f4378fd65b31663d0dc13560aac302e0be1c21912343445e4702b71303cdb2262c2bf37a7935add0d678d8dfa26526ba2f47f7bddcde9d08c6d705670058440a6839d56d32a43d14a360ccf42b239bc018748bfca43afa625ea7360181e80f7ba862162ff58291f74e57577e99268fdbed24a47107bdeff24b1a6edf25411ed217cc957c7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x24, 0x0, &(0x7f00000005c0)=[@clear_death={0x400c630f, 0x3}, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='neigh_update\x00', r8, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 59.948974063s ago: executing program 2 (id=640): r0 = socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c10000000000000000000", 0x58}], 0x1) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x40a030, 0x0, 0x10, 0x0, 0x0) utimes(&(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$vcsu(0x0, 0x7, 0x84402) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="182091578b39928b13c8d1c7", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 59.617317995s ago: executing program 2 (id=643): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)={[{@errors_continue}], [{@hash}]}, 0x0, 0x614, &(0x7f0000000500)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) (async) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_usb_connect(0x4, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000276e7f5e7d21976149e0601020301090212000100001000094be904bb0700ff6c"], 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x208000, 0x0) (async) unshare(0x42000000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) (async) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @empty=0xfdfdffff}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) 59.389269046s ago: executing program 2 (id=645): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x5508, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./bus\x00', 0x33) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 59.14646069s ago: executing program 2 (id=648): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x5, 0x2b4, &(0x7f00000013c0)="$eJzs3U9r034cB/BP/2zrdth2/vE7BLx4GurZg0UmiIXBpAf1YmEKsonQXbpd7FPwIj4GH5IHH4PstFukJq6b6TbEJpn29YKRz/Lekk9CmqTwTfvy/7f7e+8OX6dfPkWnk0Q7OhGnEZvRjFZkGo1oxM86luO8cevCr7GST9sBANxUu7uD7mXZuNpWmIvinddw2F2KiLWVQtL/XFFTAAAAAAAAAAAAzFlx/H+MC+P/82lz1vj/yjsGAP7UVeP/+TcMh93BWn7/dpHx/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB9TtN0I73ip+7+AID5O03XXf8BYMF4/w8Ai+fc9T/imut/q742AYA5evrs+ZNur7e9mySdiJPxqD/qZ9Msf/S4t30n+WEzIprZ3JPRqN86y+9meTJd6iRfirU8vzczX47bt7J8kj3c6f2Sr8ReNbsAAAAAAAAAAAAAAAAAAAAAareVnNmczp0+37+1tfPx65tZeVblnw/QjMLz/e34r13ZZgAAAAAAAAAAAAAAAAAAAMBf7fDoeH9wcPBqWH7x4PDouBERJa2inRet8lYxOChvyZOiE6UsebLT59/zh6yI+Pb+9//9/ouIa/+4sb8ahWi12oO2/CLdyF6JN6Wf9fxoueyMsVzh2QkAAAAAAAAAAAAAAAAAABbL9OnfujsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPpMv/+/vKLubQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWw/cAAAD//zM5g9A=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000040) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000500)='bpf_lsm_inode_link\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000540)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xf) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x100, '\x00', r9, r1, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000300), &(0x7f0000000340)=r11}, 0x20) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0e000000040000000400000002000200", @ANYBLOB="00000000ebffffffffffdff9eeb1"], 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0xf, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x4000800, &(0x7f0000000740)={0x11, 0x19, r12, 0x1, 0x6, 0x6, @random="cc632d805941"}, 0x14) 58.593253802s ago: executing program 2 (id=650): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000002000000480012800e0001006970366772657461700020003400028008000100", @ANYRES32, @ANYRESOCT=r1], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r4, 0x0, 0x0) sendmsg$xdp(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x2c, 0x4, r2, 0x1b}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="f48e0d59ef940843dacb1fbc24892433182afbcbbf80a84ee82372e8a92c4a372ff4035edca41807c32903aacd8368b499e1aebe7db16789870dc7e4f27aaa50a611cc4a12c5cec70a4f12e2a0790e09ce91af4f486182364ded58d2660851c583c37a51543af494657275a936328fa1f705a84269e6f73952b574124385dbe6c4c3c830c3fded8a634a707f079314856f638e2c6d7ae567b5cdad18f2d61f193b8186e74fac2343843bb426d0df47c8736c03500b5fb13128cd6dc74f90486118fd94092f33627a523252bd25fa077a9e3653405185723250127eb2416cda0e2237ab01d2b48d004092123ae7ec2b1e", 0xf0}, {&(0x7f0000000080)="6a4ae10619b9eebbb44305050d19f03c763f6abdcd9f14b4dd119457e65c3fdbde7c70565a1de138f72dc41b7c3f3d693c17", 0x32}, {&(0x7f00000006c0)="56c5160c47fbfc31c70c9c9017b814eeb8680bfe66c07d74d86d512b1bec32e103aa1788a6b03fe0bd62b60f39eab4fe02724925b925892e49d6409444b18a62ee97e0383cf450f500cdcd7a223a1398d60dc9029179b172014b88648f7b9c6ae3c8fa879e701ebbce66d8626e040bd6649233fcdb09a432ffd347835417a0f832be22fe297b71ce186e77121d9873efc2b11cbcf13070a44e497e19ab5cdbfd82af486bcd7df22f5632fe26176be9b29720cffad01314bd547eb7dd3b38", 0xbe}, {&(0x7f00000004c0)="80c324e4d76e726cb01449b7cd8b5b0ee2a789afdd3d8518114270a8efc63ca23fa2217fbf534bd18ff4ab6680f00a3caf65882d97a180ec619128d195792a14923b", 0x42}], 0x4, 0x0, 0x0, 0x8000000}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000001700000000000ae0fefffffff39500"/40, @ANYBLOB="ef5a1478c9e1e1ba19d601ffac84d2c83364c938dc639f4d95e79f5de1882d7b6056be7c8f5485daafc30db65f05403ba21c9f537e269bec28a53ab9f50f2bf12212ae2b37fd0fa84374265adec719a661e889eb282a19e387cbafddbca289ec144f99ac47d5cf3e1f249ca52a14747b8e4a8065eecd229fd6290392a734be986e193133e33c2e532942d783156fb3f67d4e6784befdd6560cd0300b53f987a7ee34e9636a5784d0c5f597e14618b374c63d312729e599481f4e6ef230afa1fccd343091cbd92a376acdd520b87afa9ca3cae1e8a9d7a6c6e9c88db173c8d4", @ANYRES32=r3], &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, r5}, 0x94) 58.558327386s ago: executing program 41 (id=650): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000002000000480012800e0001006970366772657461700020003400028008000100", @ANYRES32, @ANYRESOCT=r1], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r4, 0x0, 0x0) sendmsg$xdp(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x2c, 0x4, r2, 0x1b}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="f48e0d59ef940843dacb1fbc24892433182afbcbbf80a84ee82372e8a92c4a372ff4035edca41807c32903aacd8368b499e1aebe7db16789870dc7e4f27aaa50a611cc4a12c5cec70a4f12e2a0790e09ce91af4f486182364ded58d2660851c583c37a51543af494657275a936328fa1f705a84269e6f73952b574124385dbe6c4c3c830c3fded8a634a707f079314856f638e2c6d7ae567b5cdad18f2d61f193b8186e74fac2343843bb426d0df47c8736c03500b5fb13128cd6dc74f90486118fd94092f33627a523252bd25fa077a9e3653405185723250127eb2416cda0e2237ab01d2b48d004092123ae7ec2b1e", 0xf0}, {&(0x7f0000000080)="6a4ae10619b9eebbb44305050d19f03c763f6abdcd9f14b4dd119457e65c3fdbde7c70565a1de138f72dc41b7c3f3d693c17", 0x32}, {&(0x7f00000006c0)="56c5160c47fbfc31c70c9c9017b814eeb8680bfe66c07d74d86d512b1bec32e103aa1788a6b03fe0bd62b60f39eab4fe02724925b925892e49d6409444b18a62ee97e0383cf450f500cdcd7a223a1398d60dc9029179b172014b88648f7b9c6ae3c8fa879e701ebbce66d8626e040bd6649233fcdb09a432ffd347835417a0f832be22fe297b71ce186e77121d9873efc2b11cbcf13070a44e497e19ab5cdbfd82af486bcd7df22f5632fe26176be9b29720cffad01314bd547eb7dd3b38", 0xbe}, {&(0x7f00000004c0)="80c324e4d76e726cb01449b7cd8b5b0ee2a789afdd3d8518114270a8efc63ca23fa2217fbf534bd18ff4ab6680f00a3caf65882d97a180ec619128d195792a14923b", 0x42}], 0x4, 0x0, 0x0, 0x8000000}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180000001700000000000ae0fefffffff39500"/40, @ANYBLOB="ef5a1478c9e1e1ba19d601ffac84d2c83364c938dc639f4d95e79f5de1882d7b6056be7c8f5485daafc30db65f05403ba21c9f537e269bec28a53ab9f50f2bf12212ae2b37fd0fa84374265adec719a661e889eb282a19e387cbafddbca289ec144f99ac47d5cf3e1f249ca52a14747b8e4a8065eecd229fd6290392a734be986e193133e33c2e532942d783156fb3f67d4e6784befdd6560cd0300b53f987a7ee34e9636a5784d0c5f597e14618b374c63d312729e599481f4e6ef230afa1fccd343091cbd92a376acdd520b87afa9ca3cae1e8a9d7a6c6e9c88db173c8d4", @ANYRES32=r3], &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, r5}, 0x94) 55.113346536s ago: executing program 3 (id=667): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x110, r0, 0xf09c2000) (async) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 54.993188337s ago: executing program 3 (id=672): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) getsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000058c307bf68baf10200000000"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f0000000100)="0bbb268dd6ffa80800001c00000000000000210d0000aaa8fa017242ba9380d424", 0x21) close(r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat(r8, &(0x7f0000000280)='./file0\x00', 0x0, 0x85) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)='@\x00', 0xfffffffffffffffe) 54.991208427s ago: executing program 3 (id=673): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) (async) listen(r1, 0xa) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x18) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f0000000040)="b9b2e35d70fbf5a36bd800", &(0x7f0000000880)=""/209, &(0x7f0000000380)="dd7a576bae57f87149cc6ca987df3ab994d5ee16cb329858cda7cd459ccc0a5f008a6ec87ee24844dfdec09db05185e222f5116918b202a4c5458f8411c04a95802fc71401894ddc3d8288931ce0fa19785eae9e72045b4e625f533af09d351887e230411b6c5dc93815887f67097e06f5", &(0x7f0000000080)="4022e55421", 0xfffffffc, r2, 0x4}, 0x38) (async) close_range(r0, r7, 0x0) 54.9590506s ago: executing program 3 (id=674): syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000200)='.pending_reads\x00', 0x0, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa0}, 0x1, 0xfffff000, 0x0, 0x8081}, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x100000000000000) 54.619910503s ago: executing program 3 (id=676): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x10, 0x0, 0x6, 0x0, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES64=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 54.497551265s ago: executing program 3 (id=678): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x7e}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts={{0x210, 0x29, 0x37, {0x84, 0x3e, '\x00', [@generic={0x5, 0xcd, "4cfc759084283fe17ee25082e8cf8dc30cfbb0378dce282d754c2f1f25d79dcbaf7118f58065a88b612299b0a87ff616f80520a0bff77de3671ac13ae16cb4c0429e8f9fbf98f95985c74928fe715df8666428db24384a273fdb74f0830f343abbf1de77a479a5f7b6ed665d00ae8585430ef285c6a6962079429ba18cc846a068007c312eeb9e86a3d142659dbadda722db05e8ed861858e0dd85764877f9fb14cb51e73b525ff31398a19d991cfdeaea70259f7b1be8de31de1d3d9213ca273cc2bca0af2eed83151de6765e"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @loopback}, @pad1, @pad1, @generic={0x9, 0xb, "901eaf058f4968fe7a0b31"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x10, 0xe8, "826eddbc9d71656d7662ef0ac5bacab7d1a0406a6f0c5128e197c539e6d193447673698b20d03b1fe461b3e0e32443816d8038c0d8d86d194293fd779a02a45e268f4039f3e6f55440d923e1e9855f3e6c1db8f4ed587bae030dd48c3f705a3da1a86e7d9161251243c1cab0d827241e922fc9a2c622f2af3cae9c383c78a03550b2d32da354a96263bc5a9d8a312ba53ddc797facc0c8cb89ef7a4709607cdf2f582722619283c82c142785cecebcf9be95edc51f9c1777d0812d06791db4e0fbc6d833c45a9f799f90d0af5e643b9d86facd0b8663f63583c42b720b5a608c82d6e307d64bf8cd"}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0xffff}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x33}}}], 0x248}}], 0x1, 0x4041) 54.44560532s ago: executing program 42 (id=678): r0 = socket$inet6(0xa, 0x802, 0x0) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @loopback, 0x7e}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts={{0x210, 0x29, 0x37, {0x84, 0x3e, '\x00', [@generic={0x5, 0xcd, "4cfc759084283fe17ee25082e8cf8dc30cfbb0378dce282d754c2f1f25d79dcbaf7118f58065a88b612299b0a87ff616f80520a0bff77de3671ac13ae16cb4c0429e8f9fbf98f95985c74928fe715df8666428db24384a273fdb74f0830f343abbf1de77a479a5f7b6ed665d00ae8585430ef285c6a6962079429ba18cc846a068007c312eeb9e86a3d142659dbadda722db05e8ed861858e0dd85764877f9fb14cb51e73b525ff31398a19d991cfdeaea70259f7b1be8de31de1d3d9213ca273cc2bca0af2eed83151de6765e"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @hao={0xc9, 0x10, @loopback}, @pad1, @pad1, @generic={0x9, 0xb, "901eaf058f4968fe7a0b31"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x10, 0xe8, "826eddbc9d71656d7662ef0ac5bacab7d1a0406a6f0c5128e197c539e6d193447673698b20d03b1fe461b3e0e32443816d8038c0d8d86d194293fd779a02a45e268f4039f3e6f55440d923e1e9855f3e6c1db8f4ed587bae030dd48c3f705a3da1a86e7d9161251243c1cab0d827241e922fc9a2c622f2af3cae9c383c78a03550b2d32da354a96263bc5a9d8a312ba53ddc797facc0c8cb89ef7a4709607cdf2f582722619283c82c142785cecebcf9be95edc51f9c1777d0812d06791db4e0fbc6d833c45a9f799f90d0af5e643b9d86facd0b8663f63583c42b720b5a608c82d6e307d64bf8cd"}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0xffff}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x33}}}], 0x248}}], 0x1, 0x4041) 28.132670118s ago: executing program 1 (id=896): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000280)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000240), 0x8, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = pidfd_getfd(r1, r1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1f, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x3, 0x1, 0x4, 0x8, 0x7, 0xffffffffffffffc0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x400}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x2000189, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') 26.940491582s ago: executing program 1 (id=906): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000086ee4f3acd40b109040000010300010009210101000119050009058103"], 0x0) 23.569606055s ago: executing program 1 (id=921): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) (async) fcntl$setlease(r1, 0x400, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x4d35a72f, 0x0, 0x0, 0x0, 0xfffff7ffffffffff, 0x0, 0x40}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 23.421245929s ago: executing program 1 (id=923): r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'cp863'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@discard}, {@fmask={'fmask', 0x3d, 0x5}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x0) openat(r0, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x100) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000001a40)='./file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x3df, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r5}, 0x38) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0x22, 0x0, &(0x7f0000000440)="f8ad48cc02cb29efc8007f5b0800cfd6782bdb916e30323b765f30ed1f95ec8b7ba8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 23.355111375s ago: executing program 0 (id=927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x214200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x3f2, 0x200, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc045}, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003a00)=@newtfilter={0x1724, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xa, 0xf}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x16f0, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_MATCHALL_ACT={0x4a4, 0x2, [@m_connmark={0x58, 0x1c, 0x0, 0x0, {{0xd}, {0x4}, {0x27, 0x6, "ef3f9d5aaacbd41c05ec5e04292dd103bc7b4147d58a02a7b7ac25b063d245b5ac97a4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xa0, 0xb, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x55, 0x6, "1f25d08043d8ef0cff7a7286dd173541fd4b48232ecf981c365745a523be1e659a44f2cf46add06729380beca1f9c3401974d86fbcbbe9aea4d53e9d211ecde922757ebe8dec4e10f2852af1b549f211f9"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x134, 0x12, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xe729, 0xe1, 0x7, 0x4, 0xfffffff9}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffff70, 0x8, 0x2, 0x7, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x55465b7, 0x7, 0x4, 0xf, 0x2000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0xffffffff, 0xffffffffffffffff, 0x7fffffff, 0x7a0}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8}]}, {0x7f, 0x6, "61ee895b08634f149719e524bde238df68e5db241e9eb70c7e6ee8bf46b711636e05e7e418c9bc3c1eb920d609c10c102d2551cc2490248f4b2be429eb6cb49641f4299931d5413bb1386e4caf8cc45ef5eba2e9189ff319758207240c4ddd502ccf10d00762eed3712107096d43c1628d7bde323021dccb60c918"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xbc, 0x3, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "c9540760b5c8c6d15e77a102267c7fa1"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "9fb784ad0f1d2dd8abc1cc41f641396f"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}]}, {0x3e, 0x6, "8be267af3dcc47110251c56ff7dfd59969b25c76114446a049f47b81f6aa0d5b863c33580438651ffd0daab787f0f5c6d77cf80eafb72916b3b1"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x130, 0xe, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x4, 0x7, 0x10, 0x3}}]}, {0xe1, 0x6, "84ed550ae03bcebda018dee5db8314cdc9b1673387d02e5f1a330f24fef645c10d38e39308035b3b332abf703159f299867e6ea96720fdac6d4e7d86a3799d9d4b8e475818a4c81f48af3524e6ee3995340056117c639c4d91899f13ba68bd2f49f7c662e9dd47240702132ac087067ca97e6a5d5af49dc52cf5c553380998117acf57fff3646e815f69b3fb57e457cd62412f4dced5d8ae220f625612a95473115b799addfccd1c45be3630928181d21c4cc10c1f3403983c1bfa6080f699d180ada3a8d54a23103ce11f946e5b498a023faff68766448b445920290e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x88, 0xe, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8810}]}, {0x4b, 0x6, "81070f9d016ac2a1e86d411b89270719b10fe0131f57cfce6d6b12b8e1bc9546f5403036e9ac59d5facf9e1555dbd74664f9e526f9f235cdc263af06e8f6eec6745758881424ca"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x1240, 0x2, [@m_ife={0xa8, 0xd, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xb, 0x7, 0x1, 0x4}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7ee, 0x101, 0x10000000, 0x10, 0x3}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xb488}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x16, 0x6, "9ba800c7ef46dfdedbda76d18a845309b2de"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_vlan={0x48, 0x1c, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfeb}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd14}]}, {0xc, 0x6, "6474b2496d126491"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x16c, 0x10, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x5, 0x5, 0x5, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xec, 0x6, "faabf3275c9492b58b682308bb3b6ea9adba8efc03000da3dc5f45787ac65c1fed210a02fff1cd08ce586e7f48697b9a02ec60f8b616fee01316aec0c39b03c5a4e1739b95ac99ae5ff6bee26bab2194818b1c3e5092b6fec4367adfb5df785aaa39a271e57f8868fd3ac34237f861228e159b57171b877852d93f1fd96d5d59d9425f4731544a6c0011ed894c2536a5266c8ec32b6c3ab08e066ab88bbfd1473ded45f9b7218219c55e5cf702200c4fdd4ca0e28c30a4bc4e196ca1e9fd7c5ba1fc8780bcabd0524e04cdd01cc5a7b4f2984159fda4d70ee261fc63686ca4a66c843f1eb56610b7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xf40, 0x1d, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0xffffff7f, 0x1, 0x2, 0x3, 0x4}, 0x6, 0x0, [{0x6, 0x9, 0x1, 0xf, 0xa6, 0x1}, {0x6, 0x40, 0x0, 0x9, 0xd, 0x7}, {0x3, 0x8993, 0x9, 0xa, 0x697, 0xb236}, {0x0, 0x81, 0x8, 0x0, 0x4, 0x8708}, {0x0, 0x1, 0x8, 0x7, 0xa, 0x9}]}, [{0x9, 0xfffffffb, 0x100, 0x1, 0x9, 0x8}, {0x0, 0x7a09f53b, 0x3, 0xf, 0x2, 0xff}, {0x80000000, 0x1, 0x1, 0xffe7, 0x30c}, {0x8001, 0x1, 0x80000001, 0x3, 0x8, 0x3}, {0xffff, 0xffffffff, 0x80, 0x76d, 0x2, 0xa}, {0xfb, 0xe28, 0xffff, 0x5, 0x3, 0x3}, {0x2, 0x8, 0x7c9, 0x7, 0xffffff82, 0x2}, {0x2, 0x3, 0x9, 0x76, 0x6, 0x40}, {0x2, 0x1, 0x9ea0, 0x4, 0x7ff, 0x5}, {0x0, 0x80000000, 0x10, 0x9, 0x623c, 0x39000}, {0x2, 0xfffffffc, 0x50fb, 0xdcee, 0x3, 0xfe}, {0xfbe, 0x8, 0xfffffffc, 0x8, 0x4, 0xf336}, {0x160, 0x0, 0x40, 0x3a0, 0x1, 0x9}, {0x5, 0x21, 0x8, 0x100, 0x8, 0x6e5ddc9}, {0x9, 0x3, 0x3, 0xffffffff, 0x7114, 0x4778}, {0x7, 0x0, 0x4, 0x40, 0x8a, 0x10}, {0x9, 0x1, 0x9, 0xfffffffa, 0x4}, {0x9, 0xfffff800, 0x4, 0x3, 0x2, 0x7b}, {0x100, 0x9, 0x7b, 0x81, 0x100, 0x5}, {0x5, 0x6, 0xa, 0x2, 0x114, 0x3}, {0x41, 0x8, 0x2, 0xfffffffb, 0x4, 0x6c5}, {0x3, 0x3, 0xff, 0x101, 0x31a, 0x8}, {0xc24, 0x200, 0x49, 0x3, 0x0, 0x81}, {0x5, 0x14, 0x8, 0x4, 0x1, 0x7}, {0xdc, 0x2, 0x45, 0xffff5f36, 0x3, 0x2}, {0x1, 0x475, 0x7ff, 0xfffffffd, 0xffffff81, 0x40}, {0xd5, 0x7, 0x3a, 0x2, 0x5, 0x3}, {0x800, 0xfffffffd, 0x4, 0xb, 0x5, 0x3}, {0x3, 0x10000, 0x2, 0x151, 0xdb5, 0x3}, {0x0, 0x80, 0x1, 0x5, 0xff, 0x1}, {0x0, 0x6, 0xff, 0x3, 0x800, 0x7c5}, {0xfffffffa, 0x8, 0x7, 0xeef, 0x7, 0x7}, {0xa, 0x1, 0xf257, 0x200, 0x3, 0x3}, {0x182, 0x0, 0xc, 0x4, 0xb0, 0x3}, {0xfffffffc, 0x1, 0xfffffff9, 0x1, 0x1, 0x200}, {0x8, 0xfffffff5, 0x2f52, 0x4, 0x4275, 0xc89}, {0x6, 0x5, 0xf, 0x9, 0x4, 0x1}, {0x48810f98, 0x9, 0x6, 0x2, 0x6, 0x9704}, {0x5ac, 0x5, 0x5f, 0x4, 0x3, 0x7}, {0xffffffff, 0xfffffbff, 0x200, 0x9, 0x3, 0xe}, {0xffffd0d5, 0x5, 0x7dd, 0x3, 0xffff0001, 0xd38}, {0x3, 0x0, 0xf498, 0x1, 0x80, 0x400}, {0x1, 0x4, 0xf8b, 0x6, 0xac, 0x3}, {0x5, 0x1, 0x7, 0x3, 0x4}, {0x8, 0xf2df3d6, 0x5, 0x4, 0x6, 0x400}, {0x3, 0x401, 0x3, 0xffffffff, 0x4, 0xd9d}, {0x1, 0x3, 0x6, 0x4, 0x5, 0x58}, {0x4, 0x7afa, 0x5, 0xf, 0x8}, {0x7f, 0x6, 0x8, 0x0, 0x60, 0x3e46}, {0xffff, 0x2, 0x0, 0x6b5, 0xffff, 0xebc}, {0xa77, 0x8, 0xff, 0x4, 0x0, 0xb}, {0x6, 0x3, 0x3, 0x4, 0x4, 0x3ff}, {0x5, 0xfffffff9, 0x0, 0x0, 0x7d7f, 0xffffffae}, {0x2, 0x2, 0x6, 0x2, 0x6, 0x9}, {0x0, 0x4, 0x959b, 0x0, 0x412, 0xf1}, {0x8, 0xf926, 0x101, 0x1f7, 0x0, 0x10}, {0x3, 0x6, 0xc9, 0x3, 0x9, 0x4}, {0x3ff, 0x0, 0x9, 0x63, 0x6, 0xfffffffd}, {0x3, 0xc, 0x3ff, 0x200, 0x7fffffff, 0x80000000}, {0xffffa9f6, 0x4, 0x30000000, 0xe, 0x8, 0x9}, {0x0, 0x4, 0x9, 0x4, 0x50, 0x7}, {0x101, 0x5, 0x2, 0x0, 0x211, 0x2}, {0x7, 0x3, 0x6, 0x4, 0x7, 0x6}, {0xeaa, 0x0, 0x7, 0x3, 0x0, 0x4}, {0x1, 0x100, 0xe3, 0x3, 0x47bf7843, 0xe009}, {0x6, 0x8, 0x534f6571, 0x8, 0xc1f, 0x3}, {0x10001, 0x100, 0x0, 0xfff, 0xa8, 0x645}, {0x4, 0x101, 0x3, 0x897a}, {0x4, 0x6fc6, 0x1ff, 0x1, 0x35, 0x3ff}, {0x3, 0xb9b, 0x0, 0xd0, 0x2, 0x2}, {0x400, 0x9, 0x0, 0x2ba64ef0, 0x7, 0xfff}, {0x2, 0x1d40, 0xf7c, 0x4, 0x6, 0xe}, {0x1, 0xce2e, 0xeb3, 0x5, 0x9, 0x8}, {0x4d7, 0x5, 0xfffffbff, 0x9, 0x9, 0xba4}, {0x4, 0x4, 0x3, 0x3, 0xc1c, 0x7ff}, {0x8, 0x2, 0x7, 0x0, 0xfffffbff, 0x2522}, {0x80000001, 0x0, 0x7, 0x8, 0xc, 0x2}, {0xfffffffe, 0x5, 0x10, 0x6, 0x5, 0x2}, {0xd, 0x4, 0x3, 0x7, 0x10, 0x401}, {0x4, 0x0, 0x764, 0x2, 0x0, 0x6}, {0xfff, 0x4, 0x8, 0x5, 0x8, 0x3}, {0x4, 0x7, 0x400, 0x3, 0x8, 0x441}, {0x7, 0xfffff4e2, 0x9, 0x200, 0xffffffc0, 0x3a}, {0x8000, 0x4f, 0x7, 0xdc8, 0x5, 0xfff}, {0x7, 0x8, 0x3, 0xfffffffe, 0x3, 0xf24}, {0x10f08b25, 0x0, 0x9, 0x3, 0x3, 0x4}, {0xff, 0x2, 0xffff, 0x8, 0x0, 0xff}, {0x4, 0x400, 0x3, 0x9, 0x1, 0xe}, {0x5, 0xf, 0xffff, 0x447, 0x63, 0x81}, {0x0, 0x2, 0x7, 0xa4e2, 0xa, 0x7}, {0x800, 0xd, 0x4, 0x2, 0x7}, {0x1, 0xfd000000, 0x4, 0x9, 0x5, 0x2}, {0x2, 0xbe, 0x1, 0x1a8, 0x9, 0x2}, {0x6, 0x5, 0x80, 0x4, 0x800, 0x1}, {0x7, 0x4, 0x1, 0x81, 0x2, 0x5}, {0x4076, 0x800, 0x81, 0x4, 0x3, 0x10}, {0xca3, 0x80000000, 0x4, 0x2, 0xc, 0x8}, {0x1, 0x17, 0x2383a59c, 0x6, 0x6, 0x6}, {0x7, 0x7, 0xe, 0x2, 0x5, 0x7ff}, {0x3ff800, 0x7f, 0x2, 0x80000000, 0x7, 0xf7}, {0x80000001, 0x7, 0x7fffffff, 0x7fd2, 0x7, 0x2}, {0x2ad, 0x1c33800, 0xfff, 0x66, 0x6, 0x8}, {0x7cf66528, 0xfffffff5, 0x401, 0x4, 0x0, 0xb3d}, {0x2, 0xffffffff, 0x6, 0x5, 0x4, 0x2}, {0x80000000, 0x8, 0xbec, 0x7, 0x3, 0xff}, {0x4, 0x0, 0xa9bf, 0x0, 0xff, 0xe136}, {0x800, 0x3c, 0x8000, 0x6, 0x5, 0xa1b}, {0x8000, 0x95b, 0x1, 0x3e, 0x4, 0xcd10}, {0xf, 0x1, 0x4836, 0x8, 0x1}, {0x40, 0x34, 0xffffffff, 0x6, 0x0, 0x9}, {0x2, 0x4, 0x3, 0x7399, 0x80000001}, {0x6, 0x5, 0x7, 0x6fa6, 0x3, 0xfff}, {0xd, 0x0, 0x200, 0x7, 0x100, 0xff}, {0x5, 0x6f, 0x2, 0x1, 0x2636, 0x9}, {0x2, 0x3, 0x6, 0x5d, 0xe, 0xfffffff9}, {0x49e, 0xe41a, 0x2, 0x9, 0x10001, 0x8000}, {0x5, 0x0, 0x1, 0x3c6cba0d, 0x4d, 0x8001}, {0xffff, 0x5, 0x9, 0xd3, 0x80000001, 0x3}, {0x6, 0x0, 0x1, 0x3, 0x1, 0xada}, {0xeb5, 0xc7, 0x9, 0x7, 0x2, 0x5a}, {0x3ff, 0xfffff643, 0x6, 0x400, 0x5823, 0x800}, {0x98f0, 0x5, 0x2, 0xc57, 0x6, 0x3}, {0x7, 0x7, 0x8, 0x0, 0x7, 0x7fff}, {0xc, 0x8, 0x7fffffff, 0x1, 0x5, 0x8001}, {0xff, 0x5, 0x0, 0x7fff, 0x6, 0x5}, {0x146, 0xff, 0xffff, 0x70, 0xd, 0x8001}, {0x7, 0x5, 0x35, 0x4, 0xf529, 0x3}, {0x1b8abb83, 0x7, 0x5, 0x8, 0x7, 0x19a000}], [{0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {}, {0x5}, {0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x4}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x6, 0x1}, {0x4}, {0x4}, {}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5}, {}, {0x517296f514a1cef7}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}]}}]}, {0x79, 0x6, "e25039e07ba4775d5f40e328be9deb8a53ccfc96c6acaddb85c57bb7350d863e31864c76d2e713ff0d88162ed4f57d6ea59b0c9a7381d11c33ee7fe8faba6a586cdd2c1b7d8e2e1dd0f93396053f3885df3d5205348a2f85d6e1a4a53858464c2aaa4e0760481ea69970dd94867f9a951915f24852"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xa0, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x498}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x1, 0xffffffffffffffff, 0x8, 0x6}, 0x2}}]}, {0x50, 0x6, "5bdbade8470454ede2a987bb39eb1984d56aa7e94049369d699a4c6c5993a5b6f269cfc5e66f1cb7a1df336a1c51abddc03908afb953398dd88751f3fb4952b1b1dc35be0d994f6b951af304"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x1724}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000006000000050000000800000016210000", @ANYRES32=r8, @ANYBLOB='\f\x00'/20, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="020000000100000002000000050000000000060000000000000000000e0957ca37e9ea0e677d0134c0770bae46ea9ed23368205fd22038653778cb4ee11ab1783e618730"], 0x50) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) (async) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @dev={0xac, 0x14, 0x14, 0x27}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}], 0x38}}, {{&(0x7f0000000800)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="3c000000000000000100000009ffffffff000000010000000008000009ac1e010100000009640101010000bfbd0000000000000000000000000000000000000014c1"], 0x40}}], 0x2, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r13) sendmsg$NL80211_CMD_SET_REG(r13, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r9, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000002800)=ANY=[@ANYBLOB="40110000", @ANYRES16=r14, @ANYBLOB="01002bbd7000fedbdf617fe7417f6907d200b15abb18907a653252b910b5a1c4ed9a0934755056c0eef5f10862d27e678841d4ede428d387df6f63bcfaf26ea6e3b67dc008b64c8d75f0413e6e1bef7ac533d9293c776261bc256cd6fc299d360ee73262c8462a2b579b6d69aa53985f7bc0dd5a59eb9c1eeeda68b3652269301e66a03e04f020d9ce7e7e28bb4a0771e078424e0d81a2a8ceb2e40aae3a4b4d36946ad8085493b3208a9331854813250f487b891395", @ANYRES32=r15, @ANYBLOB="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"], 0x1140}}, 0x0) 23.257121795s ago: executing program 0 (id=930): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$can_raw(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) (async, rerun: 64) openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) (async, rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r13, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.194614341s ago: executing program 0 (id=932): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002e4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaabb0000000000000800452d00300066000005019078ac1414bbac1414aa0b00907800090000455c003b00657b9840ff00057f0000017f00000163417e5b5f64e67f5559a31e11c88ca5767bc0053d081b1dbf92550ffb42fe7cda30486a49046df2cfd6d16be30662860bc01254ca5c6e0290f37d3f35da4f0829b4f4f8cae34c5547d43ffa0364ba2781a8017de866756b5ba7636373a4e754e955cae34f4590461d4b4e710efe268fb1e0b54b838a55cecf8813f342f7f829c341b4fb1a10e48ee4008f212916"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="39020000000000000000140000000c000780070002"], 0x20}}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c000000130020002bbd7000fedbdf250b01010f4e224e2404000000ac0c000040000000eb0f00000a00000065000000070000008e000000", @ANYRES32=0x0, @ANYBLOB="03000007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x48018}, 0x40080) (async, rerun: 64) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x193400, 0x0) (rerun: 64) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000300)="0f20e06635000004000f22e066b9b500004066b80200000066ba000000000f3066b81c3400000f23c00f21f8663502000b006e23f8d9f166b9110a000066b80600000066ba0000000066b97a0800000f320f090f01df0f09d090fb51", 0x5c}], 0x1, 0x21, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 23.004940699s ago: executing program 0 (id=934): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000840)={[{@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@resgid}, {@noload}, {@abort}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000840)={[{@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@resgid}, {@noload}, {@abort}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) mknod(&(0x7f0000000200)='./file0\x00', 0xc000, 0xffff) symlinkat(&(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010003000000"], 0x1c, 0x2) (async) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010003000000"], 0x1c, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="00000015498dfcac692a0000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="00000015498dfcac692a0000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6004, 0x1) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000300)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0x400, 0x2001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x22) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() (async) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 22.88783478s ago: executing program 0 (id=935): r0 = socket$inet_tcp(0x2, 0x1, 0x0) brk(0x200004ffc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000080)=0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0008000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="189454a5d000000001000000004d000006000000181100005dbf1db4a986a86103d7c0166286573dc556", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f00000001c0)={0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 22.737051935s ago: executing program 0 (id=936): r0 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="a87a12010000090000402505a8a4400001020b0000001b00010100000009040000ff0701010009050bd6b2790abbeb604a5ed359bdbecb723a57c1ba35918f9a208e1a79530e6cd58a3309a8a4180f376ce5e911851cac232022213766da3bfba886cbc9405ad9a838abdaab0fa1c50a30468efb0c13c2371c340d29f0cd3a7eee03fdc98baac05bb3a3dc0d62fd937764b6624a8c3c78d36bcb10b3785f5edf8310e510143a1a0c187cf1bd760f111f78d0ac398a41c3be8aa9deee00eb57bc3c015241ae91", @ANYBLOB="e9740516e69e0893a4241806f50444acaa08b702b95062871fe7f523926c4b4d607bfb"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) (async) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) chdir(0x0) (async) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[], 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 22.735718015s ago: executing program 43 (id=936): r0 = syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="a87a12010000090000402505a8a4400001020b0000001b00010100000009040000ff0701010009050bd6b2790abbeb604a5ed359bdbecb723a57c1ba35918f9a208e1a79530e6cd58a3309a8a4180f376ce5e911851cac232022213766da3bfba886cbc9405ad9a838abdaab0fa1c50a30468efb0c13c2371c340d29f0cd3a7eee03fdc98baac05bb3a3dc0d62fd937764b6624a8c3c78d36bcb10b3785f5edf8310e510143a1a0c187cf1bd760f111f78d0ac398a41c3be8aa9deee00eb57bc3c015241ae91", @ANYBLOB="e9740516e69e0893a4241806f50444acaa08b702b95062871fe7f523926c4b4d607bfb"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) (async) syz_usb_disconnect(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) chdir(0x0) (async) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[], 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 22.528234485s ago: executing program 1 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000000), &(0x7f0000000340)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000600)=""/64, 0x40, 0x0, &(0x7f0000000640)=""/252, 0xfc}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000140)={0x1d, r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) 22.333274553s ago: executing program 1 (id=940): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000040)=0x81, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x800, 0x49, 0x10}, 0x18) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200200, 0x40) openat$incfs(r2, 0x0, 0x420080, 0xa0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x25, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 22.332725293s ago: executing program 44 (id=940): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000040)=0x81, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x800, 0x49, 0x10}, 0x18) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200200, 0x40) openat$incfs(r2, 0x0, 0x420080, 0xa0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x25, 0x2, {{0x200, 0x5, 0x1, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x0, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 15.551338802s ago: executing program 6 (id=982): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 15.488788718s ago: executing program 6 (id=984): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x0, 0x5, 0x4, "6689684b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 13.020675634s ago: executing program 6 (id=992): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000300030000000000ea04850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xff14310433eea38, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getitimer(0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0xfffffffd, 0xee, 0x6, 0x5, 0x0, 0x9, 0x2, 0x3}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x80) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80082000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40c0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) getpid() 12.161274227s ago: executing program 6 (id=1000): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) 12.12047038s ago: executing program 6 (id=1001): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008000) 12.029420669s ago: executing program 6 (id=1002): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000440)=0x14) 12.029236429s ago: executing program 45 (id=1002): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000440)=0x14) 6.271460111s ago: executing program 9 (id=1058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000100000000000006f23b4"]) 6.217405976s ago: executing program 9 (id=1059): syz_usb_connect(0x0, 0x35, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003215124099043e10184e01020301090223000100000000090400000800000000082403010000000009050f"], 0x0) 4.485672891s ago: executing program 7 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @private1, 0x8}, 0x1a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.410674918s ago: executing program 7 (id=1076): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a0000000500040000000000090002"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 4.376429142s ago: executing program 7 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r3, r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r4, r5}, 0xc) 3.56105775s ago: executing program 9 (id=1082): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r0, 0x4b65, 0x16) 3.56059836s ago: executing program 9 (id=1084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x65) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x50, 0x8, 0x101d, {0x2012, 0xcac}, {0x5b, 0x3}, @ramp={0x7, 0x0, {0x3, 0x1000, 0x8b50, 0x4}}}) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x5, 0x4, 0x8000000004007, 0xac, 0x3, 0x4, {0x40, 0x180, 0x20fe, 0xfffffffffffffffe, 0x87, 0x2, 0x9, 0x7fffffff, 0xfffffffe, 0xc000, 0x0, 0xee00, 0x0, 0x3fe, 0x601}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000400), 0x7f03) write$FUSE_NOTIFY_RESEND(r5, &(0x7f0000000340)={0x14}, 0x14) 3.515577274s ago: executing program 7 (id=1085): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='highspeed', 0x9) sendto$inet(r0, 0x0, 0x0, 0x2004c7f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 2.918578111s ago: executing program 4 (id=1089): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.376105553s ago: executing program 7 (id=1090): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 2.273293143s ago: executing program 9 (id=1091): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB="7baadad1a02829cec65f6feb22242c904f995f12d1eda0bca1c0ac560ea435ad627128d2868a3db1a6df746afd46e27fcd1c0a14d2c7c41a640381c638ad5968a1ea79d986133009dfef2d49b84c53d457f104e3728a54ad98e6276323"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r5 = getpgrp(0xffffffffffffffff) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket(0xa, 0x5, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1a, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xf2, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a7040f7dff39e90a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb31347fc2ba20baa8cc06a99aea4a4221e753e94bf215a02377273dfb5b0cd", 0x3f}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749", 0x1b}, {&(0x7f0000000300)}], 0x3}}], 0x2, 0x54004) 2.226895958s ago: executing program 5 (id=1093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000004c0)=@nullb, 0x0, &(0x7f00000005c0)='./file1/file0\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, 0xffffffffffffffff}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) r1 = getuid() setresuid(0xffffffffffffffff, r1, 0xee00) setreuid(r1, r1) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, r2) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x5d) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.133407467s ago: executing program 7 (id=1095): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f00000000c0)={0x40, 0xb, 0x2, "1198"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000440)={0x0, 0x24, 0x10, {0x10, 0x22, "31ecb0d66a8796a6e566cc70252e"}}, 0x0}, &(0x7f00000005c0)={0x1c, &(0x7f0000000380)={0x0, 0x17, 0x51, "eb88ce95b324cbb139cc979032b7a8509d3ba5967ef8cf5cf1282808b10daec0b38757d30c00dce0786ee4d8203139f5b52b8e976723299636c5dca8005cf20aecfc31979310f3143327990b4f9e8c6fcc"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, 0x0}) 1.643841763s ago: executing program 8 (id=1097): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.585299079s ago: executing program 8 (id=1098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendto$packet(r1, &(0x7f00000003c0)='(', 0xfffffffffffffed1, 0x24004090, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1.585080529s ago: executing program 8 (id=1099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r1, &(0x7f0000004580)=[{{&(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x20}}], 0x1, 0x20000000) 1.584880089s ago: executing program 8 (id=1100): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000380)=""/144, 0x90) pwrite64(r0, 0x0, 0x0, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.46730904s ago: executing program 4 (id=1101): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.440581713s ago: executing program 4 (id=1102): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f00000000c0)={0x0, 0x3000, 0x0, 0x0, 0x0, 0x3cd}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) 1.361479s ago: executing program 5 (id=1103): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x26) 1.36115856s ago: executing program 5 (id=1104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r1 = socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x4e1d, 0x0, @remote}}}, 0x108) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000640)=""/134, 0x86}], 0x1, 0x95, 0x10000) 1.35764773s ago: executing program 4 (id=1105): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000200)='0\x00', 0xffffff31) 1.273514649s ago: executing program 4 (id=1106): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) close(r0) 1.213194654s ago: executing program 4 (id=1107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)={0x4c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40c9}, 0x15) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) sendmsg$inet6(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5a6871908ddfe3ee43aa1160a73753ce6cab32d184de576a9f314969c1d7546399a47258ea86bbd3febfc84e58f64d32bb361e0af645bad480a103ab7d7fa2404622f26e7f7e668a4d7e5aee1276dc1d52b170003659e627d012cdf5dcb438b8ae0bf19e6c992c68011b7297da8b53655071195f55e0d68ff3a297520e", 0x7d}, {&(0x7f0000000400)="00d7dcfa632a50c7e2ca9e926aeeec4fd3a058afd83637984e4fc7799bb4d0a6d9952b4862fc0945febba09dd36d7d003a3f2bee15f73ecad8dcced49ebac0ee82b73e666fca9ee06e8fc276d930ca363e81ded9ab4bcfcfc746dde920ce0abd805d7a1139f2a0c3f865aecd944ba7dcc411355fe0fe30c6cc64fd3cc4bbefee8c1796025bb0a941efb1f7992b1f24f68f515efddd644231ab042280db0adc93716380eaf6595835be9246bd9db97a73a284f3bc2dcfeb22599809286d6a441d01abf014aba8eefcf9340f040a0bd5b63b3786b599938d86334cb1aec10768baebac305c82b7be492d10bc022fce5c4c0cff2dd7abe171558eb482156e5472f8eb8c3c4bb1750f00c0ffb2abe4bb3468f3e07bfc15f5ebbd7affadadc5047d2c82b1d075abb7c70d7a305dff7966a8f115699f773442b9b7d57173872ad693d7090b7d946c03ef5f2664400ec4f99b646a21af47f083d9b22fbfaaca86ec515a3298e94f69392bb3bd0af1ef49c7065e8ced08ade3bed0f72e9796f8365623fb405eb5a7b7ca84eb9acb24c58a1cb13c21474eb50c51f664156f53fb44a99ec636d673516c5de2a8bcf8827d6fee81b9b0c414f0eb2db33f5c8ea413b27a6db22b5090e55b9969178a5bb37bc047f59882521d0a730189c48cedd7a6571878ab68ef9fa96bc8a32f50f0c58b1e73828b9ff4194b481b72ef0cc8a0c0bc680f5ef6c81af6da535032e813a47f57f7c3eaf713c07507fa1645bc06989ceb43c0c48dcf92fb37057d4e0adece1e8b4d5b71ebb4b2b3732ecae1dae529e18056b2c21995ec2051a1453fc435c17a7a864c6761453d71d0368cc163dde0dd2423079c3b461b1271404bbb7cce5214b9733c24fb8b48c185a1d2790284848da41a6ddff3b7356ba9ed03ceb3cf346a65b4565e3a6b4dca9ff6955cc8689fc2804b0b34f45fadbd7fab3265f4d8e52c2b0fe0dc4714af1f9d3b2ca9ef9ae1a24c79ac01162ad54ee28bf1aba50a5c395f5a5632c361b070e38b", 0x2d6}], 0x2}, 0x40001080) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000700)=@ccm_128={{0x303}, "4086090000009c0c", "1929a6029d49e4cc504f4eecd2a2dfdb", "e83c5954", "129728494b4b6674"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4", 0xb) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0) 1.213007494s ago: executing program 9 (id=1108): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0xffd0) 1.013075834s ago: executing program 8 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0xa, 0x801, 0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 278.287274ms ago: executing program 5 (id=1110): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x40000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 74.146053ms ago: executing program 5 (id=1111): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x1) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 73.559414ms ago: executing program 8 (id=1112): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x6f, 0x1f, 0x4, 0x3, "d800bd430000000000957f20003d4a100a00000661e6e66b8b37ff00"}) 0s ago: executing program 5 (id=1113): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x10000000, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): le1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.193725][ T297] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 90.280922][ T2643] device wireguard0 entered promiscuous mode [ 90.559396][ T2093] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.829885][ T2093] usb 5-1: device descriptor read/64, error -71 [ 91.120744][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 91.219391][ T2093] usb 5-1: device descriptor read/64, error -71 [ 91.302327][ T2680] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.320794][ T2680] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 91.470686][ T2686] FAT-fs (loop3): Unrecognized mount option "}óµ”3¥â!‹åÖ)6>]RUŸ\*ü”Ù f*¸7%˜nNÞþÐØÆ.°J§ª" or missing value [ 91.482750][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.493704][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.503775][ T25] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 91.509478][ T2093] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.512973][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.529846][ T25] usb 2-1: config 0 descriptor?? [ 91.756315][ T2693] netlink: 64 bytes leftover after parsing attributes in process `syz.2.575'. [ 91.799471][ T2093] usb 5-1: device descriptor read/64, error -71 [ 92.000404][ T25] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 92.007645][ T25] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 92.014912][ T25] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 92.019384][ T2096] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 92.022139][ T25] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 92.036808][ T25] hid-steam 0003:28DE:1142.0009: unknown main item tag 0x0 [ 92.044540][ T25] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 92.199409][ T2093] usb 5-1: device descriptor read/64, error -71 [ 92.217729][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 92.217738][ T24] audit: type=1400 audit(1766850753.230:1401): avc: denied { connect } for pid=2699 comm="syz.3.577" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.329506][ T2093] usb usb5-port1: attempt power cycle [ 92.360141][ T2700] EXT4-fs (loop3): Test dummy encryption mode enabled [ 92.367019][ T2700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.377844][ T2700] EXT4-fs (loop3): 1 truncate cleaned up [ 92.383542][ T2700] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000006,max_dir_size_kb=0x0000000000000006,,errors=continue [ 92.403495][ T2700] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #12: comm syz.3.577: Siphash requires key [ 92.414702][ T2700] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #12: comm syz.3.577: Siphash requires key [ 92.425997][ T2096] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 92.426016][ T2700] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #12: comm syz.3.577: Siphash requires key [ 92.434436][ T2096] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 92.445556][ T2700] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #12: comm syz.3.577: Siphash requires key [ 92.455117][ T2096] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 92.473218][ T2700] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz.3.577: Siphash requires key [ 92.475717][ T2096] usb 9-1: config 220 has no interface number 2 [ 92.487181][ T2700] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz.3.577: Siphash requires key [ 92.493027][ T2096] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 92.504199][ T2700] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz.3.577: Siphash requires key [ 92.517230][ T2096] usb 9-1: config 220 interface 0 has no altsetting 0 [ 92.528178][ T2700] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz.3.577: Siphash requires key [ 92.535018][ T2096] usb 9-1: config 220 interface 76 has no altsetting 0 [ 92.546101][ T2700] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz.3.577: Siphash requires key [ 92.552775][ T2096] usb 9-1: config 220 interface 1 has no altsetting 0 [ 92.563965][ T2700] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz.3.577: Siphash requires key [ 92.633946][ T2720] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 92.642391][ T2720] device syzkaller0 entered promiscuous mode [ 92.653751][ T2725] syz.2.580[2725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.653799][ T2725] syz.2.580[2725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.739453][ T2096] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 92.760225][ T2093] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.769272][ T2096] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.778751][ T2096] usb 9-1: Product: syz [ 92.783146][ T2096] usb 9-1: Manufacturer: syz [ 92.787765][ T2096] usb 9-1: SerialNumber: syz [ 92.949441][ T2093] usb 5-1: device descriptor read/8, error -71 [ 92.960889][ T2739] F2FS-fs (loop2): invalid crc value [ 92.966989][ T2739] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.986782][ T2739] F2FS-fs (loop2): Start checkpoint disabled! [ 92.993556][ T2739] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 93.002177][ T2741] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 93.011515][ T2741] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 93.021616][ T2741] F2FS-fs (loop3): invalid crc value [ 93.044353][ T2741] F2FS-fs (loop3): Mismatch valid blocks 5 vs. 6 [ 93.050756][ T2741] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 93.055570][ T865] attempt to access beyond end of device [ 93.055570][ T865] loop2: rw=2049, want=40976, limit=40427 [ 93.159422][ T2093] usb 5-1: device descriptor read/8, error -71 [ 93.190826][ T2695] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.203042][ T2695] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 93.213197][ T2695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 93.221174][ T2695] System zones: 1-12 [ 93.240929][ T2695] EXT4-fs (loop8): orphan cleanup on readonly fs [ 93.257719][ T2695] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #11: comm syz.8.576: invalid indirect mapped block 2 (level 2) [ 93.280331][ T2695] EXT4-fs (loop8): Remounting filesystem read-only [ 93.288051][ T2695] EXT4-fs (loop8): 1 truncate cleaned up [ 93.308287][ T2695] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,usrquota,errors=remount-ro,abort [ 93.426732][ T24] audit: type=1400 audit(1766850754.440:1402): avc: denied { unmount } for pid=2758 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.479506][ T25] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 93.564878][ T24] audit: type=1400 audit(1766850754.530:1403): avc: denied { write } for pid=2767 comm="syz.4.590" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 93.668222][ T24] audit: type=1400 audit(1766850754.530:1404): avc: denied { open } for pid=2767 comm="syz.4.590" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 93.736659][ T24] audit: type=1400 audit(1766850754.750:1405): avc: denied { append } for pid=2785 comm="syz.2.593" name="event1" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.819540][ T2096] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 93.826007][ T2096] uvcvideo: No valid video chain found. [ 93.831657][ T356] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.839162][ T2096] usb 9-1: selecting invalid altsetting 0 [ 93.921886][ T2096] usb 9-1: USB disconnect, device number 6 [ 94.079439][ T356] usb 4-1: Using ep0 maxpacket: 32 [ 94.139397][ T25] usb 2-1: device descriptor read/64, error -71 [ 94.199471][ T356] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 94.244315][ T356] usb 4-1: config 2 has no interface number 0 [ 94.250683][ T356] usb 4-1: config 2 interface 88 has no altsetting 0 [ 94.409438][ T356] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 94.418573][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.426921][ T356] usb 4-1: Product: syz [ 94.431366][ T356] usb 4-1: Manufacturer: syz [ 94.435953][ T356] usb 4-1: SerialNumber: syz [ 94.512114][ T2797] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 94.519913][ T2797] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 94.530146][ T2797] F2FS-fs (loop8): Found nat_bits in checkpoint [ 94.549384][ T25] usb 2-1: device descriptor read/64, error -71 [ 94.550672][ T2797] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 94.562799][ T2797] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 94.577935][ T24] audit: type=1400 audit(1766850755.590:1406): avc: denied { rename } for pid=2796 comm="syz.8.598" name="bus" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.599614][ T24] audit: type=1400 audit(1766850755.590:1407): avc: denied { rmdir } for pid=2796 comm="syz.8.598" name="file0" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.639391][ T2093] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 94.819407][ T25] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 94.999418][ T2093] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 95.007507][ T2093] usb 5-1: config 1 has no interface number 0 [ 95.013656][ T2093] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 95.023328][ T2093] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 95.032979][ T2093] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 95.089387][ T25] usb 2-1: device descriptor read/64, error -71 [ 95.199464][ T2093] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 95.208551][ T2093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.216565][ T2093] usb 5-1: Product: syz [ 95.237709][ T2093] usb 5-1: Manufacturer: syz [ 95.242471][ T2093] usb 5-1: SerialNumber: syz [ 95.269467][ T2794] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 95.319051][ T2805] netlink: 164 bytes leftover after parsing attributes in process `syz.8.599'. [ 95.479373][ T25] usb 2-1: device descriptor read/64, error -71 [ 95.749408][ T25] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 95.779438][ T356] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 95.789556][ T356] asix: probe of 4-1:2.88 failed with error -71 [ 95.797019][ T356] usb 4-1: USB disconnect, device number 5 [ 95.853835][ T528] usb 5-1: USB disconnect, device number 7 [ 95.868784][ T24] audit: type=1400 audit(1766850756.880:1408): avc: denied { create } for pid=2810 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 95.935823][ T2815] kvm [2814]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 95.945107][ T2815] kvm [2814]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 95.949477][ T25] usb 2-1: device descriptor read/8, error -71 [ 96.209207][ T24] audit: type=1400 audit(1766850757.220:1409): avc: denied { map } for pid=2823 comm="syz.8.605" path="socket:[25278]" dev="sockfs" ino=25278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 96.232216][ T25] usb 2-1: device descriptor read/8, error -71 [ 96.251520][ T24] audit: type=1400 audit(1766850757.270:1410): avc: denied { bind } for pid=2825 comm="syz.8.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.316217][ T2826] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 96.346794][ T2835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 96.356274][ T2835] device bridge_slave_1 left promiscuous mode [ 96.367048][ T2835] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.375113][ T2835] device bridge_slave_0 left promiscuous mode [ 96.381310][ T2835] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.509414][ T25] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 96.812894][ T2852] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.2.612: corrupted xattr block 95 [ 96.835765][ T2852] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.612: bg 0: block 7: invalid block bitmap [ 96.848992][ T2852] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 96.872351][ T2852] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2931: inode #11: comm syz.2.612: corrupted xattr block 95 [ 96.885491][ T2852] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 96.896147][ T2862] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 96.896526][ T2852] EXT4-fs (loop2): 1 orphan inode deleted [ 96.908277][ T2852] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 96.909425][ T25] usb 2-1: device descriptor read/8, error -71 [ 96.923463][ T279] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 96.939656][ T2852] netlink: 164 bytes leftover after parsing attributes in process `syz.2.612'. [ 96.948875][ T2852] netlink: 164 bytes leftover after parsing attributes in process `syz.2.612'. [ 96.957911][ T2852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.612'. [ 97.127852][ T2866] syz.2.612[2866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.128111][ T2866] syz.2.612[2866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.229914][ T25] usb 2-1: device descriptor read/8, error -71 [ 97.525423][ T335] usb 2-1: USB disconnect, device number 8 [ 97.659904][ T279] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.707548][ T279] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.727860][ T279] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 97.743400][ T279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.779653][ T2869] netlink: 'syz.3.617': attribute type 15 has an invalid length. [ 97.789074][ T279] usb 9-1: config 0 descriptor?? [ 97.797526][ T2869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.617'. [ 97.834830][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 97.834839][ T24] audit: type=1400 audit(1766850758.850:1420): avc: denied { bind } for pid=2868 comm="syz.3.617" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.864572][ T2870] ‚ÔY]î>: renamed from pim6reg1 [ 97.876781][ T24] audit: type=1400 audit(1766850758.890:1421): avc: denied { name_bind } for pid=2868 comm="syz.3.617" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 97.897909][ T24] audit: type=1400 audit(1766850758.890:1422): avc: denied { node_bind } for pid=2868 comm="syz.3.617" saddr=ff02::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 98.109854][ T2886] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.220124][ T2886] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,nogrpid,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,stripe=0x000000000000a40c,resuid=0x0000000000000000,quota,,errors=continue [ 98.264368][ T24] audit: type=1400 audit(1766850759.280:1423): avc: denied { read } for pid=2885 comm="syz.3.621" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.305947][ T279] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0 [ 98.326201][ T279] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 98.480243][ T279] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 98.500633][ T24] audit: type=1400 audit(1766850759.370:1424): avc: denied { write } for pid=2892 comm="syz.4.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.521360][ T279] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 98.549756][ T24] audit: type=1326 audit(1766850759.570:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2913 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd067cfc749 code=0x7ffc0000 [ 98.573113][ T24] audit: type=1326 audit(1766850759.570:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2913 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd067cfc749 code=0x7ffc0000 [ 98.596732][ T24] audit: type=1326 audit(1766850759.580:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2913 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd067cfc749 code=0x7ffc0000 [ 98.599429][ T279] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 98.628297][ T24] audit: type=1326 audit(1766850759.610:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2913 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd067cfc749 code=0x7ffc0000 [ 98.655412][ T24] audit: type=1326 audit(1766850759.660:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2913 comm="syz.2.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd067cfc749 code=0x7ffc0000 [ 98.657676][ T279] hid-steam 0003:28DE:1142.000A: No HID_FEATURE_REPORT submitted - nothing to read [ 98.724700][ T279] usb 9-1: USB disconnect, device number 7 [ 98.744392][ T279] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 99.016949][ T2943] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.039409][ T335] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 99.156545][ T2962] SELinux: duplicate or incompatible mount options [ 99.409421][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.420519][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.430294][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 99.437782][ T335] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 99.446857][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.469123][ T335] usb 4-1: config 0 descriptor?? [ 99.829568][ T25] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 99.838325][ T25] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 99.849798][ T25] usb 2-1: config 220 has no interface number 2 [ 99.856286][ T25] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 99.870479][ T25] usb 2-1: config 220 interface 0 has no altsetting 0 [ 99.877399][ T25] usb 2-1: config 220 interface 76 has no altsetting 0 [ 99.885165][ T25] usb 2-1: config 220 interface 1 has no altsetting 0 [ 99.972211][ T335] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 100.012858][ T335] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input5 [ 100.129745][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 100.148839][ T335] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 100.197397][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.283550][ T2971] overlayfs: invalid origin (0000) [ 100.289135][ T2974] overlayfs: filesystem on './file0' not supported as upperdir [ 100.302562][ T25] usb 2-1: Product: syz [ 100.307766][ T25] usb 2-1: Manufacturer: syz [ 100.312634][ T25] usb 2-1: SerialNumber: syz [ 100.493389][ T2988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=2988 comm=syz.8.642 [ 100.599883][ T2962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.636'. [ 100.611935][ T2988] erofs: (device loop8): mounted with root inode @ nid 36. [ 100.637397][ T2988] netlink: 128 bytes leftover after parsing attributes in process `syz.8.642'. [ 100.650252][ T2988] netlink: 8 bytes leftover after parsing attributes in process `syz.8.642'. [ 100.719373][ T2096] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 100.729841][ T2993] EXT4-fs (loop2): Unrecognized mount option "hash" or missing value [ 100.739465][ T25] usb 2-1: selecting invalid altsetting 0 [ 100.745537][ T25] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 100.752178][ T25] uvcvideo: No valid video chain found. [ 100.796633][ T2998] netlink: 28 bytes leftover after parsing attributes in process `syz.8.644'. [ 100.832683][ T25] usb 2-1: USB disconnect, device number 9 [ 100.870887][ T2998] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 100.883956][ T2998] EXT4-fs error (device loop8): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 100.898594][ T2998] EXT4-fs (loop8): 1 truncate cleaned up [ 100.904293][ T2998] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue [ 101.052896][ T3002] F2FS-fs (loop2): invalid crc value [ 101.059746][ T3002] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.081168][ T3002] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.102878][ T1359] attempt to access beyond end of device [ 101.102878][ T1359] loop2: rw=524288, want=45072, limit=40427 [ 101.114402][ T1359] attempt to access beyond end of device [ 101.114402][ T1359] loop2: rw=0, want=45072, limit=40427 [ 101.125489][ T2096] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 101.136343][ T2096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.164726][ T2096] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.182730][ T2096] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 101.220009][ T2189] attempt to access beyond end of device [ 101.220009][ T2189] loop2: rw=2049, want=40992, limit=40427 [ 101.269436][ T2096] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 101.278842][ T3019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.649'. [ 101.288247][ T2096] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 101.298878][ T3019] device batadv_slave_0 entered promiscuous mode [ 101.311407][ T2096] usb 5-1: Manufacturer: syz [ 101.367129][ T2096] usb 5-1: config 0 descriptor?? [ 101.810432][ T297] device bridge_slave_1 left promiscuous mode [ 101.816662][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.824403][ T297] device bridge_slave_0 left promiscuous mode [ 101.830759][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.838777][ T297] device veth1_macvtap left promiscuous mode [ 101.845105][ T297] device veth0_vlan left promiscuous mode [ 101.860725][ T2096] appleir 0003:05AC:8243.000D: item fetching failed at offset 0/1 [ 101.881986][ T2096] appleir 0003:05AC:8243.000D: parse failed [ 101.898677][ T2096] appleir: probe of 0003:05AC:8243.000D failed with error -22 [ 102.039479][ T3017] device batadv_slave_0 left promiscuous mode [ 102.054908][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.062267][ T3023] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.070102][ T3023] device bridge_slave_0 entered promiscuous mode [ 102.080388][ T2096] usb 4-1: USB disconnect, device number 6 [ 102.096894][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.117669][ T3023] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.139702][ T3023] device bridge_slave_1 entered promiscuous mode [ 102.193049][ T3023] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.200117][ T3023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.207362][ T3023] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.214377][ T3023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.339619][ T3028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 103.389465][ T24] kauditd_printk_skb: 77 callbacks suppressed [ 103.389476][ T24] audit: type=1326 audit(1766850764.410:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.8.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 103.419110][ T24] audit: type=1326 audit(1766850764.410:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.8.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 103.443353][ T24] audit: type=1326 audit(1766850764.410:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.8.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 103.509465][ T24] audit: type=1326 audit(1766850764.530:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.8.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 103.532896][ T24] audit: type=1326 audit(1766850764.530:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.8.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 103.556459][ T24] audit: type=1326 audit(1766850764.530:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.8.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 103.629667][ T24] audit: type=1326 audit(1766850764.650:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.8.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 103.653069][ T24] audit: type=1326 audit(1766850764.650:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.8.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 103.676948][ T2189] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.677956][ T279] usb 5-1: USB disconnect, device number 8 [ 103.691706][ T2189] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.716436][ T24] audit: type=1326 audit(1766850764.650:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.8.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 103.739786][ T24] audit: type=1326 audit(1766850764.670:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3009 comm="syz.8.647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 103.797941][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.805588][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.819431][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.827764][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.835942][ T2189] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.842990][ T2189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.851038][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.861390][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.869588][ T2189] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.876615][ T2189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.887006][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.895024][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.904346][ T3043] EXT4-fs (loop8): Ignoring removed orlov option [ 103.919528][ T3043] EXT4-fs (loop8): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000000,,errors=continue [ 103.940331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.951463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.960961][ T3043] netlink: 8 bytes leftover after parsing attributes in process `syz.8.656'. [ 104.038987][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.047755][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.062686][ T3023] device veth0_vlan entered promiscuous mode [ 104.071625][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.079980][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.095490][ T3023] device veth1_macvtap entered promiscuous mode [ 104.102280][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.110408][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.117964][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.126411][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.135194][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.150289][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.158640][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.168709][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.178834][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.542679][ T3062] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 104.551288][ T3062] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 104.622299][ T3062] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.665954][ T3062] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 104.739398][ T3062] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.985886][ T3080] APIC base relocation is unsupported by KVM [ 105.189766][ T3097] raw_sendmsg: syz.3.667 forgot to set AF_INET. Fix it! [ 105.361236][ T3119] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 105.381836][ T3119] EXT4-fs (loop3): Test dummy encryption mode enabled [ 105.404967][ T3119] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 105.417655][ T3119] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.454549][ T3119] EXT4-fs (loop3): 1 truncate cleaned up [ 105.472415][ T3119] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 105.608507][ T2015] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /63/bus/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=1084607300, rec_len=47915, size=1024 fake=0 [ 105.638998][ T2015] EXT4-fs (loop3): Remounting filesystem read-only [ 105.901974][ T3127] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 105.909457][ T3127] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 105.921435][ T9] tipc: Left network mode [ 105.940973][ T3127] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.978325][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.985524][ T3132] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.996327][ T3127] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 106.001365][ T3132] device bridge_slave_0 entered promiscuous mode [ 106.009367][ T3127] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.014123][ T3132] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.024211][ T3132] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.031791][ T3132] device bridge_slave_1 entered promiscuous mode [ 106.094318][ T2157] attempt to access beyond end of device [ 106.094318][ T2157] loop1: rw=2049, want=45104, limit=40427 [ 106.131959][ T3132] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.139001][ T3132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.146260][ T3132] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.153284][ T3132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.161094][ T443] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 106.209481][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.222357][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.231408][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.257720][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.268651][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.286043][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.304447][ T3132] device veth0_vlan entered promiscuous mode [ 106.310835][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.312135][ T3152] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 106.318776][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.338547][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.349744][ T3152] 9pnet: Insufficient options for proto=fd [ 106.352067][ T3132] device veth1_macvtap entered promiscuous mode [ 106.424834][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.451496][ T443] usb 9-1: Using ep0 maxpacket: 32 [ 106.511673][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.535368][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.553975][ T3160] incfs: Error accessing: ./file0. [ 106.563169][ T3160] incfs: mount failed -20 [ 106.833963][ T3163] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,init_itable,,errors=continue [ 106.848234][ T3163] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.179476][ T443] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.265152][ T443] usb 9-1: config 0 interface 0 has no altsetting 0 [ 107.341743][ T443] usb 9-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 107.355779][ T3163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.679'. [ 107.370308][ T3173] netlink: 'syz.4.689': attribute type 3 has an invalid length. [ 107.378022][ T443] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.386330][ T3173] netlink: 'syz.4.689': attribute type 3 has an invalid length. [ 107.424186][ T443] usb 9-1: config 0 descriptor?? [ 107.592541][ T3178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.609127][ T9] device veth1_macvtap left promiscuous mode [ 107.615167][ T9] device veth0_vlan left promiscuous mode [ 108.002536][ T2091] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 108.004242][ T443] lg-g15 0003:046D:C225.000E: unknown main item tag 0x0 [ 108.055883][ T443] lg-g15 0003:046D:C225.000E: unknown main item tag 0x0 [ 108.082177][ T443] lg-g15 0003:046D:C225.000E: item fetching failed at offset 5/6 [ 108.193074][ T443] lg-g15: probe of 0003:046D:C225.000E failed with error -22 [ 108.315183][ T443] usb 9-1: USB disconnect, device number 8 [ 108.623867][ T24] kauditd_printk_skb: 108 callbacks suppressed [ 108.623879][ T24] audit: type=1400 audit(1766850769.640:1625): avc: denied { read } for pid=3194 comm="syz.4.696" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.048176][ T3200] input: syz1 as /devices/virtual/input/input6 [ 109.054380][ T3200] input: failed to attach handler leds to device input6, error: -6 [ 109.139481][ T337] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 109.245200][ T2091] usb 8-1: Using ep0 maxpacket: 32 [ 109.389934][ T2091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.400852][ T2091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.410622][ T2091] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.419722][ T2091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.428226][ T2091] usb 8-1: config 0 descriptor?? [ 109.449377][ T337] usb 2-1: device descriptor read/64, error -71 [ 109.485818][ T2091] hub 8-1:0.0: USB hub found [ 109.723558][ T2091] hub 8-1:0.0: 1 port detected [ 109.764995][ T3225] EXT4-fs (loop0): Ignoring removed nobh option [ 109.772131][ T3225] EXT4-fs (loop0): Test dummy encryption mode enabled [ 109.849430][ T337] usb 2-1: device descriptor read/64, error -71 [ 109.862257][ T2096] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 109.886811][ T3225] EXT4-fs error (device loop0): __ext4_iget:5022: inode #11: block 1: comm syz.0.704: invalid block [ 109.898075][ T3225] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.704: couldn't read orphan inode 11 (err -117) [ 109.910943][ T3225] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000003,bsddf,nodiscard,sysvgroups,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 109.945417][ T3224] EXT4-fs (loop0): Unrecognized mount option "sched_switch" or missing value [ 109.945913][ T24] audit: type=1400 audit(1766850770.960:1626): avc: denied { remount } for pid=3222 comm="syz.0.704" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.954369][ T2091] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 109.980347][ T2091] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 109.980910][ T3224] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 109.995642][ T3224] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 110.003383][ T3224] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 110.011029][ T3224] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 110.018966][ T3224] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 110.026764][ T3224] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 110.034902][ T3224] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 110.089867][ T2091] usbhid 8-1:0.0: can't add hid device: -71 [ 110.095891][ T2091] usbhid: probe of 8-1:0.0 failed with error -71 [ 110.105043][ T24] audit: type=1400 audit(1766850771.130:1627): avc: denied { setattr } for pid=3228 comm="syz.0.705" name="RAWv6" dev="sockfs" ino=28249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.127809][ T337] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 110.138707][ T2091] usb 8-1: USB disconnect, device number 3 [ 110.196132][ T3232] 9pnet: Could not find request transport: fd0x0000000000000006 [ 110.387013][ T24] audit: type=1326 audit(1766850771.400:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3239 comm="syz.4.708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003e147749 code=0x0 [ 110.409901][ T337] usb 2-1: device descriptor read/64, error -71 [ 110.418205][ T24] audit: type=1326 audit(1766850771.430:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3239 comm="syz.4.708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f003e147749 code=0x0 [ 110.509473][ T2096] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 110.518582][ T2096] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.526619][ T2096] usb 9-1: Product: syz [ 110.530825][ T2096] usb 9-1: Manufacturer: syz [ 110.535436][ T2096] usb 9-1: SerialNumber: syz [ 110.624566][ T3248] device veth0 entered promiscuous mode [ 110.630363][ T3247] device veth0 left promiscuous mode [ 110.655186][ T24] audit: type=1400 audit(1766850771.670:1630): avc: denied { create } for pid=3249 comm="syz.7.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.686495][ T3252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.712'. [ 110.813186][ T337] usb 2-1: device descriptor read/64, error -71 [ 110.925311][ T24] audit: type=1326 audit(1766850771.940:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 110.948716][ T24] audit: type=1326 audit(1766850771.940:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 110.949449][ T337] usb usb2-port1: attempt power cycle [ 110.972194][ T24] audit: type=1326 audit(1766850771.940:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 111.001428][ T24] audit: type=1326 audit(1766850771.940:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz.4.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 111.039403][ T2091] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 111.399484][ T2091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.419422][ T2091] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.429161][ T2091] usb 8-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 111.439370][ T337] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 111.459408][ T2091] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.472245][ T2091] usb 8-1: config 0 descriptor?? [ 111.529384][ T3269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3269 comm=syz.8.716 [ 111.619407][ T337] usb 2-1: device descriptor read/8, error -71 [ 111.859414][ T337] usb 2-1: device descriptor read/8, error -71 [ 111.951072][ T2091] itetech 0003:06CB:2968.000F: item fetching failed at offset 5/7 [ 111.962491][ T2091] itetech: probe of 0003:06CB:2968.000F failed with error -22 [ 112.041063][ T3293] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 112.050697][ T3293] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.151334][ T279] usb 8-1: USB disconnect, device number 4 [ 112.469769][ T2091] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.710329][ T2091] usb 1-1: Using ep0 maxpacket: 16 [ 112.839522][ T2091] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.851520][ T2091] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.861749][ T2091] usb 1-1: config 0 has no interface number 0 [ 112.875663][ T3326] SELinux: Context system_u:object_r:su_ is not valid (left unmapped). [ 112.937637][ T3326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3326 comm=syz.7.731 [ 113.052317][ T2091] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 113.068200][ T2091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.076634][ T2091] usb 1-1: Product: syz [ 113.080836][ T2091] usb 1-1: Manufacturer: syz [ 113.085429][ T2091] usb 1-1: SerialNumber: syz [ 113.090965][ T2091] usb 1-1: config 0 descriptor?? [ 113.156262][ T2091] snd-usb-audio: probe of 1-1:0.1 failed with error -2 [ 113.163230][ T2096] rtl8150 9-1:1.0: couldn't reset the device [ 113.176522][ T2096] rtl8150: probe of 9-1:1.0 failed with error -5 [ 113.190996][ T2096] usb 9-1: USB disconnect, device number 9 [ 113.504008][ T2092] usb 1-1: USB disconnect, device number 8 [ 113.840812][ T3362] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 114.042733][ T1159] EXT4-fs error (device loop8): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 114.109376][ T337] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 114.324011][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 114.324022][ T24] audit: type=1400 audit(1766850775.340:1676): avc: denied { create } for pid=3380 comm="syz.7.747" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 114.351680][ T337] usb 2-1: Using ep0 maxpacket: 8 [ 114.358948][ T24] audit: type=1326 audit(1766850775.380:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 114.382445][ T24] audit: type=1326 audit(1766850775.380:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 114.405815][ T24] audit: type=1326 audit(1766850775.380:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 114.432241][ T3371] F2FS-fs (loop0): fault_type options not supported [ 114.447669][ T24] audit: type=1326 audit(1766850775.380:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 114.471133][ T24] audit: type=1326 audit(1766850775.380:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 114.489081][ T3381] blk_update_request: I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.502769][ T24] audit: type=1326 audit(1766850775.380:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 114.508634][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.531898][ T24] audit: type=1326 audit(1766850775.380:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 114.543273][ T3381] FAT-fs (loop15): unable to read boot sector [ 114.565743][ T24] audit: type=1326 audit(1766850775.380:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 114.572177][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.595041][ T24] audit: type=1326 audit(1766850775.380:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3380 comm="syz.7.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 114.605070][ T337] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 114.637709][ T3371] F2FS-fs (loop0): invalid crc value [ 114.637961][ T3384] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 114.652934][ T3384] SELinux: failed to load policy [ 114.659716][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.678333][ T3371] F2FS-fs (loop0): Found nat_bits in checkpoint [ 114.713748][ T3371] F2FS-fs (loop0): Start checkpoint disabled! [ 114.720244][ T3371] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 114.742598][ T3388] xt_bpf: check failed: parse error [ 114.781307][ T337] usb 2-1: config 0 descriptor?? [ 114.838889][ T3392] binder: 3386:3392 ioctl 4018620d 0 returned -22 [ 115.030132][ T3328] netlink: 'syz.1.732': attribute type 2 has an invalid length. [ 115.176619][ T3403] udc-core: couldn't find an available UDC or it's busy [ 115.183681][ T3403] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.283617][ T3412] FAT-fs (loop8): bogus number of FAT sectors [ 115.289736][ T3412] FAT-fs (loop8): Can't find a valid FAT filesystem [ 115.370278][ T337] cherry 0003:046A:0027.0010: unknown main item tag 0x2 [ 115.377499][ T337] cherry 0003:046A:0027.0010: unknown main item tag 0x5 [ 115.384638][ T337] cherry 0003:046A:0027.0010: unknown global tag 0xc [ 115.391496][ T337] cherry 0003:046A:0027.0010: item 0 1 1 12 parsing failed [ 115.398893][ T337] cherry: probe of 0003:046A:0027.0010 failed with error -22 [ 115.577786][ T2093] usb 2-1: USB disconnect, device number 14 [ 115.669411][ T2096] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 115.869371][ T2091] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.941819][ T2096] usb 8-1: Using ep0 maxpacket: 32 [ 116.059479][ T2096] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.303638][ T2096] usb 8-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 116.313311][ T2096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.322866][ T2096] usb 8-1: config 0 descriptor?? [ 116.702770][ T3401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.754'. [ 116.969411][ T2091] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 116.977552][ T2091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.988459][ T2091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.998198][ T2091] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.011188][ T2091] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.020229][ T2091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.028769][ T2091] usb 1-1: config 0 descriptor?? [ 117.071323][ T2096] hid-generic 0003:17EF:60A3.0011: hidraw0: USB HID v0.80 Device [HID 17ef:60a3] on usb-dummy_hcd.7-1/input0 [ 117.170383][ T3457] bridge0: port 3(vlan2) entered blocking state [ 117.176733][ T3457] bridge0: port 3(vlan2) entered disabled state [ 117.306952][ T3467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 117.317574][ T3467] device veth1_macvtap left promiscuous mode [ 117.318528][ T2090] usb 8-1: USB disconnect, device number 5 [ 117.479379][ T443] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 117.510217][ T2091] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 117.518295][ T2091] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 117.527231][ T2091] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 117.759427][ T443] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 117.802258][ T25] usb 1-1: USB disconnect, device number 9 [ 117.879379][ T443] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 117.886945][ T443] usb 2-1: can't read configurations, error -61 [ 118.039369][ T443] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 118.373142][ T443] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 118.593970][ T3132] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 118.601897][ T3132] FAT-fs (loop7): Filesystem has been set read-only [ 118.629418][ T443] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 118.637008][ T443] usb 2-1: can't read configurations, error -61 [ 118.643560][ T443] usb usb2-port1: attempt power cycle [ 119.049397][ T443] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 119.059435][ T2090] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 119.179459][ T443] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 119.251603][ T3510] SELinux: ebitmap: truncated map [ 119.262681][ T3510] SELinux: failed to load policy [ 119.299415][ T443] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 119.307098][ T443] usb 2-1: can't read configurations, error -61 [ 119.353626][ T24] kauditd_printk_skb: 219 callbacks suppressed [ 119.353636][ T24] audit: type=1400 audit(1766850780.370:1905): avc: denied { write } for pid=3511 comm="syz.8.783" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 119.378985][ T2090] usb 8-1: Using ep0 maxpacket: 32 [ 119.747158][ T443] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 119.760763][ T3508] netlink: 'syz.0.781': attribute type 16 has an invalid length. [ 119.768853][ T3508] netlink: 'syz.0.781': attribute type 17 has an invalid length. [ 119.777195][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 119.785271][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 119.793232][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 119.800623][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 119.807924][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 119.817487][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 119.825024][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 119.832650][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 119.840279][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 119.847734][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 119.855465][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 119.863112][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 119.870748][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 119.878491][ T3508] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 119.889411][ T2090] usb 8-1: unable to get BOS descriptor or descriptor too short [ 119.889598][ T443] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 119.904871][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 119.913567][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.922274][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 119.930340][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.938449][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.944148][ T3530] F2FS-fs (loop8): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 119.946983][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.954361][ T3530] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 119.963005][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.971363][ T3530] F2FS-fs (loop8): invalid crc value [ 119.978601][ T2189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.991380][ T2090] usb 8-1: config 2 has an invalid interface number: 189 but max is 0 [ 119.999682][ T2090] usb 8-1: config 2 has no interface number 0 [ 120.000591][ T3530] F2FS-fs (loop8): Found nat_bits in checkpoint [ 120.006241][ T2090] usb 8-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 120.029442][ T443] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 120.037172][ T443] usb 2-1: can't read configurations, error -61 [ 120.040957][ T2090] usb 8-1: config 2 interface 189 has no altsetting 0 [ 120.043983][ T443] usb usb2-port1: unable to enumerate USB device [ 120.053116][ T3530] F2FS-fs (loop8): Start checkpoint disabled! [ 120.063602][ T3530] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 120.070798][ T3530] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 120.173865][ T24] audit: type=1326 audit(1766850781.190:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 120.197384][ T24] audit: type=1326 audit(1766850781.210:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 120.233438][ T24] audit: type=1326 audit(1766850781.210:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 120.257415][ T24] audit: type=1326 audit(1766850781.210:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 120.269634][ T2090] usb 8-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 120.290334][ T2090] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.298302][ T2090] usb 8-1: Product: syz [ 120.302526][ T24] audit: type=1326 audit(1766850781.210:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 120.302542][ T24] audit: type=1326 audit(1766850781.210:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 120.302558][ T24] audit: type=1326 audit(1766850781.210:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 120.302573][ T24] audit: type=1326 audit(1766850781.210:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 120.302588][ T24] audit: type=1326 audit(1766850781.210:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3541 comm="syz.4.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f003e147749 code=0x7ffc0000 [ 120.440644][ T3544] EXT4-fs (loop1): Ignoring removed bh option [ 120.642133][ T3544] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue [ 120.651846][ T2090] usb 8-1: Manufacturer: syz [ 120.663720][ T3544] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.674035][ T2090] usb 8-1: SerialNumber: syz [ 120.719392][ T2091] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 120.731511][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 121.106864][ T2091] usb 9-1: Using ep0 maxpacket: 8 [ 121.219428][ T2090] usb 8-1: unknown interface protocol 0x3b, assuming v1 [ 121.226460][ T2090] usb 8-1: 189:2 : does not exist [ 121.231738][ T2091] usb 9-1: config 0 has an invalid interface number: 31 but max is 0 [ 121.246396][ T2091] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.476655][ T2090] usb 8-1: USB disconnect, device number 6 [ 121.484020][ T2091] usb 9-1: config 0 has no interface number 0 [ 121.649671][ T2091] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 121.658759][ T2091] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.666837][ T2091] usb 9-1: Product: syz [ 121.671019][ T2091] usb 9-1: Manufacturer: syz [ 121.675585][ T2091] usb 9-1: SerialNumber: syz [ 121.680973][ T2091] usb 9-1: config 0 descriptor?? [ 121.769375][ T2093] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 121.879417][ T2088] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 122.020587][ T3604] netlink: 48 bytes leftover after parsing attributes in process `syz.4.803'. [ 122.029991][ T3604] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 122.045791][ T3606] fuse: Bad value for 'user_id' [ 122.051320][ T3607] fuse: Bad value for 'user_id' [ 122.097111][ T279] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 122.139518][ T2093] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.150473][ T2088] usb 1-1: Using ep0 maxpacket: 16 [ 122.155639][ T2093] usb 2-1: New USB device found, idVendor=056a, idProduct=0069, bcdDevice= 0.00 [ 122.164862][ T2091] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 122.171373][ T2093] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.179487][ T2091] uvcvideo: No valid video chain found. [ 122.200755][ T2093] usb 2-1: config 0 descriptor?? [ 122.269463][ T2088] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 122.277636][ T2088] usb 1-1: config 1 has no interface number 0 [ 122.283948][ T2088] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 122.293931][ T2088] usb 1-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.306961][ T2088] usb 1-1: config 1 interface 105 has no altsetting 0 [ 122.349369][ T279] usb 8-1: Using ep0 maxpacket: 32 [ 122.469398][ T2088] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 122.478423][ T2088] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.489630][ T279] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.499362][ T2088] usb 1-1: Product: syz [ 122.500610][ T279] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.504613][ T2088] usb 1-1: Manufacturer: syz [ 122.504621][ T2088] usb 1-1: SerialNumber: syz [ 122.539685][ T3598] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.680325][ T2093] wacom 0003:056A:0069.0013: unknown main item tag 0x0 [ 122.687413][ T2093] wacom 0003:056A:0069.0013: Unknown device_type for 'HID 056a:0069'. Assuming pen. [ 122.697508][ T2093] wacom 0003:056A:0069.0013: hidraw0: USB HID v0.00 Device [HID 056a:0069] on usb-dummy_hcd.1-1/input0 [ 122.709470][ T2093] input: Wacom Bamboo1 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0069.0013/input/input8 [ 122.709489][ T279] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 122.751754][ T279] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 122.767640][ T279] usb 8-1: Product: syz [ 122.773470][ T279] usb 8-1: Manufacturer: syz [ 122.779653][ T3598] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 122.829529][ T2088] aqc111: probe of 1-1:1.105 failed with error -22 [ 122.839822][ T2088] usb 1-1: USB disconnect, device number 10 [ 122.840244][ T279] hub 8-1:4.0: USB hub found [ 122.899937][ T335] usb 2-1: USB disconnect, device number 19 [ 122.931156][ T443] usb 9-1: USB disconnect, device number 10 [ 122.958799][ T9] attempt to access beyond end of device [ 122.958799][ T9] loop8: rw=2049, want=40976, limit=40427 [ 123.049428][ T279] hub 8-1:4.0: 2 ports detected [ 123.522439][ T3633] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 123.524967][ T3600] EXT4-fs warning (device loop7): ext4_xattr_inode_get:495: inode #11: comm syz.7.802: ea_inode file size=0 entry size=6 [ 123.536560][ T3633] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 123.543417][ T3600] ------------[ cut here ]------------ [ 123.556640][ T3600] EA inode 11 i_nlink=2 [ 123.556745][ T3600] WARNING: CPU: 0 PID: 3600 at fs/ext4/xattr.c:1018 ext4_xattr_inode_update_ref+0x4ad/0x510 [ 123.566982][ T3633] F2FS-fs (loop0): invalid crc value [ 123.571593][ T3600] Modules linked in: [ 123.580505][ T3600] CPU: 0 PID: 3600 Comm: syz.7.802 Not tainted syzkaller #0 [ 123.585051][ T3633] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.587828][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.604831][ T3600] RIP: 0010:ext4_xattr_inode_update_ref+0x4ad/0x510 [ 123.611484][ T3600] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 34 d0 be ff 49 8b 37 48 c7 c7 a0 90 0c 85 89 da e8 03 c3 90 02 <0f> 0b 4c 8b 6c 24 10 4c 8b 7c 24 08 4c 8d 64 24 60 e9 b4 fe ff ff [ 123.620718][ T3633] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 123.631261][ T3600] RSP: 0018:ffffc900045f7240 EFLAGS: 00010246 [ 123.638154][ T3633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.638168][ T3600] [ 123.654145][ T3600] RAX: 2769ab41ed520a00 RBX: 0000000000000002 RCX: ffff88811e4fe2c0 [ 123.663220][ T3600] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 123.673677][ T3600] RBP: ffffc900045f7330 R08: dffffc0000000000 R09: ffffed103ee04e8b [ 123.751634][ T3600] R10: ffffed103ee04e8b R11: 1ffff1103ee04e8a R12: ffffc900045f72a0 [ 123.801860][ T3600] R13: ffff888134882af0 R14: dffffc0000000000 R15: ffff888134882b30 [ 123.810773][ T3600] FS: 00007f52471886c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 123.820055][ T3600] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.826867][ T3600] CR2: 00002000000000c0 CR3: 000000010cd73000 CR4: 00000000003506a0 [ 123.835274][ T3600] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.843440][ T3600] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 123.853426][ T3600] Call Trace: [ 123.856842][ T3600] ? ext4_xattr_block_csum+0x500/0x500 [ 123.863337][ T3600] ? ext4_xattr_inode_dec_ref_all+0x375/0xee0 [ 123.869931][ T3600] ext4_xattr_inode_dec_ref_all+0x92b/0xee0 [ 123.876140][ T3600] ? ext4_xattr_delete_inode+0xbf0/0xbf0 [ 123.882175][ T3600] ? __ext4_journal_ensure_credits+0x430/0x430 [ 123.891667][ T3600] ? ext4_get_inode_loc+0x100/0x130 [ 123.896866][ T3600] ext4_xattr_delete_inode+0xa2a/0xbf0 [ 123.902444][ T3600] ? ext4_truncate+0xe60/0x1290 [ 123.907295][ T3600] ? ext4_expand_extra_isize_ea+0x1a10/0x1a10 [ 123.913430][ T3600] ext4_evict_inode+0x10d3/0x1760 [ 123.918460][ T3600] ? _raw_spin_unlock+0x4d/0x70 [ 123.923632][ T3600] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 123.930011][ T3600] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 123.935947][ T3600] evict+0x478/0x910 [ 123.945308][ T3600] ? mode_strip_sgid+0x160/0x160 [ 123.950761][ T3600] ? __kasan_check_write+0x14/0x20 [ 123.955942][ T3600] iput+0x638/0x7c0 [ 123.960284][ T3600] ext4_orphan_cleanup+0x96c/0xd30 [ 123.965700][ T3600] ext4_fill_super+0x8452/0x8b60 [ 123.976877][ T3600] ? ext4_mount+0x40/0x40 [ 123.981386][ T3600] ? sysvec_reschedule_ipi+0x69/0x70 [ 123.991222][ T3600] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 123.996999][ T3600] ? set_blocksize+0x1fe/0x3c0 [ 124.001888][ T3600] ? sb_set_blocksize+0xaa/0xf0 [ 124.006844][ T3600] mount_bdev+0x28b/0x3a0 [ 124.011479][ T3600] ? ext4_mount+0x40/0x40 [ 124.015881][ T3600] ext4_mount+0x34/0x40 [ 124.020160][ T3600] legacy_get_tree+0xed/0x190 [ 124.024895][ T3600] ? ext4_chksum+0x160/0x160 [ 124.029569][ T3600] vfs_get_tree+0x89/0x260 [ 124.034412][ T3600] do_new_mount+0x25a/0xa20 [ 124.040005][ T3600] path_mount+0x572/0xc80 [ 124.052801][ T3600] __se_sys_mount+0x318/0x380 [ 124.068000][ T3600] ? __x64_sys_mount+0xd0/0xd0 [ 124.073441][ T3600] __x64_sys_mount+0xbf/0xd0 [ 124.078205][ T3600] do_syscall_64+0x31/0x40 [ 124.083175][ T3600] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 124.085506][ T3659] netlink: 12 bytes leftover after parsing attributes in process `syz.8.816'. [ 124.089109][ T3600] RIP: 0033:0x7f5248721eea [ 124.111830][ T3600] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.131972][ T3600] RSP: 002b:00007f5247187e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 124.146915][ T3600] RAX: ffffffffffffffda RBX: 00007f5247187ef0 RCX: 00007f5248721eea [ 124.164713][ T3600] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f5247187eb0 [ 124.172845][ T3600] RBP: 0000200000000180 R08: 00007f5247187ef0 R09: 0000000000800700 [ 124.180959][ T3600] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 124.189185][ T3600] R13: 00007f5247187eb0 R14: 0000000000000473 R15: 0000200000000680 [ 124.197827][ T3600] ---[ end trace 5a8efba76ecc4c14 ]--- [ 124.204069][ T3600] EXT4-fs (loop7): 1 orphan inode deleted [ 124.211894][ T3600] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue [ 124.299441][ T279] hub 8-1:4.0: set hub depth failed [ 124.389269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 124.397275][ T279] usb 8-1: USB disconnect, device number 7 [ 124.408785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.427096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 124.437192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.445817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.454252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.464520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.474560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.949471][ T2088] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 125.231748][ T3699] EXT4-fs (loop7): Ignoring removed oldalloc option [ 125.240520][ T3699] EXT4-fs (loop7): Ignoring removed bh option [ 125.247009][ T3699] EXT4-fs (loop7): Unrecognized mount option "fsuuid=17e65bfP-8af4-011" or missing value [ 125.489533][ T443] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 125.579418][ T2088] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.589572][ T2088] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.669435][ T2088] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.678509][ T2088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.686545][ T2088] usb 5-1: SerialNumber: syz [ 125.709983][ T3714] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.720003][ T3714] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (34507!=33349) [ 125.729615][ T3714] EXT4-fs (loop1): group descriptors corrupted! [ 125.749359][ T443] usb 9-1: Using ep0 maxpacket: 32 [ 125.889900][ T3714] loop1: p1 < > p3 [ 125.894357][ T3714] loop1: p3 size 134217728 extends beyond EOD, truncated [ 125.919470][ T443] usb 9-1: unable to get BOS descriptor or descriptor too short [ 125.990818][ T2088] usb 5-1: 0:2 : does not exist [ 125.999452][ T443] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 126.009349][ T443] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 126.031664][ T303] udevd[303]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 126.041474][ T413] udevd[413]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 126.059499][ T24] kauditd_printk_skb: 104 callbacks suppressed [ 126.059509][ T24] audit: type=1326 audit(1766850787.080:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffd9ba749 code=0x7ffc0000 [ 126.089266][ T24] audit: type=1326 audit(1766850787.080:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f4ffd9ba749 code=0x7ffc0000 [ 126.113350][ T24] audit: type=1326 audit(1766850787.080:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffd9ba749 code=0x7ffc0000 [ 126.136928][ T24] audit: type=1326 audit(1766850787.080:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ffd9ba749 code=0x7ffc0000 [ 126.160554][ T24] audit: type=1326 audit(1766850787.080:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffd9ba749 code=0x7ffc0000 [ 126.185018][ T24] audit: type=1326 audit(1766850787.080:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ffd9ba749 code=0x7ffc0000 [ 126.208831][ T24] audit: type=1326 audit(1766850787.080:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffd9ba749 code=0x7ffc0000 [ 126.232450][ T24] audit: type=1326 audit(1766850787.080:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ffd9ba749 code=0x7ffc0000 [ 126.234834][ T2088] usb 5-1: USB disconnect, device number 9 [ 126.268460][ T24] audit: type=1326 audit(1766850787.080:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ffd9ba749 code=0x7ffc0000 [ 126.292556][ T24] audit: type=1326 audit(1766850787.080:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ffd9ba749 code=0x7ffc0000 [ 126.316049][ T443] usb 9-1: string descriptor 0 read error: -22 [ 126.323024][ T443] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.332314][ T443] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.359466][ T3702] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.372471][ T3738] fuse: Bad value for 'fd' [ 126.380058][ T3702] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 126.475617][ T413] udevd[413]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.509467][ T3739] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.516696][ T3739] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.585449][ T3746] xt_hashlimit: max too large, truncated to 1048576 [ 126.619950][ T443] cdc_ether: probe of 9-1:1.0 failed with error -71 [ 126.696529][ T443] usb 9-1: USB disconnect, device number 11 [ 126.851015][ T3755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 126.860098][ T3755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 126.868915][ T3755] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 127.200948][ T3759] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 127.217186][ T3759] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 127.227992][ T3759] F2FS-fs (loop1): invalid crc value [ 127.238616][ T3764] FAT-fs (loop8): bogus number of reserved sectors [ 127.245402][ T3764] FAT-fs (loop8): Can't find a valid FAT filesystem [ 127.265840][ T3759] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.293835][ T3759] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 127.300907][ T3759] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 127.410023][ T3770] EXT4-fs error (device loop7): ext4_orphan_get:1395: inode #15: comm syz.7.845: inode has both inline data and extents flags [ 127.438839][ T3770] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.845: couldn't read orphan inode 15 (err -117) [ 127.452029][ T3770] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue [ 127.625725][ T3775] F2FS-fs (loop0): invalid crc value [ 127.658629][ T3775] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.715903][ T3775] F2FS-fs (loop0): recover fsync data on readonly fs [ 127.735343][ T3798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=3798 comm=syz.1.851 [ 127.751789][ T3775] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 127.795072][ T3798] syz.1.851[3798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.795129][ T3798] syz.1.851[3798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.849595][ T3798] FAT-fs (loop1): Unrecognized mount option "00000000000000000009" or missing value [ 127.877366][ T3798] device vlan3 entered promiscuous mode [ 127.883231][ T3798] device bridge0 entered promiscuous mode [ 128.035748][ T3810] netlink: 84 bytes leftover after parsing attributes in process `syz.4.854'. [ 128.057640][ T3810] netlink: 'syz.4.854': attribute type 2 has an invalid length. [ 128.298382][ T3822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.859'. [ 128.372185][ T3833] incfs: Options parsing error. -22 [ 128.390638][ T3833] incfs: mount failed -22 [ 128.467856][ T3843] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.484247][ T3843] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.863: bg 0: block 5: invalid block bitmap [ 128.496571][ T3843] EXT4-fs error (device loop8) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 128.505458][ T3843] EXT4-fs error (device loop8): ext4_free_branches:1026: inode #11: comm syz.8.863: invalid indirect mapped block 3 (level 2) [ 128.518728][ T3843] EXT4-fs (loop8): 2 truncates cleaned up [ 128.524970][ T3843] EXT4-fs (loop8): mounted filesystem without journal. Opts: noauto_da_alloc,journal_ioprio=0x0000000000000007,dioread_nolock,commit=0x0000000000000005,,errors=continue [ 128.809371][ T2089] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 128.978407][ T3856] input: syz0 as /devices/virtual/input/input12 [ 129.179411][ T2089] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.189171][ T2089] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 129.202172][ T2089] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 129.211339][ T2089] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.227811][ T2089] usb 9-1: config 0 descriptor?? [ 129.547734][ T3880] syz.4.869[3880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.547795][ T3880] syz.4.869[3880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.021887][ T3902] binder: 3894:3902 unknown command 0 [ 130.029407][ T2089] usbhid 9-1:0.0: can't add hid device: -71 [ 130.049402][ T3902] binder: 3894:3902 ioctl c0306201 200000000080 returned -22 [ 130.054138][ T2089] usbhid: probe of 9-1:0.0 failed with error -71 [ 130.074741][ T2089] usb 9-1: USB disconnect, device number 12 [ 130.210541][ T3899] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 130.232548][ T3899] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 130.280188][ T3899] F2FS-fs (loop8): Found nat_bits in checkpoint [ 130.309773][ T3901] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 130.320819][ T3901] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 130.335558][ T3899] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 130.349603][ T3901] F2FS-fs (loop7): invalid crc value [ 130.359610][ T3899] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 130.397273][ T3901] F2FS-fs (loop7): Found nat_bits in checkpoint [ 130.424589][ T3899] netlink: 'syz.8.875': attribute type 5 has an invalid length. [ 130.473382][ T3924] attempt to access beyond end of device [ 130.473382][ T3924] loop8: rw=10241, want=45104, limit=40427 [ 130.484887][ T3924] attempt to access beyond end of device [ 130.484887][ T3924] loop8: rw=2049, want=45104, limit=40427 [ 130.579782][ T3901] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 130.588549][ T3901] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 130.611123][ T3931] netlink: 80 bytes leftover after parsing attributes in process `syz.0.882'. [ 130.900884][ T3943] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.887: bg 0: block 473: padding at end of block bitmap is not set [ 130.912645][ T3945] netlink: 44 bytes leftover after parsing attributes in process `syz.8.886'. [ 130.923365][ T3943] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 130.937496][ T3943] EXT4-fs (loop1): 1 orphan inode deleted [ 130.950593][ T3943] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 130.963921][ T3943] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.103598][ T24] kauditd_printk_skb: 159 callbacks suppressed [ 131.103643][ T24] audit: type=1326 audit(1766850792.120:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.7.888" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5248720749 code=0x0 [ 131.199165][ T24] audit: type=1326 audit(1766850792.180:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.7.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 131.228926][ T24] audit: type=1326 audit(1766850792.180:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.7.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 131.254616][ T24] audit: type=1326 audit(1766850792.180:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.7.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 131.281459][ T3953] FAT-fs (loop7): Unrecognized mount option "" or missing value [ 131.316957][ T24] audit: type=1326 audit(1766850792.180:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.7.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 131.442159][ T24] audit: type=1326 audit(1766850792.180:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.7.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 131.567894][ T24] audit: type=1326 audit(1766850792.180:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.7.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 131.673103][ T24] audit: type=1326 audit(1766850792.180:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.7.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 131.979368][ T24] audit: type=1326 audit(1766850792.180:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.7.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 132.003850][ T24] audit: type=1326 audit(1766850792.180:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3949 comm="syz.7.888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5248720749 code=0x7ffc0000 [ 132.047978][ T3974] netlink: 96 bytes leftover after parsing attributes in process `syz.1.894'. [ 132.072712][ T3974] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.578033][ T3992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 132.587192][ T3992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'. [ 133.418081][ T4017] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.436240][ T4017] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 133.445951][ T4017] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 133.642982][ T2088] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 133.750817][ T4027] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 133.758609][ T4027] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 133.791868][ T4027] F2FS-fs (loop7): invalid crc value [ 133.820670][ T4033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 133.878824][ T4027] F2FS-fs (loop7): Found nat_bits in checkpoint [ 133.945439][ T4027] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 133.979556][ T279] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.998020][ T4027] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 134.229631][ T279] usb 1-1: Using ep0 maxpacket: 16 [ 134.359673][ T279] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 134.374851][ T279] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.419223][ T279] usb 1-1: config 0 has no interface number 0 [ 134.526694][ T279] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 134.545999][ T279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.561329][ T279] usb 1-1: config 0 descriptor?? [ 134.600277][ T279] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 134.624768][ T279] uvcvideo: No valid video chain found. [ 134.654668][ T4042] netlink: 24 bytes leftover after parsing attributes in process `syz.4.913'. [ 134.848505][ T528] usb 1-1: USB disconnect, device number 11 [ 135.059410][ T2088] usb 2-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 135.070479][ T2088] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.080857][ T2088] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 135.090620][ T2088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.141979][ T2088] usb 2-1: config 0 descriptor?? [ 135.402423][ T2088] usb 2-1: USB disconnect, device number 21 [ 135.581421][ T4056] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.607190][ T4056] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 135.616826][ T4056] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 136.540409][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 136.540425][ T24] audit: type=1400 audit(1766850797.560:2233): avc: denied { add_name } for pid=4055 comm="syz.0.917" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.627304][ T24] audit: type=1400 audit(1766850797.560:2234): avc: denied { associate } for pid=4055 comm="syz.0.917" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 136.747948][ T4067] EXT4-fs (loop8): Test dummy encryption mode enabled [ 136.768620][ T4067] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 136.779009][ T4067] System zones: 0-5 [ 136.783624][ T4067] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,resgid=0x0000000000000000,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 136.853329][ T4075] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 136.862347][ T4093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=4093 comm=syz.0.927 [ 136.886682][ T4093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=4093 comm=syz.0.927 [ 136.903324][ T4093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=4093 comm=syz.0.927 [ 136.916550][ T4093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=4093 comm=syz.0.927 [ 136.929387][ T528] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 136.974552][ T4099] overlayfs: failed to resolve './file1': -2 [ 136.984556][ T4099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.929'. [ 137.021113][ T24] audit: type=1400 audit(1766850798.040:2235): avc: denied { getopt } for pid=4094 comm="syz.8.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.169401][ T528] usb 8-1: Using ep0 maxpacket: 16 [ 137.264505][ T4120] EXT4-fs (loop0): 1 truncate cleaned up [ 137.270773][ T4120] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,max_dir_size_kb=0x0000000000000001,resgid=0x0000000000000000,noload,abort,usrjquota=,,errors=continue [ 137.299401][ T528] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.315844][ T528] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.335726][ T528] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.348535][ T528] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.357838][ T528] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.367005][ T528] usb 8-1: config 0 descriptor?? [ 137.392147][ T24] audit: type=1400 audit(1766850798.410:2236): avc: denied { remove_name } for pid=3023 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.416520][ T24] audit: type=1400 audit(1766850798.410:2237): avc: denied { unlink } for pid=3023 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.529121][ T4129] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.536245][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.543686][ T4129] device bridge_slave_0 entered promiscuous mode [ 137.550884][ T4129] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.557927][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.565630][ T4129] device bridge_slave_1 entered promiscuous mode [ 137.598704][ T4129] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.605731][ T4129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.613001][ T4129] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.620033][ T4129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.638068][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.645680][ T865] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.653289][ T865] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.664811][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.672989][ T865] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.680013][ T865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.688735][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.697211][ T865] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.704260][ T865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.718645][ T24] audit: type=1400 audit(1766850798.730:2238): avc: denied { rmdir } for pid=2157 comm="syz-executor" name="file0" dev="loop1" ino=1048680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.746668][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.755050][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.777936][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.788445][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.796599][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.804110][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.812222][ T4129] device veth0_vlan entered promiscuous mode [ 137.823412][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.832679][ T4129] device veth1_macvtap entered promiscuous mode [ 137.841851][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.851323][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.862652][ T528] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 137.879255][ T528] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 137.892939][ T528] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 137.900543][ T528] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 137.907799][ T528] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 137.928705][ T528] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0014/input/input15 [ 137.998798][ T4144] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.005887][ T4144] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.013785][ T4144] device bridge_slave_0 entered promiscuous mode [ 138.020814][ T4144] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.027908][ T4144] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.035373][ T4144] device bridge_slave_1 entered promiscuous mode [ 138.047099][ T528] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 138.626197][ T2189] device bridge_slave_1 left promiscuous mode [ 138.646444][ T2189] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.715587][ T4157] xt_hashlimit: max too large, truncated to 1048576 [ 138.841854][ T443] usb 8-1: USB disconnect, device number 8 [ 138.869507][ T2189] device bridge_slave_0 left promiscuous mode [ 138.877581][ T2189] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.887031][ T4155] fido_id[4155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 138.904096][ T4159] EXT4-fs (loop8): Test dummy encryption mode enabled [ 138.910977][ T4159] EXT4-fs (loop8): Test dummy encryption mode enabled [ 138.917732][ T4159] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 138.925998][ T2189] device veth1_macvtap left promiscuous mode [ 138.932477][ T2189] device veth0_vlan left promiscuous mode [ 138.947687][ T4159] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,commit=0x0000000000000000,,errors=continue [ 138.969652][ T4159] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.100797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.101116][ T4167] FAT-fs (loop8): Unrecognized mount option "shoname=lower" or missing value [ 139.108258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.170268][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.183625][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.192008][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.200311][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.207345][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.214800][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.223476][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.231886][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.238922][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.246449][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.254442][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.265235][ T4144] device veth0_vlan entered promiscuous mode [ 139.271534][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.280728][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.289633][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.297660][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.311436][ T4168] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 139.319151][ T4174] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 139.392749][ T24] audit: type=1400 audit(1766850800.350:2239): avc: denied { accept } for pid=4172 comm="syz.6.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 139.443823][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.465542][ T4144] device veth1_macvtap entered promiscuous mode [ 139.486380][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.499657][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.548362][ T4187] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.736255][ T4191] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 139.745817][ T4191] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 139.754281][ T4191] F2FS-fs (loop7): fault_type options not supported [ 139.764268][ T4191] F2FS-fs (loop7): fault_injection options not supported [ 139.772191][ T4191] F2FS-fs (loop7): Unrecognized mount option "comprss_cache" or missing value [ 139.794265][ T4201] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.808642][ T4201] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 139.820746][ T4201] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 139.845802][ T24] audit: type=1326 audit(1766850800.860:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.8.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 139.934318][ T24] audit: type=1326 audit(1766850800.860:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.8.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 139.971544][ T24] audit: type=1326 audit(1766850800.860:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.8.955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb1686df749 code=0x7ffc0000 [ 141.194302][ T4223] futex_wake_op: syz.4.960 tries to shift op by 32; fix this program [ 141.226949][ T4217] F2FS-fs (loop8): Small segment_count (9 < 1 * 24) [ 141.234468][ T4217] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 141.252514][ T4217] F2FS-fs (loop8): Found nat_bits in checkpoint [ 141.302735][ T4217] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 141.310012][ T4217] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 141.335002][ T2189] device bridge_slave_1 left promiscuous mode [ 141.341503][ T2189] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.348969][ T2189] device bridge_slave_0 left promiscuous mode [ 141.404150][ T2189] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.505385][ T4217] attempt to access beyond end of device [ 141.505385][ T4217] loop8: rw=2049, want=57344, limit=40427 [ 141.558323][ T4217] attempt to access beyond end of device [ 141.558323][ T4217] loop8: rw=2049, want=49440, limit=40427 [ 141.608346][ T1159] attempt to access beyond end of device [ 141.608346][ T1159] loop8: rw=2049, want=45112, limit=40427 [ 141.761369][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 141.761380][ T24] audit: type=1400 audit(1766850802.780:2269): avc: denied { create } for pid=4243 comm="syz.7.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 141.799770][ T4244] netlink: 'syz.7.966': attribute type 1 has an invalid length. [ 141.807406][ T4244] netlink: 'syz.7.966': attribute type 2 has an invalid length. [ 142.173058][ T4238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.963'. [ 142.305869][ T24] audit: type=1326 audit(1766850803.320:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.9.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf36c0a749 code=0x7ffc0000 [ 142.443656][ T24] audit: type=1326 audit(1766850803.350:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.9.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fdf36c0a749 code=0x7ffc0000 [ 143.241597][ T24] audit: type=1326 audit(1766851571.361:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.9.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf36c0a749 code=0x7ffc0000 [ 143.286756][ T4259] erofs: (device loop9): mounted with root inode @ nid 36. [ 143.324067][ T4263] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 143.354438][ T4263] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.970: bg 0: block 104: invalid block bitmap [ 143.368338][ T4263] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 143.377164][ T4263] EXT4-fs error (device loop7): ext4_free_branches:1026: inode #11: comm syz.7.970: invalid indirect mapped block 1 (level 1) [ 143.390600][ T4263] EXT4-fs (loop7): 1 truncate cleaned up [ 143.396251][ T4263] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 143.845068][ T4282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4282 comm=syz.6.974 [ 143.964222][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 143.972429][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.980920][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 143.989346][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.997743][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.006212][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.014378][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.022509][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.138660][ T24] audit: type=1400 audit(1766851573.240:2273): avc: denied { write } for pid=4285 comm="syz.9.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.217394][ T24] audit: type=1400 audit(1766851573.282:2274): avc: denied { ioctl } for pid=4285 comm="syz.9.976" path="socket:[32353]" dev="sockfs" ino=32353 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.274075][ T4291] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 144.283117][ T4291] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.663089][ T443] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 144.672670][ T24] audit: type=1400 audit(1766851573.797:2275): avc: denied { connect } for pid=4311 comm="syz.6.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.694347][ T1159] EXT4-fs error (device loop8): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 144.769079][ T4307] mmap: syz.9.980 (4307) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 144.967878][ T443] usb 5-1: Using ep0 maxpacket: 16 [ 145.050952][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 145.120355][ T443] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 145.138516][ T443] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.148838][ T443] usb 5-1: config 0 has no interface number 0 [ 145.154919][ T443] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 145.165006][ T443] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 145.175181][ T443] usb 5-1: config 0 interface 98 has no altsetting 0 [ 145.291995][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 145.330376][ T443] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 145.339554][ T443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.347508][ T443] usb 5-1: Product: syz [ 145.351688][ T443] usb 5-1: Manufacturer: syz [ 145.356266][ T443] usb 5-1: SerialNumber: syz [ 145.361711][ T443] usb 5-1: config 0 descriptor?? [ 145.377964][ T4300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.384960][ T4300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.406152][ T528] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 145.415632][ T25] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 145.423698][ T25] usb 7-1: config 0 has no interface number 0 [ 145.577564][ T25] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 145.586638][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.588208][ T4300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.594697][ T25] usb 7-1: Product: syz [ 145.601870][ T4300] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.605729][ T25] usb 7-1: Manufacturer: syz [ 145.617298][ T25] usb 7-1: SerialNumber: syz [ 145.622576][ T25] usb 7-1: config 0 descriptor?? [ 145.667445][ T25] smsc95xx v2.0.0 [ 145.672887][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.8.988'. [ 145.730376][ T4333] netlink: 4 bytes leftover after parsing attributes in process `syz.8.988'. [ 145.758919][ T528] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.769832][ T528] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 145.929880][ T528] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.938952][ T528] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.946936][ T528] usb 8-1: Product: syz [ 145.951127][ T528] usb 8-1: Manufacturer: syz [ 145.955696][ T528] usb 8-1: SerialNumber: syz [ 146.082239][ T25] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 146.092973][ T25] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 146.188041][ T4330] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 146.644425][ T443] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 146.655098][ T443] asix: probe of 5-1:0.98 failed with error -71 [ 146.663034][ T443] usb 5-1: USB disconnect, device number 10 [ 146.749080][ T25] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 146.759878][ T25] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 146.768063][ T25] usb 7-1: USB disconnect, device number 2 [ 146.815960][ T4330] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 147.044438][ T528] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 147.050922][ T528] cdc_ncm 8-1:1.0: setting rx_max = 16384 [ 147.263348][ T528] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 147.270601][ T528] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM, 42:42:42:42:42:42 [ 147.291372][ T528] usb 8-1: USB disconnect, device number 9 [ 147.298362][ T528] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM [ 147.299097][ T24] audit: type=1400 audit(1766851576.568:2276): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 147.578378][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.585574][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.644270][ T2092] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 147.665495][ T4349] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 147.674527][ T4349] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.102034][ T2092] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.112199][ T2092] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.337208][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.344420][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.351818][ T4373] device bridge_slave_0 entered promiscuous mode [ 148.359174][ T2092] usb 5-1: string descriptor 0 read error: -22 [ 148.365443][ T2092] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.374611][ T2092] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.382691][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.389810][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.397315][ T4373] device bridge_slave_1 entered promiscuous mode [ 148.416680][ T2092] usb 5-1: MIDIStreaming interface descriptor not found [ 148.438606][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.445659][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.452905][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.459925][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.477205][ T865] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.484760][ T865] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.492714][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.500096][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.510428][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.518847][ T865] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.525880][ T865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.540674][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.549144][ T865] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.556182][ T865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.597928][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.605947][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.617897][ T279] usb 5-1: USB disconnect, device number 11 [ 148.635037][ T4373] device veth0_vlan entered promiscuous mode [ 148.647611][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.656074][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.664490][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.671897][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.684531][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.694043][ T4373] device veth1_macvtap entered promiscuous mode [ 148.742575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.784986][ T865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.826255][ T2189] device bridge_slave_1 left promiscuous mode [ 148.835192][ T2189] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.850578][ T2189] device bridge_slave_0 left promiscuous mode [ 148.863444][ T2189] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.892273][ T2189] device veth1_macvtap left promiscuous mode [ 148.904236][ T2189] device veth0_vlan left promiscuous mode [ 148.920579][ T2091] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 149.092706][ T528] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 149.189451][ T2091] usb 9-1: Using ep0 maxpacket: 32 [ 149.191589][ T4401] binder: 4400:4401 unknown command 0 [ 149.201335][ T4401] binder: 4400:4401 ioctl c0306201 2000000001c0 returned -22 [ 149.444665][ T528] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.454842][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 149.462859][ T528] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.540244][ T528] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.549455][ T528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.557444][ T528] usb 6-1: SerialNumber: syz [ 149.568847][ T2091] usb 9-1: config 0 has an invalid interface number: 247 but max is 0 [ 149.577081][ T2091] usb 9-1: config 0 has no interface number 0 [ 149.654148][ T279] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 149.682948][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 149.739747][ T2091] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 149.749021][ T2091] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 149.757119][ T2091] usb 9-1: Product: syz [ 149.761436][ T2091] usb 9-1: Manufacturer: syz [ 149.767536][ T2091] usb 9-1: config 0 descriptor?? [ 149.797245][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.807564][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.826358][ T528] usb 6-1: 0:2 : does not exist [ 149.858403][ T528] usb 6-1: USB disconnect, device number 8 [ 149.968300][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.977438][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.985457][ T25] usb 5-1: Product: syz [ 149.989660][ T25] usb 5-1: Manufacturer: syz [ 149.994224][ T25] usb 5-1: SerialNumber: syz [ 150.008066][ T2088] usb 9-1: USB disconnect, device number 13 [ 150.044505][ T279] usb 10-1: unable to get BOS descriptor or descriptor too short [ 150.122789][ T279] usb 10-1: config 4 has an invalid interface number: 109 but max is 0 [ 150.131051][ T279] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 150.141314][ T279] usb 10-1: config 4 has no interface number 0 [ 150.147456][ T279] usb 10-1: config 4 interface 109 has no altsetting 0 [ 150.206904][ T2091] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 150.311412][ T25] usb 5-1: 0:2 : does not exist [ 150.316749][ T279] usb 10-1: New USB device found, idVendor=0421, idProduct=042d, bcdDevice=da.49 [ 150.327002][ T25] usb 5-1: USB disconnect, device number 12 [ 150.333101][ T279] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.341529][ T279] usb 10-1: Product: syz [ 150.347557][ T279] usb 10-1: Manufacturer: syz [ 150.352819][ T279] usb 10-1: SerialNumber: syz [ 150.435015][ T2091] usb 8-1: Using ep0 maxpacket: 32 [ 150.540607][ T413] udevd[413]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.559262][ T2091] usb 8-1: config 0 has an invalid interface number: 61 but max is 1 [ 150.567331][ T2091] usb 8-1: config 0 has no interface number 1 [ 150.685286][ T279] usb 10-1: bad CDC descriptors [ 150.740844][ T2091] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 150.750265][ T279] usb 10-1: USB disconnect, device number 5 [ 150.780193][ T2091] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.803982][ T2091] usb 8-1: Product: syz [ 150.833721][ T2091] usb 8-1: Manufacturer: syz [ 150.841895][ T2091] usb 8-1: SerialNumber: syz [ 150.854928][ T2091] usb 8-1: config 0 descriptor?? [ 151.085109][ T2091] usb 8-1: USB disconnect, device number 10 [ 151.254041][ T2092] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 151.492201][ T2092] usb 6-1: Using ep0 maxpacket: 16 [ 151.606652][ T2092] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 151.806880][ T2092] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.816495][ T2092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.824882][ T2092] usb 6-1: Product: syz [ 152.123407][ T2092] usb 6-1: Manufacturer: syz [ 152.170984][ T2092] usb 6-1: SerialNumber: syz [ 152.187652][ T279] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 152.249055][ T2092] usb 6-1: config 0 descriptor?? [ 152.540364][ T279] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.551273][ T279] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.561180][ T279] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.574627][ T279] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.583678][ T279] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.593045][ T279] usb 8-1: config 0 descriptor?? [ 152.830286][ T4480] hub 1-0:1.0: USB hub found [ 152.831953][ T24] audit: type=1400 audit(1766851582.374:2277): avc: denied { getopt } for pid=4482 comm="syz.9.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.848342][ T4480] hub 1-0:1.0: 1 port detected [ 152.938933][ T24] audit: type=1400 audit(1766851582.479:2278): avc: denied { write } for pid=4484 comm="syz.9.1044" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 152.967700][ T24] audit: type=1400 audit(1766851582.479:2279): avc: denied { open } for pid=4484 comm="syz.9.1044" path="/20/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 153.055178][ T279] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xe [ 153.094140][ T279] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 153.104092][ T279] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 153.131691][ T279] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 153.773926][ T4501] tipc: Started in network mode [ 153.778984][ T4501] tipc: Own node identity 8e5b249a69e4, cluster identity 4711 [ 153.786494][ T4501] tipc: Enabled bearer , priority 0 [ 153.805868][ T4501] device syzkaller0 entered promiscuous mode [ 153.823561][ T4500] tipc: Resetting bearer [ 153.835681][ T4500] tipc: Disabling bearer [ 153.865376][ T25] usb 6-1: USB disconnect, device number 9 [ 154.263949][ T399] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 154.475115][ T25] usb 8-1: reset high-speed USB device number 11 using dummy_hcd [ 154.660793][ T399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 154.671037][ T399] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 154.846695][ T4542] syz.5.1062[4542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.847297][ T4542] syz.5.1062[4542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.880116][ T4542] device wg2 entered promiscuous mode [ 154.902293][ T399] usb 10-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 154.939588][ T24] audit: type=1400 audit(1766851584.579:2280): avc: denied { map } for pid=4547 comm="syz.5.1066" path="socket:[33908]" dev="sockfs" ino=33908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.940398][ T399] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.974979][ T4549] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 155.011715][ T399] usb 10-1: Product: syz [ 155.481235][ T24] audit: type=1400 audit(1766851584.621:2281): avc: denied { accept } for pid=4547 comm="syz.5.1066" path="socket:[33908]" dev="sockfs" ino=33908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.515678][ T24] audit: type=1400 audit(1766851584.621:2282): avc: denied { read } for pid=4547 comm="syz.5.1066" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 155.573904][ T399] usb 10-1: Manufacturer: syz [ 155.578601][ T399] usb 10-1: SerialNumber: syz [ 155.583918][ T399] usb 10-1: config 0 descriptor?? [ 155.778508][ T279] usb 8-1: USB disconnect, device number 11 [ 155.845411][ T399] snd-usb-audio: probe of 10-1:0.0 failed with error -2 [ 155.875578][ T399] usb 10-1: USB disconnect, device number 6 [ 158.578473][ T399] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 158.845510][ T399] usb 8-1: Using ep0 maxpacket: 16 [ 159.198080][ T399] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 159.219108][ T399] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.247588][ T399] usb 8-1: Product: syz [ 159.254318][ T399] usb 8-1: Manufacturer: syz [ 159.369253][ T399] usb 8-1: SerialNumber: syz [ 159.412575][ T399] usb 8-1: config 0 descriptor?? [ 160.126503][ T24] audit: type=1400 audit(1766851590.028:2283): avc: denied { relabelfrom } for pid=4666 comm="syz.5.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 160.150100][ T24] audit: type=1400 audit(1766851590.049:2284): avc: denied { relabelto } for pid=4666 comm="syz.5.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 160.172589][ T2091] syzkaller0: tun_net_xmit 76 [ 160.177349][ T2091] syzkaller0: tun_net_xmit 48 [ 160.180310][ T4667] syzkaller0: create flow: hash 2631670329 index 1 [ 160.190445][ T4666] syzkaller0: delete flow: hash 2631670329 index 1 [ 160.246817][ T4673] ================================================================== [ 160.254886][ T4673] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 160.263008][ T4673] Read of size 8 at addr ffff88810ec050c0 by task syz.5.1113/4673 [ 160.270774][ T4673] [ 160.273081][ T4673] CPU: 1 PID: 4673 Comm: syz.5.1113 Tainted: G W syzkaller #0 [ 160.281805][ T4673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.291828][ T4673] Call Trace: [ 160.295092][ T4673] __dump_stack+0x21/0x24 [ 160.299394][ T4673] dump_stack_lvl+0x169/0x1d8 [ 160.304043][ T4673] ? show_regs_print_info+0x18/0x18 [ 160.309211][ T4673] ? thaw_kernel_threads+0x220/0x220 [ 160.314470][ T4673] print_address_description+0x7f/0x2c0 [ 160.319986][ T4673] ? tc_setup_flow_action+0x842/0x3280 [ 160.325415][ T4673] kasan_report+0xe2/0x130 [ 160.329809][ T4673] ? flow_action_cookie_create+0x28/0x90 [ 160.335413][ T4673] ? tc_setup_flow_action+0x842/0x3280 [ 160.340848][ T4673] __asan_report_load8_noabort+0x14/0x20 [ 160.346448][ T4673] tc_setup_flow_action+0x842/0x3280 [ 160.351706][ T4673] ? __kmalloc+0x1a7/0x330 [ 160.356101][ T4673] ? flow_rule_alloc+0x32/0x2c0 [ 160.361015][ T4673] mall_replace_hw_filter+0x293/0x810 [ 160.366361][ T4673] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 160.372397][ T4673] ? mall_set_parms+0x410/0x410 [ 160.377218][ T4673] ? tcf_exts_destroy+0xb0/0xb0 [ 160.382046][ T4673] ? pcpu_alloc+0xf8a/0x16b0 [ 160.386607][ T4673] ? mall_set_parms+0x19d/0x410 [ 160.391429][ T4673] mall_change+0x528/0x750 [ 160.395821][ T4673] ? __kasan_check_write+0x14/0x20 [ 160.400902][ T4673] ? mall_get+0xa0/0xa0 [ 160.405027][ T4673] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 160.410889][ T4673] ? nla_strcmp+0xf4/0x140 [ 160.415282][ T4673] tc_new_tfilter+0x13f6/0x1a10 [ 160.420102][ T4673] ? mall_get+0xa0/0xa0 [ 160.424228][ T4673] ? tcf_gate_entry_destructor+0x20/0x20 [ 160.429831][ T4673] ? security_capable+0x87/0xb0 [ 160.434673][ T4673] ? ns_capable+0x8c/0xf0 [ 160.438976][ T4673] ? netlink_net_capable+0x125/0x160 [ 160.444234][ T4673] ? tcf_gate_entry_destructor+0x20/0x20 [ 160.449834][ T4673] rtnetlink_rcv_msg+0x800/0xb90 [ 160.454744][ T4673] ? rtnetlink_bind+0x80/0x80 [ 160.459388][ T4673] ? arch_stack_walk+0xee/0x140 [ 160.464217][ T4673] ? stack_trace_save+0x98/0xe0 [ 160.469040][ T4673] ? stack_trace_snprint+0xf0/0xf0 [ 160.474127][ T4673] ? memcpy+0x56/0x70 [ 160.478086][ T4673] ? avc_has_perm+0x234/0x360 [ 160.482734][ T4673] ? __kasan_slab_alloc+0xbd/0xf0 [ 160.487731][ T4673] ? slab_post_alloc_hook+0x5d/0x2f0 [ 160.492989][ T4673] ? ___sys_sendmsg+0x1f0/0x260 [ 160.497810][ T4673] ? avc_has_perm_noaudit+0x240/0x240 [ 160.503154][ T4673] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 160.508501][ T4673] netlink_rcv_skb+0x1e0/0x430 [ 160.513241][ T4673] ? rtnetlink_bind+0x80/0x80 [ 160.517890][ T4673] ? netlink_ack+0xb80/0xb80 [ 160.522454][ T4673] ? __netlink_lookup+0x387/0x3b0 [ 160.527448][ T4673] rtnetlink_rcv+0x1c/0x20 [ 160.531835][ T4673] netlink_unicast+0x876/0xa40 [ 160.536593][ T4673] netlink_sendmsg+0x88d/0xb30 [ 160.541338][ T4673] ? netlink_getsockopt+0x530/0x530 [ 160.546546][ T4673] ? security_socket_sendmsg+0x82/0xa0 [ 160.551987][ T4673] ? netlink_getsockopt+0x530/0x530 [ 160.557158][ T4673] ____sys_sendmsg+0x5a2/0x8c0 [ 160.561913][ T4673] ? __sys_sendmsg_sock+0x40/0x40 [ 160.566928][ T4673] ? import_iovec+0x7c/0xb0 [ 160.571403][ T4673] ___sys_sendmsg+0x1f0/0x260 [ 160.576051][ T4673] ? __sys_sendmsg+0x250/0x250 [ 160.580794][ T4673] ? __fdget+0x1a1/0x230 [ 160.585009][ T4673] __x64_sys_sendmsg+0x1e2/0x2a0 [ 160.589923][ T4673] ? __kasan_check_write+0x14/0x20 [ 160.595005][ T4673] ? ___sys_sendmsg+0x260/0x260 [ 160.599827][ T4673] ? __kasan_check_read+0x11/0x20 [ 160.604824][ T4673] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 160.610432][ T4673] do_syscall_64+0x31/0x40 [ 160.614823][ T4673] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 160.620684][ T4673] RIP: 0033:0x7f3288eb2749 [ 160.625077][ T4673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.644740][ T4673] RSP: 002b:00007f328791a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.653126][ T4673] RAX: ffffffffffffffda RBX: 00007f3289108fa0 RCX: 00007f3288eb2749 [ 160.661071][ T4673] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 160.669014][ T4673] RBP: 00007f3288f36f91 R08: 0000000000000000 R09: 0000000000000000 [ 160.676958][ T4673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.684907][ T4673] R13: 00007f3289109038 R14: 00007f3289108fa0 R15: 00007ffe7576e1f8 [ 160.692852][ T4673] [ 160.695158][ T4673] Allocated by task 4673: [ 160.699463][ T4673] __kasan_kmalloc+0xda/0x110 [ 160.704114][ T4673] __kmalloc+0x1a7/0x330 [ 160.708328][ T4673] tcf_idr_create+0x5f/0x790 [ 160.712887][ T4673] tcf_idr_create_from_flags+0x61/0x70 [ 160.718320][ T4673] tcf_gact_init+0x2b4/0x520 [ 160.722882][ T4673] tcf_action_init_1+0x3e1/0x670 [ 160.727790][ T4673] tcf_action_init+0x1e6/0x700 [ 160.732522][ T4673] tcf_exts_validate+0x215/0x510 [ 160.737431][ T4673] mall_set_parms+0x4b/0x410 [ 160.741989][ T4673] mall_change+0x45c/0x750 [ 160.746373][ T4673] tc_new_tfilter+0x13f6/0x1a10 [ 160.751194][ T4673] rtnetlink_rcv_msg+0x800/0xb90 [ 160.756099][ T4673] netlink_rcv_skb+0x1e0/0x430 [ 160.760831][ T4673] rtnetlink_rcv+0x1c/0x20 [ 160.765215][ T4673] netlink_unicast+0x876/0xa40 [ 160.769948][ T4673] netlink_sendmsg+0x88d/0xb30 [ 160.774680][ T4673] ____sys_sendmsg+0x5a2/0x8c0 [ 160.779411][ T4673] ___sys_sendmsg+0x1f0/0x260 [ 160.784057][ T4673] __x64_sys_sendmsg+0x1e2/0x2a0 [ 160.788966][ T4673] do_syscall_64+0x31/0x40 [ 160.793355][ T4673] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 160.799214][ T4673] [ 160.801522][ T4673] The buggy address belongs to the object at ffff88810ec05000 [ 160.801522][ T4673] which belongs to the cache kmalloc-192 of size 192 [ 160.815544][ T4673] The buggy address is located 0 bytes to the right of [ 160.815544][ T4673] 192-byte region [ffff88810ec05000, ffff88810ec050c0) [ 160.829126][ T4673] The buggy address belongs to the page: [ 160.834730][ T4673] page:ffffea00043b0140 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ec05 [ 160.844930][ T4673] flags: 0x4000000000000200(slab) [ 160.849932][ T4673] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100043380 [ 160.858489][ T4673] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 160.867037][ T4673] page dumped because: kasan: bad access detected [ 160.873421][ T4673] page_owner tracks the page as allocated [ 160.879122][ T4673] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 853, ts 40246228766, free_ts 40027079984 [ 160.894971][ T4673] prep_new_page+0x179/0x180 [ 160.899531][ T4673] get_page_from_freelist+0x2235/0x23d0 [ 160.905043][ T4673] __alloc_pages_nodemask+0x268/0x5f0 [ 160.910385][ T4673] new_slab+0x84/0x3f0 [ 160.914429][ T4673] ___slab_alloc+0x2a6/0x450 [ 160.918988][ T4673] __slab_alloc+0x63/0xa0 [ 160.923291][ T4673] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 160.928632][ T4673] kset_create_and_add+0x59/0x2b0 [ 160.933625][ T4673] netdev_register_kobject+0x1a5/0x320 [ 160.939055][ T4673] register_netdevice+0xddd/0x13c0 [ 160.944140][ T4673] wg_newlink+0x4f1/0x7a0 [ 160.948441][ T4673] rtnl_newlink+0x11bd/0x1640 [ 160.953088][ T4673] rtnetlink_rcv_msg+0x9db/0xb90 [ 160.957997][ T4673] netlink_rcv_skb+0x1e0/0x430 [ 160.962730][ T4673] rtnetlink_rcv+0x1c/0x20 [ 160.967118][ T4673] netlink_unicast+0x876/0xa40 [ 160.971848][ T4673] page last free stack trace: [ 160.976495][ T4673] __free_pages_ok+0x7fc/0x820 [ 160.981230][ T4673] __free_pages+0xdd/0x380 [ 160.985613][ T4673] __free_slab+0xcf/0x190 [ 160.989912][ T4673] unfreeze_partials+0x15f/0x190 [ 160.994816][ T4673] put_cpu_partial+0xc1/0x180 [ 160.999461][ T4673] __slab_free+0x2c9/0x3a0 [ 161.003867][ T4673] ___cache_free+0x111/0x130 [ 161.008430][ T4673] qlink_free+0x50/0x90 [ 161.012555][ T4673] qlist_free_all+0x5f/0xb0 [ 161.017026][ T4673] kasan_quarantine_reduce+0x14a/0x160 [ 161.022459][ T4673] __kasan_slab_alloc+0x2f/0xf0 [ 161.027278][ T4673] slab_post_alloc_hook+0x5d/0x2f0 [ 161.032358][ T4673] __kmalloc+0x183/0x330 [ 161.036569][ T4673] qdisc_alloc+0x79/0x740 [ 161.040870][ T4673] qdisc_create_dflt+0x6b/0x3a0 [ 161.045690][ T4673] dev_activate+0x292/0x11c0 [ 161.050244][ T4673] [ 161.052539][ T4673] Memory state around the buggy address: [ 161.058142][ T4673] ffff88810ec04f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.066170][ T4673] ffff88810ec05000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.074202][ T4673] >ffff88810ec05080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 161.082232][ T4673] ^ [ 161.088364][ T4673] ffff88810ec05100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 161.096394][ T4673] ffff88810ec05180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 161.104422][ T4673] ================================================================== [ 161.112449][ T4673] Disabling lock debugging due to kernel taint [ 161.124209][ T24] audit: type=1400 audit(1766851591.078:2285): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 161.146158][ T24] audit: type=1400 audit(1766851591.078:2286): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.168986][ T24] audit: type=1400 audit(1766851591.078:2287): avc: denied { append } for pid=77 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.173049][ T337] usb 8-1: USB disconnect, device number 12 [ 161.198357][ T24] audit: type=1400 audit(1766851591.078:2288): avc: denied { open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.220899][ T24] audit: type=1400 audit(1766851591.078:2289): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 161.254851][ T399] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 161.483367][ T399] usb 10-1: Using ep0 maxpacket: 32 [ 161.597721][ T399] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 161.606148][ T399] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 161.614855][ T399] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 161.623890][ T399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.633616][ T399] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 161.643333][ T399] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 161.656361][ T399] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 161.665472][ T399] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.674013][ T399] usb 10-1: config 0 descriptor?? [ 161.922443][ T399] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 162.095352][ T24] audit: type=1400 audit(1766851592.107:2290): avc: denied { read write } for pid=4670 comm="syz.9.1108" name="lp0" dev="devtmpfs" ino=893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 162.112300][ T399] usb 10-1: USB disconnect, device number 7 [ 162.119358][ T24] audit: type=1400 audit(1766851592.107:2291): avc: denied { open } for pid=4670 comm="syz.9.1108" path="/dev/usb/lp0" dev="devtmpfs" ino=893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 162.126262][ T399] usblp0: removed