last executing test programs: 34.759054933s ago: executing program 2 (id=400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000040)="b9530a0000b84e86add5ba000000000f3048b81dd40000000000000f23c00f21f835030006000f23f866bad004ed660fe2ad0080000066b8d6008ee0410f01ca66baf80cb8e91f7f84ef66bafc0cec66ba4000ecf345ad0f01df", 0x5a}], 0x1, 0x49, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34.286998239s ago: executing program 2 (id=402): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c7573726a71756f74613d0000002c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c6e6f626172726965722c72657365727665725f726f6f743d30303030303030303030303030303030313136312c6673796e635f6d6f64653d7374726963742c6d6f64653d02000000000000002c6a71666d743d7666736f6c642c6e6f696e6c696e655f64656e7472792c00"], 0x2, 0x5505, &(0x7f0000002480)="$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") (async) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c7573726a71756f74613d0000002c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c6e6f626172726965722c72657365727665725f726f6f743d30303030303030303030303030303030313136312c6673796e635f6d6f64653d7374726963742c6d6f64653d02000000000000002c6a71666d743d7666736f6c642c6e6f696e6c696e655f64656e7472792c00"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0xe4) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) pwrite64(r0, &(0x7f00000002c0)="80e8", 0x2, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800010300000000000000000a800084ff0300060200000014000100ff010000000000000000000000000001060c58749828bae8482b82e066c20022d8b2f150735803de0793bcb2faaf5739af5465943cb2f91ea6f6100dd2f47b"], 0x30}}, 0x40000) mkdir(&(0x7f0000000180)='./file0\x00', 0x40) 34.19339955s ago: executing program 2 (id=404): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x4, &(0x7f0000000000), 0x1, 0x4e4, &(0x7f0000000a40)="$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") (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0), 0x505000, 0x0) (async) getuid() mount$9p_fd(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000380), 0x1000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@cache_readahead}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@fscache}, {@fscache}, {@noxattr}, {@version_9p2000}], [{@flag='lazytime'}]}}) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r4, @ANYRES64=r4, @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) vmsplice(r7, 0x0, 0x0, 0x5) gettid() (async) timer_create(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 34.134917971s ago: executing program 2 (id=405): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x42, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002da8f5608ac0533faaacb010203010902240001040700f50904f40102fffd018009050125ff0329fb10090502"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x148) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ppoll(&(0x7f0000000080)=[{r3, 0x8004}], 0x1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r4, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r4, 0x0, 0x0) 31.715150871s ago: executing program 2 (id=414): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = epoll_create(0x3c4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x2}) listen(r2, 0x1ff) epoll_pwait(r1, &(0x7f0000000240)=[{}, {}], 0x2, 0x7, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54004d0c76ef291bb16dbe0af8c1531c7541a0ac7e5f438cbf8c4baf645b24173ceb9198e52d0f621e1711d1034696c7ca23fb766ffde97280b925bf64bb502f704571445ca3981970785c75a0bd78a3d32a44b1425fa6ad91f66849662210591e7acffbb1375a0a2de54a9de373dd164f9eaeea3ebdb0f76a030000001e1b5c49fefc848c1c612d7799d19393ea7cf211b4833a44ebddaa8342977afd071ece2ba166ce4ae6ae7adfe9734b889bd5cd5fa8ba2d25b1f74e2f71b481c6c76395744f6596ff14aa46fc8cad6e9556c9802cbad767ebe081d8654be89dd6a98deaf801cba3bbf029b3ff091c7957c29d2a15aca886c45c6b", @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf256b0000000c009900c0000000690000000a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a001a000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 31.498717154s ago: executing program 2 (id=415): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xfff7}, 0xe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {0x0, 0x400, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) r4 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r4, 0x111, 0x32, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') unshare(0x40400) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) getdents(r5, &(0x7f0000000180)=""/29, 0x1d) getdents64(r5, 0x0, 0x43) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x178, 0xc, 0x0, 0x178, 0x280, 0x258, 0x258, 0x280, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0x0, 0x0, 0x0, 0xff], [], 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x3a}, 0x0, 0x188, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff], @ipv4=@multicast1, [0x3ba818d8ad60a73, 0xffffff00, 0xff000000, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0x0, 0xffffffff, 0xff], @ipv4=@broadcast, [0xff000000, 0xffffff00, 0xffffffff], 0x800, 0xfffffff8, 0x8, 0x4e21, 0x2, 0x4e20, 0x4e24, 0x2, 0x1}, 0x41, 0x17}}, @inet=@rpfilter={{0x28}, {0x9e590fe420c61c1e}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0xffffff00], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 31.467389784s ago: executing program 32 (id=415): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0xfff7}, 0xe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e}, {0x0, 0x400, 0x0, 0x0, 0x5, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3507, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80800) r4 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r4, 0x111, 0x32, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') unshare(0x40400) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) getdents(r5, &(0x7f0000000180)=""/29, 0x1d) getdents64(r5, 0x0, 0x43) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x0, 0x178, 0xc, 0x0, 0x178, 0x280, 0x258, 0x258, 0x280, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0x0, 0x0, 0x0, 0xff], [], 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x3a}, 0x0, 0x188, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff], @ipv4=@multicast1, [0x3ba818d8ad60a73, 0xffffff00, 0xff000000, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0x0, 0xffffffff, 0xff], @ipv4=@broadcast, [0xff000000, 0xffffff00, 0xffffffff], 0x800, 0xfffffff8, 0x8, 0x4e21, 0x2, 0x4e20, 0x4e24, 0x2, 0x1}, 0x41, 0x17}}, @inet=@rpfilter={{0x28}, {0x9e590fe420c61c1e}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0xffffff00], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 23.110952779s ago: executing program 1 (id=448): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000100001002cbd7000fbdbdfa500000000", @ANYRES32=r1, @ANYBLOB="f5000a0011620504050001"], 0x28}, 0x1, 0x0, 0x0, 0x8c044}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000085100000060000001810000000", @ANYRES8, @ANYBLOB="000000000000000079000000000000001800000000000000000000000000ef0095000000000000d6070a0000000000009500000000000000", @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x6, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setreuid(0xffffffffffffffff, 0xee00) setreuid(0x0, 0xee00) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)={@ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000180)=0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x1, 0x80801) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000100)={0x0, r5}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000040)={0x4, r5}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x50, &(0x7f0000000040)={[{@grpquota}, {@dax_never}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./bus\x00', 0x2810448, &(0x7f0000000200)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nouid32}]}, 0x0, 0x27a, &(0x7f0000000ac0)="$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") r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000080000000600000000eef96229058c2dc0b85080580000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r11, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6}, 0x20) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000100), 0x4000000000001a0, 0x4000844) recvmmsg(r10, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x100, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 22.037703303s ago: executing program 1 (id=450): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x7, 0xfa, &(0x7f0000000140)=""/250, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f0000000840), 0x0, 0x200008, 0x2) 21.959136674s ago: executing program 1 (id=452): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) (async) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xa8, 0x0, 0x2, 0x201, 0x0, 0x0, {0x8, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) 21.780420806s ago: executing program 1 (id=453): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000180)=0x7f, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'system.', '!-[-\x00'}, &(0x7f0000000200)=""/94, 0x5e) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) unshare(0x64000600) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r2, 0xc0185502, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x44, 0x2b, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x6}}}}}}}}}, 0x0) ftruncate(r1, 0xc17a) pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) unshare(0x4000400) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000000440)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) 21.570808589s ago: executing program 1 (id=455): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x70}, 0x1, 0x7}, 0x400c001) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000002200012800b00010065727370616e00001005024e1f000004001200"], 0x40}}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0x8ca0, &(0x7f0000020100)=ANY=[], 0x1, 0x289, &(0x7f0000001b00)="$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") ftruncate(0xffffffffffffffff, 0x81fd) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x8, @loopback, 0x6}, 0xfffffdf7) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./bus\x00', 0x800090, &(0x7f0000001980)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,rodir,uni_xlate=0,iocharset=mtcgaelic,shortname=lower,utf8=1,iocharset=iso8859-13,uni_xlate=1,rodir,shortname=win95,shortname=lower,shortname=mixed,shortname=lower,utf8=0,time_offset=0x00000000000003b2,uni_xlate=0,uni_xlate=0,nonumtail=0,shortname=win95,utf8=1,uni_xlate=0,rodir,shortname=mixed,shortname=lower,iocharset=cp862,shortname=mixed,\x00'], 0x1, 0x2d2, &(0x7f0000000c00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x7ae37a5e, 0x1ff) writev(r4, &(0x7f0000003b00)=[{&(0x7f0000002680)="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", 0x986}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r7, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xfffffffc}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c090}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYBLOB="9d692484d6ae0d5dd4c5ad8adf54b9af4748762d60524c6ddfcb19601535e84b53f411d15b4ce8c737490172064a88f300afbf800348dcaf11b0570c6c67fee947ccf56b9e7ecdf9299b783540e0eb1bd358de5cf67c12e8e933a2f5677d975da85500588b85d6ff2677f6eed5173aaa5d1ea3bfea5742714505d1817ce7ac6bb1437965c6de12accefe2c636f37f0bb231de88a2037ce4ed0fd8baf14cee597a12451f16efdca66706e487e07bc2d6e0aea94ae8a9e6a59d45589f6fc1e1cf2de52cad78ca5635f4923bb14bd4270f0cea4e96ef64c04fb6f7e7f67257a71eb1a860df6dfc40f03dbaf46599402d38d3cb6e0558a1f", @ANYRESOCT=r7, @ANYBLOB="fd0dbbadb4d7fdcd29f7b9b71139c0c20cf5747c91acfb52bf20b101574f1426c34f97375633c7f48c14"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@remote, 0x0, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x88}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x8}, {0x0, 0x80000000, 0x2000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1000000}}, 0xe8) write(r2, &(0x7f0000000900)="2600000022004701050007008980e8ff02006d20002b1f00c0e9f7094a51f10101033500b088", 0x26) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x29, 0x80002, 0x0) 21.301307052s ago: executing program 1 (id=456): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fspick(0xffffffffffffffff, &(0x7f00000002c0)='.\x00', 0x0) syz_extract_tcp_res(&(0x7f00000000c0)={<r1=>0x41424344}, 0x6, 0x0) unshare(0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x5, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0xac}, @ringbuf_query], &(0x7f0000000600)='syzkaller\x00', 0x89, 0x1000, &(0x7f0000000c80)=""/4096, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x3, 0xfd22, 0x800}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff, r3, 0x1], &(0x7f0000000800)=[{0x5, 0x2, 0x0, 0x8}, {0x2, 0x4, 0x5, 0x2}, {0x0, 0x4, 0xd, 0x3}, {0x4, 0x5, 0x10, 0x3}, {0x4, 0x2, 0x10c, 0x9}, {0x3, 0x2, 0xb, 0x3}, {0x1, 0x5, 0xa, 0xb}], 0x10, 0xffff, @void, @value}, 0x94) close(r2) signalfd(r2, &(0x7f00000000c0), 0x8) syz_emit_ethernet(0x1c2, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff86dd653fe82c018c0600fe880000000000000000000000000001fe800000000000d000000000000000aa320a0000000000000001000104000000000730000000030a0286db00000100000000000bffffffffffffff0600000000000000ffffffff00000000010000000000000007180000000004010300a50000000000000000000000000000000000004e234e22", @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) chdir(0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'wlan1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@aname={'aname', 0x3d, 'kfree\x00'}}]}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000500)={0x2}) r9 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r9}}) 21.301002752s ago: executing program 33 (id=456): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fspick(0xffffffffffffffff, &(0x7f00000002c0)='.\x00', 0x0) syz_extract_tcp_res(&(0x7f00000000c0)={<r1=>0x41424344}, 0x6, 0x0) unshare(0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x5, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0xac}, @ringbuf_query], &(0x7f0000000600)='syzkaller\x00', 0x89, 0x1000, &(0x7f0000000c80)=""/4096, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x3, 0xfd22, 0x800}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff, r3, 0x1], &(0x7f0000000800)=[{0x5, 0x2, 0x0, 0x8}, {0x2, 0x4, 0x5, 0x2}, {0x0, 0x4, 0xd, 0x3}, {0x4, 0x5, 0x10, 0x3}, {0x4, 0x2, 0x10c, 0x9}, {0x3, 0x2, 0xb, 0x3}, {0x1, 0x5, 0xa, 0xb}], 0x10, 0xffff, @void, @value}, 0x94) close(r2) signalfd(r2, &(0x7f00000000c0), 0x8) syz_emit_ethernet(0x1c2, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff86dd653fe82c018c0600fe880000000000000000000000000001fe800000000000d000000000000000aa320a0000000000000001000104000000000730000000030a0286db00000100000000000bffffffffffffff0600000000000000ffffffff00000000010000000000000007180000000004010300a50000000000000000000000000000000000004e234e22", @ANYRES32=r1, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) chdir(0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'wlan1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@aname={'aname', 0x3d, 'kfree\x00'}}]}}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000500)={0x2}) r9 = signalfd(0xffffffffffffffff, &(0x7f00000006c0), 0x8) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r9}}) 17.305703453s ago: executing program 0 (id=383): unshare(0x4020400) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x104) 15.09600219s ago: executing program 0 (id=383): unshare(0x4020400) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x104) 12.853929248s ago: executing program 0 (id=383): unshare(0x4020400) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x104) 9.114863076s ago: executing program 4 (id=504): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x280809a, &(0x7f00000001c0)=ANY=[], 0x1, 0x2bf, &(0x7f0000000380)="$eJzs3c9qY2UUAPBz0zS92kWKuFEE78J1mbpx4aZVRhC7UiKoCy3ODEgaBqYQmArGruYJXPoePoIbQXyDAbeCu5lF5JObe2/+YBJjM1XU3291+L57zj3J1ybZ5OSzVwb9O/ezuHryOPI8i9ZxHMfTLA6iFY2vox0AwH/H05Ti1zQJs1TZMLPdutHGAIAbU73//6U3fgDgX+6Djz5+7+T09Pb7RZHHS91Hw14WEYNHw161f3IvvojzuBu3ohvjiDRVxe+8e3o72kXpIF4bjIa9MnPw6Q91/ZNfIib5R9GNg+X5R0VlLn807O3G81HEyb3dptVuvLg8//Ul+dHrRKfJLO9/GN346fO4H+dxJ8rcWf5XR0XxdvrmyZeflBeX+VkrenuT6yaSD0gAAAAAAAAAAAAAAAAAAAAAADxbh0WRVeN7JvN7yqV6/s7OOGKcDg+LxsHifJ4qP2sKVfOBUjMtZ5Ti22a+zq2iKFJ94Sy/HS+3/bAAAAAAAAAAAAAAAAAAAAAAlC4ePt4/Oz+/++Di4WV/66CZBtB8rf+6dY7nVl6Ny/7ZzuqCe7OtN/arcFXl+WkDZa9r24h2Ozbq+cdrPmNX05Xn1vR8/WAvpisfRhU0B/NM7/XCW1XRy/5ZUW81T3L/LPuze+XNmX43v9WJbRtLkz+JcVo803za6mJWZ4t7pWxWsLO/9JrfUkqbFXzz5+qM6pVsMmJjs35262DpAyyDvDyLfPqPX259v7rgypeMne1ecQAAAAAAAAAAAAAAAAAAgFVmX/pdsnm1NrV1Y00BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN9s9vv/TZBHxOLKH4JRnbzumjroxIOLf/ghAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/wewAAAP//VpJXrg==") r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001600)={0x8, {"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", 0xfffffffffffffd6d}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x49d, &(0x7f0000000740)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x8000000000000001, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fallocate(r3, 0x44, 0x3, 0x6e24) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x1, [{0x0, 0x2, 0x6}, {0x0, 0x4}]}]}}, &(0x7f0000001800)=""/148, 0x3e, 0x94, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2) write$9p(r0, &(0x7f0000001400)="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", 0x200) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x280809a, &(0x7f00000001c0)=ANY=[], 0x1, 0x2bf, &(0x7f0000000380)="$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") (async) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) (async) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) write$UHID_INPUT(r1, &(0x7f0000001600)={0x8, {"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", 0xfffffffffffffd6d}}, 0x1006) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x49d, &(0x7f0000000740)="$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") (async) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) (async) lseek(r2, 0x8000000000000001, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) fallocate(r3, 0x44, 0x3, 0x6e24) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x51) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000001680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x1, [{0x0, 0x2, 0x6}, {0x0, 0x4}]}]}}, &(0x7f0000001800)=""/148, 0x3e, 0x94, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) (async) fcntl$setlease(r4, 0x400, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2) (async) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff5295e8cd6f55ce071b304aa0a588b3b7a2efa2f167dd9c1b8b016268d37d9a30983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402c76caf85d4569a75dde2f64", 0x200) (async) 9.047985906s ago: executing program 0 (id=383): unshare(0x4020400) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x104) 7.412733227s ago: executing program 4 (id=508): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100c000, &(0x7f0000000540)={[{@jqfmt_vfsv1}, {@user_xattr}, {@barrier_val}, {@norecovery}, {@sysvgroups}, {@resuid}, {@nodelalloc}, {@acl}, {@abort}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@bh}]}, 0xfc, 0x580, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000002c0)='\b', 0x1, 0x3f015764000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000001300)={0x314, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000011}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x479}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa790}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbf3}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9397}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x57e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x27}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x54}]}, @TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x275}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x17d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd6ef}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000001c0)={0x2, r2, 0xd, {0x0, 0xc}, 0xfa}, 0x1) r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300eed6ae9ef30be82a004000", [0x0, 0x2]}) write$hidraw(r2, &(0x7f00000002c0)="85", 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100c000, &(0x7f0000000540)={[{@jqfmt_vfsv1}, {@user_xattr}, {@barrier_val}, {@norecovery}, {@sysvgroups}, {@resuid}, {@nodelalloc}, {@acl}, {@abort}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@bh}]}, 0xfc, 0x580, &(0x7f0000000b00)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) pwrite64(r0, &(0x7f00000002c0)='\b', 0x1, 0x3f015764000) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000001300)={0x314, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000011}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x479}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa790}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbf3}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9397}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x57e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x27}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x54}]}, @TIPC_NLA_SOCK={0xd8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x275}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x17d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd6ef}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000001c0)={0x2, r2, 0xd, {0x0, 0xc}, 0xfa}, 0x1) (async) open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300eed6ae9ef30be82a004000", [0x0, 0x2]}) (async) write$hidraw(r2, &(0x7f00000002c0)="85", 0x1) (async) 7.16472341s ago: executing program 4 (id=509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x100, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d80), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000010000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd60ed490a733c76a152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a76a0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c39100000000000000094d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158ef4f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a18acb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb0000000000000008f9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9be00000000000000ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6e44b2f414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497d3f5d01ec00d289fcbf051498b21619da363cd09dea96879c145ff4ddf55d09aea84d900b0e1a05cdeee05fea7c91eb34a0737f31525ff48a1215b5197f76123c4322773a9c55a15dcaf3838402de97192a312a9eea90cdd8c8e393458b25464443a5468abff66292d2f167a00f11a56b0bd6f4e81c45e2a119cef7989c8dec70d72e86fba7e79233b15b681ac2b9d71e8bb09042b29d2442058ba451d409b007e982fab76eefa811c873fbc7cbaca5e2f9947d278af1cc012be9e75e77efe1dd86b0cb136bc9cc4c646d7d2270aa53288e55e899491d927a7f1"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x22) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000c000000280005801c0002800800ecff140200000800010012000000080004000700040008000100657468"], 0x3c}}, 0x0) 6.534695757s ago: executing program 0 (id=383): unshare(0x4020400) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x104) 6.528835138s ago: executing program 3 (id=511): mlock(&(0x7f0000a51000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a56000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000a00002016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0100000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000005a793c61ee5568"], 0xc4}}, 0x4004) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000a56000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000a51000/0x3000)=nil) 4.731036201s ago: executing program 6 (id=512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @local}, 0xc) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) writev(r0, &(0x7f0000000080), 0x2) 4.730379931s ago: executing program 3 (id=513): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x1000}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x1000}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 4.727070071s ago: executing program 4 (id=514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000002c0)={@private2, <r4=>0x0}, &(0x7f0000000300)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10b142, 0x1fe) fallocate(r5, 0x10, 0x2000, 0x7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf}], &(0x7f0000000140)='syzkaller\x00', 0x50, 0x3f, &(0x7f0000000180)=""/63, 0x41100, 0x0, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xf, 0xff, 0x4be7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000002c0)={@private2}, &(0x7f0000000300)=0x14) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x10b142, 0x1fe) (async) fallocate(r5, 0x10, 0x2000, 0x7fff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf}], &(0x7f0000000140)='syzkaller\x00', 0x50, 0x3f, &(0x7f0000000180)=""/63, 0x41100, 0x0, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xf, 0xff, 0x4be7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) (async) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) (async) 4.72233838s ago: executing program 3 (id=515): fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'system.', '\x00'}, &(0x7f0000000040)=""/62, 0x3e) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x8) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/62, 0x3e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, '.'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '[+('}, {0x20, '\\\':^-'}, {0x20, '\x00'}], 0xa, "5c2fa3ef75c594f730fdcaf929f1dac81413347ec4e5e2b1a0c96195691f4e52031239ae36c3d5bf72e4deae08b8fbea946e7c58a4d600fbbd09ba26e8aeec51d4c06c16582f42051a117b6bd6f89fb650755125efebd61ad14cf633f36216d87999d7bf02bae37f558b010a0f4c"}, 0x8b) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/232, 0xe8) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x62c142, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000300)=""/4096, 0x1000) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000001300)={0x9, 0x1000, 0x3}) r3 = accept(0xffffffffffffffff, &(0x7f0000001340)=@tipc=@name, &(0x7f00000013c0)=0x80) r4 = accept(r3, &(0x7f0000001400)=@in6, &(0x7f0000001480)=0x80) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000ffc000/0x1000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000014c0)={0x10000, 0x6, 0x2000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r5 = accept(r3, &(0x7f0000001500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001580)=0x80) read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020, 0x0, 0x0, <r6=>0x0}, 0x2020) sendmsg$nl_xfrm(r4, &(0x7f0000003b80)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003b40)={&(0x7f0000003640)=@updsa={0x4c8, 0x1a, 0x800, 0x70bd28, 0x25dfdbff, {{@in6=@empty, @in=@rand_addr=0x64010100, 0x4e20, 0x5, 0x4e20, 0x9, 0xa, 0x80, 0x80, 0x11, 0x0, r6}, {@in=@loopback, 0x4d3, 0xff}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, {0x1, 0x4, 0xffff, 0x0, 0x4, 0x6, 0x4, 0x2}, {0x50, 0x8, 0x2, 0x9}, {0x7, 0xf, 0x80000000}, 0x70bd29, 0x3502, 0x0, 0x1, 0x5, 0x88}, [@etimer_thresh={0x8, 0xc, 0x937e}, @algo_comp={0x60, 0x3, {{'deflate\x00'}, 0xc0, "f9f989c8f85ffba8dacd5f718845fbfcc2761eb3004bfe3c"}}, @extra_flags={0x8, 0x18, 0x6}, @algo_crypt={0x138, 0x2, {{'cbc-des3_ede-asm\x00'}, 0x780, "a1088ace9447c2a34633fc8ecdcd8eeaa3d9a47bf25b095c239322a947a6af894caf98b0ff3750663825b005b2b32e0d854e2fc8a7248fb751b731ced080c00693dcee2bd74c24fcbe92b124aa3f9097f78c67e2d733e67c769c1abfd7e079500e3a4c9102b5b6596891c0f8554c45c61346a6bbf2346f650d97b9cab3e1b51607ce3857648f8d732ccb090fe40fb67365b2cbef71109f6a1bffbb6f636f7bf58fe7ad1995330e6a41392290e6e30db6fa6a3a2101540cd3a325109492f39d2b9f7ef8ad5114c907cc4a071dd7c5ccc8586f3c318eff6cf28c8547cc9b3533c2a017f5210f65a316ae91d056e570fa1a"}}, @lastused={0xc, 0xf, 0x1}, @tmpl={0x184, 0x5, [{{@in=@loopback, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x3505, 0x3, 0x2, 0x6, 0x42034ae1, 0x7, 0xfff}, {{@in6=@remote, 0x4d6, 0x32}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x3500, 0x3, 0x0, 0x0, 0x7, 0x10, 0x6}, {{@in6=@remote, 0x4d6, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x3506, 0x1, 0x0, 0x8, 0x6, 0x7fffffff, 0x8}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3502, 0x4, 0x3, 0x3, 0x400, 0x7, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d3, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, 0x3507, 0x0, 0x2, 0x2d, 0x9aa}, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d4, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x2}]}, @sec_ctx={0x9f, 0x8, {0x9b, 0x8, 0x1, 0xff, 0x93, "8a473b049b97750f4b65add347c5625bd43f19946f931cce6e91fb878cc1bca281bd71579a63f78228a64f3d1673d6958b61f9a9bcc0c2a51cb79f12b18d161707ca1be8ef6eedbdac92ad9bc43d5439762ff0780c4756a8eb6141ed6021a2fb600a82cbeed3510ab7807fbb08accdd92dfb5342b4ebb2c1441f8863ea6abcc247cadb6349c9a576fdf0c577dcd9b9a550061a"}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x80}, 0x44090) r7 = open(&(0x7f0000003bc0)='./file0\x00', 0x149c02, 0x11) accept(r3, &(0x7f0000003c00)=@can, &(0x7f0000003c80)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003d00)={&(0x7f0000003cc0)='scmi_xfer_end\x00', r7, 0x0, 0x1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000003d40)=@base={0x5, 0xe, 0x101, 0x0, 0x4080, r7, 0x7209, '\x00', 0x0, r7, 0x4, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000003dc0)={0x2, 0x0, [0x81, 0x4, 0x5, 0x8, 0x401, 0x8802, 0x3, 0x6]}) r8 = socket$inet_udp(0x2, 0x2, 0x0) fallocate(r8, 0x0, 0xf8a, 0x1) recvmmsg(r5, &(0x7f0000003e40), 0x0, 0x2040, &(0x7f0000003e80)) statfs(&(0x7f0000003ec0)='./file0\x00', &(0x7f0000003f00)=""/246) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000004000)={'bond0\x00', {0x2, 0x0, @loopback}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.698699431s ago: executing program 3 (id=516): sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) syz_emit_ethernet(0x6c, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r7=>0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd3eb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd935}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x48}}, 0x0) 4.668686201s ago: executing program 6 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @random="b03cc0034375", @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x2, 0x4, 0x40, 0x66, 0x0, 0xe, 0x1, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4, 0xef, 0x1, 0xa}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, @redirect={0x5, 0x3, 0x0, @rand_addr=0x64010102, {0x5, 0x4, 0x0, 0x3d, 0x7d2, 0x64, 0x3, 0x9, 0x2e, 0x800, @private=0xa010102, @multicast1}}}}}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mmap$xdp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r2, 0x180000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 4.474834354s ago: executing program 6 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socketpair(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) unshare(0x20000400) ioctl$sock_SIOCSIFBR(r2, 0x80108906, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x100000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_usb_connect(0x0, 0xf5, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c240203010104030700ff070c240206000205050200d07f072408040700470c24", @ANYRES64=0x0], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000200), 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) (async) unshare(0x20000400) (async) ioctl$sock_SIOCSIFBR(r2, 0x80108906, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x100000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) syz_usb_connect(0x0, 0xf5, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c240203010104030700ff070c240206000205050200d07f072408040700470c24", @ANYRES64=0x0], 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r4, &(0x7f0000000200), 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) (async) 4.425851244s ago: executing program 4 (id=519): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x2, 0x36e, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000005000)=ANY=[], 0x1ae8) 3.13908717s ago: executing program 4 (id=521): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ipv6_route\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') getdents64(r1, 0x0, 0x0) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/189, 0xffffff4a}], 0x1, 0xff, 0x0) 3.13615309s ago: executing program 34 (id=521): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ipv6_route\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00') getdents64(r1, 0x0, 0x0) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/189, 0xffffff4a}], 0x1, 0xff, 0x0) 3.130791541s ago: executing program 3 (id=522): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000000008500000029000195000000ffff0a00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@remote, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fffffe}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}}, 0xf0}, 0x1, 0xe}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x1501) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) socketpair(0xb, 0x6, 0x5f, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000022000069118d0000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) timer_create(0xb, 0x0, &(0x7f00000000c0)=<r3=>0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) 2.738281456s ago: executing program 5 (id=524): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fallocate(0xffffffffffffffff, 0x60, 0x5be2000000000, 0x3) (async) fallocate(0xffffffffffffffff, 0x60, 0x5be2000000000, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000200)={'veth1_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x17, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x1, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x5000, 0x0, 0x8, 0x0, 0x0, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4}, {0x2000, 0x3000, 0x9, 0xfe, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x2, 0x6}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x6, 0x80}, {0x8080000, 0x8080000, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x5000, 0x80a0000, 0x0, 0x0, 0x6, 0x3, 0x7f, 0xa, 0x26}, {0x5000, 0xfffd}, {0xffff1000}, 0xfdfcffcb, 0x0, 0x80a0000, 0x2028, 0xb, 0xf801, 0x0, [0x40000000000, 0x0, 0x5, 0x7]}) 2.732463465s ago: executing program 5 (id=525): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75e, &(0x7f0000001100)="$eJzs3M9rHGUfAPDvTLNNf+R9Ny+8h/f1IEILLZROkubSnowX8VIoFLzWJZmEsJNsyW5qEwttPQu1uSgIonePXoVS/wBvUlDwLojWeBAvkdls0jbNxm2bZGv8fGCyz/PMPPt9vjuTJzOQZwP4x3qt/JFEDEXEpYiodtrTiDjcLh2JuLV+3OrDG5PllsTa2uWfk7JbrK5VN98r6bwej3aX+F9E3K9EnHn/6bjNpeV6rSjyhU59pDV3daS5tHx2dq42k8/k82PjF0bPj4+fHx3ftVxPvn3h6N1v3lxZ+fbL1p1XB84mMdHOOzq57Vqgx6x/JpWY2NI+vxfB+ijp4ZiBfRgHAAA7K+/zD3XuzSpRjUPu0gAAAODAWRtcAwAAAA68JPo9AgAAAGBvbfwfwMba3r1aB9vNT29ExPB28Qfaa4gjjkQlIo6tJk+sTEjWu8ELuXU7Iu5NbHP9JZ3r7/mNbqn3skaa/XWvnH8mtpt/0s35J7aZfwY2vjvhBXWf/x7FP9Rl/rvUY4yvPv1/pWv82xGvDGwXP9mMn3SJ/06P8e+sfHC32761zyNObfv3J3ki1g7fDzEyPVvs+Kt1/4/TD3bK/9hT8ZOkHTXZOf+rPeb/3uqv9W5zSRn/9Imdz/96/MEn+pXXxIedcaQRcbfzWtZXtsQ4Mffd109HTm5txJ/q8vlvf/7f2sz/sx7z/+GLwes9HgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtaUQMRZJmm+U0zbKI4xHx3ziWFo1m68x0Y3F+qtwXMRyVdHq2yEcjorpeT8r6WLv8qH5uS308Iv7z/dH1oLNFnk02iql+Jw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCm4xExFEmaRUQaEb9V0zTL+j0qAAAAYNcN93sAAAAAwJ7z/A8AAAAH3/M+/ye7PA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQLt08WK5ra0+vDFZ1qeuLS3WG9fOTuXNeja3OJlNNhauZjONxkyRZ5ONub96vzQixi7E4vWRVt5sjTSXlq/MNRbnW1dm52oz+ZW8si9ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KyG2luSZhGRtstpmmUR/4qI4agk07NFPhoR/46IB9XKYFkf6/egAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HXNpeV6rSjyBYW/YyGSiJdgGAr1WsSz9LoZL/uJ6/fMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAPzSXluu1osgXmv0eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP2V/phERLmdqp4c2rr3cPJ7tf0aEe9+cvmj67VWa2GsbP9ls731caf93GMdb+5nDgAAAHDgvf4sB288p288xwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPSqubRcrxVFvrCHhbjd7ywBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDn8WcAAAD//+Yew1w=") chdir(&(0x7f0000000440)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x1, &(0x7f0000000000)="12", 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x0, 0x1}, 0x20000009, 0x22, 0x0, 0x0, 0x7, 0x80, 0x0, 0x8001, 0x101, 0x0}) fcntl$setflags(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @struct]}, {0x0, [0x2e, 0x30]}}, &(0x7f00000017c0)=""/4096, 0x38, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="9f000000e47e2217d2f39ae2eb0010000065b4d8bb16bb6646d572876c20cf828134e287edaee6e3f11dc603f80a2b482d672230e6c1d2a818c60707eac1644df9", @ANYRES16=r6, @ANYBLOB="08002cbd7000fedbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x8c}, 0x1, 0x0, 0x0, 0x8001}, 0x4880) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6f4f58fee65577b018348bd6ae38a2334fd81745eb2f4dcbac7f393499eebc3bd215e6310c183459f04717c4a1bfa2728e99ad8a5bef13402452f68148d56c6cddc0f4497f1b1cd0a6abe8a28b36ff3e5f31b3949381db920d385b049137bd5ffc1d7cffeaf63ab53b21a864c65df5678d8fd898e0c857e802261ce03c56416d993187fb9bb04816fe9f54661f2d4f8245572a379248822f521d037f46803965542cfbfe9d888a6a3086107db506d6353fe1c60188b82cdf39c4f473eb", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES8=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, <r8=>0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000180)={0x50, 0x0, r8, {0x7, 0x29, 0xfffffffe, 0xffffffff85000014, 0x1, 0x1004, 0x0, 0x4000000, 0x0, 0x0, 0x1}}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0000ffffff9580000000080000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)={0xad6}, 0x8) 2.293717421s ago: executing program 5 (id=526): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) pipe(0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) (rerun: 32) close(r4) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async, rerun: 64) r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) socket(0x1, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) recvmmsg(r7, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f6"], 0x0) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11004001"], 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@quota, 0x22}, {@nouser_xattr}, {@grpquota}, {@data_err_ignore}, {@dax_always, 0x22}, {@nodiscard}, {@errors_remount}, {@nodelalloc}, {@sysvgroups}, {@norecovery}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") (async) syz_usb_connect(0x5, 0x24, &(0x7f00000004c0)=ANY=[], 0x0) 2.178971443s ago: executing program 5 (id=527): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8052, &(0x7f0000002440)={[{}, {@sb={'sb', 0x3d, 0xd69a}}, {@lazytime}, {@test_dummy_encryption_v1}, {@orlov}, {@bsdgroups}, {@grpjquota}, {@sb={'sb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@auto_da_alloc}]}, 0x1, 0xbe8, &(0x7f0000000c00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x1, @desc1}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @aes256, 0x10, '\x00', @auto="33c093c135a61a7700639c92c65ace64"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000069000a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) dup(r0) 2.099548924s ago: executing program 0 (id=383): unshare(0x4020400) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') unshare(0x22020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x104) 227.820367ms ago: executing program 6 (id=528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=']) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000004d564b004799ff7d"]) r5 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x44}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f00000000c0)) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10000000}, 0x1c) 181.676148ms ago: executing program 5 (id=529): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe9c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20013, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f000050e000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil) mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil) munmap(&(0x7f0000866000/0x3000)=nil, 0x3000) mremap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) madvise(&(0x7f0000678000/0x14000)=nil, 0x14000, 0x12) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/192, 0xc0}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1, &(0x7f0000000f80)=""/107, 0x6b}}, {{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x0, &(0x7f0000004a40)) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'pim6reg\x00', 0xff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x400) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0), 0x4) 179.928338ms ago: executing program 3 (id=530): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40482, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0xffffffff, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) 172.966718ms ago: executing program 7 (id=531): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000280)='big_key\x00', &(0x7f0000000380)='asymmetric\x00') socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x2200000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 64) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 64) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) (async) prlimit64(0x0, 0x7, &(0x7f0000000300)={0x8, 0xfffffffffffffffe}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 64) r2 = getpid() (rerun: 64) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3004017, &(0x7f0000000180)={[{@orlov}, {@sysvgroups}, {@abort}]}, 0x43, 0x4e0, &(0x7f0000000300)="$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") 109.881209ms ago: executing program 6 (id=532): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x3}, {0x6}, 0x8, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000340)="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", 0x16c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000002b000000000000000c0f0000008d17344b74f56c69e6f96b0f5245610f000000fc068ef27f015ced258f229564365792000000a1f0656a5cad48c1362f097323cf23a8cb4db7b8e1fbdd02b05f3c72e4c8ed75895bad437f1d5ba9591ad5a05ed8ccaa5edbbfa1307333585effc9cdb2962431d529ddec0e41b72552e515727383b655e719cb33af9eaf80b03fa4b2e6749197dcf7fc118669cf6eb59c31e01f38b09a0678e65ccce5db0e040042e5f16cee513682f2f464680ab46df193c1ede73905def0314bd5ab55cad02a87"], 0xc9}) (async) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40460020, 0xfffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0x80000000}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000850000001b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14.888499ms ago: executing program 6 (id=533): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="640100001900010000000000040000001d0100001500040001000080fe02000031171e44b2b50e8f040000001e010600f8"], 0x164}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1002409, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}, {@uuid_auto}]}) r1 = open(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6b0080, 0x0) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa002a008}) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) preadv(r5, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/116, 0x74}], 0x1, 0x316, 0x74f) pread64(r5, 0x0, 0x0, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r7=>0x0}) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000013000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r7], 0x44}}, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.33649ms ago: executing program 7 (id=534): dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac05624200000000000109022400010000000009040000010300000009210000000122050009"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) unshare(0x26020480) memfd_create(0x0, 0x3) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000105"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1, <r2=>0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x10, &(0x7f0000000380)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xa8, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0xc, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x40, 0x9, 0xd4}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xff, 0xcd, 0x4, 0x10, 0x6}, 0x2c, &(0x7f0000000140)={0x5, 0xf, 0x2c, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x19, 0x6, 0x3, 0xf, 0x2, [0xc000, 0xcf, 0x0, 0x3f30, 0xc00f, 0x3f00]}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2809}}, {0xc6, &(0x7f00000001c0)=@string={0xc6, 0x3, "bcff381431fcb0bc5bbbf221b97ea706d14ebb96062aece47d3c5be9d6f6ede58da2bf3721ede76cb8ba4dbdff93d8f817b72d41fb01244d60f4873f1938978cea122a79e724bbbdfcb67e00aa842f38454a7ce9fc3784fb3143fe81cd15d2d6fd2fedbc982f13ec7efae70958c4eac7b57a8f93d5ff2bcf9a507cb5397ff9b0c4d2970067a3601af02f8fb638b698f1c9584509d7d2a8aa50cfc00dba5943ac3b124d74cc310831887a54be60bc57075fbd99bf895ac3bfa707f7f86166f18c245a6793"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x2d, &(0x7f0000000300)=@string={0x2d, 0x3, "6a24e8b6ae6ef9301bd72658aabbeb835b246249c737b3b4d7d662c5794c036f9979c14be2cca882c62d14"}}]}) 0s ago: executing program 5 (id=535): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file2\x00', 0x2100000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x6, 0x4, 0x2001, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b80)={{}, {0x1, 0x1}, [], {0x4, 0x1}, [], {0x10, 0x7}}, 0x24, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 748173194.970:216): avc: denied { append } for pid=1239 comm="syz.2.364" path="/79/bus/cpuset.effective_cpus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.025283][ T24] usb 4-1: config 4 has no interface number 0 [ 43.195288][ T24] usb 4-1: string descriptor 0 read error: -71 [ 43.201538][ T24] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 43.206890][ T23] audit: type=1400 audit(1748173195.180:217): avc: denied { create } for pid=1221 comm="syz.1.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.225278][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.495949][ T343] ------------[ cut here ]------------ [ 43.501464][ T343] WARNING: CPU: 1 PID: 343 at fs/inode.c:302 drop_nlink+0xc5/0x110 [ 43.509372][ T343] Modules linked in: [ 43.512460][ T1201] usb 2-1: selecting invalid altsetting 0 [ 43.513274][ T343] CPU: 1 PID: 343 Comm: syz-executor Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 43.519072][ T1201] usb 2-1: selecting invalid altsetting 0 [ 43.530270][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 43.530288][ T343] RIP: 0010:drop_nlink+0xc5/0x110 [ 43.530298][ T343] Code: 1b 48 8d bb d0 04 00 00 be 08 00 00 00 e8 b3 a4 f3 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4b d0 c5 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 43.530304][ T343] RSP: 0018:ffff8881ef12fb98 EFLAGS: 00010293 [ 43.530315][ T343] RAX: ffffffff8199ae95 RBX: ffff8881dd786750 RCX: ffff8881f30c0000 [ 43.530320][ T343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.530337][ T343] RBP: ffff8881ef12fbc0 R08: dffffc0000000000 R09: ffff8881ef12fb40 [ 43.555336][ T1201] cdc_ncm 2-1:1.0: bind() failure [ 43.570815][ T343] R10: ffffed103de25f6a R11: 1ffff1103de25f68 R12: dffffc0000000000 [ 43.570823][ T343] R13: 1ffff1103baf0cf3 R14: ffff8881dd786798 R15: 0000000000000000 [ 43.570833][ T343] FS: 000055555be1b500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 43.570840][ T343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.570847][ T343] CR2: 000055555be46528 CR3: 00000001d62ce000 CR4: 00000000003406a0 [ 43.570863][ T343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.596689][ T1201] usb 2-1: selecting invalid altsetting 0 [ 43.601000][ T343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.625351][ T1201] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 43.631044][ T343] Call Trace: [ 43.631066][ T343] f2fs_drop_nlink+0x148/0x3a0 [ 43.631088][ T343] ? f2fs_mark_inode_dirty_sync+0x132/0x140 [ 43.648646][ T1201] usb 2-1: selecting invalid altsetting 0 [ 43.653606][ T343] f2fs_delete_entry+0x9d5/0xaf0 [ 43.653631][ T343] f2fs_unlink+0x347/0x840 [ 43.702700][ T343] ? f2fs_link+0x730/0x730 [ 43.707126][ T343] ? down_write+0xac/0x110 [ 43.711531][ T343] ? selinux_inode_unlink+0x22/0x30 [ 43.716715][ T343] ? security_inode_unlink+0xd0/0x120 [ 43.722074][ T343] vfs_unlink+0x321/0x540 [ 43.726393][ T343] do_unlinkat+0x2e9/0x670 [ 43.730885][ T343] ? fsnotify_link_count+0x90/0x90 [ 43.735986][ T343] ? __sanitizer_cov_trace_const_cmp4+0x80/0x80 [ 43.742295][ T343] ? getname_flags+0x206/0x500 [ 43.747073][ T343] __x64_sys_unlink+0x49/0x50 [ 43.751739][ T343] do_syscall_64+0xcf/0x170 [ 43.756261][ T343] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 43.762186][ T343] RIP: 0033:0x7f1ade649f17 [ 43.766609][ T343] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.786198][ T343] RSP: 002b:00007ffc79929f68 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 43.794702][ T343] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ade649f17 [ 43.802664][ T343] RDX: 00007ffc79929f90 RSI: 00007ffc7992a020 RDI: 00007ffc7992a020 [ 43.810624][ T343] RBP: 00007ffc7992a020 R08: 0000000000000000 R09: 0000000000000000 [ 43.818589][ T343] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc7992b110 [ 43.826552][ T343] R13: 00007f1ade6cc89d R14: 000000000000a491 R15: 00007ffc7992c1e0 [ 43.834701][ T343] ---[ end trace 0bcc6f2f403ced57 ]--- [ 43.875345][ T24] usb 4-1: can't set config #4, error -71 [ 43.882896][ T24] usb 4-1: USB disconnect, device number 3 [ 43.967496][ T1201] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 43.980905][ T1201] usb 2-1: USB disconnect, device number 3 [ 44.022499][ T1269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 44.051966][ T1270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 44.110866][ T1269] SELinux: ebitmap: truncated map [ 44.123478][ T1269] SELinux: failed to load policy [ 44.185189][ T1277] capability: warning: `syz.0.374' uses deprecated v2 capabilities in a way that may be insecure [ 44.273145][ T1280] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 44.309572][ T1280] ext4 filesystem being mounted at /81/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 44.576582][ T1288] loop0: p1 < > p3 [ 44.584723][ T1288] loop0: p3 size 134217728 extends beyond EOD, truncated [ 44.701555][ T377] udevd[377]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 44.712780][ T407] udevd[407]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.807084][ T1295] device lo entered promiscuous mode [ 44.814169][ T1295] device tunl0 entered promiscuous mode [ 44.821072][ T1295] device gre0 entered promiscuous mode [ 44.827834][ T1295] device gretap0 entered promiscuous mode [ 44.835141][ T1295] device erspan0 entered promiscuous mode [ 44.842544][ T1295] device ip_vti0 entered promiscuous mode [ 44.849818][ T1295] device ip6_vti0 entered promiscuous mode [ 44.857202][ T1295] device sit0 entered promiscuous mode [ 44.863934][ T1295] device ip6tnl0 entered promiscuous mode [ 44.870988][ T1295] device ip6gre0 entered promiscuous mode [ 44.878002][ T1295] device syz_tun entered promiscuous mode [ 44.885400][ T1295] device ip6gretap0 entered promiscuous mode [ 44.893298][ T1295] device bridge0 entered promiscuous mode [ 44.900768][ T1295] device dummy0 entered promiscuous mode [ 44.907642][ T1295] device veth0 entered promiscuous mode [ 44.909543][ T1019] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 44.913934][ T1295] device veth1 entered promiscuous mode [ 44.926903][ T1295] device wg0 entered promiscuous mode [ 44.932642][ T1295] device wg1 entered promiscuous mode [ 44.938395][ T1295] device wg2 entered promiscuous mode [ 44.944115][ T1295] device veth0_to_bridge entered promiscuous mode [ 44.951569][ T1295] device veth1_to_bridge entered promiscuous mode [ 44.959074][ T1295] device veth0_to_bond entered promiscuous mode [ 44.966102][ T1295] device bond_slave_0 entered promiscuous mode [ 44.972824][ T1295] device veth1_to_bond entered promiscuous mode [ 44.979722][ T1295] device bond_slave_1 entered promiscuous mode [ 44.986532][ T1295] device veth0_to_team entered promiscuous mode [ 44.993381][ T1295] device team_slave_0 entered promiscuous mode [ 45.000076][ T1295] device veth1_to_team entered promiscuous mode [ 45.007128][ T1295] device team_slave_1 entered promiscuous mode [ 45.013812][ T1295] device veth0_to_batadv entered promiscuous mode [ 45.020859][ T1295] device batadv_slave_0 entered promiscuous mode [ 45.027879][ T1295] device veth1_to_batadv entered promiscuous mode [ 45.034895][ T1295] device batadv_slave_1 entered promiscuous mode [ 45.042020][ T1295] device xfrm0 entered promiscuous mode [ 45.047937][ T1295] device veth0_to_hsr entered promiscuous mode [ 45.054735][ T1295] device hsr_slave_0 entered promiscuous mode [ 45.061431][ T1295] device veth1_to_hsr entered promiscuous mode [ 45.068266][ T1295] device hsr_slave_1 entered promiscuous mode [ 45.074936][ T1295] device veth1_virt_wifi entered promiscuous mode [ 45.081947][ T1295] device veth0_virt_wifi entered promiscuous mode [ 45.088972][ T1295] device veth1_vlan entered promiscuous mode [ 45.095583][ T1295] device veth0_vlan entered promiscuous mode [ 45.102098][ T1295] device veth1_macvtap entered promiscuous mode [ 45.108971][ T1295] device veth0_macvtap entered promiscuous mode [ 45.141196][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 45.149736][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.158539][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 45.167427][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.176358][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.187255][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.196052][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.204607][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.325728][ T1019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.337096][ T1019] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.347013][ T1019] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.359949][ T1019] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.369132][ T1019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.378409][ T1019] usb 2-1: config 0 descriptor?? [ 45.488113][ T125] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 45.510704][ T341] syz-executor (341) used greatest stack depth: 22576 bytes left [ 45.601232][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.608510][ T1309] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.616952][ T1309] device bridge_slave_0 entered promiscuous mode [ 45.626353][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.633607][ T1309] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.641216][ T1309] device bridge_slave_1 entered promiscuous mode [ 45.685791][ T1309] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.692825][ T1309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.700247][ T1309] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.707294][ T1309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.731690][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.739453][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.747707][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.755698][ T125] usb 3-1: Using ep0 maxpacket: 16 [ 45.764070][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.772378][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.775299][ T403] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 45.779438][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.795861][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.804181][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.811257][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.826297][ T1286] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 45.834852][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.844893][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.863271][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.875991][ T1286] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media [ 45.890636][ T1286] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 45.898586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.907092][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.918733][ T125] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.919148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.932107][ T125] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.948866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.955344][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.957419][ T1019] usbhid 2-1:0.0: can't add hid device: -71 [ 45.965990][ T125] usb 3-1: config 0 descriptor?? [ 45.976945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.989514][ T1019] usbhid: probe of 2-1:0.0 failed with error -71 [ 46.006308][ T1019] usb 2-1: USB disconnect, device number 4 [ 46.115766][ T363] device bridge_slave_1 left promiscuous mode [ 46.135388][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.142950][ T363] device bridge_slave_0 left promiscuous mode [ 46.155321][ T403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.166655][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.185421][ T403] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.205306][ T403] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.224347][ T403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.245676][ T403] usb 4-1: config 0 descriptor?? [ 46.387389][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.394664][ T1328] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.402685][ T1328] device bridge_slave_0 entered promiscuous mode [ 46.410356][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.417988][ T1328] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.425795][ T1328] device bridge_slave_1 entered promiscuous mode [ 46.456667][ T125] microsoft 0003:045E:07DA.0002: unbalanced collection at end of report description [ 46.475467][ T125] microsoft 0003:045E:07DA.0002: parse failed [ 46.481611][ T125] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 46.487203][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.496304][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.503575][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.510642][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.546559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.554788][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.563040][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.579623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.588662][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.595728][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.604138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.613443][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.620549][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.643596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.660356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.691828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.712482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.728655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.738306][ T403] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 46.738897][ T125] usb 3-1: USB disconnect, device number 3 [ 46.752303][ T403] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 46.768341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.778936][ T403] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 46.792408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.905298][ T1328] syz-executor (1328) used greatest stack depth: 21504 bytes left [ 46.985797][ T403] usb 4-1: USB disconnect, device number 4 [ 47.083670][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.091161][ T1337] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.099267][ T1337] device bridge_slave_0 entered promiscuous mode [ 47.112407][ T1318] F2FS-fs (loop1): invalid crc value [ 47.118452][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.123272][ T1318] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.126033][ T1337] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.151419][ T1337] device bridge_slave_1 entered promiscuous mode [ 47.198497][ T1318] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.285971][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.293144][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.300464][ T1337] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.307506][ T1337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.346458][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.354427][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.363709][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.385774][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.394200][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.402523][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.409585][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.417451][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.426236][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.434478][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.441528][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.450068][ T23] kauditd_printk_skb: 17 callbacks suppressed [ 47.450079][ T23] audit: type=1400 audit(1748173199.420:235): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.450303][ T363] device bridge_slave_1 left promiscuous mode [ 47.483827][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.491882][ T363] device bridge_slave_0 left promiscuous mode [ 47.498330][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.591481][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.599814][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.608342][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.617856][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.647062][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.656750][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.684591][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.692826][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.701779][ T23] audit: type=1400 audit(1748173199.670:236): avc: denied { remove_name } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=9754 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.727978][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.740851][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.745685][ T23] audit: type=1400 audit(1748173199.670:237): avc: denied { rename } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=9754 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.771747][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.781966][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.795945][ T1371] device gretap0 entered promiscuous mode [ 47.802158][ T23] audit: type=1400 audit(1748173199.670:238): avc: denied { create } for pid=145 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.822855][ T23] audit: type=1400 audit(1748173199.750:239): avc: denied { mounton } for pid=1370 comm="syz.2.399" path="/proc/190/cgroup" dev="proc" ino=21270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 47.846919][ T23] audit: type=1400 audit(1748173199.750:240): avc: denied { ioctl } for pid=1370 comm="syz.2.399" path="socket:[20326]" dev="sockfs" ino=20326 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.850691][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.889935][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.900170][ T1372] device veth1_macvtap entered promiscuous mode [ 47.914289][ T1370] device veth1_macvtap left promiscuous mode [ 47.929381][ T1370] device gretap0 left promiscuous mode [ 47.945357][ T5] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 47.989922][ T1374] futex_wake_op: syz.2.400 tries to shift op by 32; fix this program [ 48.109251][ T1377] device wg2 left promiscuous mode [ 48.117304][ T1377] device wg2 entered promiscuous mode [ 48.325561][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=6b.da [ 48.334723][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.343580][ T5] usb 4-1: config 0 descriptor?? [ 48.386823][ T5] usb 4-1: unknown interface protocol 0xe6, assuming v1 [ 48.394041][ T5] usb 4-1: cannot find UAC_HEADER [ 48.399225][ T5] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 48.484378][ T23] audit: type=1400 audit(1748173200.450:241): avc: denied { write } for pid=1380 comm="syz.4.403" path="socket:[20404]" dev="sockfs" ino=20404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.620640][ T1402] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.640386][ T1402] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 48.662492][ T1392] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.670501][ T1392] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.670879][ T1369] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.678355][ T1392] device bridge_slave_0 entered promiscuous mode [ 48.692844][ T1392] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.696658][ T403] usb 4-1: USB disconnect, device number 5 [ 48.699943][ T1392] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.716473][ T1392] device bridge_slave_1 entered promiscuous mode [ 48.727254][ T363] device bridge_slave_1 left promiscuous mode [ 48.733653][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.741232][ T363] device bridge_slave_0 left promiscuous mode [ 48.747687][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.755444][ T363] device bridge_slave_1 left promiscuous mode [ 48.762018][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.769676][ T363] device bridge_slave_0 left promiscuous mode [ 48.776085][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.823253][ T1401] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 48.835424][ T1401] ext4 filesystem being mounted at /96/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 49.009546][ T1432] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 49.098006][ T1432] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.409: bg 0: block 255: padding at end of block bitmap is not set [ 49.150365][ T1432] EXT4-fs error (device loop4) in ext4_free_blocks:5016: Corrupt filesystem [ 49.199288][ T1432] EXT4-fs error (device loop4): ext4_free_branches:1022: inode #11: comm syz.4.409: invalid indirect mapped block 1 (level 1) [ 49.338386][ T1438] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 49.347864][ T1438] ext4 filesystem being mounted at /74/bus supports timestamps until (%ptR?) (0x7fffffff) [ 49.415594][ T1438] netlink: 'syz.1.410': attribute type 13 has an invalid length. [ 49.464600][ T1432] EXT4-fs (loop4): 1 truncate cleaned up [ 49.470441][ T1432] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue [ 49.484798][ T1444] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 49.505350][ T18] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 49.529275][ T23] audit: type=1400 audit(1748173201.500:242): avc: denied { write } for pid=1431 comm="syz.4.409" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.552078][ T1444] EXT4-fs (loop3): invalid journal inode [ 49.561426][ T1444] EXT4-fs (loop3): can't get journal size [ 49.568467][ T23] audit: type=1400 audit(1748173201.530:243): avc: denied { open } for pid=1431 comm="syz.4.409" path="/97/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.593166][ T1444] EXT4-fs (loop3): 1 truncate cleaned up [ 49.598946][ T1444] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 49.745260][ T18] usb 3-1: Using ep0 maxpacket: 8 [ 49.825394][ T403] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 49.834708][ T1438] gretap0: refused to change device tx_queue_len [ 49.841281][ T1438] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 49.865372][ T18] usb 3-1: config 4 has an invalid interface number: 244 but max is 0 [ 49.883773][ T18] usb 3-1: config 4 has no interface number 0 [ 49.890979][ T18] usb 3-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 49.902543][ T18] usb 3-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid maxpacket 11380, setting to 1024 [ 49.914173][ T18] usb 3-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 49.924568][ T18] usb 3-1: config 4 interface 244 has no altsetting 0 [ 49.969837][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.983839][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.996979][ T23] audit: type=1400 audit(1748173201.970:244): avc: denied { append } for pid=1448 comm="syz.1.412" name="001" dev="devtmpfs" ino=10549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.001537][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.029136][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.037414][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.045335][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.052910][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.062002][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.070602][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.075411][ T403] usb 5-1: Invalid ep0 maxpacket: 32 [ 50.077658][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.086498][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.095387][ T18] usb 3-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 50.098460][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.115255][ T18] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.116327][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.131778][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.133525][ T18] usb 3-1: Product: syz [ 50.140242][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.151791][ T18] usb 3-1: Manufacturer: syz [ 50.165190][ T18] usb 3-1: SerialNumber: syz [ 50.177888][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.187794][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.195381][ T1402] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 50.213127][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.235983][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.255283][ T403] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 50.256174][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.271616][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.280283][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.289750][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.298465][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.325261][ T1019] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 50.535784][ T403] usb 5-1: Invalid ep0 maxpacket: 32 [ 50.541177][ T403] usb usb5-port1: attempt power cycle [ 50.555613][ T18] ipheth 3-1:4.244: Unable to find endpoints [ 50.563800][ T18] usb 3-1: USB disconnect, device number 4 [ 50.725366][ T1019] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 50.733802][ T1019] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 50.742015][ T1019] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.752339][ T1019] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 50.761442][ T1019] usb 2-1: config 0 has no interface number 0 [ 50.767912][ T1019] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 50.777772][ T1019] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 50.789014][ T1019] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 50.798918][ T1019] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.812083][ T1019] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 50.821267][ T1019] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.830046][ T1019] usb 2-1: config 0 descriptor?? [ 50.866279][ T1019] usb 2-1: MIDIStreaming interface descriptor not found [ 50.924321][ T363] device bridge_slave_1 left promiscuous mode [ 50.930563][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.938112][ T363] device bridge_slave_0 left promiscuous mode [ 50.944222][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.955283][ T403] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 50.969265][ T1453] fuse: Unknown parameter 'growp_id' [ 50.979524][ T1453] Zero length message leads to an empty skb [ 51.039263][ T342] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 51.047097][ T403] usb 5-1: Invalid ep0 maxpacket: 32 [ 51.048618][ T342] FAT-fs (loop2): Filesystem has been set read-only [ 51.060254][ T342] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 51.074675][ T1019] usb 2-1: USB disconnect, device number 5 [ 51.117821][ T1454] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.124927][ T1454] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.132938][ T1454] device bridge_slave_0 entered promiscuous mode [ 51.140055][ T1454] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.147271][ T1454] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.154662][ T1454] device bridge_slave_1 entered promiscuous mode [ 51.195308][ T403] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 51.205046][ T1454] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.212115][ T1454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.219385][ T1454] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.226429][ T1454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.236791][ T342] syz-executor (342) used greatest stack depth: 20320 bytes left [ 51.254229][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.263058][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.271122][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.286500][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.294774][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.301847][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.309601][ T403] usb 5-1: Invalid ep0 maxpacket: 32 [ 51.316152][ T403] usb usb5-port1: unable to enumerate USB device [ 51.323453][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.332029][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.339110][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.351563][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.361255][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.411739][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.419317][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.427252][ T1460] device bridge_slave_0 entered promiscuous mode [ 51.434616][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.441758][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.449266][ T1460] device bridge_slave_1 entered promiscuous mode [ 51.486360][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.504657][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.527386][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.541417][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.556012][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.572337][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.605001][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.616977][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.624250][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.632986][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.661923][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.670675][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.677752][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.741466][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.751602][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.778858][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.828018][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.055935][ T18] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 52.066392][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.074971][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.083406][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.092082][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.101228][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.110272][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.355742][ T363] device bridge_slave_1 left promiscuous mode [ 52.361926][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.369413][ T363] device bridge_slave_0 left promiscuous mode [ 52.375585][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.425334][ T18] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.436603][ T18] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.446374][ T18] usb 2-1: config 0 interface 0 has no altsetting 0 [ 52.453041][ T18] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 52.462320][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.472141][ T18] usb 2-1: config 0 descriptor?? [ 52.675573][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 52.675585][ T23] audit: type=1400 audit(1748173204.650:249): avc: denied { block_suspend } for pid=388 comm="kworker/0:4" capability=36 scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=capability2 permissive=1 [ 52.748895][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.756064][ T1482] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.763746][ T1482] device bridge_slave_0 entered promiscuous mode [ 52.771080][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.778459][ T1482] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.786247][ T1482] device bridge_slave_1 entered promiscuous mode [ 52.846071][ T1475] F2FS-fs (loop3): invalid crc value [ 52.872104][ T1475] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.878623][ T403] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 52.908636][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.915723][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.923037][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.927293][ T1475] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 52.930094][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.937777][ T1475] SELinux: (dev loop3, type f2fs) getxattr errno 2 [ 52.957007][ T18] wacom 0003:056A:0015.0004: unknown main item tag 0x4 [ 52.963912][ T18] wacom 0003:056A:0015.0004: unknown main item tag 0x0 [ 52.977313][ T23] audit: type=1400 audit(1748173204.950:250): avc: denied { read } for pid=1493 comm="syz.5.422" name="rtc0" dev="devtmpfs" ino=10648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.986042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.009738][ T18] wacom 0003:056A:0015.0004: Unknown device_type for 'HID 056a:0015'. Assuming pen. [ 53.010010][ T23] audit: type=1400 audit(1748173204.950:251): avc: denied { open } for pid=1493 comm="syz.5.422" path="/dev/rtc0" dev="devtmpfs" ino=10648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 53.021308][ T18] wacom 0003:056A:0015.0004: hidraw0: USB HID v0.00 Device [HID 056a:0015] on usb-dummy_hcd.1-1/input0 [ 53.044039][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.055962][ T18] input: Wacom Graphire4 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0015.0004/input/input4 [ 53.063211][ T23] audit: type=1326 audit(1748173204.980:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1493 comm="syz.5.422" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52d038c969 code=0x0 [ 53.096835][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.101922][ T23] audit: type=1400 audit(1748173205.070:253): avc: denied { read } for pid=148 comm="acpid" name="event3" dev="devtmpfs" ino=23415 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.127084][ T23] audit: type=1400 audit(1748173205.070:254): avc: denied { open } for pid=148 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=23415 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.152643][ T23] audit: type=1400 audit(1748173205.070:255): avc: denied { create } for pid=1493 comm="syz.5.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.175267][ T403] usb 5-1: Using ep0 maxpacket: 16 [ 53.183547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.192220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.200971][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.208048][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.216489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.224954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.233664][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.235385][ T23] audit: type=1400 audit(1748173205.070:256): avc: denied { ioctl } for pid=1493 comm="syz.5.422" path="socket:[23412]" dev="sockfs" ino=23412 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.240736][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.256056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.282531][ T23] audit: type=1400 audit(1748173205.150:257): avc: denied { ioctl } for pid=148 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=23415 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.283676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.315849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.321229][ T23] audit: type=1400 audit(1748173205.200:258): avc: denied { read } for pid=1464 comm="syz.1.416" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.324213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.344135][ T403] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 53.363642][ T403] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 53.373668][ T403] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 53.401338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.410101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.425841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.434548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.455726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.466992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.480720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.489097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.500394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.508827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.545488][ T403] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.554715][ T403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.562754][ T403] usb 5-1: Product: syz [ 53.567001][ T403] usb 5-1: Manufacturer: syz [ 53.571598][ T403] usb 5-1: SerialNumber: syz [ 53.686104][ T363] device bridge_slave_1 left promiscuous mode [ 53.692370][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.700188][ T363] device bridge_slave_0 left promiscuous mode [ 53.706567][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.745575][ T368] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 53.875516][ T403] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 54.075560][ T403] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 54.102741][ T403] usb 5-1: USB disconnect, device number 8 [ 54.112265][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.115494][ T368] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 54.137189][ T368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.146304][ T368] usb 4-1: config 0 descriptor?? [ 54.487208][ T1515] netlink: 'syz.4.427': attribute type 4 has an invalid length. [ 54.499369][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.510050][ T1506] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.517995][ T1506] device bridge_slave_0 entered promiscuous mode [ 54.526642][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.533833][ T1506] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.543973][ T1506] device bridge_slave_1 entered promiscuous mode [ 55.402160][ T331] usb 2-1: USB disconnect, device number 6 [ 55.455319][ T180] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.674512][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.681618][ T1506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.688921][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.695962][ T1506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.858860][ T1537] EXT4-fs (loop1): #blocks per group too big: 16384 [ 55.891845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.899510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.908305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.918383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.927067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.935655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.943659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.951978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.960588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.968609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.015257][ T9] attempt to access beyond end of device [ 56.015257][ T9] loop4: rw=1, want=1041, limit=128 [ 56.055510][ T363] device bridge_slave_1 left promiscuous mode [ 56.061692][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.069408][ T363] device bridge_slave_0 left promiscuous mode [ 56.075923][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.295346][ T368] usb 4-1: Cannot set autoneg [ 56.300146][ T368] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 56.310928][ T368] usb 4-1: USB disconnect, device number 6 [ 56.355569][ T1201] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 56.595588][ T1201] usb 5-1: Using ep0 maxpacket: 16 [ 56.715340][ T1201] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.725806][ T1201] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.805456][ T1201] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 56.814607][ T1201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 56.822643][ T1201] usb 5-1: SerialNumber: syz [ 56.855648][ T363] device bridge_slave_1 left promiscuous mode [ 56.866352][ T1201] usb 5-1: 0:2 : does not exist [ 56.869149][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.878867][ T1547] x_tables: duplicate underflow at hook 1 [ 56.895288][ T363] device bridge_slave_0 left promiscuous mode [ 56.908771][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.095023][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.102458][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.110304][ T1553] device bridge_slave_0 entered promiscuous mode [ 57.113016][ T1549] F2FS-fs (loop1): Found nat_bits in checkpoint [ 57.118480][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.130498][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.138294][ T1553] device bridge_slave_1 entered promiscuous mode [ 57.162545][ T1549] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 57.194714][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.201795][ T1553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.209350][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.216397][ T1553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.243586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.252664][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.260878][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.275344][ T1201] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 57.286646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.300771][ T1201] usb 5-1: USB disconnect, device number 9 [ 57.307986][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.315067][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.323729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.335660][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.342729][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.387196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.402997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.431845][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.446403][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.463129][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.478018][ T339] attempt to access beyond end of device [ 57.478018][ T339] loop1: rw=2049, want=45112, limit=40427 [ 57.491289][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.500440][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.508676][ T125] Bluetooth: hci0: command 0x1003 tx timeout [ 57.515069][ T1529] Bluetooth: hci0: sending frame failed (-49) [ 57.535976][ T407] udevd[407]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.860396][ T1575] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 57.903778][ T1575] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 57.925294][ T1575] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 57.933422][ T1575] System zones: 0-2, 18-18, 34-35 [ 57.946085][ T1575] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 58.014876][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 58.014889][ T23] audit: type=1400 audit(1748173209.980:272): avc: denied { audit_read } for pid=1574 comm="syz.4.439" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.043360][ T1575] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 58.053344][ T1575] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 58.061625][ T1575] EXT4-fs (loop4): re-mounted. Opts: [ 58.067698][ T23] audit: type=1400 audit(1748173210.010:273): avc: denied { remount } for pid=1574 comm="syz.4.439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.195459][ T368] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 58.435339][ T368] usb 2-1: Using ep0 maxpacket: 16 [ 58.555409][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.566496][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.576442][ T368] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 58.589417][ T368] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 58.598510][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.609663][ T368] usb 2-1: config 0 descriptor?? [ 58.665541][ T1267] device bridge_slave_1 left promiscuous mode [ 58.671758][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.679263][ T1267] device bridge_slave_0 left promiscuous mode [ 58.685467][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.861477][ T1586] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.879592][ T1586] tmpfs: Unknown parameter 'nr_blocks,7' [ 58.931866][ T1589] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.939608][ T1589] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.947426][ T1589] device bridge_slave_0 entered promiscuous mode [ 58.954526][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.961587][ T1589] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.969243][ T1589] device bridge_slave_1 entered promiscuous mode [ 58.976065][ T1586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 58.988784][ T1587] EXT4-fs (loop4): Ignoring removed oldalloc option [ 58.997224][ T1586] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 58.997224][ T1586] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 58.997224][ T1586] [ 59.016231][ T1587] EXT4-fs (loop4): Ignoring removed orlov option [ 59.029084][ T1586] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,sb=0x000000000000d69a,lazytime,test_dummy_encryption=v1,grpid,noacl,grpjquota=,sb=0x0000000000000005,init_itable=0x0000000000000001,errors=remount-ro, [ 59.049480][ T1589] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.057756][ T1589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.065051][ T1589] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.072114][ T1589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.080313][ T1587] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622, [ 59.102442][ T1587] EXT4-fs (loop4): shut down requested (2) [ 59.109300][ T1587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 59.118151][ T1587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 59.127445][ T1587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 59.136342][ T1587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 59.145138][ T1587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 59.153981][ T1587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 59.162954][ T1587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 59.165433][ T368] usbhid 2-1:0.0: can't add hid device: -71 [ 59.171982][ T23] audit: type=1400 audit(1748173211.150:274): avc: denied { rename } for pid=1585 comm="syz.4.442" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.178090][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.205586][ T1587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 59.208564][ T368] usbhid: probe of 2-1:0.0 failed with error -71 [ 59.231058][ T23] audit: type=1400 audit(1748173211.180:275): avc: denied { remove_name } for pid=1585 comm="syz.4.442" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.234367][ T368] usb 2-1: USB disconnect, device number 7 [ 59.260284][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.270254][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.270624][ T23] audit: type=1400 audit(1748173211.200:276): avc: denied { unlink } for pid=1585 comm="syz.4.442" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.302590][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.311624][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.320100][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.327176][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.363943][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.373456][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.381808][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.388892][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.396719][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.404969][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.414548][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.422876][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.432099][ T1599] 9pnet: Insufficient options for proto=fd [ 59.452947][ T23] audit: type=1400 audit(1748173211.420:277): avc: denied { write } for pid=1600 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.466625][ T1601] incfs: Error accessing: ./file0. [ 59.478170][ T1601] incfs: mount failed -20 [ 59.486312][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.495868][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.508166][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.516261][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.539731][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.548494][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.577392][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.588552][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.590375][ T125] Bluetooth: hci0: command 0x1001 tx timeout [ 59.597451][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.604871][ T1529] Bluetooth: hci0: sending frame failed (-49) [ 59.612432][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.664093][ T1606] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.672920][ T23] audit: type=1400 audit(1748173211.640:278): avc: denied { ioctl } for pid=1605 comm="syz.3.446" path="/dev/rtc0" dev="devtmpfs" ino=10648 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.316096][ T363] device bridge_slave_1 left promiscuous mode [ 60.322244][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.329735][ T363] device bridge_slave_0 left promiscuous mode [ 60.335924][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.722930][ T23] audit: type=1400 audit(1748173212.690:279): avc: denied { write } for pid=1618 comm="syz.1.450" name="if_inet6" dev="proc" ino=4026532339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 60.798767][ T1620] FAT-fs (loop4): Directory bread(block 64) failed [ 60.807908][ T1620] FAT-fs (loop4): Directory bread(block 65) failed [ 60.814502][ T1620] FAT-fs (loop4): Directory bread(block 66) failed [ 60.821493][ T1620] FAT-fs (loop4): Directory bread(block 67) failed [ 60.821824][ T1627] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.828518][ T1620] FAT-fs (loop4): Directory bread(block 68) failed [ 60.835352][ T1627] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.842011][ T1620] FAT-fs (loop4): Directory bread(block 69) failed [ 60.854692][ T1627] device bridge_slave_0 entered promiscuous mode [ 60.856035][ T1620] FAT-fs (loop4): Directory bread(block 70) failed [ 60.870898][ T1627] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.871845][ T1620] FAT-fs (loop4): Directory bread(block 71) failed [ 60.878421][ T1627] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.885131][ T1620] FAT-fs (loop4): Directory bread(block 72) failed [ 60.893579][ T1627] device bridge_slave_1 entered promiscuous mode [ 60.898335][ T1620] FAT-fs (loop4): Directory bread(block 73) failed [ 60.906286][ T1629] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 60.925106][ T1629] ext4 filesystem being mounted at /84/bus supports timestamps until (%ptR?) (0x7fffffff) [ 60.943544][ T1635] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.951027][ T1635] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.451: bg 0: block 248: padding at end of block bitmap is not set [ 60.965305][ T23] audit: type=1400 audit(1748173212.930:280): avc: denied { setattr } for pid=1628 comm="syz.1.452" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.988166][ T1635] Quota error (device loop3): write_blk: dquota write failed [ 60.996962][ T1635] EXT4-fs (loop3): 1 truncate cleaned up [ 61.002969][ T1635] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue [ 61.028881][ T1627] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.035983][ T1627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.043237][ T1627] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.050301][ T1627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.104764][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.112924][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.120560][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.130576][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.139004][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.146091][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.157818][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.166392][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.173444][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.187628][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.197842][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.206346][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.234314][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.243369][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.259846][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.268125][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.284267][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.293005][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.311338][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.319849][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.328639][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.337189][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.355321][ T125] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 61.394122][ T1648] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.401906][ T1648] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.409440][ T1648] device bridge_slave_0 entered promiscuous mode [ 61.417500][ T1648] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.424604][ T1648] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.432358][ T1648] device bridge_slave_1 entered promiscuous mode [ 61.484731][ T1648] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.492023][ T1648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.499460][ T1648] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.506520][ T1648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.529828][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.537552][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.544865][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.556481][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.564720][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.571783][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.580838][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.589387][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.596467][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.611280][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.620756][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.640891][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.653043][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.665313][ T331] Bluetooth: hci0: command 0x1009 tx timeout [ 61.686709][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.696045][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.704492][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.885476][ T125] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.894538][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.902870][ T125] usb 5-1: Product: syz [ 61.907105][ T125] usb 5-1: Manufacturer: syz [ 61.911695][ T125] usb 5-1: SerialNumber: syz [ 62.435601][ T363] device bridge_slave_1 left promiscuous mode [ 62.442353][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.449999][ T363] device bridge_slave_0 left promiscuous mode [ 62.456253][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.463951][ T363] device bridge_slave_1 left promiscuous mode [ 62.470174][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.477600][ T363] device bridge_slave_0 left promiscuous mode [ 62.483741][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.704117][ T1659] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,usrjquota=,lazytime,debug_want_extra_isize=0x0000000000000040,bsdgroups,grpquota,i_version,noload,barrier,grpquota,,errors=continue [ 62.761507][ T1662] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.768837][ T1662] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.776409][ T1662] device bridge_slave_0 entered promiscuous mode [ 62.783342][ T1662] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.790683][ T1662] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.805764][ T1662] device bridge_slave_1 entered promiscuous mode [ 62.814617][ T1658] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 62.823774][ T1658] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 62.838220][ T1658] F2FS-fs (loop6): invalid crc value [ 62.853571][ T1658] F2FS-fs (loop6): Found nat_bits in checkpoint [ 62.914552][ T1662] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.922001][ T1662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.929307][ T1662] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.933891][ T1658] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 62.936457][ T1662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.955686][ T1658] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 62.981099][ T1676] syz.3.460[1676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.981148][ T1676] syz.3.460[1676] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.984020][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.017062][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.025058][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.045357][ T125] cdc_ncm 5-1:1.0: bind() failure [ 63.052207][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.052249][ T125] cdc_ncm 5-1:1.1: bind() failure [ 63.066371][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.073429][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.081123][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.090109][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.097377][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.126988][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.135103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.149479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.165119][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.180936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.202369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.212365][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.220946][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.435981][ T1695] FAT-fs (loop6): Unrecognized mount option "" or missing value [ 63.449537][ T1693] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 63.458612][ T1693] ext4 filesystem being mounted at /105/bus supports timestamps until (%ptR?) (0x7fffffff) [ 63.509624][ T23] kauditd_printk_skb: 7 callbacks suppressed [ 63.509636][ T23] audit: type=1400 audit(1748173215.480:287): avc: denied { nlmsg_read } for pid=1692 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.525611][ T1693] fs-verity: sha512 using implementation "sha512-generic" [ 64.097429][ T331] usb 5-1: USB disconnect, device number 10 [ 64.592060][ T23] audit: type=1400 audit(1748173216.560:288): avc: denied { setopt } for pid=1704 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.729904][ T23] audit: type=1400 audit(1748173216.660:289): avc: denied { connect } for pid=1701 comm="syz.6.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.822244][ T363] device bridge_slave_1 left promiscuous mode [ 64.829141][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.838912][ T23] audit: type=1400 audit(1748173216.660:290): avc: denied { bind } for pid=1701 comm="syz.6.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.887740][ T363] device bridge_slave_0 left promiscuous mode [ 64.894167][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.905268][ T23] audit: type=1400 audit(1748173216.660:291): avc: denied { listen } for pid=1701 comm="syz.6.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.983580][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.990867][ T1707] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.997963][ T5] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 64.999903][ T1707] device bridge_slave_0 entered promiscuous mode [ 65.013096][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.020534][ T1707] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.028138][ T1707] device bridge_slave_1 entered promiscuous mode [ 65.069125][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.076210][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.084328][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.091380][ T1707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.113355][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.121120][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.128662][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.138939][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.147197][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.154225][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.163294][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.165402][ T331] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 65.172239][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.186293][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.203706][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.219734][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.233146][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.241965][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.245476][ T5] usb 5-1: Invalid ep0 maxpacket: 512 [ 65.256079][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.264409][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.265983][ T13] cfg80211: failed to load regulatory.db [ 65.281192][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.291653][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.307776][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.316849][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.325568][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.333842][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.352042][ T1719] EXT4-fs (loop5): Unrecognized mount option "euid<00000000000000000000" or missing value [ 65.370140][ T23] audit: type=1400 audit(1748173217.340:292): avc: denied { shutdown } for pid=1718 comm="syz.5.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.405318][ T5] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 65.435589][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 65.450928][ T1724] cgroup: syz.6.473 (1724) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 65.468863][ T1724] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 65.565542][ T331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.575892][ T331] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 65.675329][ T5] usb 5-1: Invalid ep0 maxpacket: 512 [ 65.681325][ T5] usb usb5-port1: attempt power cycle [ 65.755607][ T331] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.764831][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.773306][ T331] usb 4-1: Product: syz [ 65.777916][ T331] usb 4-1: Manufacturer: syz [ 65.782543][ T331] usb 4-1: SerialNumber: syz [ 66.000851][ T363] device bridge_slave_1 left promiscuous mode [ 66.007081][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.014506][ T363] device bridge_slave_0 left promiscuous mode [ 66.020774][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.095484][ T331] usb 4-1: 0:2 : does not exist [ 66.102102][ T331] usb 4-1: unknown interface protocol 0x1, assuming v1 [ 66.109233][ T5] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 66.116859][ T331] usb 4-1: cannot find UAC_HEADER [ 66.121947][ T331] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 66.131095][ T331] usb 4-1: USB disconnect, device number 7 [ 66.139404][ T407] udevd[407]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.225476][ T5] usb 5-1: Invalid ep0 maxpacket: 512 [ 66.375287][ T5] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 66.465522][ T5] usb 5-1: Invalid ep0 maxpacket: 512 [ 66.471089][ T5] usb usb5-port1: unable to enumerate USB device [ 66.870499][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.878109][ T1741] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.887564][ T1732] EXT4-fs (loop5): Ignoring removed oldalloc option [ 66.892745][ T1741] device bridge_slave_0 entered promiscuous mode [ 66.901773][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.902407][ T1732] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue [ 66.909150][ T1741] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.938069][ T1741] device bridge_slave_1 entered promiscuous mode [ 66.979311][ T23] audit: type=1400 audit(1748173218.950:293): avc: denied { rename } for pid=1730 comm="syz.5.475" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.003816][ T1732] xt_hashlimit: size too large, truncated to 1048576 [ 67.008866][ T1740] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 67.034600][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.041682][ T1741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.049001][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.056108][ T1741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.063801][ T1740] ext4 filesystem being mounted at /109/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 67.136819][ T23] audit: type=1400 audit(1748173219.110:294): avc: denied { bind } for pid=1739 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.156320][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.173645][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.194783][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.216481][ T23] audit: type=1400 audit(1748173219.110:295): avc: denied { connect } for pid=1739 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.323347][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.359394][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.378125][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.389400][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.407864][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.416424][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.424822][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.439024][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.460591][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.469575][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.483897][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.492463][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.501461][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.510524][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.006492][ T1774] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 68.255322][ T331] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.411973][ T1267] device bridge_slave_1 left promiscuous mode [ 68.418200][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.425686][ T1267] device bridge_slave_0 left promiscuous mode [ 68.431813][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.615397][ T331] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 68.627920][ T331] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.638073][ T331] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 68.805318][ T331] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 68.814354][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.822374][ T331] usb 6-1: Product: syz [ 68.826587][ T331] usb 6-1: Manufacturer: syz [ 68.831178][ T331] usb 6-1: SerialNumber: syz [ 68.836855][ T331] usb 6-1: config 0 descriptor?? [ 68.875957][ T331] usb-storage 6-1:0.0: USB Mass Storage device detected [ 68.883538][ T331] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 69.076238][ T1777] tipc: Started in network mode [ 69.081108][ T1777] tipc: Own node identity ae89bcb06a32, cluster identity 4711 [ 69.088695][ T1777] tipc: Enabled bearer <eth:syzkaller0>, priority 0 [ 69.095599][ T1777] device syzkaller0 entered promiscuous mode [ 69.102696][ T1777] tipc: Resetting bearer <eth:syzkaller0> [ 69.109735][ T1777] tipc: Disabling bearer <eth:syzkaller0> [ 69.167099][ T331] usb 6-1: USB disconnect, device number 2 [ 69.378000][ T1785] SELinux: policydb string length 4 does not match expected length 8 [ 69.388264][ T1785] SELinux: failed to load policy [ 69.470036][ T1791] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.477327][ T1791] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.484875][ T1791] device bridge_slave_0 entered promiscuous mode [ 69.492539][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.499798][ T1791] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.507779][ T1791] device bridge_slave_1 entered promiscuous mode [ 69.551355][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.558579][ T1791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.565890][ T1791] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.572915][ T1791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.593890][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.601809][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.610678][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.620286][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.628715][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.635775][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.644974][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.653481][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.660545][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.668036][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 69.686364][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.694777][ T1800] cgroup1: noprefix used incorrectly [ 69.697535][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.700341][ T403] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 69.720678][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.731927][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.745167][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.758691][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.769857][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.785265][ T5] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.801472][ T23] audit: type=1400 audit(1748173221.770:296): avc: denied { watch } for pid=1799 comm="syz.5.490" path="/10" dev="tmpfs" ino=27749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.827022][ T23] audit: type=1400 audit(1748173221.770:297): avc: denied { create } for pid=1799 comm="syz.5.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 70.035351][ T24] usb 4-1: config index 0 descriptor too short (expected 290, got 34) [ 70.043590][ T24] usb 4-1: config 1 has too many interfaces: 224, using maximum allowed: 32 [ 70.052695][ T24] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 70.062696][ T24] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 70.063010][ T5] usb 7-1: Using ep0 maxpacket: 8 [ 70.072958][ T24] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 224 [ 70.087352][ T403] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 70.096099][ T403] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 48 [ 70.108545][ T403] usb 5-1: config 0 has no interface number 1 [ 70.114634][ T403] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 70.127767][ T403] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 70.205407][ T5] usb 7-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 70.216256][ T5] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.227164][ T5] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 70.237006][ T5] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 70.246706][ T5] usb 7-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 70.259899][ T5] usb 7-1: config 1 interface 0 has no altsetting 0 [ 70.265370][ T24] usb 4-1: New USB device found, idVendor=19d2, idProduct=5755, bcdDevice=df.b8 [ 70.275783][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.283790][ T24] usb 4-1: Product: syz [ 70.288209][ T24] usb 4-1: Manufacturer: syz [ 70.292801][ T24] usb 4-1: SerialNumber: syz [ 70.297485][ T403] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 70.306938][ T403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.315247][ T403] usb 5-1: Product: syz [ 70.319407][ T403] usb 5-1: Manufacturer: syz [ 70.324012][ T403] usb 5-1: SerialNumber: syz [ 70.335197][ T403] usb 5-1: config 0 descriptor?? [ 70.355475][ T5] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.364589][ T5] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.373061][ T5] usb 7-1: SerialNumber: syz [ 70.376012][ T403] usb-storage 5-1:0.127: USB Mass Storage device detected [ 70.386899][ T403] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 70.395333][ T1793] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 70.417865][ T403] usb-storage 5-1:0.0: USB Mass Storage device detected [ 70.425413][ T403] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 70.545674][ T1267] device bridge_slave_1 left promiscuous mode [ 70.551864][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.559571][ T1267] device bridge_slave_0 left promiscuous mode [ 70.565917][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.576005][ T331] usb 5-1: USB disconnect, device number 15 [ 70.620653][ T23] audit: type=1400 audit(1748173222.590:298): avc: denied { read } for pid=1792 comm="syz.6.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.697605][ T5] usb 7-1: USB disconnect, device number 2 [ 71.443392][ T23] audit: type=1400 audit(1748173223.410:299): avc: denied { connect } for pid=1815 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.475270][ T23] audit: type=1400 audit(1748173223.410:300): avc: denied { write } for pid=1815 comm="syz.3.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.521146][ T1820] device batadv_slave_1 entered promiscuous mode [ 71.646758][ T1826] hub 9-0:1.0: USB hub found [ 71.652077][ T1826] hub 9-0:1.0: 1 port detected [ 71.902928][ T1820] FAT-fs (loop6): Directory bread(block 64) failed [ 71.907981][ T23] audit: type=1400 audit(1748173223.880:301): avc: denied { setopt } for pid=1832 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.909991][ T1820] FAT-fs (loop6): Directory bread(block 65) failed [ 71.932532][ T1830] erofs: (device loop5): mounted with opts: , root inode @ nid 36. [ 71.935506][ T1820] FAT-fs (loop6): Directory bread(block 66) failed [ 71.949795][ T1820] FAT-fs (loop6): Directory bread(block 67) failed [ 71.957297][ T1820] FAT-fs (loop6): Directory bread(block 68) failed [ 71.963970][ T1820] FAT-fs (loop6): Directory bread(block 69) failed [ 71.970959][ T1820] FAT-fs (loop6): Directory bread(block 70) failed [ 71.977578][ T1820] FAT-fs (loop6): Directory bread(block 71) failed [ 71.984225][ T1820] FAT-fs (loop6): Directory bread(block 72) failed [ 71.984972][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.990892][ T1820] FAT-fs (loop6): Directory bread(block 73) failed [ 72.009159][ T1821] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.017193][ T1821] device bridge_slave_0 entered promiscuous mode [ 72.030189][ T1821] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.037334][ T1821] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.044917][ T1821] device bridge_slave_1 entered promiscuous mode [ 72.051557][ T1818] device batadv_slave_1 left promiscuous mode [ 72.106742][ T1821] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.113814][ T1821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.121142][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.128276][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.140441][ T1837] erofs: (device loop5): vle_extent_lookback: bogus lookback distance @ nid 36 [ 72.164831][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.170160][ T1837] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress, in[46, 4050] out[1851] [ 72.182559][ T1837] ------------[ cut here ]------------ [ 72.188039][ T1837] WARNING: CPU: 1 PID: 1837 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x954/0xd40 [ 72.198254][ T1837] Modules linked in: [ 72.202138][ T1837] CPU: 1 PID: 1837 Comm: syz.5.496 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 72.213216][ T1837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.223276][ T1837] RIP: 0010:z_erofs_lz4_decompress+0x954/0xd40 [ 72.229423][ T1837] Code: 48 8b 5d b8 0f 85 67 03 00 00 44 8b 0b 48 c7 c6 11 89 3c 85 48 c7 c2 c0 af d7 84 44 8b 6d a4 44 89 e9 45 89 f0 e8 bc 6f 30 02 <0f> 0b 44 89 e8 48 c7 c7 20 b0 d7 84 48 c7 c6 40 b0 d7 84 ba 02 00 [ 72.249300][ T1837] RSP: 0018:ffff8881e196f098 EFLAGS: 00010246 [ 72.255371][ T1837] RAX: 0c9abdf9b6876400 RBX: ffff8881e196f6a0 RCX: 0c9abdf9b6876400 [ 72.263327][ T1837] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 72.271304][ T1837] RBP: ffff8881e196f150 R08: dffffc0000000000 R09: ffffed103edea9b8 [ 72.279354][ T1837] R10: ffffed103edea9b8 R11: 1ffff1103edea9b7 R12: 1ffff1103c32ded4 [ 72.287320][ T1837] R13: 000000000000002e R14: 0000000000000fd2 R15: ffff8881e26ecfd2 [ 72.295281][ T1837] FS: 00007f52ce9d46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 72.304189][ T1837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.310758][ T1837] CR2: 00007f52ce9b3d58 CR3: 00000001d457a000 CR4: 00000000003426a0 [ 72.318714][ T1837] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.326764][ T1837] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.334939][ T1837] Call Trace: [ 72.338255][ T1837] ? z_erofs_lz4_prepare_destpages+0x650/0x650 [ 72.344406][ T1837] z_erofs_decompress+0x592/0xf80 [ 72.349426][ T1837] z_erofs_vle_unzip_all+0x137a/0x1980 [ 72.354878][ T1837] ? z_erofs_onlinepage_endio+0x140/0x140 [ 72.360582][ T1837] ? __rcu_read_unlock+0x96/0x110 [ 72.365619][ T1837] ? __kasan_check_write+0x14/0x20 [ 72.370720][ T1837] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 72.376182][ T1837] ? _raw_spin_lock+0xe0/0xe0 [ 72.381105][ T1837] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 72.386923][ T1837] ? z_erofs_vle_unzip_kickoff+0xd9/0xf0 [ 72.392564][ T1837] z_erofs_submit_and_unzip+0x1254/0x12c0 [ 72.398303][ T1837] ? z_erofs_do_read_page+0x2430/0x2430 [ 72.403843][ T1837] ? z_erofs_vle_normalaccess_readpages+0xa60/0xa60 [ 72.410431][ T1837] ? mem_cgroup_commit_charge+0x70/0x1b0 [ 72.416141][ T1837] z_erofs_vle_normalaccess_readpage+0x24e/0x540 [ 72.422461][ T1837] ? z_erofs_rcu_callback+0x30/0x30 [ 72.427649][ T1837] ? __lru_cache_add+0x1f4/0x250 [ 72.432572][ T1837] ? lru_cache_add+0x15/0x20 [ 72.437148][ T1837] ? add_to_page_cache_lru+0x18e/0x210 [ 72.442593][ T1837] ? z_erofs_rcu_callback+0x30/0x30 [ 72.447779][ T1837] do_read_cache_page+0x65d/0xa20 [ 72.452794][ T1837] read_cache_page+0x50/0x70 [ 72.457373][ T1837] erofs_namei+0x152/0xfa0 [ 72.461777][ T1837] ? __kasan_check_write+0x14/0x20 [ 72.466873][ T1837] ? _raw_spin_lock+0x8e/0xe0 [ 72.471538][ T1837] ? _raw_spin_trylock_bh+0x130/0x130 [ 72.476901][ T1837] erofs_lookup+0xa5/0x2c0 [ 72.481309][ T1837] __lookup_hash+0x114/0x250 [ 72.485988][ T1837] filename_create+0x1d4/0x680 [ 72.490771][ T1837] ? kern_path_create+0x40/0x40 [ 72.495612][ T1837] ? getname_flags+0x206/0x500 [ 72.500364][ T1837] do_mkdirat+0x5e/0x340 [ 72.504599][ T1837] __x64_sys_mkdirat+0x7b/0x90 [ 72.509412][ T1837] do_syscall_64+0xcf/0x170 [ 72.513903][ T1837] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 72.519786][ T1837] RIP: 0033:0x7f52d038c969 [ 72.524188][ T1837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.543779][ T1837] RSP: 002b:00007f52ce9d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 72.552176][ T1837] RAX: ffffffffffffffda RBX: 00007f52d05b4080 RCX: 00007f52d038c969 [ 72.560133][ T1837] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 72.568088][ T1837] RBP: 00007f52d040eab1 R08: 0000000000000000 R09: 0000000000000000 [ 72.576042][ T1837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.584005][ T1837] R13: 0000000000000000 R14: 00007f52d05b4080 R15: 00007ffdbfa0cd68 [ 72.591968][ T1837] ---[ end trace 0bcc6f2f403ced58 ]--- [ 72.601271][ T1837] erofs: (device loop5): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 72.611482][ T1830] erofs: (device loop5): vle_extent_lookback: bogus lookback distance @ nid 36 [ 72.611505][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.624354][ T1830] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress, in[46, 4050] out[1851] [ 72.637938][ T1830] ------------[ cut here ]------------ [ 72.643415][ T1830] WARNING: CPU: 0 PID: 1830 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x954/0xd40 [ 72.653634][ T1830] Modules linked in: [ 72.657520][ T1830] CPU: 0 PID: 1830 Comm: syz.5.496 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 72.668603][ T1830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.678808][ T1830] RIP: 0010:z_erofs_lz4_decompress+0x954/0xd40 [ 72.684993][ T1830] Code: 48 8b 5d b8 0f 85 67 03 00 00 44 8b 0b 48 c7 c6 11 89 3c 85 48 c7 c2 c0 af d7 84 44 8b 6d a4 44 89 e9 45 89 f0 e8 bc 6f 30 02 <0f> 0b 44 89 e8 48 c7 c7 20 b0 d7 84 48 c7 c6 40 b0 d7 84 ba 02 00 [ 72.704701][ T1830] RSP: 0018:ffff8881e3147098 EFLAGS: 00010246 [ 72.710765][ T1830] RAX: ca160425b4f6ca00 RBX: ffff8881e31476a0 RCX: ca160425b4f6ca00 [ 72.718730][ T1830] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 72.726700][ T1830] RBP: ffff8881e3147150 R08: dffffc0000000000 R09: ffffed103edca9b8 [ 72.734667][ T1830] R10: ffffed103edca9b8 R11: 1ffff1103edca9b7 R12: 1ffff1103c628ed4 [ 72.742633][ T1830] R13: 000000000000002e R14: 0000000000000fd2 R15: ffff8881e26ecfd2 [ 72.750603][ T1830] FS: 00007f52ce9f56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 72.759621][ T1830] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.766212][ T1830] CR2: 0000000000000000 CR3: 00000001d457a000 CR4: 00000000003426b0 [ 72.774376][ T1830] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.782350][ T1830] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.790315][ T1830] Call Trace: [ 72.793612][ T1830] ? z_erofs_lz4_prepare_destpages+0x650/0x650 [ 72.799780][ T1830] z_erofs_decompress+0x592/0xf80 [ 72.804981][ T1830] z_erofs_vle_unzip_all+0x137a/0x1980 [ 72.810454][ T1830] ? z_erofs_onlinepage_endio+0x140/0x140 [ 72.816203][ T1830] ? __kasan_check_write+0x14/0x20 [ 72.821433][ T1830] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 72.826898][ T1830] ? _raw_spin_lock+0xe0/0xe0 [ 72.831577][ T1830] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 72.837379][ T1830] ? z_erofs_vle_unzip_kickoff+0xd9/0xf0 [ 72.843006][ T1830] z_erofs_submit_and_unzip+0x113d/0x12c0 [ 72.848746][ T1830] ? z_erofs_do_read_page+0x2430/0x2430 [ 72.854299][ T1830] ? z_erofs_vle_normalaccess_readpages+0xa60/0xa60 [ 72.860888][ T1830] ? _raw_spin_unlock+0x40/0x70 [ 72.865748][ T1830] z_erofs_vle_normalaccess_readpage+0x24e/0x540 [ 72.868473][ T23] audit: type=1400 audit(1748173224.820:302): avc: denied { write } for pid=1839 comm="syz.6.497" path="socket:[29055]" dev="sockfs" ino=29055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.872079][ T1830] ? z_erofs_rcu_callback+0x30/0x30 [ 72.897433][ T23] audit: type=1400 audit(1748173224.820:303): avc: denied { nlmsg_read } for pid=1839 comm="syz.6.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 72.901307][ T1830] ? z_erofs_rcu_callback+0x30/0x30 [ 72.927062][ T1830] do_read_cache_page+0x65d/0xa20 [ 72.932093][ T1830] read_cache_page+0x50/0x70 [ 72.936881][ T1830] erofs_namei+0x152/0xfa0 [ 72.941378][ T1830] ? __kasan_check_write+0x14/0x20 [ 72.946679][ T1830] ? _raw_spin_lock+0x8e/0xe0 [ 72.951375][ T1830] ? _raw_spin_trylock_bh+0x130/0x130 [ 72.957001][ T1830] erofs_lookup+0xa5/0x2c0 [ 72.961446][ T1830] __lookup_hash+0x114/0x250 [ 72.966017][ T1830] filename_create+0x1d4/0x680 [ 72.970760][ T1830] ? kern_path_create+0x40/0x40 [ 72.975614][ T1830] ? getname_flags+0x206/0x500 [ 72.980384][ T1830] do_mkdirat+0x5e/0x340 [ 72.984613][ T1830] __x64_sys_mkdirat+0x7b/0x90 [ 72.989477][ T1830] do_syscall_64+0xcf/0x170 [ 72.993963][ T1830] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 72.999834][ T1830] RIP: 0033:0x7f52d038c969 [ 73.004229][ T1830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.023990][ T1830] RSP: 002b:00007f52ce9f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 73.032397][ T1830] RAX: ffffffffffffffda RBX: 00007f52d05b3fa0 RCX: 00007f52d038c969 [ 73.040356][ T1830] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 73.048309][ T1830] RBP: 00007f52d040eab1 R08: 0000000000000000 R09: 0000000000000000 [ 73.056265][ T1830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.064213][ T1830] R13: 0000000000000000 R14: 00007f52d05b3fa0 R15: 00007ffdbfa0cd68 [ 73.072264][ T1830] ---[ end trace 0bcc6f2f403ced59 ]--- [ 73.079544][ T1830] erofs: (device loop5): z_erofs_vle_normalaccess_readpage: failed to read, err [-117] [ 73.153196][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.196667][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.210257][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.218846][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.225922][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.233338][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.242148][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.263251][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.266142][ T23] audit: type=1400 audit(1748173225.230:304): avc: denied { read } for pid=1852 comm="syz.3.500" name="event1" dev="devtmpfs" ino=10646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.270323][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.302313][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.311121][ T1841] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 73.318493][ T1841] EXT4-fs (loop6): can't mount with dioread_nolock if block size != PAGE_SIZE [ 73.334120][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.346967][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.350051][ T23] audit: type=1400 audit(1748173225.270:305): avc: denied { open } for pid=1852 comm="syz.3.500" path="/dev/input/event1" dev="devtmpfs" ino=10646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.355890][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.389022][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.401946][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.421940][ T1856] EXT4-fs (loop4): Test dummy encryption mode enabled [ 73.431887][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.440680][ T1858] EXT4-fs (loop5): Ignoring removed bh option [ 73.444150][ T1856] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,inlinecrypt,delalloc,data_err=abort,errors=remount-ro,grpid,quota, [ 73.448073][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.481289][ T1858] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro, [ 73.512573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.524679][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.532906][ T1854] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 73.560202][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.569342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.585013][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.594388][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.783048][ T1882] netlink: 'syz.5.503': attribute type 12 has an invalid length. [ 73.791182][ T1882] netlink: 'syz.5.503': attribute type 29 has an invalid length. [ 73.799240][ T1882] netlink: 148 bytes leftover after parsing attributes in process `syz.5.503'. [ 73.808427][ T1882] netlink: 39 bytes leftover after parsing attributes in process `syz.5.503'. [ 73.819914][ T1882] 9pnet: Insufficient options for proto=fd [ 74.425537][ T1267] device bridge_slave_1 left promiscuous mode [ 74.431736][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.439199][ T1267] device bridge_slave_0 left promiscuous mode [ 74.445422][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.353938][ T1891] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 75.363411][ T1891] EXT4-fs (loop6): Unsupported blocksize for fs encryption [ 75.403613][ T23] kauditd_printk_skb: 4 callbacks suppressed [ 75.403626][ T23] audit: type=1400 audit(1748173227.370:310): avc: denied { append } for pid=1887 comm="syz.3.507" name="kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 75.445039][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.452432][ T1894] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.460349][ T1894] device bridge_slave_0 entered promiscuous mode [ 75.468951][ T1894] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.469856][ T1890] EXT4-fs (loop4): quotafile must be on filesystem root [ 75.476319][ T1894] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.493387][ T1894] device bridge_slave_1 entered promiscuous mode [ 75.630137][ T1894] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.637269][ T1894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.644552][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.651614][ T1894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.723111][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.730968][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.738557][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.830228][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.883306][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.890467][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.961310][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.976335][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.983427][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.000930][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.011492][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.028042][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.051086][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.079304][ T1891] F2FS-fs (loop6): invalid crc value [ 76.089592][ T1891] F2FS-fs (loop6): Found nat_bits in checkpoint [ 76.102772][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.119601][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.132989][ T1891] F2FS-fs (loop6): Start checkpoint disabled! [ 76.140591][ T1891] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 76.149416][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.236147][ T1920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 76.245899][ T1920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 76.268701][ T363] attempt to access beyond end of device [ 76.268701][ T363] loop6: rw=2049, want=45104, limit=40427 [ 76.385320][ T5] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 76.675296][ T5] usb 6-1: device descriptor read/64, error 18 [ 77.065340][ T5] usb 6-1: device descriptor read/64, error 18 [ 77.105782][ T1267] device bridge_slave_1 left promiscuous mode [ 77.111922][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.119374][ T1267] device bridge_slave_0 left promiscuous mode [ 77.125759][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.335273][ T5] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 77.605288][ T5] usb 6-1: device descriptor read/64, error 18 [ 77.997228][ T5] usb 6-1: device descriptor read/64, error 18 [ 78.042414][ T1928] EXT4-fs (loop4): Test dummy encryption mode enabled [ 78.059861][ T1928] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a002c018, mo2=0003] [ 78.079298][ T1928] System zones: 0-5 [ 78.084828][ T1928] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,nodelalloc,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 78.109162][ T23] audit: type=1400 audit(1748173230.080:311): avc: denied { map } for pid=1937 comm="syz.6.517" path="socket:[28519]" dev="sockfs" ino=28519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.134175][ T5] usb usb6-port1: attempt power cycle [ 78.199372][ T23] audit: type=1400 audit(1748173230.090:312): avc: denied { read } for pid=1937 comm="syz.6.517" path="socket:[28519]" dev="sockfs" ino=28519 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 78.242654][ T1928] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 78.259421][ T1928] incfs: ino conflict with backing FS 2 [ 78.615314][ T5] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 78.805536][ T5] usb 6-1: device descriptor read/8, error -61 [ 79.085612][ T5] usb 6-1: device descriptor read/8, error -61 [ 79.351435][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.366817][ T1933] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.374630][ T1941] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 79.388765][ T1941] ext4 filesystem being mounted at /119/bus supports timestamps until (%ptR?) (0x7fffffff) [ 79.397322][ T1933] device bridge_slave_0 entered promiscuous mode [ 79.406153][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.413227][ T1933] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.421514][ T1933] device bridge_slave_1 entered promiscuous mode [ 79.466084][ T1933] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.473142][ T1933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.494833][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.503980][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.507429][ T1955] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue [ 79.511980][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.526455][ T1955] ext4 filesystem being mounted at /17/bus supports timestamps until (%ptR?) (0x7fffffff) [ 79.594950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.604072][ T1955] EXT4-fs error (device loop5) in ext4_do_update_inode:5534: error 27 [ 79.608127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.621264][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.627009][ T1955] EXT4-fs error (device loop5) in ext4_do_update_inode:5534: error 27 [ 79.628437][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.660955][ T1961] EXT4-fs error (device loop5) in ext4_do_update_inode:5534: error 27 [ 79.675353][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 79.679471][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.694792][ T1961] EXT4-fs error (device loop5) in ext4_do_update_inode:5534: error 27 [ 79.703688][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.710756][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.718617][ T1961] EXT4-fs error (device loop5) in ext4_do_update_inode:5534: error 27 [ 79.727479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.735831][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.765874][ T1965] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.780912][ T23] audit: type=1400 audit(1748173231.750:313): avc: denied { create } for pid=1960 comm="syz.3.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 79.804760][ T1955] EXT4-fs error (device loop5) in ext4_do_update_inode:5534: error 27 [ 79.875257][ T23] audit: type=1400 audit(1748173231.770:314): avc: denied { accept } for pid=1951 comm="syz.5.520" path="socket:[28605]" dev="sockfs" ino=28605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.929227][ T23] audit: type=1400 audit(1748173231.900:315): avc: denied { name_bind } for pid=1969 comm="syz.5.523" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 79.952022][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.005158][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.016369][ T1964] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.023412][ T1964] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.031349][ T1964] device bridge_slave_0 entered promiscuous mode [ 80.043067][ T1964] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.050497][ T1964] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.058650][ T1964] device bridge_slave_1 entered promiscuous mode [ 80.065092][ T23] audit: type=1400 audit(1748173238.034:316): avc: denied { create } for pid=1979 comm="syz.5.525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 80.085308][ T13] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 80.113903][ T13] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 80.125730][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.144795][ T13] usb 7-1: config 220 has no interface number 2 [ 80.168762][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.185095][ T13] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 80.187227][ T1980] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 80.205506][ T13] usb 7-1: config 220 interface 0 has no altsetting 0 [ 80.223776][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.231965][ T13] usb 7-1: config 220 interface 76 has no altsetting 0 [ 80.244247][ T1980] ext4 filesystem being mounted at /20/bus supports timestamps until (%ptR?) (0x7fffffff) [ 80.249234][ T13] usb 7-1: config 220 interface 1 has no altsetting 0 [ 80.296614][ T23] audit: type=1400 audit(1748173238.274:317): avc: denied { create } for pid=1979 comm="syz.5.525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 80.320778][ T1980] fuse: Unknown parameter 'oOX��Uw�4�֮8�3O�E�/Mˬ94��;��14Y�Gġ��r����[�@$R��H�ll���IЦ�袋6�>_1����ے8[�7�_�|���:�;!�d�]�g��ؘ��W�&�<VAm�1����H��Tf-O�EW*7�H�/RF�9eT' [ 80.340489][ T23] audit: type=1400 audit(1748173238.294:318): avc: denied { write } for pid=1979 comm="syz.5.525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 80.340536][ T363] device bridge_slave_1 left promiscuous mode [ 80.391915][ T23] audit: type=1400 audit(1748173238.294:319): avc: denied { read } for pid=1979 comm="syz.5.525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 80.405571][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.433085][ T23] audit: type=1400 audit(1748173238.294:320): avc: denied { mounton } for pid=1979 comm="syz.5.525" path="/20/bus/file0/file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.456747][ T363] device bridge_slave_0 left promiscuous mode [ 80.465026][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.475535][ T13] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 80.494977][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.505081][ T13] usb 7-1: Product: syz [ 80.515237][ T13] usb 7-1: Manufacturer: syz [ 80.535456][ T13] usb 7-1: SerialNumber: syz [ 80.657708][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.679876][ T1991] EXT4-fs (loop5): Test dummy encryption mode enabled [ 80.689112][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.696890][ T1991] EXT4-fs (loop5): Ignoring removed orlov option [ 80.707568][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.723897][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.732514][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.739590][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.747933][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.756253][ T1991] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,sb=0x000000000000d69a,lazytime,test_dummy_encryption=v1,orlov,bsdgroups,grpjquota=,sb=0x0000000000000005,init_itable=0x0000000000000001,auto_da_alloc,,errors=continue [ 80.757018][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.787687][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.794727][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.821070][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.835648][ T1991] EXT4-fs error (device loop5): ext4_empty_dir:3057: inode #12: block 80: comm syz.5.527: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 80.856134][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.864295][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.876534][ T1991] EXT4-fs warning (device loop5): ext4_empty_dir:3059: inode #12: comm syz.5.527: directory missing '..' [ 80.895626][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.915626][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.917407][ T1991] fscrypt (loop5, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop5' because it doesn't have stable inode numbers [ 80.937351][ T13] usb 7-1: selecting invalid altsetting 0 [ 80.943173][ T13] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 80.947383][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.958493][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.959972][ T13] uvcvideo: No valid video chain found. [ 80.975896][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.994103][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.028693][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.045831][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.072369][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.073352][ T13] usb 7-1: USB disconnect, device number 3 [ 81.080996][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.094936][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.104057][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.945573][ T363] device bridge_slave_1 left promiscuous mode [ 81.951699][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.959140][ T363] device bridge_slave_0 left promiscuous mode [ 81.965446][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.538980][ T23] audit: type=1400 audit(1748173240.514:321): avc: denied { mounton } for pid=2000 comm="syz.7.531" path="/0/file0" dev="incremental-fs" ino=30189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.606655][ T23] audit: type=1400 audit(1748173240.584:322): avc: denied { create } for pid=1999 comm="syz.6.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 82.736744][ T2023] netlink: 24 bytes leftover after parsing attributes in process `syz.6.533'. [ 82.743501][ T2011] overlayfs: failed to resolve './bus': -2 [ 82.754582][ T1964] ------------[ cut here ]------------ [ 82.760069][ T1964] WARNING: CPU: 0 PID: 1964 at fs/inode.c:302 drop_nlink+0xc5/0x110 [ 82.765186][ T23] audit: type=1400 audit(1748173240.744:323): avc: denied { block_suspend } for pid=2022 comm="syz.6.533" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.768200][ T1964] Modules linked in: [ 82.792854][ T23] audit: type=1400 audit(1748173240.744:324): avc: denied { ioctl } for pid=2022 comm="syz.6.533" path="socket:[30263]" dev="sockfs" ino=30263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.793240][ T1964] CPU: 0 PID: 1964 Comm: syz-executor Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 82.829326][ T1964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.839391][ T1964] RIP: 0010:drop_nlink+0xc5/0x110 [ 82.844417][ T1964] Code: 1b 48 8d bb d0 04 00 00 be 08 00 00 00 e8 b3 a4 f3 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4b d0 c5 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 82.864001][ T1964] RSP: 0000:ffff8881db497aa0 EFLAGS: 00010293 [ 82.870046][ T1964] RAX: ffffffff8199ae95 RBX: ffff8881e1579530 RCX: ffff8881ecce0000 [ 82.877997][ T1964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.885955][ T1964] RBP: ffff8881db497ac8 R08: 0000000000000004 R09: 0000000000000003 [ 82.893938][ T1964] R10: ffffed103b692f44 R11: 1ffff1103b692f44 R12: dffffc0000000000 [ 82.901897][ T1964] R13: 1ffff1103c2af2af R14: ffff8881e1579578 R15: 0000000000000000 [ 82.910055][ T1964] FS: 0000555560a89500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 82.919015][ T1964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.925593][ T1964] CR2: fffffffff0000000 CR3: 00000001d8c52000 CR4: 00000000003426b0 [ 82.933606][ T1964] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.941585][ T1964] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.949561][ T1964] Call Trace: [ 82.952844][ T1964] shmem_rmdir+0x5b/0x90 [ 82.957067][ T1964] vfs_rmdir+0x1b3/0x3e0 [ 82.961291][ T1964] incfs_kill_sb+0xfe/0x210 [ 82.965777][ T1964] deactivate_locked_super+0xa0/0x100 [ 82.971130][ T1964] deactivate_super+0x14f/0x1d0 [ 82.975962][ T1964] ? __kasan_check_write+0x14/0x20 [ 82.981079][ T1964] ? deactivate_locked_super+0x100/0x100 [ 82.986691][ T1964] ? fast_dput+0x83/0x290 [ 82.991005][ T1964] cleanup_mnt+0x446/0x500 [ 82.995421][ T1964] __cleanup_mnt+0x19/0x20 [ 82.999822][ T1964] task_work_run+0x146/0x170 [ 83.004623][ T1964] do_exit+0xa43/0x2660 [ 83.008768][ T1964] ? put_task_struct+0x90/0x90 [ 83.013778][ T1964] ? __kasan_check_write+0x14/0x20 [ 83.018897][ T1964] ? switch_fpu_return+0x197/0x3b0 [ 83.024006][ T1964] ? fpu__clear+0x3b0/0x3b0 [ 83.028580][ T1964] do_group_exit+0x13e/0x300 [ 83.033152][ T1964] __x64_sys_exit_group+0x3f/0x40 [ 83.038155][ T1964] do_syscall_64+0xcf/0x170 [ 83.042663][ T1964] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 83.048534][ T1964] RIP: 0033:0x7fb01dea5969 [ 83.053135][ T1964] Code: Bad RIP value. [ 83.057182][ T1964] RSP: 002b:00007ffe1ce2b8f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 83.065571][ T1964] RAX: ffffffffffffffda RBX: 00007fb01df2790f RCX: 00007fb01dea5969 [ 83.073522][ T1964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 83.081474][ T1964] RBP: 0000000000000016 R08: 00007ffe1ce29696 R09: 00007ffe1ce2cbb0 [ 83.089430][ T1964] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe1ce2cbb0 [ 83.097826][ T1964] R13: 00007fb01df2789d R14: 0000555560a894a8 R15: 00007ffe1ce2ed70 [ 83.105782][ T1964] ---[ end trace 0bcc6f2f403ced5a ]--- [ 83.120662][ T1964] ================================================================== [ 83.128768][ T1964] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 83.135002][ T1964] Write of size 4 at addr 0000000000000160 by task syz-executor/1964 [ 83.143135][ T1964] [ 83.145469][ T1964] CPU: 1 PID: 1964 Comm: syz-executor Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 83.156849][ T1964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.167013][ T1964] Call Trace: [ 83.170307][ T1964] __dump_stack+0x1e/0x20 [ 83.174628][ T1964] dump_stack+0x15b/0x1b8 [ 83.178949][ T1964] ? thaw_kernel_threads+0x220/0x220 [ 83.184221][ T1964] ? show_regs_print_info+0x18/0x18 [ 83.189442][ T1964] ? __kasan_check_write+0x14/0x20 [ 83.194542][ T1964] ? _raw_spin_lock+0x8e/0xe0 [ 83.199239][ T1964] ? ihold+0x20/0x60 [ 83.203395][ T1964] ? ihold+0x20/0x60 [ 83.207292][ T1964] __kasan_report+0xe4/0x120 [ 83.211877][ T1964] ? ihold+0x20/0x60 [ 83.215764][ T1964] kasan_report+0x30/0x60 [ 83.220079][ T1964] check_memory_region+0x274/0x280 [ 83.225179][ T1964] __kasan_check_write+0x14/0x20 [ 83.230105][ T1964] ihold+0x20/0x60 [ 83.233822][ T1964] vfs_rmdir+0x247/0x3e0 [ 83.238147][ T1964] incfs_kill_sb+0xfe/0x210 [ 83.242646][ T1964] deactivate_locked_super+0xa0/0x100 [ 83.248007][ T1964] deactivate_super+0x14f/0x1d0 [ 83.252858][ T1964] ? __kasan_check_write+0x14/0x20 [ 83.258045][ T1964] ? deactivate_locked_super+0x100/0x100 [ 83.263664][ T1964] ? fast_dput+0x83/0x290 [ 83.267984][ T1964] cleanup_mnt+0x446/0x500 [ 83.272387][ T1964] __cleanup_mnt+0x19/0x20 [ 83.276790][ T1964] task_work_run+0x146/0x170 [ 83.281366][ T1964] do_exit+0xa43/0x2660 [ 83.285511][ T1964] ? put_task_struct+0x90/0x90 [ 83.290263][ T1964] ? __kasan_check_write+0x14/0x20 [ 83.295388][ T1964] ? switch_fpu_return+0x197/0x3b0 [ 83.300484][ T1964] ? fpu__clear+0x3b0/0x3b0 [ 83.304975][ T1964] do_group_exit+0x13e/0x300 [ 83.309631][ T1964] __x64_sys_exit_group+0x3f/0x40 [ 83.314640][ T1964] do_syscall_64+0xcf/0x170 [ 83.319132][ T1964] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 83.325006][ T1964] RIP: 0033:0x7fb01dea5969 [ 83.329409][ T1964] Code: Bad RIP value. [ 83.333485][ T1964] RSP: 002b:00007ffe1ce2b8f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 83.341889][ T1964] RAX: ffffffffffffffda RBX: 00007fb01df2790f RCX: 00007fb01dea5969 [ 83.349844][ T1964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 83.357803][ T1964] RBP: 0000000000000016 R08: 00007ffe1ce29696 R09: 00007ffe1ce2cbb0 [ 83.365761][ T1964] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe1ce2cbb0 [ 83.373719][ T1964] R13: 00007fb01df2789d R14: 0000555560a894a8 R15: 00007ffe1ce2ed70 [ 83.381684][ T1964] ================================================================== [ 83.389728][ T1964] Disabling lock debugging due to kernel taint [ 83.398040][ T1964] BUG: kernel NULL pointer dereference, address: 0000000000000160 [ 83.405861][ T1964] #PF: supervisor write access in kernel mode [ 83.411925][ T1964] #PF: error_code(0x0002) - not-present page [ 83.417948][ T1964] PGD 1eac31067 P4D 1eac31067 PUD 0 [ 83.423241][ T1964] Oops: 0002 [#1] PREEMPT SMP KASAN [ 83.428430][ T1964] CPU: 1 PID: 1964 Comm: syz-executor Tainted: G B W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 83.439773][ T1964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.449826][ T1964] RIP: 0010:ihold+0x26/0x60 [ 83.454317][ T1964] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 61 c8 c5 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 a0 9c f3 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 60 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 81 [ 83.473907][ T1964] RSP: 0018:ffff8881db497ae0 EFLAGS: 00010246 [ 83.479962][ T1964] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881ecce0000 [ 83.487945][ T1964] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 00000000ffffffff [ 83.496552][ T1964] RBP: ffff8881db497af0 R08: 0000000000000004 R09: 0000000000000003 [ 83.504514][ T1964] R10: fffffbfff0ca7a5c R11: 1ffffffff0ca7a5c R12: 1ffff110393eede2 [ 83.512754][ T1964] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 83.520720][ T1964] FS: 0000555560a89500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 83.529632][ T1964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.536198][ T1964] CR2: 0000000000000160 CR3: 00000001d62ce000 CR4: 00000000003426a0 [ 83.544164][ T1964] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.552122][ T1964] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.560075][ T1964] Call Trace: [ 83.563358][ T1964] vfs_rmdir+0x247/0x3e0 [ 83.567595][ T1964] incfs_kill_sb+0xfe/0x210 [ 83.572086][ T1964] deactivate_locked_super+0xa0/0x100 [ 83.577449][ T1964] deactivate_super+0x14f/0x1d0 [ 83.582285][ T1964] ? __kasan_check_write+0x14/0x20 [ 83.587399][ T1964] ? deactivate_locked_super+0x100/0x100 [ 83.593105][ T1964] ? fast_dput+0x83/0x290 [ 83.597424][ T1964] cleanup_mnt+0x446/0x500 [ 83.601828][ T1964] __cleanup_mnt+0x19/0x20 [ 83.606232][ T1964] task_work_run+0x146/0x170 [ 83.610810][ T1964] do_exit+0xa43/0x2660 [ 83.614952][ T1964] ? put_task_struct+0x90/0x90 [ 83.619707][ T1964] ? __kasan_check_write+0x14/0x20 [ 83.624806][ T1964] ? switch_fpu_return+0x197/0x3b0 [ 83.629902][ T1964] ? fpu__clear+0x3b0/0x3b0 [ 83.634411][ T1964] do_group_exit+0x13e/0x300 [ 83.638997][ T1964] __x64_sys_exit_group+0x3f/0x40 [ 83.644005][ T1964] do_syscall_64+0xcf/0x170 [ 83.648496][ T1964] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 83.654380][ T1964] RIP: 0033:0x7fb01dea5969 [ 83.658782][ T1964] Code: Bad RIP value. [ 83.662866][ T1964] RSP: 002b:00007ffe1ce2b8f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 83.671263][ T1964] RAX: ffffffffffffffda RBX: 00007fb01df2790f RCX: 00007fb01dea5969 [ 83.679221][ T1964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 83.687270][ T1964] RBP: 0000000000000016 R08: 00007ffe1ce29696 R09: 00007ffe1ce2cbb0 [ 83.695316][ T1964] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe1ce2cbb0 [ 83.703277][ T1964] R13: 00007fb01df2789d R14: 0000555560a894a8 R15: 00007ffe1ce2ed70 [ 83.711250][ T1964] Modules linked in: [ 83.715145][ T1964] CR2: 0000000000000160 [ 83.719317][ T1964] ---[ end trace 0bcc6f2f403ced5b ]--- [ 83.725123][ T1964] RIP: 0010:ihold+0x26/0x60 [ 83.729610][ T1964] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 61 c8 c5 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 a0 9c f3 ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 60 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 81 [ 83.749204][ T1964] RSP: 0018:ffff8881db497ae0 EFLAGS: 00010246 [ 83.755259][ T1964] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881ecce0000 [ 83.763221][ T1964] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 00000000ffffffff [ 83.771187][ T1964] RBP: ffff8881db497af0 R08: 0000000000000004 R09: 0000000000000003 [ 83.779149][ T1964] R10: fffffbfff0ca7a5c R11: 1ffffffff0ca7a5c R12: 1ffff110393eede2 [ 83.787117][ T1964] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 83.795077][ T1964] FS: 0000555560a89500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 83.803987][ T1964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.810555][ T1964] CR2: 00007fb01dea593f CR3: 00000001d62ce000 CR4: 00000000003426a0 [ 83.818598][ T1964] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.826553][ T1964] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.834509][ T1964] Kernel panic - not syncing: Fatal exception [ 83.840817][ T1964] Kernel Offset: disabled [ 83.845147][ T1964] Rebooting in 86400 seconds..