last executing test programs: 15.357652248s ago: executing program 4 (id=240): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) 15.21747136s ago: executing program 4 (id=241): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r4, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x40, 0x0) mknodat$null(r2, &(0x7f0000000280)='./file0\x00', 0xc000, 0x103) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', &(0x7f00000001c0)=""/7, 0x7) 15.118669212s ago: executing program 1 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) keyctl$session_to_parent(0x12) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x20000000) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000300)=0x4) keyctl$session_to_parent(0x12) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xe0440, 0x0) poll(&(0x7f00000007c0)=[{r5, 0x8}, {r5, 0x41b}], 0x2, 0xcd7a) 15.114585232s ago: executing program 4 (id=243): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x20) sched_setaffinity(r1, 0x0, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000400000000000000000000020300000002000000000000050000000000000000000000090200000000005f"], &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x28) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r7, @ANYRESDEC=r6, @ANYBLOB="ec7d6c9e464f14454b1a263d8fe7183a4c85fce8b4cc4b9106430d1d49803ade953feffb9b9feb45cb33bbfcd376ddf6229b254d4936d66af2dac40e82d71f9f05ed884f2077648c60053bec7ef28cd33b284a4879ce5eb4e642936a8e40de699ef79ef6ea8412b755d1182c6780e5baa83066dd61220aa6c4d8865c6f16995bc3bbb7016a5f05", @ANYRES16=r9, @ANYRES8=r5, @ANYRESHEX=r8, @ANYRES32=r7], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000300)={0x10003, 0x0, 0xdddd1000, 0x2000, &(0x7f0000001000/0x2000)=nil}) 14.653301011s ago: executing program 4 (id=246): r0 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x2000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000041000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c00020020", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=0x0) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x2, 0x0, 0x7, 0xf94, r4}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$cgroup_int(r1, &(0x7f0000000380), 0x1040c) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000340)={@local, 0x0}, &(0x7f00000003c0)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r0, r7, 0x25, 0x10, @void}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', @random="0106002010ff"}) 14.388538987s ago: executing program 4 (id=252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000140)={0x190001, 0x0, {[0x8000000000000001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x744, 0x1000080]}}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0xa}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f00, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x1, 0xd}, {}, {0xc, 0xfff1}}}, 0x24}}, 0x40004) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c0000000500000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f00000002c0)=""/173, 0xad, 0x0, &(0x7f0000000380)=""/25, 0x19}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) recvmmsg(r9, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010100459bb2405804035000000000000109021b0001110000000904"], 0x0) 14.190721981s ago: executing program 1 (id=255): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, 0x0) (async) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x400c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="4dff6a5ac923fcd88c11be1ea0925cb3b79541c359103b3b7ea9a4fd61a3fc3e134de84a2a144d455cee257c3ea3c489790d09b82c371b69e456fa4dcf37e82827f7257f9f6dddfee5a350f3425aa74b553c4d665e9533070ad5aba96ff64b444dc63d756395d0a90ac49dcf878f05014deb3248a11da1cf889235b25363ebe7488f169dabffcb002fd6b05290c4d6b31e7621346b3cf13b295ac5382d8e8de0f63d580a17ff59926f57550e8b1e6d1ccdd207aceeea42a34d56fc64045917a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd0c, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9f2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.024541004s ago: executing program 4 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)='Vb'}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8011, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x808c20, &(0x7f0000000a40)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 14.023510544s ago: executing program 1 (id=257): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000000000)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$eJzs3U9sFGUfB/DvbrslAd638OZVEf9VUCmi1LYmSIKJRDnJxWDiuaGFEAs1tCZCiNHEgzcvJp49KDePHDwZD3jUBC/e1JMxEkMkntSa2e7Qbdkt3dB2q/v5JLP7zM6wz2/m4ffM7MOTIUDPGipeKsn2JN8mGVxYXbrD0MLbzRuXTv5+49LJSubnT/xaqe/3241LJ8tdyz+3rXipJsPVpPpeJQ+0qHf2wsXXJ6anp8431kfmzr4xMnvh4tNnzk6cnjo9dW700OHnxkcPjY2Pr9mxvnz57RPbXnnh2AeT136ZufzD50W82xvbmo9jrQxlaOm5bPLEWlfWZfc0lSv9XQyEjvQlKZqrVs//wfRlsfEG89X3XQ0OWFfzhS1tN78zD/yLVdLtCIDuKC/0xe/fcll6C3BsXe8/6K7rRxd+ABbtfrOxLGzpT7WxT23Z7/u1NJTkyJVjnxVL1mkcBgAAAKCXfXE0yVOtxv+qubdpv6J8X5JdSe5Psjupz+t5MMlDSR5O8kg5n6gDy/dfPv5TaTeBhjVx/WhypDG3a+n4Xzn6lx19jbX/FCupVU6dmZ56Jsl/kwyntqVYH12hjqtf//VNu23N43/FUtRfjgU24vi5f9m/T09OzE3czTGz6Pq7ye7+Vu1fuTUTqEjBR5Ps6eSLa4vFH/fsP91utzu3P+tp/uNkX8v8b3S81w7X31aYnzlS7w9Gyl7hdu+Pjr3Urv4W7V9UrP03SJH/W1dq/2RHpXm+7mzndVzddeX5dts67/+/+6To/wcqr9YDHGh8+tbE3Nz50WSgcvz2z8c6j/mfrf1NU3k+yvNVtP/w3tbX//81fdveJI8lebwxd3lf/dqf7E/yZJIDK0Tz54uHXkvzHUUT/X93Fe0/2TL/b00NWJb/nReO7PzoeLv6V5f/z9b/Qg83PnH/d2erbaBuxwkAAAAAAADA2qjWn4FXqR68Va5WDx5ceIbf/7O1Oj0zO3fg1Myb5yYXnpW3I7VqOdNrsGk+6Gi9vLg+tmx9PMnOJB/2/dF48sDM9GS3Dx563LY2+V/4qa/b0QHrzvNaoXetIv9rGxEHsPFc/6F3yX/oXfIfepf8h94l/6F3yX/oXavP/4F1jQPYeK7/0JPu5rl+m63Qn00RRstCOX+qS2GU/yX/Jjkbm7Pw6ZfJBtTVl2SzHPIKhW72SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbx98BAAD//5IX2eo=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x65, 0x36, 0x31, 0x35, 0x31, 0x31, 0x0, 0x38, 0x66, 0x35, 0x39, 0x36, 0x65, 0x61, 0x34, 0x37]}, &(0x7f0000000180)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000440)='.\x00', 0x12000021) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x9d) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = fcntl$dupfd(r9, 0x406, 0xffffffffffffffff) read$FUSE(r10, &(0x7f0000001400)={0x2020}, 0x2020) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r11 = socket$pptp(0x18, 0x1, 0x2) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x9}, 0x8) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000280)={0x80a0000, 0x14000}) close(r9) 14.003670504s ago: executing program 32 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)='Vb'}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8011, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x808c20, &(0x7f0000000a40)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.04027254s ago: executing program 3 (id=319): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) clock_gettime(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1400) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x200008, &(0x7f0000000380)) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000500)=@bloom_filter={0x1e, 0xffffed7d, 0x1, 0x4, 0x200, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xe}, 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x503, 0x0, 0xfffff7fd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x48482}}}}}}, @IFLA_ADDRESS={0x7, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, 0x54}}, 0x8080) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x4, 0x200) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x14, "e98f096b53bc0974ffa5a5fcd64c15bf1ccdf6a6706083e00d3c0ffed8a303a58f65db251fafb7b22018b4797994cde990d313f906961897529248ed62769284", "b04d4381ad2dd86e4d595c2e7ae70d1f1ab527d087331330131336d912a1d9eb0b6e582f0246dbd51ed6516417c7c939e504c2fc51bcb85932802c6a4ae9b22d", "7981954e1ecc858a75b8a27f842464bebd2138adeaead267438b56240ff1f686", [0x101, 0x9]}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 3.56817863s ago: executing program 3 (id=322): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1fb}, 0x94) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x800007) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000400)={{0x1, 0x3}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 3.417252233s ago: executing program 3 (id=324): keyctl$restrict_keyring(0x4, 0xfffffffffffffffc, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x80010, 0xfffffffffffffce9, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffef0}, 0x94) 3.416877163s ago: executing program 1 (id=325): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x1, 0x4, 0x8, 0xa, 0xffffffffffffffc0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r3 = socket(0x10, 0x2, 0x0) sync_file_range(r3, 0x5, 0x7, 0x2) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x2, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0xc7}, 0x7800, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x80001) openat(0xffffffffffffff9c, 0x0, 0x42, 0x53) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x5, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 3.357630544s ago: executing program 3 (id=328): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES64=r0], 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="0f6f3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c0071c5dd5de58fe6253e672f3d45ed067f9d071919df8b1390ad4f86b9e3721808ab28bffc0a"]) 3.316723045s ago: executing program 3 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, &(0x7f0000000280)="c74424000b000000c74424023e550000c7442406000000000f011424460f0964640f01ca66b83d008ee066baa000b054ee26410f011a660fc776c8b9800000c00f3235000400000f3066450fed3b0f20c035020000000f22c0", 0x59}], 0x1, 0x54, 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe79b", 0x0, 0x19}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x6a, &(0x7f0000000080)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.927308412s ago: executing program 3 (id=334): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x1002, 0xf, 0x404, 0xa, 0x2, 0x200005, 0xd, 0xfffe, 0xffff, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r2}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0xe, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x8000, 0xffffff81, @remote, 0x800}}}, 0x108) close(0x3) bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x15, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0xc800, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x626f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6710451d}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x89, &(0x7f00000002c0)=""/137, 0x41100, 0x2c, '\x00', r3, 0x0, r5, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x2, 0x10000, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, r6, r7], &(0x7f00000005c0)=[{0x4, 0x3, 0x6, 0x2}, {0x3, 0x3, 0x5, 0xa}], 0x10, 0xd8bc}, 0x94) 2.873542803s ago: executing program 2 (id=338): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000003240), 0x0, 0x4000800) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000008f0000000000006f357437c14b423400000000"], 0x48) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffefd, 0x0, 0x0, 0x0, 0x2000}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 2.873232164s ago: executing program 2 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000009d000085000000860000008500000050000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000140)='tlb_flush\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000540)="f29148643b9efc706805130e5f417b0dcb91043fc9740ed99182c75707ee2a5911b3cc4f53a5040c5ea3a7c30c12781ad6714e847d147db44d3ce55e4852deeb67d859816515716e205131d2ff17557cb53f41ed54d39187352b88f3e523eea85a7a02ec3ba340828354a0e7c1bcf2a7de8a174559c69953a5097f8aff59c7f21258cea6a6b9b553dbd455b6956223bba38f22c1dddf1aeb10b3216380e2", &(0x7f00000030c0)=""/4096, &(0x7f0000000600)="846581ef61684788c62ba89015e14112749ce23294eb0d6e57bad1e38afa6880c7ef22b0b7b74e141b842385ac44436d75bb9df15fc379d808cf48b5cd2daebfbb2ca5a9c0e942ec05f08739a635551171aeb0ccafc5876658ea8b10849a1ba27824589e4a06c19a8c45eea7a7804221c9f9ae48f3b4d8883b4ba430b756de8eb97d87af79159100d1709d8e5c1409aea12e511f4484e2772102b56f424e09ede422d7b80d4a1df6e66cac12bf8f40347ce4c26b7522d6377366a630183932df488cfa5057731d7bdf41185b47fe054bcb305b5d27a77514250f3fde548e7128293ac823ef", &(0x7f0000000700)="ddd4f6ed8dc819199290a15133f4c2a5faf1db968c79722da823db1d7e72123b4fd6434463574f1b32a5b226f98bc56cf74dc08a69081251", 0x0, r2, 0x4}, 0x38) openat$cgroup_int(r3, &(0x7f00000009c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 2.844038104s ago: executing program 2 (id=340): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a110162aa6d85c5f54e74a2c75900000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f00000002c0), &(0x7f0000000340)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 2.390626883s ago: executing program 5 (id=344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) (async) r2 = dup3(r0, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r5) (async) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) setresgid(0xee00, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)='[', 0x1}, {&(0x7f0000000880)="f5117df807ee11ee335d95657d1f1753ddf91ba2f46d81442b98b6143abc8df12127b014463c35cf3b7d8f45aa8c85ca045a76ce5b7545a8ed7ac454cea5a1c5cbc06d25b08729c8b78e6d2e2d023b22b9f92702948355e9a29382ed508f642df7504e4864cfccc6d1ec36b58441a1e58b8ad04542bb8cbf6ce7d5ef7153764f0af9b4ade65d01c82859d5c48650e02f5a6f2ecaee7cf1f7fbb418732b2af3ebea89d24da371fa53360be4dbb8414e9553617ee14eec417ced8bedbdca911a9f49b7d705ecf0556ceb37c5a0d8b7fe7bad32d09aff0f7d8d96fa909362ff7a6ac27391", 0xe3}], 0x2, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x4) (async) sendmmsg$unix(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)='[', 0x1}, {&(0x7f0000000880)="f5117df807ee11ee335d95657d1f1753ddf91ba2f46d81442b98b6143abc8df12127b014463c35cf3b7d8f45aa8c85ca045a76ce5b7545a8ed7ac454cea5a1c5cbc06d25b08729c8b78e6d2e2d023b22b9f92702948355e9a29382ed508f642df7504e4864cfccc6d1ec36b58441a1e58b8ad04542bb8cbf6ce7d5ef7153764f0af9b4ade65d01c82859d5c48650e02f5a6f2ecaee7cf1f7fbb418732b2af3ebea89d24da371fa53360be4dbb8414e9553617ee14eec417ced8bedbdca911a9f49b7d705ecf0556ceb37c5a0d8b7fe7bad32d09aff0f7d8d96fa909362ff7a6ac27391", 0xe3}], 0x2, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r8, &(0x7f0000000600)=ANY=[], 0x78) (async) write$binfmt_elf64(r8, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg(r7, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x382, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000800)) write$FUSE_DIRENTPLUS(r6, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privport,access=', @ANYRESDEC=r11]) syz_clone3(&(0x7f0000000300)={0x204000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x29}, &(0x7f0000000100)=""/214, 0xd6, &(0x7f0000000200)=""/143, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r2}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)={0x12c, 0x16, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x88, 0x124, 0x0, 0x1, [@generic="93b86cffe3c1f513eb3999c4a43255f7e0131b9a20a7bc8a9a1f7651fcbea591890145a2c806ecf1bd342eb2ad477068654ca0bbacd2c4754e00be96361e9ffd278798a29b298b11a359f7ba7bfe79c9ac526517", @typed={0x8, 0x5, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x13a}, @typed={0xc, 0x54, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x96, 0x0, 0x0, @str='}#!\x00'}, @typed={0x8, 0x117, 0x0, 0x0, @uid=r11}, @typed={0x8, 0x8e, 0x0, 0x0, @fd=r3}]}, @nested={0x14, 0xed, 0x0, 0x1, [@nested={0x4, 0x2d}, @typed={0x8, 0x4a, 0x0, 0x0, @pid=r12}, @nested={0x4, 0x145}]}, @nested={0x77, 0x27, 0x0, 0x1, [@nested={0x4, 0x85}, @typed={0x8, 0x4f, 0x0, 0x0, @pid=r13}, @typed={0x4, 0x53}, @typed={0x5, 0xd, 0x0, 0x0, @str='\x00'}, @generic="91c39402e680be4ecb7c6a47285512a9a47888a76a12c99e12001a227d93d8a7f36ce4aec307f1c710c9eb39668524dc19bc9256f284b5b892516b26646b91e2ee4ea8bf7571c9f12114157d75d9a2fe157f485e2891c7b75428a0"]}, @typed={0x8, 0x70, 0x0, 0x0, @u32=0x967}]}, 0x12c}, {&(0x7f0000000600)={0xfc, 0x39, 0x200, 0x70bd25, 0x25dfdbfd, "", [@generic="5f45263d38c1e6fc7aec220299c645b7d281383459ae5e75a11104dd8b2f59d60dad24c5001faafe66a8cab068244057554ff8a6d7bf14f5f7e59d3ab4fc69386b1c45f82b740a4b2b2500f9a5d449c61c4836e7aefc1ed545c72e49577d5006cd5ab7a7c6b5da8c0eb90649e53930f7b087fdc33a859f45d5ef03578fcb1df8c21d23149d93c4efd0e5d63f0382838ddd2d17e76a80f49bb1e707a1b9607d8057e992e6b02864c8219721f4e86a3517d90033ef4aa10ebbb8ac11bbbd23c13178313121d0aff3c65ae3354e9ccd2437ed2e02d1d5cb899dc4d7df1578ed244addd7f9ec675ae43cdd762c"]}, 0xfc}, {&(0x7f0000000bc0)={0x2cc, 0x1b, 0x800, 0x70bd28, 0x25dfdbfd, "", [@nested={0xed, 0x76, 0x0, 0x1, [@generic="18ec9a37947d8772204322e95b91ea5e0885275e6bbf977dcaedbdfeb7d6f593e052228d517478432d462b555d55f0aead73cccb1c3d78a2b62b25bc1aea1ed2f168463bc8aaf497ddab039b685d152eb90ca3f0e9281326b79b14904b3aa5596629842051cfa4c3e66e44492ccc2e388b8036d63e7e3e4a95f77c2f4918b76189ea82dff091055231bb5b99beaa4e7a6d22e3c718b5fb66c85f6d4204665d9f911675a4d6f00d6a0197f8c6295e105ef83aa432505a458833ebb3bc68c85205b55d0d2c1ddf6b138d144673089ac13652773f88c678fc985651fce6ebc86aed7e", @typed={0x8, 0xa0, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x1cb, 0xa9, 0x0, 0x1, [@nested={0x4, 0x9e}, @nested={0x4, 0x71}, @generic="6b16a4196e0c5abef2a6f33ed6e7fc8b5a6c8652e95eb19dba675e9663a34b9bda730a43ad2b183ef9c7f2cae30f9aec7559674b0058583481611e17440b8f03e8dd372a83379e848dc4ac35db3a3ecb7bfbec7e4efa42e4e6fc6d70c57cb0cb0f4b288229b5334cc1887eb0433ff1f73448f1edd5c301dcad52fdbb4a43e592336b28780be6581b58cc67a1bfd7acfc1d4b39d461122c528c0af4c623b62fb1142560a095c52336e091a78b793fdd523cd7d8fa38f580fcf1d044de9a2b61d603ee401845924dad2a9a6fa424e29805834a1c40caa5e38db4b323", @typed={0x4, 0x5a}, @typed={0xda, 0xb2, 0x0, 0x0, @binary="82e85802ff92aefc33c047f0fd4729bf395e7dd843843bf6ee505a853d516fbff278eada7653ec9d86a8b97e954910e2e1a59757499fc588fc75a409f3e2eabf31fb4c7942843bfd7936f37a5a2e65e1a5261e36ee0af5abb28e9f4ec38ef3d4866b84f4f02f36b11835a07bb832ad012cf598e5cfc8dcf00f45cd56727b4f95f86f2cad611437bf6292496a26c9cf3765f9c47125cff34c3ab40db23cdd09a25690a2275f1d82ec20a3c89f7e0bef6fb01e9259e8a60096eb65642319520063f779110c6dda8f3a4378925ab675d8e683b7f406fef4"}, @nested={0x4, 0x44}]}]}, 0x2cc}, {&(0x7f0000000700)={0x74, 0x1b, 0x1, 0x70bd27, 0x25dfdbfd, "", [@typed={0xd, 0xfa, 0x0, 0x0, @str='/dev/kvm\x00'}, @nested={0x54, 0x12, 0x0, 0x1, [@nested={0x4, 0x6b}, @generic="1644d940f8c082bb5ef7e50bebd828", @generic="a7218a339262ec376f80de8ca7c24fc7d23107b0a3743b6fefba5a3114c4ef660410e20b3cca750b50cbfcaba982819ac7c4416cf17c89a2376a1eff2d"]}]}, 0x74}, {&(0x7f0000000540)={0x14, 0x3c, 0x200, 0x70bd26, 0x25dfdbfb, "", [@typed={0x4, 0x7d}]}, 0x14}, {&(0x7f0000001300)={0x1128, 0x1f, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x8, 0x10c, 0x0, 0x1, [@nested={0x4, 0x4b}]}, @typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @typed={0x8, 0xf7, 0x0, 0x0, @u32=0x7}, @nested={0xeb, 0xfa, 0x0, 0x1, [@generic="aa19f6418a2e7e44799c70d45a17f6cc2d2dc05e448ce60c49d81698ec6a7164c1f5e0c181e6b1d72a3bd017c13ec67b839485397f138a02faa0d80de2f89a64dbf1616c05d0439c157054698fbe431605cbb3d8b6c43a0dded7c2649d792e79eb4fca42390782b1890b0d6228c74698048ba80883b253c2d8f9307b0aee3d4517c193a66f3f8bdd5070a5296be1c177bc566d59156963f3af830549ec5a6319e49e2fba0e2f8f952c34186124b2d27415dc2092707d4b483bcde9432f58c900f3a51176f7101e445b4a447c8ccc4468910128feb185dbb0a1f373e0b5bb8e89d4ba36fb41c49b"]}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@private1}]}, 0x1128}, {&(0x7f0000002440)={0x1194, 0x42, 0x20, 0x70bd28, 0x25dfdbfd, "", [@generic="49538251c40f243b4532c0d3dd90fd4d10dfc06cec7f966504b8a0bf12b748dbe206b7e2e071095dfa0377540a819b08b3919f20827c4629a64307af4e22598bbfb659f7c212142355f995d0cbf8a175e5173500091e48a8f5a9d8aa0d1f39fa018b7e89e39995a05ee41ef52bd170f2b74b081e332ba8e9689e901d1023d3baf0c217c1d1c39155c98b4d56b1", @nested={0x18, 0x12a, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x5, 0x3e, 0x0, 0x0, @str='\x00'}]}, @nested={0x4, 0x26}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x3}, @generic="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", @typed={0x8, 0x77, 0x0, 0x0, @fd=r5}, @generic="46f70bed0e5a872c8a5903d4e908e55d6b014594ae60f60397e294a54492bc0f8ae917d0ec2c296491dc5fe1850f41831ebff153f1c2", @generic="13021992d9938072b81baaa0a41619fce68c1fe05ecfdd5f7d8d8b0244ce6a2ab902f4abafff27dc1fa829b14ce4d19421ff68c9c0477ebb35abfc2f7eed8613e309a312745ff54bc182b02d0106c914801651aba7956e8f9dc25968dc0371b857b9f5c97ed3819162820501d64b04a49eb7af501edd956658b7012fc688b611246282ebf1da2097a62f214041390e8ebfe7"]}, 0x1194}], 0x7, 0x0, 0x0, 0x40040d0}, 0x40100) 2.349346704s ago: executing program 5 (id=345): r0 = socket$inet(0x2, 0x6, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x48882, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000800), &(0x7f00000001c0), &(0x7f0000000180)=0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x3, 0x5, 0x6, 0xffc, 0x40000006, {0x1, 0x1, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r4, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee01, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r6}, 0x38) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) ioctl$sock_bt_hci(r5, 0x3d43daf536e6b334, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) 2.288517305s ago: executing program 5 (id=346): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0xffffffb3, &(0x7f0000000240)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x2, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x4b9c, 0x4000, 0x4, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 1.742855546s ago: executing program 2 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x7e, r0, 'id0\x00'}) ioctl$HIDIOCGRDESC(r7, 0x90044802, &(0x7f0000000680)={0x1f3, "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"}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102000000000000000002"], 0x1c}}, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x10020, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x527}}]}}]}, 0x48}}, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c) recvfrom(r8, 0x0, 0x0, 0x6667b9fa4a4ed82, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x19f}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x7}, {0x2, 0x6, 0x4}}}]}]}]}}]}, 0x54}}, 0x0) 1.636631578s ago: executing program 2 (id=349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x5, 0x0, 0x9}, {0x0, 0x3, 0xf, 0x7}, {0x4, 0x1, 0xb, 0x6}, {0x1, 0x3, 0x0, 0x7}], 0x10, 0xc0a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}]}, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.636216138s ago: executing program 2 (id=350): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYRESOCT=r3, @ANYRES16=r1, @ANYRESDEC=r4, @ANYBLOB="799055f7b4cd7cec857959fa5706ae333f091fd14642f78553d7226aaede82ead646eda61cdc164c288061c891b25b8d2351547bf9f5367b7525df271ab56cdbb0a6b4b83e31f36364c0", @ANYRESOCT=r4], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r9 = dup2(r8, r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000a000000040000000000000c04000000000000000000000a01000000060000000000000e020000000100000008000000000000070000000000000000612e2e"], 0x0, 0x56}, 0x28) utimensat(r9, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={{}, {0x0, 0xea60}}, 0x100) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r11, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x52}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x32b4886d23554154) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x1dd880, 0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="020000004de72f3f395b010000bee30ad0b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r13}, 0x18) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) syz_usb_connect$cdc_ncm(0x3, 0xba, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0x8, 0xb0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, '@\vU'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7fff, 0x8}, {0x6, 0x24, 0x1a, 0x9, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @country_functional={0xe, 0x24, 0x7, 0x6, 0xfffb, [0x5, 0x7, 0x655d, 0x4]}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xff, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}, @acm={0x4, 0x24, 0x2, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x6, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x53, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x5, 0xfe}}}}}}}]}}, &(0x7f0000002b80)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0xcb, 0x0, 0x2, 0x8, 0x7}, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x6, 0x4, 0xffff, 0xc}]}, 0x7, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x807}}, {0xbb, &(0x7f0000002800)=@string={0xbb, 0x3, "06f0795d1a49c1772b14812296ba47d9f475bb930eb8e6962ba2a69c7e394863433ca2d9e3f0f5c9f3387e5e09fa7f5ab58aa85b4b7332cdebb465b146ff78a657e54f1687293b7ecedde41cada6f7a20cf6d98767c9a754f62f60704db9a936c7ef93a3025647a9066bc47878ca2135c8fa8b89611aefbc3b96103582ece49ca48a88bbf24a53c52b2df548e3cbc3760dcf21438c9db45237ce0ac1669450129be27dacc45b30f05f97cff58a362e8a5fa0c28f3223c35039"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40c}}, {0xdd, &(0x7f00000028c0)=@string={0xdd, 0x3, "f5182dbae98ac111277c1f6f76011161806c71dbf1ac24998e2e37af3ec1b7cbd8559eae572996f739d30e8dd9b3ecf8fa8ee136b1900a5012ccddaddc3494ffc1d318ec0c56101874bd3b37578b94da0079d72e74e3f1938a5aebe5fa2e9581a76e94d885373e9da17e540d262b374ba0c11957cbd39d43d04906d4fbbdb731a6b2927e27551069f825b2b6e86839f066f9cb092fad883407db2a8ee70fb807c591065051cc46ec85f351c6006ecb4e3c8cae944a28af9e36eb1c580ab17857d8c75a266883652684fb2b456ad6eba7b89b9e50b7129abaea9bda"}}, {0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x70, &(0x7f0000002a00)=@string={0x70, 0x3, "3184a1e6d06199186d27f09921fb8786f17662c8848726e6db6e456b542afcd8521ccddf7ac41883d2ca99bf138b2805a45d03b0252b0d29f82cc0061b8bb5dcfd0ec7b05b3839803e11b83d32bee9c5b7ca60946a2c9dd7e6226a67863d52d0ef4b7015b248fbc0bbdfa48b1ce9"}}, {0xff, &(0x7f0000002a80)=@string={0xff, 0x3, "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"}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r14, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r15, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r16 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') read$FUSE(r16, &(0x7f00000007c0)={0x2020}, 0x2020) 1.411732073s ago: executing program 5 (id=351): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r2}, 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x4f, 0x10, 0xb02, 0x18, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast1, 0x8, 0x1, 0x7, 0x10004}}) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) pipe2$9p(0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_clone(0x54183d00, &(0x7f0000000400)="a6d0d24505fd279318d26be93bb5407ce6ee5f9d24b60fc26a856953b96f7d1f3b09742afdfc25bb10faee906cc9598453c241ff2fc68f022396d3918e4b6d2679c8cafa4e074889983029ddf41a3cba1fa8c389ff177d147f6018f520fe0b421eb64e5f3f1de7447833", 0x6a, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f00000040c0)="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") (async) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x2) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000f32084726e3d000000000000000000000000000000000000aa75d300"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.317973944s ago: executing program 5 (id=352): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, &(0x7f00000006c0)={r5, 0xffffffffffffffff, 0x62}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x28000600) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') syz_mount_image$ext4(&(0x7f0000000f00)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000100c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b100000000000000001be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b866aa339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f6688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRESHEX=0x0], 0x0, 0x11e2, &(0x7f0000002480)="$eJzs3MFrHFUcB/BfYm1rarNRa7UF8aEXvQzdHLzoZZEUpAtK2xVaQZiaWV123A2ZJbAiVk9e/TvEozdBvOklF/8Gb7l4zCE44m5iElkPQZOF8Plc5gfvfee9x8DADPNm561vPu13q6ybj2JxYSEWNyLSbooUi3Hgy3j9zZ9/eeneg4d3Wu322t2UbrfuN99IKS2//OMHn3/3yk+jK+9/v/zDpdhe+XDn99Xftq9v39j54/4nvSr1qjQYjlKeHg2Ho/xRWaT1XtXPUnqvLPKqSL1BVWwea++Ww42NccoH6wsRUVRVygfj1C/GaTRMo81xyj/Oe4OUZVm6uhT8F51vd+u6jqjrJ+Ni1HVdPxVLcSWejquxHI1YiWfi2XgursXzcT1eiBfjxqTXvOcNAAAAAAAAAAAAAAAAAAAA54v9/wAAAAAAAAAAAAAAAAAAADB/9x48vNNqt9fupnQ5ovx6q7PVmR6n7a1u9KKMIm5FI/Zisvt/alrffqe9ditNrMRX5eP9/OOtzhPH883J7wRm5pvTfDqevxRLR/Or0Yhrs/OrM/OX47VXj+SzaMSvH8UwyliPv7KH+S+aKb39bvsf+ZuTfgAAAHAeZOlvM5/fs+zf2qf5E7wfqPaH3M9fiJsX5rdupqrxZ/28LIvNUysuxqkPoVAoDoq9uq7/h/PM+87EWTi86POeCQAAAAAAAAAAACdxFp8lznuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzJDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//9N2dOT") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x20481e, &(0x7f0000000f40)={[{@dioread_lock}, {@noauto_da_alloc}, {@inlinecrypt}, {@dax_never}]}, 0x1, 0x451, &(0x7f0000001280)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket(0x1, 0x803, 0x0) 540.09546ms ago: executing program 5 (id=354): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000140)="240000001e005f0214f6ffff40000000000000000000000000000000080009000d000000", 0x24) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000d00)={0x2020}, 0xfffffca2) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x181) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) geteuid() r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r5, 0x4bfb, 0x10000000000004) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000000), 0x401, &(0x7f0000000140)=ANY=[@ANYBLOB="7765636cb46065642c00"]) 235.075735ms ago: executing program 0 (id=355): r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x9, 0x1) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e23], [0x4e20, 0x4e22], 0x3, 0x8, 0x80, 0x7}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 168.660107ms ago: executing program 0 (id=356): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x28}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 168.448897ms ago: executing program 0 (id=357): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000000040)='./file0\x00') (async, rerun: 64) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32) r2 = timerfd_create(0x8, 0x0) (rerun: 32) timerfd_settime(r2, 0x1, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) 167.873687ms ago: executing program 1 (id=358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, 0x4040001) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd4) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="41000000000000007100004062f4762ec03458"]) 156.563557ms ago: executing program 0 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1a, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000140)=0x1e) 112.023338ms ago: executing program 0 (id=360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r6, &(0x7f0000000300)={&(0x7f0000000800)={0x1d, r5}, 0x10, &(0x7f0000000880)={&(0x7f0000000180)=@can={{0x2, 0x1}, 0x6, 0x3, 0x0, 0x0, "aacda1cfd0185b43"}, 0x10}}, 0x14) 267.47µs ago: executing program 0 (id=361): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x40000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00Y\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB="0000000000f281229975e0c0f22c000001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r2, 0x1, 0x14, &(0x7f0000000300)=""/75, &(0x7f0000000380)=0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r6}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000030000000200000002000000000000000000000105000020200000000000000000000003000000000200000002"], 0x0, 0x5a}, 0x20) 0s ago: executing program 1 (id=362): flock(0xffffffffffffffff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) lstat(&(0x7f0000000080)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): _1: link becomes ready [ 25.026852][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.033911][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.041388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.049648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.057911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.065842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.074014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.081552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.097106][ T282] device veth1_macvtap entered promiscuous mode [ 25.104941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.112808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.121234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.129289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.137750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.152333][ T284] device veth0_vlan entered promiscuous mode [ 25.159628][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 25.168082][ T284] device veth1_macvtap entered promiscuous mode [ 25.181899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.191363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.199618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.208582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.217601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.225947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.235798][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.243942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.270045][ T283] device veth0_vlan entered promiscuous mode [ 25.276508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.286391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.295048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.303270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.311401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.319010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.327654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.336655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.345539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.354351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.364197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.372699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.381238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.395148][ T286] device veth0_vlan entered promiscuous mode [ 25.436235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.622099][ T283] device veth1_macvtap entered promiscuous mode [ 26.648639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.679368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.855233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.897298][ T286] device veth1_macvtap entered promiscuous mode [ 26.909917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.920499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.929069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.937313][ T332] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.937908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.953427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.962856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.971421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.980013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.096482][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 27.096497][ T30] audit: type=1400 audit(1758886725.632:106): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 27.147475][ T357] loop1: detected capacity change from 0 to 256 [ 27.982740][ T30] audit: type=1400 audit(1758886726.122:107): avc: denied { create } for pid=351 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.620461][ T30] audit: type=1400 audit(1758886726.222:108): avc: denied { write } for pid=351 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.657070][ T30] audit: type=1400 audit(1758886726.222:109): avc: denied { nlmsg_write } for pid=351 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.658054][ T332] usb 4-1: Using ep0 maxpacket: 8 [ 28.770831][ T30] audit: type=1400 audit(1758886727.262:110): avc: denied { mount } for pid=356 comm="syz.1.7" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.859814][ T30] audit: type=1400 audit(1758886727.332:111): avc: denied { create } for pid=371 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.913794][ T332] usb 4-1: device descriptor read/all, error -71 [ 30.366055][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 30.389893][ T30] audit: type=1400 audit(1758886727.562:112): avc: denied { map } for pid=371 comm="syz.2.11" path="socket:[15627]" dev="sockfs" ino=15627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 30.411651][ T377] syz.4.12 (377) used greatest stack depth: 22248 bytes left [ 30.431500][ T381] 9pnet: Insufficient options for proto=fd [ 30.433040][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 30.438945][ T383] loop4: detected capacity change from 0 to 256 [ 30.446047][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 30.466006][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 30.480290][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.493706][ T30] audit: type=1400 audit(1758886727.782:113): avc: denied { mounton } for pid=367 comm="syz.4.12" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.495395][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 30.531961][ T30] audit: type=1400 audit(1758886729.022:114): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.540096][ T383] ======================================================= [ 30.540096][ T383] WARNING: The mand mount option has been deprecated and [ 30.540096][ T383] and is ignored by this kernel. Remove the mand [ 30.540096][ T383] option from the mount to silence this warning. [ 30.540096][ T383] ======================================================= [ 30.579192][ T30] audit: type=1400 audit(1758886729.062:115): avc: denied { read append } for pid=365 comm="syz.3.10" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.610859][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.627848][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 30.649903][ T388] binder: 386:388 ioctl 40044591 0 returned -22 [ 30.692824][ T383] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.706356][ T366] syz.3.10[366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.706430][ T366] syz.3.10[366] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.734474][ T383] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 30.788402][ T383] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 30.903953][ T394] loop2: detected capacity change from 0 to 512 [ 30.962224][ T394] EXT4-fs (loop2): Ignoring removed oldalloc option [ 31.132453][ T394] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.16: dx entry: limit 1024 != root limit 124 [ 31.144711][ T394] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.16: Corrupt directory, running e2fsck is recommended [ 31.161564][ T394] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 31.171545][ T394] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.16: corrupted in-inode xattr [ 31.184639][ T394] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.16: couldn't read orphan inode 15 (err -117) [ 31.197769][ T394] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,journal_ioprio=0x0000000000000000,jqfmt=vfsv1,oldalloc,noquota,grpjquota=.usrquota,usrjquota=,grpid,delalloc,,,errors=continue. Quota mode: writeback. [ 31.319982][ T394] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.16: dx entry: limit 1024 != root limit 124 [ 31.331904][ T394] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.16: Corrupt directory, running e2fsck is recommended [ 31.371639][ T394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.844076][ T366] syz.3.10 (366) used greatest stack depth: 21368 bytes left [ 32.557866][ T394] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.16: dx entry: limit 1024 != root limit 124 [ 32.569839][ T394] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.16: Corrupt directory, running e2fsck is recommended [ 32.627358][ T394] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.16: dx entry: limit 1024 != root limit 124 [ 32.639354][ T394] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.16: Corrupt directory, running e2fsck is recommended [ 32.780320][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 32.780427][ T30] audit: type=1400 audit(1758886731.312:137): avc: denied { read append open } for pid=382 comm="syz.4.14" path="/3/file0/memory.events.local" dev="loop4" ino=1048598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.065114][ T405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 33.113663][ T409] loop3: detected capacity change from 0 to 1024 [ 33.124040][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 33.135877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.144433][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 33.153455][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.162132][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.170705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.179149][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.179512][ T409] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.187871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.225772][ T30] audit: type=1400 audit(1758886731.762:138): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.339170][ T417] loop0: detected capacity change from 0 to 4096 [ 34.309872][ T398] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.344882][ T417] EXT4-fs (loop0): Test dummy encryption mode enabled [ 34.398380][ T417] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 34.447105][ T30] audit: type=1400 audit(1758886732.982:139): avc: denied { write } for pid=416 comm="syz.0.21" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.472972][ T417] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 34.490436][ T30] audit: type=1400 audit(1758886733.012:140): avc: denied { add_name } for pid=416 comm="syz.0.21" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.549032][ T30] audit: type=1400 audit(1758886733.022:141): avc: denied { read append open } for pid=416 comm="syz.0.21" path=2F322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F6D656D6F72792E6576656E74732E6C6F63616C dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.568150][ T415] loop4: detected capacity change from 0 to 40427 [ 34.597695][ T30] audit: type=1400 audit(1758886733.022:142): avc: denied { write } for pid=416 comm="syz.0.21" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 34.620984][ T30] audit: type=1400 audit(1758886733.022:143): avc: denied { create } for pid=416 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.640803][ T30] audit: type=1400 audit(1758886733.082:144): avc: denied { map } for pid=416 comm="syz.0.21" path=2F322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F6D656D6F72792E6576656E74732E6C6F63616C dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.647211][ T417] fuse: Unknown parameter 'user_00000000000000000000' [ 34.680596][ T415] F2FS-fs (loop4): Unrecognized mount option "184467440737095516150xffffffffffffffff" or missing value [ 34.698327][ T30] audit: type=1400 audit(1758886733.082:145): avc: denied { write } for pid=416 comm="syz.0.21" path=2F322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F6D656D6F72792E6576656E74732E6C6F63616C dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.738763][ T30] audit: type=1400 audit(1758886733.182:146): avc: denied { read write } for pid=416 comm="syz.0.21" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.093330][ T406] syz.2.18 (406) used greatest stack depth: 21216 bytes left [ 35.164271][ T415] 9pnet: Insufficient options for proto=fd [ 35.179879][ T398] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.296684][ T398] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 35.391174][ T398] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 35.402876][ T398] usb 2-1: config 63 has no interface number 0 [ 35.409451][ T398] usb 2-1: config 63 interface 66 has no altsetting 0 [ 36.502206][ T398] usb 2-1: string descriptor 0 read error: -71 [ 36.553630][ T398] usb 2-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 36.562946][ T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.590472][ T398] usb 2-1: can't set config #63, error -71 [ 36.597158][ T398] usb 2-1: USB disconnect, device number 2 [ 36.685398][ T441] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=441 comm=syz.4.26 [ 37.111022][ T448] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 37.141328][ T448] kvm: pic: level sensitive irq not supported [ 37.141481][ T448] kvm: pic: non byte read [ 37.175556][ T455] loop4: detected capacity change from 0 to 8192 [ 37.244763][ T443] loop1: detected capacity change from 0 to 40427 [ 37.275917][ T443] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.329188][ T455] loop4: p1 p2 p4 < > [ 37.333366][ T455] loop4: partition table partially beyond EOD, truncated [ 37.340849][ T443] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.348872][ T455] loop4: p1 start 16777216 is beyond EOD, truncated [ 37.374346][ T455] loop4: p2 size 515840 extends beyond EOD, truncated [ 37.738197][ T455] loop4: p4 start 16777216 is beyond EOD, truncated [ 37.854684][ T455] capability: warning: `syz.4.30' uses deprecated v2 capabilities in a way that may be insecure [ 37.865426][ T472] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 37.875452][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 37.875467][ T30] audit: type=1400 audit(1758886736.412:160): avc: denied { relabelto } for pid=442 comm="syz.1.27" name="memory.events.local" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 38.310833][ T30] audit: type=1400 audit(1758886736.492:161): avc: denied { name_bind } for pid=469 comm="syz.0.33" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 38.340152][ T30] audit: type=1400 audit(1758886736.492:162): avc: denied { node_bind } for pid=469 comm="syz.0.33" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.349503][ T460] loop3: detected capacity change from 0 to 40427 [ 38.379435][ T443] attempt to access beyond end of device [ 38.379435][ T443] loop1: rw=2049, want=81920, limit=40427 [ 38.395369][ T443] attempt to access beyond end of device [ 38.395369][ T443] loop1: rw=2049, want=50512, limit=40427 [ 38.410053][ T30] audit: type=1400 audit(1758886736.952:163): avc: denied { mounton } for pid=459 comm="syz.3.32" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 38.452826][ T30] audit: type=1400 audit(1758886736.992:164): avc: denied { bind } for pid=476 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.524512][ T30] audit: type=1400 audit(1758886736.992:165): avc: denied { write } for pid=476 comm="syz.4.35" path="socket:[15934]" dev="sockfs" ino=15934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.637478][ T482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.36'. [ 39.036177][ T30] audit: type=1400 audit(1758886736.992:166): avc: denied { write } for pid=476 comm="syz.4.35" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 39.069390][ T442] attempt to access beyond end of device [ 39.069390][ T442] loop1: rw=524288, want=78080, limit=40427 [ 39.262533][ T442] attempt to access beyond end of device [ 39.262533][ T442] loop1: rw=0, want=77832, limit=40427 [ 39.760177][ T442] attempt to access beyond end of device [ 39.760177][ T442] loop1: rw=0, want=77832, limit=40427 [ 39.769748][ C1] sched: RT throttling activated [ 39.770336][ T30] audit: type=1400 audit(1758886737.052:167): avc: denied { write } for pid=478 comm="syz.3.36" name="ip_tables_names" dev="proc" ino=4026532335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.809788][ T443] attempt to access beyond end of device [ 39.809788][ T443] loop1: rw=0, want=77832, limit=40427 [ 39.844264][ T477] loop4: detected capacity change from 0 to 512 [ 39.857018][ T443] attempt to access beyond end of device [ 39.857018][ T443] loop1: rw=0, want=77832, limit=40427 [ 39.903916][ T30] audit: type=1400 audit(1758886737.642:168): avc: denied { ioctl } for pid=485 comm="syz.0.37" path="socket:[16729]" dev="sockfs" ino=16729 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.934779][ T442] attempt to access beyond end of device [ 39.934779][ T442] loop1: rw=0, want=77832, limit=40427 [ 39.944899][ T30] audit: type=1400 audit(1758886738.362:169): avc: denied { connect } for pid=487 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.966245][ T443] attempt to access beyond end of device [ 39.966245][ T443] loop1: rw=0, want=77832, limit=40427 [ 39.970506][ T477] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 39.977464][ T442] attempt to access beyond end of device [ 39.977464][ T442] loop1: rw=0, want=77832, limit=40427 [ 39.996066][ T494] loop3: detected capacity change from 0 to 512 [ 40.010027][ T477] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.089361][ T494] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 40.113418][ T494] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.670240][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.853822][ T515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.44'. [ 40.868270][ T475] loop2: detected capacity change from 0 to 131072 [ 40.881789][ T517] loop0: detected capacity change from 0 to 512 [ 40.911958][ T475] F2FS-fs (loop2): Test dummy encryption mode enabled [ 40.933531][ T475] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.935493][ T522] loop1: detected capacity change from 0 to 512 [ 40.983570][ T475] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 41.065418][ T522] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 41.079861][ T26] usb 4-1: config 7 has an invalid interface number: 167 but max is 0 [ 41.087833][ T522] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.088174][ T26] usb 4-1: config 7 has an invalid descriptor of length 214, skipping remainder of the config [ 41.164818][ T26] usb 4-1: config 7 has no interface number 0 [ 41.171217][ T26] usb 4-1: too many endpoints for config 7 interface 167 altsetting 232: 65, using maximum allowed: 30 [ 41.182855][ T26] usb 4-1: config 7 interface 167 altsetting 232 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 41.199852][ T332] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 41.210757][ T26] usb 4-1: config 7 interface 167 has no altsetting 0 [ 41.335854][ T537] loop0: detected capacity change from 0 to 2048 [ 41.376192][ T537] loop0: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 41.377079][ T537] loop0: p3 size 2048 extends beyond EOD, [ 41.464407][ T26] usb 4-1: New USB device found, idVendor=79ee, idProduct=ea27, bcdDevice=e1.44 [ 41.482553][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.491618][ T26] usb 4-1: Product: syz [ 41.495816][ T26] usb 4-1: Manufacturer: syz [ 41.497637][ T542] loop2: detected capacity change from 0 to 1024 [ 41.500726][ T26] usb 4-1: SerialNumber: syz [ 41.510711][ T537] truncated [ 41.515691][ T537] loop0: p5 size 2048 extends beyond EOD, truncated [ 41.522974][ T537] loop0: p6 size 2048 extends beyond EOD, truncated [ 41.530253][ T537] loop0: p7 size 2048 extends beyond EOD, truncated [ 41.537392][ T537] loop0: p8 size 2048 extends beyond EOD, truncated [ 41.547203][ T537] loop0: p9 size 2048 extends beyond EOD, truncated [ 41.556417][ T537] loop0: p10 size 2048 extends beyond EOD, truncated [ 41.564165][ T537] loop0: p11 size 2048 extends beyond EOD, truncated [ 41.566299][ T542] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.571741][ T537] loop0: p12 size 2048 extends beyond EOD, truncated [ 41.588885][ T537] loop0: p13 size 2048 extends beyond EOD, truncated [ 41.604266][ T537] loop0: p14 size 2048 extends beyond EOD, truncated [ 41.610316][ T542] EXT4-fs warning (device loop2): ext4_rmdir:3243: inode #11: comm syz.2.47: empty directory 'file1' has too many links (111) [ 41.612170][ T537] loop0: p15 size 2048 extends beyond EOD, truncated [ 41.632231][ T537] loop0: p16 size 2048 extends beyond EOD, truncated [ 41.639665][ T537] loop0: p17 size 2048 extends beyond EOD, truncated [ 41.646943][ T537] loop0: p18 size 2048 extends beyond EOD, truncated [ 41.654196][ T544] netlink: 'syz.1.50': attribute type 4 has an invalid length. [ 41.654637][ T537] loop0: p19 size 2048 extends beyond EOD, truncated [ 41.669989][ T537] loop0: p20 size 2048 extends beyond EOD, truncated [ 41.670712][ T544] netlink: 'syz.1.50': attribute type 4 has an invalid length. [ 41.677896][ T537] loop0: p21 size 2048 extends beyond EOD, [ 41.684401][ T332] usb 5-1: unable to get BOS descriptor or descriptor too short [ 41.700201][ T537] truncated [ 41.704031][ T537] loop0: p22 size 2048 extends beyond EOD, truncated [ 41.711655][ T537] loop0: p23 size 2048 extends beyond EOD, truncated [ 41.718956][ T537] loop0: p24 size 2048 extends beyond EOD, truncated [ 41.726890][ T537] loop0: p25 size 2048 extends beyond EOD, truncated [ 41.735490][ T537] loop0: p26 size 2048 extends beyond EOD, truncated [ 41.742895][ T537] loop0: p27 size 2048 extends beyond EOD, truncated [ 41.749893][ T332] usb 5-1: not running at top speed; connect to a high speed hub [ 41.758294][ T537] loop0: p28 size 2048 extends beyond EOD, truncated [ 41.765864][ T537] loop0: p29 size 2048 extends beyond EOD, truncated [ 41.774278][ T537] loop0: p30 size 2048 extends beyond EOD, truncated [ 41.827120][ T537] loop0: p31 size 2048 extends beyond EOD, truncated [ 41.835057][ T537] loop0: p32 size 2048 extends beyond EOD, truncated [ 41.842563][ T537] loop0: p33 size 2048 extends beyond EOD, truncated [ 41.850332][ T537] loop0: p34 size 2048 extends beyond EOD, truncated [ 41.857710][ T537] loop0: p35 size 2048 extends beyond EOD, truncated [ 41.861022][ T558] loop2: detected capacity change from 0 to 2048 [ 41.865405][ T537] loop0: p36 size 2048 extends beyond EOD, truncated [ 41.878336][ T537] loop0: p37 size 2048 extends beyond EOD, truncated [ 41.885293][ T332] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 41.885965][ T537] loop0: p38 size 2048 extends beyond EOD, truncated [ 41.896991][ T555] Illegal XDP return value 4294967282, expect packet loss! [ 41.904046][ T537] loop0: p39 size 2048 extends beyond EOD, truncated [ 41.917968][ T537] loop0: p40 size 2048 extends beyond EOD, truncated [ 41.925426][ T537] loop0: p41 size 2048 extends beyond EOD, truncated [ 41.933566][ T558] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 41.936019][ T389] udevd[389]: incorrect ext4 checksum on /dev/loop2 [ 41.951549][ T537] loop0: p42 size 2048 extends beyond EOD, truncated [ 41.961264][ T537] loop0: p43 size 2048 extends beyond EOD, truncated [ 41.973685][ T537] loop0: p44 size 2048 extends beyond EOD, truncated [ 41.981180][ T537] loop0: p45 size 2048 extends beyond EOD, truncated [ 41.988501][ T537] loop0: p46 size 2048 extends beyond EOD, truncated [ 41.995983][ T537] loop0: p47 size 2048 extends beyond EOD, truncated [ 42.008486][ T537] loop0: p48 size 2048 extends beyond EOD, truncated [ 42.020006][ T537] loop0: p49 size 2048 extends beyond EOD, truncated [ 42.030017][ T537] loop0: p50 size 2048 extends beyond EOD, truncated [ 42.038009][ T537] loop0: p51 size 2048 extends beyond EOD, truncated [ 42.045595][ T537] loop0: p52 size 2048 extends beyond EOD, truncated [ 42.053100][ T537] loop0: p53 size 2048 extends beyond EOD, truncated [ 42.065851][ T537] loop0: p54 size 2048 extends beyond EOD, truncated [ 42.074728][ T537] loop0: p55 size 2048 extends beyond EOD, truncated [ 42.082476][ T537] loop0: p56 size 2048 extends beyond EOD, truncated [ 42.101391][ T537] loop0: p57 size 2048 extends beyond EOD, truncated [ 42.110138][ T537] loop0: p58 size 2048 extends beyond EOD, truncated [ 42.117861][ T537] loop0: p59 size 2048 extends beyond EOD, truncated [ 42.125615][ T537] loop0: p60 size 2048 extends beyond EOD, truncated [ 42.132703][ T332] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 42.145429][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.155974][ T537] loop0: p61 size 2048 extends beyond EOD, truncated [ 42.167936][ T571] 9pnet: Insufficient options for proto=fd [ 42.174599][ T537] loop0: p62 size 2048 extends beyond EOD, truncated [ 42.182175][ T332] usb 5-1: Product: syz [ 42.188028][ T537] loop0: p63 size 2048 extends beyond EOD, truncated [ 42.188491][ T332] usb 5-1: Manufacturer: syz [ 42.207301][ T537] loop0: p64 size 2048 extends beyond EOD, truncated [ 42.214442][ T332] usb 5-1: SerialNumber: syz [ 42.226847][ T537] loop0: p65 size 2048 extends beyond EOD, truncated [ 42.245129][ T537] loop0: p66 size 2048 extends beyond EOD, truncated [ 42.259540][ T537] loop0: p67 size 2048 extends beyond EOD, truncated [ 42.275042][ T537] loop0: p68 size 2048 extends beyond EOD, truncated [ 42.290276][ T537] loop0: p69 size 2048 extends beyond EOD, truncated [ 42.305588][ T537] loop0: p70 size 2048 extends beyond EOD, truncated [ 42.320861][ T537] loop0: p71 size 2048 extends beyond EOD, truncated [ 42.335986][ T537] loop0: p72 size 2048 extends beyond EOD, truncated [ 42.353048][ T537] loop0: p73 size 2048 extends beyond EOD, truncated [ 42.367832][ T537] loop0: p74 size 2048 extends beyond EOD, truncated [ 42.385069][ T537] loop0: p75 size 2048 extends beyond EOD, truncated [ 42.451802][ T537] loop0: p76 size 2048 extends beyond EOD, truncated [ 42.464855][ T537] loop0: p77 size 2048 extends beyond EOD, truncated [ 42.472123][ T515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.44'. [ 42.472909][ T537] loop0: p78 size 2048 extends beyond EOD, truncated [ 42.488573][ T537] loop0: p79 size 2048 extends beyond EOD, truncated [ 42.496080][ T537] loop0: p80 size 2048 extends beyond EOD, truncated [ 42.503736][ T537] loop0: p81 size 2048 extends beyond EOD, truncated [ 42.511261][ T537] loop0: p82 size 2048 extends beyond EOD, truncated [ 42.518760][ T537] loop0: p83 size 2048 extends beyond EOD, truncated [ 42.571020][ T537] loop0: p84 size 2048 extends beyond EOD, truncated [ 42.605840][ T537] loop0: p85 size 2048 extends beyond EOD, truncated [ 42.617943][ T537] loop0: p86 size 2048 extends beyond EOD, truncated [ 42.631359][ T537] loop0: p87 size 2048 extends beyond EOD, truncated [ 42.643933][ T537] loop0: p88 size 2048 extends beyond EOD, truncated [ 42.656052][ T537] loop0: p89 size 2048 extends beyond EOD, truncated [ 42.680518][ T332] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 42.718095][ T537] loop0: p90 size 2048 extends beyond EOD, truncated [ 42.772931][ T332] usb 5-1: USB disconnect, device number 2 [ 42.796642][ T537] loop0: p91 size 2048 extends beyond EOD, truncated [ 42.813393][ T537] loop0: p92 size 2048 extends beyond EOD, truncated [ 42.826667][ T537] loop0: p93 size 2048 extends beyond EOD, truncated [ 42.835169][ T537] loop0: p94 size 2048 extends beyond EOD, truncated [ 42.842753][ T537] loop0: p95 size 2048 extends beyond EOD, truncated [ 42.850197][ T537] loop0: p96 size 2048 extends beyond EOD, truncated [ 42.861302][ T537] loop0: p97 size 2048 extends beyond EOD, truncated [ 42.868606][ T537] loop0: p98 size 2048 extends beyond EOD, truncated [ 42.879103][ T537] loop0: p99 size 2048 extends beyond EOD, truncated [ 42.886891][ T537] loop0: p100 size 2048 extends beyond EOD, truncated [ 42.896929][ T537] loop0: p101 size 2048 extends beyond EOD, truncated [ 42.904708][ T537] loop0: p102 size 2048 extends beyond EOD, truncated [ 42.912353][ T537] loop0: p103 size 2048 extends beyond EOD, truncated [ 42.919892][ T537] loop0: p104 size 2048 extends beyond EOD, truncated [ 42.924017][ T589] loop2: detected capacity change from 0 to 512 [ 42.927606][ T537] loop0: p105 size 2048 extends beyond EOD, truncated [ 42.940774][ T537] loop0: p106 size 2048 extends beyond EOD, truncated [ 42.948109][ T537] loop0: p107 size 2048 extends beyond EOD, truncated [ 42.955896][ T537] loop0: p108 size 2048 extends beyond EOD, truncated [ 42.963396][ T537] loop0: p109 size 2048 extends beyond EOD, truncated [ 42.986248][ T537] loop0: p110 size 2048 extends beyond EOD, truncated [ 42.995284][ T537] loop0: p111 size 2048 extends beyond EOD, truncated [ 43.003130][ T537] loop0: p112 size 2048 extends beyond EOD, truncated [ 43.010677][ T537] loop0: p113 size 2048 extends beyond EOD, truncated [ 43.019647][ T537] loop0: p114 size 2048 extends beyond EOD, truncated [ 43.027167][ T537] loop0: p115 size 2048 extends beyond EOD, truncated [ 43.027419][ T589] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 43.034875][ T537] loop0: p116 size 2048 extends beyond EOD, truncated [ 43.048445][ T589] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.053388][ T537] loop0: p117 size 2048 extends beyond EOD, truncated [ 43.073294][ T26] usb 4-1: USB disconnect, device number 4 [ 43.081029][ T537] loop0: p118 size 2048 extends beyond EOD, truncated [ 43.089154][ T537] loop0: p119 size 2048 extends beyond EOD, truncated [ 43.099895][ T537] loop0: p120 size 2048 extends beyond EOD, truncated [ 43.107218][ T537] loop0: p121 size 2048 extends beyond EOD, truncated [ 43.114584][ T537] loop0: p122 size 2048 extends beyond EOD, truncated [ 43.122198][ T537] loop0: p123 size 2048 extends beyond EOD, truncated [ 43.136881][ T537] loop0: p124 size 2048 extends beyond EOD, truncated [ 43.149070][ T537] loop0: p125 size 2048 extends beyond EOD, truncated [ 43.158543][ T537] loop0: p126 size 2048 extends beyond EOD, truncated [ 43.166509][ T537] loop0: p127 size 2048 extends beyond EOD, truncated [ 43.174281][ T537] loop0: p128 size 2048 extends beyond EOD, truncated [ 43.182411][ T537] loop0: p129 size 2048 extends beyond EOD, truncated [ 43.190705][ T537] loop0: p130 size 2048 extends beyond EOD, truncated [ 43.198399][ T537] loop0: p131 size 2048 extends beyond EOD, truncated [ 43.206222][ T537] loop0: p132 size 2048 extends beyond EOD, truncated [ 43.214749][ T537] loop0: p133 size 2048 extends beyond EOD, truncated [ 43.222925][ T537] loop0: p134 size 2048 extends beyond EOD, truncated [ 43.230779][ T537] loop0: p135 size 2048 extends beyond EOD, truncated [ 43.238489][ T537] loop0: p136 size 2048 extends beyond EOD, truncated [ 43.247936][ T537] loop0: p137 size 2048 extends beyond EOD, truncated [ 43.255534][ T537] loop0: p138 size 2048 extends beyond EOD, truncated [ 43.263051][ T537] loop0: p139 size 2048 extends beyond EOD, truncated [ 43.399143][ T537] loop0: p140 size 2048 extends beyond EOD, truncated [ 43.577688][ T602] loop2: detected capacity change from 0 to 1024 [ 43.584496][ T537] loop0: p141 size 2048 extends beyond EOD, truncated [ 43.587853][ T601] device bridge1 entered promiscuous mode [ 43.597448][ T537] loop0: p142 size 2048 extends beyond EOD, truncated [ 43.610284][ T537] loop0: p143 size 2048 extends beyond EOD, truncated [ 43.614299][ T602] EXT4-fs (loop2): Unrecognized mount option "hash" or missing value [ 43.625831][ T537] loop0: p144 size 2048 extends beyond EOD, truncated [ 43.633472][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 43.642398][ T537] loop0: p145 size 2048 extends beyond EOD, truncated [ 43.650453][ T537] loop0: p146 size 2048 extends beyond EOD, truncated [ 43.650739][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 43.650755][ T30] audit: type=1400 audit(1758886742.192:224): avc: denied { setopt } for pid=603 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.659188][ T537] loop0: p147 size 2048 extends beyond EOD, truncated [ 43.690566][ T537] loop0: p148 size 2048 extends beyond EOD, truncated [ 43.697890][ T537] loop0: p149 size 2048 extends beyond EOD, truncated [ 43.705326][ T537] loop0: p150 size 2048 extends beyond EOD, truncated [ 43.712702][ T537] loop0: p151 size 2048 extends beyond EOD, truncated [ 43.720290][ T537] loop0: p152 size 2048 extends beyond EOD, truncated [ 43.727572][ T537] loop0: p153 size 2048 extends beyond EOD, truncated [ 43.735695][ T537] loop0: p154 size 2048 extends beyond EOD, truncated [ 43.745866][ T537] loop0: p155 size 2048 extends beyond EOD, truncated [ 43.753431][ T537] loop0: p156 size 2048 extends beyond EOD, truncated [ 43.765124][ T599] loop2: detected capacity change from 0 to 4096 [ 43.767077][ T537] loop0: p157 size 2048 extends beyond EOD, truncated [ 43.784862][ T537] loop0: p158 size 2048 extends beyond EOD, truncated [ 43.791944][ T599] EXT4-fs (loop2): Test dummy encryption mode enabled [ 43.796521][ T537] loop0: p159 size 2048 extends beyond EOD, truncated [ 43.802982][ T599] EXT4-fs (loop2): unsupported descriptor size 255 [ 43.810709][ T537] loop0: p160 size 2048 extends beyond EOD, truncated [ 43.822348][ T537] loop0: p161 size 2048 extends beyond EOD, truncated [ 43.830469][ T537] loop0: p162 size 2048 extends beyond EOD, truncated [ 43.837712][ T606] loop1: detected capacity change from 0 to 8192 [ 43.838081][ T537] loop0: p163 size 2048 extends beyond EOD, truncated [ 43.851913][ T537] loop0: p164 size 2048 extends beyond EOD, truncated [ 43.859346][ T537] loop0: p165 size 2048 extends beyond EOD, truncated [ 43.866845][ T537] loop0: p166 size 2048 extends beyond EOD, truncated [ 43.874360][ T537] loop0: p167 size 2048 extends beyond EOD, truncated [ 43.881877][ T537] loop0: p168 size 2048 extends beyond EOD, truncated [ 43.889363][ T537] loop0: p169 size 2048 extends beyond EOD, truncated [ 43.896909][ T537] loop0: p170 size 2048 extends beyond EOD, truncated [ 43.911737][ T537] loop0: p171 size 2048 extends beyond EOD, truncated [ 43.919411][ T537] loop0: p172 size 2048 extends beyond EOD, truncated [ 43.939327][ T30] audit: type=1400 audit(1758886742.472:225): avc: denied { create } for pid=605 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 43.987637][ T537] loop0: p173 size 2048 extends beyond EOD, truncated [ 44.030635][ T537] loop0: p174 size 2048 extends beyond EOD, truncated [ 44.037917][ T537] loop0: p175 size 2048 extends beyond EOD, truncated [ 44.045000][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.063459][ T537] loop0: p176 size 2048 extends beyond EOD, truncated [ 44.075512][ T30] audit: type=1400 audit(1758886742.612:226): avc: denied { ioctl } for pid=610 comm="syz.4.68" path="socket:[16960]" dev="sockfs" ino=16960 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.106476][ T537] loop0: p177 size 2048 extends beyond EOD, truncated [ 44.120196][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.144046][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.157578][ T537] loop0: p178 size 2048 extends beyond EOD, truncated [ 44.160292][ T30] audit: type=1400 audit(1758886742.612:227): avc: denied { create } for pid=610 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.183987][ T617] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 44.190004][ T617] syzkaller1: linktype set to 1 [ 44.190087][ T26] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.195658][ T537] loop0: p179 size 2048 extends beyond EOD, [ 44.204624][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.223353][ T30] audit: type=1400 audit(1758886742.612:228): avc: denied { accept } for pid=610 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.247269][ T26] usb 4-1: config 0 descriptor?? [ 44.253883][ T537] truncated [ 44.260228][ T537] loop0: p180 size 2048 extends beyond EOD, truncated [ 44.308970][ T30] audit: type=1326 audit(1758886742.842:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=614 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfcc9eec9 code=0x7ffc0000 [ 44.393603][ T537] loop0: p181 size 2048 extends beyond EOD, truncated [ 44.488797][ T537] loop0: p182 size 2048 extends beyond EOD, truncated [ 44.559302][ T537] loop0: p183 size 2048 extends beyond EOD, truncated [ 44.574332][ T30] audit: type=1326 audit(1758886742.842:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=614 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfcc9eec9 code=0x7ffc0000 [ 44.600035][ T30] audit: type=1326 audit(1758886742.842:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=614 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f5bfcc9eec9 code=0x7ffc0000 [ 44.623596][ T537] loop0: p184 size 2048 extends beyond EOD, truncated [ 44.637085][ T622] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 44.647797][ T622] netlink: 'syz.4.70': attribute type 3 has an invalid length. [ 44.650150][ T537] loop0: p185 size 2048 extends beyond EOD, [ 44.655917][ T622] netlink: 'syz.4.70': attribute type 3 has an invalid length. [ 44.662205][ T537] truncated [ 44.671252][ T30] audit: type=1326 audit(1758886743.012:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=614 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfcc9eec9 code=0x7ffc0000 [ 44.696226][ T537] loop0: p186 size 2048 extends beyond EOD, truncated [ 44.719901][ T537] loop0: p187 size 2048 extends beyond EOD, truncated [ 44.727104][ T30] audit: type=1326 audit(1758886743.012:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=614 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfcc9eec9 code=0x7ffc0000 [ 44.740079][ T537] loop0: p188 size 2048 extends beyond EOD, truncated [ 44.766795][ T537] loop0: p189 size 2048 extends beyond EOD, truncated [ 44.785387][ T537] loop0: p190 size 2048 extends beyond EOD, truncated [ 44.798996][ T626] loop4: detected capacity change from 0 to 512 [ 44.805726][ T537] loop0: p191 size 2048 extends beyond EOD, truncated [ 44.815439][ T26] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 44.824494][ T537] loop0: p192 size 2048 extends beyond EOD, truncated [ 44.834020][ T26] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 44.847467][ T537] loop0: p193 size 2048 extends beyond EOD, truncated [ 44.858592][ T626] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 44.864500][ T537] loop0: p194 size 2048 extends beyond EOD, truncated [ 44.878342][ T537] loop0: p195 size 2048 extends beyond EOD, truncated [ 44.885645][ T537] loop0: p196 size 2048 extends beyond EOD, truncated [ 44.893686][ T537] loop0: p197 size 2048 extends beyond EOD, truncated [ 44.901346][ T537] loop0: p198 size 2048 extends beyond EOD, truncated [ 44.909567][ T537] loop0: p199 size 2048 extends beyond EOD, truncated [ 44.910372][ T626] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.917600][ T537] loop0: p200 size 2048 extends beyond EOD, truncated [ 44.934220][ T537] loop0: p201 size 2048 extends beyond EOD, truncated [ 44.941559][ T537] loop0: p202 size 2048 extends beyond EOD, truncated [ 44.948847][ T537] loop0: p203 size 2048 extends beyond EOD, truncated [ 44.956201][ T537] loop0: p204 size 2048 extends beyond EOD, truncated [ 44.970146][ T537] loop0: p205 size 2048 extends beyond EOD, truncated [ 44.996382][ T537] loop0: p206 size 2048 extends beyond EOD, truncated [ 45.017874][ T537] loop0: p207 size 2048 extends beyond EOD, truncated [ 45.029265][ T635] loop2: detected capacity change from 0 to 128 [ 45.038023][ T537] loop0: p208 size 2048 extends beyond EOD, truncated [ 45.054660][ T537] loop0: p209 size 2048 extends beyond EOD, truncated [ 45.062469][ T537] loop0: p210 size 2048 extends beyond EOD, truncated [ 45.071677][ T537] loop0: p211 size 2048 extends beyond EOD, truncated [ 45.074366][ T635] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.079151][ T537] loop0: p212 size 2048 extends beyond EOD, truncated [ 45.096542][ T537] loop0: p213 size 2048 extends beyond EOD, truncated [ 45.106285][ T537] loop0: p214 size 2048 extends beyond EOD, truncated [ 45.109654][ T26] usb 4-1: USB disconnect, device number 5 [ 45.113669][ T537] loop0: p215 size 2048 extends beyond EOD, truncated [ 45.130494][ T537] loop0: p216 size 2048 extends beyond EOD, truncated [ 45.137820][ T537] loop0: p217 size 2048 extends beyond EOD, truncated [ 45.145390][ T537] loop0: p218 size 2048 extends beyond EOD, truncated [ 45.152946][ T537] loop0: p219 size 2048 extends beyond EOD, truncated [ 45.160493][ T537] loop0: p220 size 2048 extends beyond EOD, truncated [ 45.167744][ T537] loop0: p221 size 2048 extends beyond EOD, truncated [ 45.175117][ T537] loop0: p222 size 2048 extends beyond EOD, truncated [ 45.182485][ T537] loop0: p223 size 2048 extends beyond EOD, truncated [ 45.191936][ T635] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.204334][ T537] loop0: p224 size 2048 extends beyond EOD, truncated [ 45.215333][ T647] loop1: detected capacity change from 0 to 512 [ 45.215636][ T537] loop0: p225 size 2048 extends beyond EOD, truncated [ 45.234150][ T537] loop0: p226 size 2048 extends beyond EOD, truncated [ 45.241558][ T537] loop0: p227 size 2048 extends beyond EOD, truncated [ 45.248862][ T537] loop0: p228 size 2048 extends beyond EOD, truncated [ 45.256263][ T537] loop0: p229 size 2048 extends beyond EOD, truncated [ 45.263833][ T537] loop0: p230 size 2048 extends beyond EOD, truncated [ 45.271359][ T537] loop0: p231 size 2048 extends beyond EOD, truncated [ 45.279016][ T537] loop0: p232 size 2048 extends beyond EOD, truncated [ 45.286638][ T537] loop0: p233 size 2048 extends beyond EOD, truncated [ 45.295916][ T537] loop0: p234 size 2048 extends beyond EOD, truncated [ 45.303446][ T537] loop0: p235 size 2048 extends beyond EOD, truncated [ 45.311070][ T537] loop0: p236 size 2048 extends beyond EOD, truncated [ 45.319433][ T537] loop0: p237 size 2048 extends beyond EOD, truncated [ 45.327174][ T537] loop0: p238 size 2048 extends beyond EOD, truncated [ 45.335695][ T647] EXT4-fs (loop1): Ignoring removed oldalloc option [ 45.349158][ T537] loop0: p239 size 2048 extends beyond EOD, truncated [ 45.371922][ T647] EXT4-fs (loop1): 1 truncate cleaned up [ 45.380257][ T537] loop0: p240 size 2048 extends beyond EOD, truncated [ 45.387926][ T647] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,bsdgroups,. Quota mode: writeback. [ 45.430308][ T537] loop0: p241 size 2048 extends beyond EOD, truncated [ 45.509783][ T537] loop0: p242 size 2048 extends beyond EOD, truncated [ 45.518387][ T537] loop0: p243 size 2048 extends beyond EOD, truncated [ 45.525858][ T537] loop0: p244 size 2048 extends beyond EOD, truncated [ 45.533448][ T537] loop0: p245 size 2048 extends beyond EOD, truncated [ 45.541048][ T537] loop0: p246 size 2048 extends beyond EOD, truncated [ 45.549661][ T537] loop0: p247 size 2048 extends beyond EOD, truncated [ 45.557809][ T537] loop0: p248 size 2048 extends beyond EOD, truncated [ 45.565845][ T537] loop0: p249 size 2048 extends beyond EOD, truncated [ 45.824473][ T537] loop0: p250 size 2048 extends beyond EOD, truncated [ 45.884743][ T537] loop0: p251 size 2048 extends beyond EOD, truncated [ 45.931183][ T537] loop0: p252 size 2048 extends beyond EOD, truncated [ 45.952606][ T537] loop0: p253 size 2048 extends beyond EOD, truncated [ 45.961547][ T659] netlink: 'syz.3.78': attribute type 27 has an invalid length. [ 45.973122][ T537] loop0: p254 size 2048 extends beyond EOD, truncated [ 45.983227][ T537] loop0: p255 size 2048 extends beyond EOD, truncated [ 45.999526][ T659] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.006838][ T659] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.074308][ T281] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 46.119386][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 46.130630][ T672] loop2: detected capacity change from 0 to 512 [ 46.141468][ T281] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 234881024 (level 0) [ 46.160496][ T672] EXT4-fs (loop2): Test dummy encryption mode enabled [ 46.192561][ T672] EXT4-fs error (device loop2): __ext4_iget:4925: inode #11: block 1: comm syz.2.80: invalid block [ 46.200407][ T281] EXT4-fs (loop1): Remounting filesystem read-only [ 46.203922][ T672] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.80: couldn't read orphan inode 11 (err -117) [ 46.223447][ T669] device veth0 entered promiscuous mode [ 46.240271][ T672] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 46.264825][ T669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 46.351720][ T664] udevd[664]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory [ 46.361220][ T675] udevd[675]: inotify_add_watch(7, /dev/loop0p13, 10) failed: No such file or directory [ 46.372637][ T674] udevd[674]: inotify_add_watch(7, /dev/loop0p12, 10) failed: No such file or directory [ 46.373401][ T676] udevd[676]: inotify_add_watch(7, /dev/loop0p14, 10) failed: No such file or directory [ 46.382742][ T334] udevd[334]: inotify_add_watch(7, /dev/loop0p17, 10) failed: No such file or directory [ 46.403319][ T389] udevd[389]: inotify_add_watch(7, /dev/loop0p15, 10) failed: No such file or directory [ 46.413683][ T364] udevd[364]: inotify_add_watch(7, /dev/loop0p18, 10) failed: No such file or directory [ 46.424777][ T665] udevd[665]: inotify_add_watch(7, /dev/loop0p22, 10) failed: No such file or directory [ 46.425263][ T585] udevd[585]: inotify_add_watch(7, /dev/loop0p20, 10) failed: No such file or directory [ 46.482308][ T689] loop1: detected capacity change from 0 to 256 [ 46.525971][ T689] FAT-fs (loop1): Directory bread(block 64) failed [ 46.534811][ T694] capability: warning: `syz.2.86' uses 32-bit capabilities (legacy support in use) [ 46.536662][ T692] loop4: detected capacity change from 0 to 512 [ 46.544591][ T689] FAT-fs (loop1): Directory bread(block 65) failed [ 46.571146][ T689] FAT-fs (loop1): Directory bread(block 66) failed [ 46.589632][ T689] FAT-fs (loop1): Directory bread(block 67) failed [ 46.607696][ T689] FAT-fs (loop1): Directory bread(block 68) failed [ 46.626916][ T689] FAT-fs (loop1): Directory bread(block 69) failed [ 46.648109][ T689] FAT-fs (loop1): Directory bread(block 70) failed [ 46.655818][ T689] FAT-fs (loop1): Directory bread(block 71) failed [ 46.667183][ T689] FAT-fs (loop1): Directory bread(block 72) failed [ 46.673984][ T689] FAT-fs (loop1): Directory bread(block 73) failed [ 46.770200][ T705] loop2: detected capacity change from 0 to 256 [ 46.772565][ T692] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 46.788700][ T692] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.807890][ T709] loop3: detected capacity change from 0 to 4096 [ 46.841550][ T709] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.851365][ T709] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 46.993418][ T675] udevd[675]: inotify_add_watch(7, /dev/loop0p174, 10) failed: No such file or directory [ 47.003851][ T676] udevd[676]: inotify_add_watch(7, /dev/loop0p169, 10) failed: No such file or directory [ 47.003921][ T674] udevd[674]: inotify_add_watch(7, /dev/loop0p160, 10) failed: No such file or directory [ 47.013995][ T364] udevd[364]: inotify_add_watch(7, /dev/loop0p163, 10) failed: No such file or directory [ 47.023903][ T664] udevd[664]: inotify_add_watch(7, /dev/loop0p159, 10) failed: No such file or directory [ 47.044092][ T665] udevd[665]: inotify_add_watch(7, /dev/loop0p175, 10) failed: No such file or directory [ 47.044602][ T675] udevd[675]: inotify_add_watch(7, /dev/loop0p180, 10) failed: No such file or directory [ 47.057553][ T663] udevd[663]: inotify_add_watch(7, /dev/loop0p162, 10) failed: No such file or directory [ 47.074463][ T389] udevd[389]: inotify_add_watch(7, /dev/loop0p172, 10) failed: No such file or directory [ 47.074474][ T334] udevd[334]: inotify_add_watch(7, /dev/loop0p173, 10) failed: No such file or directory [ 47.099971][ T715] loop0: detected capacity change from 0 to 128 [ 47.118643][ T715] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.139870][ T715] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.159962][ T332] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 47.273280][ T720] Zero length message leads to an empty skb [ 47.385493][ T724] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.429770][ T332] usb 4-1: device descriptor read/64, error -71 [ 47.536920][ T729] loop2: detected capacity change from 0 to 512 [ 47.565332][ T729] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #15: comm syz.2.94: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 47.584073][ T729] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.94: couldn't read orphan inode 15 (err -117) [ 47.596263][ T729] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.715146][ T734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'. [ 47.869787][ T332] usb 4-1: device descriptor read/64, error -71 [ 48.094778][ T747] loop2: detected capacity change from 0 to 40427 [ 48.153803][ T747] F2FS-fs (loop2): invalid crc value [ 48.192255][ T747] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.249256][ T747] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.257081][ T332] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 48.291526][ T284] handle_bad_sector: 4319 callbacks suppressed [ 48.291549][ T284] attempt to access beyond end of device [ 48.291549][ T284] loop2: rw=2049, want=45104, limit=40427 [ 48.334575][ T753] loop1: detected capacity change from 0 to 512 [ 48.393620][ T753] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 48.413213][ T753] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.539863][ T332] usb 4-1: device descriptor read/64, error -71 [ 48.634784][ T758] loop0: detected capacity change from 0 to 2048 [ 48.645716][ T760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=760 comm=syz.2.101 [ 48.685752][ T389] Alternate GPT is invalid, using primary GPT. [ 48.700851][ T389] loop0: p1 p2 p3 [ 48.725977][ T772] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.739970][ T758] Alternate GPT is invalid, using primary GPT. [ 48.749219][ T758] loop0: p1 p2 p3 [ 48.762982][ T101] Alternate GPT is invalid, using primary GPT. [ 48.781795][ T101] loop0: p1 p2 p3 [ 48.786830][ T779] 9pnet: Insufficient options for proto=fd [ 48.805644][ T776] loop2: detected capacity change from 0 to 128 [ 48.832660][ T776] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.862000][ T776] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.873255][ T782] xt_bpf: check failed: parse error [ 48.875937][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 48.875954][ T30] audit: type=1400 audit(1758887003.404:270): avc: denied { setopt } for pid=781 comm="syz.0.110" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.923880][ T30] audit: type=1400 audit(1758887003.414:271): avc: denied { bind } for pid=781 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.943485][ T332] usb 4-1: device descriptor read/64, error -71 [ 48.944320][ T30] audit: type=1400 audit(1758887003.414:272): avc: denied { listen } for pid=781 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.944346][ T30] audit: type=1400 audit(1758887003.414:273): avc: denied { create } for pid=781 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 49.043886][ T799] loop1: detected capacity change from 0 to 512 [ 49.059993][ T332] usb usb4-port1: attempt power cycle [ 49.069860][ T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 49.081449][ T799] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 49.093489][ T799] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.124486][ T10] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.151233][ T30] audit: type=1400 audit(1758887003.684:274): avc: denied { bind } for pid=803 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.157626][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 49.172075][ T30] audit: type=1400 audit(1758887003.684:275): avc: denied { setopt } for pid=803 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.203750][ T30] audit: type=1400 audit(1758887003.684:276): avc: denied { write } for pid=803 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.318739][ T808] loop1: detected capacity change from 0 to 512 [ 49.319810][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 49.330664][ T808] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.343881][ T808] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.356376][ T808] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 49.369924][ T808] EXT4-fs (loop1): 1 truncate cleaned up [ 49.375706][ T808] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 49.489872][ T332] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 49.663589][ T30] audit: type=1400 audit(1758887004.194:277): avc: denied { unlink } for pid=818 comm="syz.1.118" name="#1" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 49.663687][ T819] overlayfs: failed to set xattr on upper [ 49.709695][ T821] loop1: detected capacity change from 0 to 512 [ 49.729883][ T26] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 49.739160][ T332] usb 4-1: device descriptor read/8, error -71 [ 49.745675][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.753938][ T26] usb 5-1: Product: syz [ 49.758136][ T26] usb 5-1: Manufacturer: syz [ 49.763090][ T26] usb 5-1: SerialNumber: syz [ 49.768445][ T26] usb 5-1: config 0 descriptor?? [ 49.768902][ T821] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 49.785073][ T821] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.810499][ T26] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 49.943206][ T30] audit: type=1326 audit(1758887004.474:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=830 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bfcc9eec9 code=0x7ffc0000 [ 49.966667][ T332] usb 4-1: device descriptor read/8, error -71 [ 49.997074][ T30] audit: type=1326 audit(1758887004.504:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=830 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bfcc9eec9 code=0x7ffc0000 [ 50.081363][ T26] usb 5-1: USB disconnect, device number 3 [ 50.116312][ T840] loop2: detected capacity change from 0 to 512 [ 50.150236][ T840] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 50.162037][ T348] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 50.170285][ T840] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.196234][ T843] mmap: syz.1.127 (843): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 50.256410][ T848] loop1: detected capacity change from 0 to 128 [ 50.306864][ T848] attempt to access beyond end of device [ 50.306864][ T848] loop1: rw=2049, want=148, limit=128 [ 50.327010][ T848] attempt to access beyond end of device [ 50.327010][ T848] loop1: rw=2049, want=1041, limit=128 [ 50.352210][ T848] attempt to access beyond end of device [ 50.352210][ T848] loop1: rw=524288, want=409, limit=128 [ 50.363588][ T848] attempt to access beyond end of device [ 50.363588][ T848] loop1: rw=0, want=161, limit=128 [ 50.374490][ T848] attempt to access beyond end of device [ 50.374490][ T848] loop1: rw=0, want=161, limit=128 [ 50.385383][ T848] attempt to access beyond end of device [ 50.385383][ T848] loop1: rw=0, want=161, limit=128 [ 50.396297][ T848] attempt to access beyond end of device [ 50.396297][ T848] loop1: rw=0, want=161, limit=128 [ 50.407068][ T848] attempt to access beyond end of device [ 50.407068][ T848] loop1: rw=0, want=161, limit=128 [ 50.418049][ T847] attempt to access beyond end of device [ 50.418049][ T847] loop1: rw=0, want=161, limit=128 [ 50.443231][ T847] Buffer I/O error on dev loop1, logical block 153, async page read [ 50.451462][ T847] Buffer I/O error on dev loop1, logical block 154, async page read [ 50.459619][ T847] Buffer I/O error on dev loop1, logical block 155, async page read [ 50.468185][ T847] Buffer I/O error on dev loop1, logical block 156, async page read [ 50.476485][ T847] Buffer I/O error on dev loop1, logical block 157, async page read [ 50.484776][ T847] Buffer I/O error on dev loop1, logical block 158, async page read [ 50.492934][ T847] Buffer I/O error on dev loop1, logical block 159, async page read [ 50.501192][ T847] Buffer I/O error on dev loop1, logical block 160, async page read [ 50.509415][ T848] Buffer I/O error on dev loop1, logical block 153, async page read [ 50.517576][ T848] Buffer I/O error on dev loop1, logical block 154, async page read [ 50.519877][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.543192][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.558152][ T348] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.571236][ T348] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.580403][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.585360][ T348] usb 1-1: config 0 descriptor?? [ 50.932482][ T862] loop4: detected capacity change from 0 to 256 [ 51.011138][ T862] exfat: Deprecated parameter 'namecase' [ 51.016968][ T862] exfat: Unknown parameter 'keep_last_dots' [ 51.126835][ T862] loop4: detected capacity change from 0 to 1024 [ 51.138393][ T862] EXT4-fs (loop4): Ignoring removed nobh option [ 51.144790][ T862] EXT4-fs (loop4): Ignoring removed bh option [ 51.331490][ T862] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,data_err=abort,barrier=0x0000000000000007,dioread_lock,data_err=ignore,max_dir_size_kb=0x0000000000000010,data_err=ignore,grpquota,nobh,user_xattr,bh,nojournal_checksum,. Quota mode: writeback. [ 51.601594][ T867] loop0: detected capacity change from 0 to 1024 [ 51.670368][ T867] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 51.700801][ T867] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.707303][ T867] EXT4-fs error (device loop0): ext4_free_blocks:6218: comm syz.0.120: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.743814][ T869] loop3: detected capacity change from 0 to 256 [ 51.749785][ T398] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 51.768520][ T872] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 51.771718][ T867] EXT4-fs (loop0): 1 orphan inode deleted [ 51.787872][ T867] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 51.806264][ T867] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.120: iget: bad i_size value: 1970324836974602 [ 51.834167][ T867] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.120: iget: bad i_size value: 1970324836974602 [ 51.854446][ T348] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 51.865776][ T348] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 51.958746][ T867] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.120: iget: bad i_size value: 1970324836974602 [ 51.979629][ T875] xt_hashlimit: max too large, truncated to 1048576 [ 51.987661][ T867] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.120: path /19/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 52.007379][ T867] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 17: comm syz.0.120: path /19/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 52.027902][ T867] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 18: comm syz.0.120: path /19/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 52.050047][ T867] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 19: comm syz.0.120: path /19/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 52.070823][ T867] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 20: comm syz.0.120: path /19/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 52.091869][ T867] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 21: comm syz.0.120: path /19/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 52.112521][ T880] incfs: iterate_incfs_dir / -22 [ 52.119610][ T867] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 22: comm syz.0.120: path /19/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 52.152484][ T887] loop4: detected capacity change from 0 to 512 [ 52.170211][ T347] usb 1-1: USB disconnect, device number 2 [ 52.199256][ T887] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 52.211158][ T887] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.259972][ T398] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 52.313577][ T894] loop3: detected capacity change from 0 to 2048 [ 52.354614][ T398] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 52.496616][ T894] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.538121][ T398] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 52.551871][ T398] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.563492][ T398] usb 3-1: config 0 has no interface number 0 [ 52.570512][ T398] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30 [ 52.611032][ T398] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72 [ 52.682796][ T398] usb 3-1: config 0 interface 255 has no altsetting 0 [ 52.690996][ T398] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 52.703952][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.871502][ T398] usb 3-1: config 0 descriptor?? [ 52.979454][ T398] usb-storage 3-1:0.255: USB Mass Storage device detected [ 53.101428][ T398] usb-storage 3-1:0.255: Quirks match for vid 1908 pid 1315: 20000 [ 53.282206][ T910] process 'syz.1.144' launched './file0' with NULL argv: empty string added [ 53.331278][ T920] bridge0: port 3(macsec1) entered blocking state [ 53.337809][ T920] bridge0: port 3(macsec1) entered disabled state [ 53.380037][ T348] usb 3-1: USB disconnect, device number 2 [ 53.389429][ T924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=924 comm=syz.4.142 [ 53.650859][ T922] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 53.659008][ T922] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 53.702401][ T941] loop1: detected capacity change from 0 to 512 [ 53.796492][ T941] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 53.813680][ T941] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.144124][ T943] loop3: detected capacity change from 0 to 40427 [ 54.202435][ T943] F2FS-fs (loop3): fault_injection options not supported [ 54.209574][ T943] F2FS-fs (loop3): fault_type options not supported [ 54.234525][ T943] F2FS-fs (loop3): invalid crc value [ 54.260536][ T943] F2FS-fs (loop3): Mismatch valid blocks 2 vs. 16 [ 54.270559][ T943] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 54.299814][ T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 54.328324][ T971] loop1: detected capacity change from 0 to 40427 [ 54.351369][ T981] loop4: detected capacity change from 0 to 128 [ 54.358517][ T971] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 54.374648][ T971] F2FS-fs (loop1): invalid crc value [ 54.387366][ T981] handle_bad_sector: 13809 callbacks suppressed [ 54.387397][ T981] attempt to access beyond end of device [ 54.387397][ T981] loop4: rw=2049, want=148, limit=128 [ 54.426459][ T971] F2FS-fs (loop1): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 54.453795][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 54.453812][ T30] audit: type=1400 audit(1758887008.984:326): avc: denied { execute } for pid=980 comm="syz.4.161" path="pipe:[14803]" dev="pipefs" ino=14803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 54.483519][ T971] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 54.570634][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 54.573342][ T30] audit: type=1400 audit(1758887009.014:327): avc: denied { read } for pid=980 comm="syz.4.161" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.663426][ T30] audit: type=1400 audit(1758887009.014:328): avc: denied { open } for pid=980 comm="syz.4.161" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 54.699978][ T60] usb 3-1: config 1 has an invalid interface number: 137 but max is 0 [ 54.740114][ T60] usb 3-1: config 1 has no interface number 0 [ 54.759912][ T60] usb 3-1: config 1 interface 137 has no altsetting 0 [ 54.810509][ T987] loop0: detected capacity change from 0 to 512 [ 54.834130][ T380] attempt to access beyond end of device [ 54.834130][ T380] loop4: rw=1, want=1041, limit=128 [ 54.851217][ T30] audit: type=1400 audit(1758887009.384:329): avc: denied { append } for pid=970 comm="syz.1.159" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 54.878055][ T993] loop3: detected capacity change from 0 to 512 [ 54.885498][ T971] loop1: detected capacity change from 0 to 256 [ 54.901439][ T993] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e00ce19c, mo2=0002] [ 54.909566][ T993] System zones: 0-2, 18-18, 34-34 [ 54.915549][ T993] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,max_batch_time=0x00000000000000b1,minixdf,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 54.933078][ T993] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.950848][ T60] usb 3-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 54.964240][ T971] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.981131][ T30] audit: type=1400 audit(1758887009.514:330): avc: denied { read write } for pid=992 comm="syz.3.164" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.007184][ T30] audit: type=1400 audit(1758887009.514:331): avc: denied { open } for pid=992 comm="syz.3.164" path="/21/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.018961][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.030017][ T971] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 55.052434][ T60] usb 3-1: Product: syz [ 55.053497][ T971] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 55.056706][ T60] usb 3-1: Manufacturer: syz [ 55.082884][ T60] usb 3-1: SerialNumber: syz [ 55.100535][ T998] loop4: detected capacity change from 0 to 512 [ 55.184914][ T998] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 55.332587][ T998] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.465045][ T30] audit: type=1400 audit(1758887009.994:332): avc: denied { write } for pid=1017 comm="syz.3.169" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.553383][ T30] audit: type=1400 audit(1758887010.024:333): avc: denied { map } for pid=1017 comm="syz.3.169" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.577355][ T30] audit: type=1400 audit(1758887010.024:334): avc: denied { call } for pid=1017 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 55.596561][ T30] audit: type=1400 audit(1758887010.084:335): avc: denied { name_bind } for pid=955 comm="syz.2.156" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 55.666677][ T1026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1026 comm=syz.4.171 [ 55.679503][ T1026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1026 comm=syz.4.171 [ 55.692134][ T6] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 56.017565][ T1039] loop4: detected capacity change from 0 to 256 [ 56.032148][ T1025] loop1: detected capacity change from 0 to 131072 [ 56.089944][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.132543][ T6] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 56.240017][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 56.249356][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.271286][ T6] usb 1-1: SerialNumber: syz [ 56.480218][ T1051] syz.4.177[1051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.480306][ T1051] syz.4.177[1051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.812361][ T1063] loop0: detected capacity change from 0 to 512 [ 58.831498][ T60] pl2303 3-1:1.137: required endpoints missing [ 58.856516][ T6] usb 1-1: can't set config #1, error -71 [ 58.884471][ T60] usb 3-1: USB disconnect, device number 3 [ 58.905309][ T6] usb 1-1: USB disconnect, device number 3 [ 58.929665][ T1069] loop1: detected capacity change from 0 to 512 [ 58.997899][ T1069] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 59.010292][ T1069] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.047496][ T1083] loop0: detected capacity change from 0 to 1024 [ 59.070891][ T1083] EXT4-fs (loop0): Ignoring removed oldalloc option [ 59.077756][ T1083] EXT4-fs (loop0): Ignoring removed orlov option [ 59.187452][ T1087] syz.1.186[1087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.187532][ T1087] syz.1.186[1087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.199120][ T398] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.225481][ T1083] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000000,nogrpid,oldalloc,noquota,mb_optimize_scan=0x0000000000000001,auto_da_alloc,delalloc,errors=continue,orlov,journal_dev=0x0000000000000800,dioread_lock,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none. [ 59.263847][ T1083] x_tables: duplicate underflow at hook 1 [ 59.289963][ T348] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 60.747494][ T398] usb 5-1: Using ep0 maxpacket: 32 [ 60.764444][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 60.764461][ T30] audit: type=1400 audit(1758887015.104:375): avc: denied { bind } for pid=1099 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.798679][ T30] audit: type=1400 audit(1758887015.104:376): avc: denied { name_bind } for pid=1099 comm="syz.1.190" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 60.827550][ T30] audit: type=1400 audit(1758887015.104:377): avc: denied { node_bind } for pid=1099 comm="syz.1.190" saddr=2001::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 60.887259][ T1109] loop2: detected capacity change from 0 to 4096 [ 60.921656][ T1123] loop0: detected capacity change from 0 to 512 [ 60.929841][ T398] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.960018][ T348] usb 4-1: device descriptor read/all, error -71 [ 60.961847][ T1109] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback. [ 60.994870][ T1130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 61.008662][ T30] audit: type=1400 audit(1758887015.544:378): avc: denied { accept } for pid=1124 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.019848][ T1130] netlink: 64 bytes leftover after parsing attributes in process `syz.3.198'. [ 61.054402][ T1123] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 61.076568][ T1123] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.092012][ T1136] loop1: detected capacity change from 0 to 16 [ 61.109989][ T398] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 61.129751][ T398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.140276][ T1136] erofs: (device loop1): mounted with root inode @ nid 36. [ 61.155462][ T30] audit: type=1400 audit(1758887015.684:379): avc: denied { append } for pid=1124 comm="syz.1.197" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.171448][ T398] usb 5-1: Product: syz [ 61.179297][ T30] audit: type=1400 audit(1758887015.684:380): avc: denied { map } for pid=1124 comm="syz.1.197" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.194299][ T398] usb 5-1: Manufacturer: syz [ 61.231785][ T398] usb 5-1: SerialNumber: syz [ 61.244644][ T398] usb 5-1: config 0 descriptor?? [ 61.290528][ T398] usb 5-1: bad CDC descriptors [ 61.296197][ T398] usb 5-1: unsupported MDLM descriptors [ 61.304424][ T30] audit: type=1400 audit(1758887015.684:381): avc: denied { execute } for pid=1124 comm="syz.1.197" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.413755][ T1152] loop0: detected capacity change from 0 to 4096 [ 61.435250][ T1152] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 61.508465][ T1067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.182'. [ 61.518824][ T398] usb 5-1: USB disconnect, device number 4 [ 61.921435][ T30] audit: type=1400 audit(1758887016.454:382): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.995336][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.002648][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.094764][ T30] audit: type=1326 audit(1758887016.624:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1162 comm="syz.4.206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbd5f1fec9 code=0x0 [ 62.176476][ T1161] device bridge1 left promiscuous mode [ 62.192412][ T30] audit: type=1326 audit(1758887016.644:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1162 comm="syz.4.206" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbd5f1fec9 code=0x0 [ 62.327668][ T1157] loop3: detected capacity change from 0 to 40427 [ 62.391607][ T1157] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 62.404913][ T1157] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 62.413279][ T1157] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 63.017679][ T1177] loop1: detected capacity change from 0 to 512 [ 63.199654][ T1177] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.211372][ T1177] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.308938][ T1205] loop4: detected capacity change from 0 to 256 [ 63.642925][ T1215] tipc: Started in network mode [ 63.647989][ T1215] tipc: Node identity 0600000000000000ff01, cluster identity 4711 [ 63.716100][ T1223] loop3: detected capacity change from 0 to 512 [ 63.747945][ T1225] loop4: detected capacity change from 0 to 512 [ 63.765460][ T1223] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 63.777517][ T1223] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.800992][ T1225] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 63.819425][ T1225] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.865894][ T1217] loop1: detected capacity change from 0 to 40427 [ 63.898970][ T1217] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.909790][ T348] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 63.963762][ T1217] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 64.316019][ T1246] loop2: detected capacity change from 0 to 128 [ 64.397164][ T281] attempt to access beyond end of device [ 64.397164][ T281] loop1: rw=2049, want=45104, limit=40427 [ 64.429911][ T348] usb 1-1: Using ep0 maxpacket: 8 [ 64.549957][ T348] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 64.559141][ T348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.570311][ T348] usb 1-1: config 0 descriptor?? [ 64.620377][ T332] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 64.909922][ T348] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 65.004946][ T1259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 65.149927][ T1077] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 65.213597][ T332] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 65.223394][ T332] usb 5-1: can't read configurations, error -61 [ 65.549833][ T1077] usb 2-1: Using ep0 maxpacket: 8 [ 65.709951][ T1077] usb 2-1: config 93 has an invalid interface number: 31 but max is 0 [ 65.719681][ T1077] usb 2-1: config 93 has an invalid descriptor of length 223, skipping remainder of the config [ 65.731739][ T1077] usb 2-1: config 93 has no interface number 0 [ 65.830107][ T30] kauditd_printk_skb: 134 callbacks suppressed [ 65.830123][ T30] audit: type=1326 audit(1758887020.364:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bfcc9eacb code=0x7ffc0000 [ 65.860578][ T30] audit: type=1326 audit(1758887020.394:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bfcc9eacb code=0x7ffc0000 [ 65.884260][ T398] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 65.891876][ T30] audit: type=1326 audit(1758887020.414:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bfcc9eacb code=0x7ffc0000 [ 65.916056][ T30] audit: type=1326 audit(1758887020.444:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bfcc9eacb code=0x7ffc0000 [ 65.939765][ T30] audit: type=1326 audit(1758887020.464:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bfcc9eacb code=0x7ffc0000 [ 65.963568][ T30] audit: type=1326 audit(1758887020.494:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bfcc9eacb code=0x7ffc0000 [ 65.987230][ T30] audit: type=1326 audit(1758887020.514:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bfcc9eacb code=0x7ffc0000 [ 66.010931][ T1077] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 66.020195][ T30] audit: type=1326 audit(1758887020.544:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bfcc9eacb code=0x7ffc0000 [ 66.043886][ T1077] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.052248][ T1077] usb 2-1: Product: syz [ 66.056579][ T1077] usb 2-1: Manufacturer: syz [ 66.061300][ T1077] usb 2-1: SerialNumber: syz [ 66.090129][ T30] audit: type=1326 audit(1758887020.624:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bfcc9eacb code=0x7ffc0000 [ 66.102333][ T332] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 66.120934][ T30] audit: type=1326 audit(1758887020.624:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5bfcc9eacb code=0x7ffc0000 [ 66.200103][ T398] usb 3-1: Using ep0 maxpacket: 16 [ 66.439950][ T1077] usb 2-1: Found UVC 0.00 device syz (046d:08c3) [ 66.446644][ T1077] usb 2-1: No valid video chain found. [ 66.453349][ T1077] usb 2-1: USB disconnect, device number 3 [ 66.539891][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.550837][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.559819][ T332] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 66.560697][ T398] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.578044][ T332] usb 5-1: can't read configurations, error -61 [ 66.580994][ T398] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.596412][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.597606][ T332] usb usb5-port1: attempt power cycle [ 66.609988][ T398] usb 3-1: config 0 descriptor?? [ 66.679843][ T348] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 66.689973][ T348] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 66.700227][ T348] asix: probe of 1-1:0.0 failed with error -71 [ 66.707364][ T348] usb 1-1: USB disconnect, device number 4 [ 66.927222][ T1267] binfmt_misc: register: failed to install interpreter file ./file2 [ 67.080004][ T332] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 67.091273][ T398] microsoft 0003:045E:07DA.0003: unknown main item tag 0x2 [ 67.104693][ T398] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 67.119805][ T398] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 67.134920][ T398] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 67.151418][ T398] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 67.173406][ T398] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 67.197663][ T398] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 67.254550][ T398] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 67.271292][ T398] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 67.294666][ T398] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input6 [ 67.323216][ T398] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 67.379816][ T332] usb 5-1: device descriptor read/8, error -71 [ 67.567234][ T1293] loop4: detected capacity change from 0 to 128 [ 67.599841][ T332] usb 5-1: device descriptor read/8, error -71 [ 67.654593][ T1058] usb 3-1: USB disconnect, device number 4 [ 68.255905][ T1308] loop3: detected capacity change from 0 to 512 [ 68.273791][ T1315] loop4: detected capacity change from 0 to 512 [ 68.310863][ T1308] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 68.328087][ T1308] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.245: bad orphan inode 15 [ 68.338676][ T1308] ext4_test_bit(bit=14, block=18) = 1 [ 68.344584][ T1308] is_bad_inode(inode)=0 [ 68.348899][ T1308] NEXT_ORPHAN(inode)=1023 [ 68.354076][ T1308] max_ino=32 [ 68.355196][ T1315] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 68.357446][ T1308] i_nlink=0 [ 68.372593][ T1308] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.383557][ T1308] ext2 filesystem being mounted at /40/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 68.408015][ T1315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.246'. [ 68.417201][ T1315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 68.447731][ T1329] loop0: detected capacity change from 0 to 1024 [ 68.465698][ T1327] loop2: detected capacity change from 0 to 8192 [ 68.472568][ T1315] loop_set_status: loop4 () has still dirty pages (nrpages=1) [ 68.488860][ T1331] loop3: detected capacity change from 0 to 128 [ 68.490557][ T1329] EXT4-fs (loop0): Ignoring removed orlov option [ 68.507146][ T286] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 68.519598][ T1329] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 68.540025][ T286] EXT4-fs error (device loop4): ext4_lookup:1858: inode #14: comm syz-executor: unexpected EA_INODE flag [ 68.588954][ T286] EXT4-fs error (device loop4): ext4_lookup:1858: inode #14: comm syz-executor: unexpected EA_INODE flag [ 68.608276][ T1327] FAT-fs (loop2): error, clusters badly computed (775 != 1) [ 68.616018][ T1327] FAT-fs (loop2): Filesystem has been set read-only [ 68.630245][ T1327] FAT-fs (loop2): error, clusters badly computed (776 != 2) [ 68.643835][ T1327] FAT-fs (loop2): error, clusters badly computed (777 != 3) [ 68.724746][ T1327] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 68.775720][ T1340] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 68.792027][ T8] tipc: Left network mode [ 68.802434][ T1343] 9pnet: Insufficient options for proto=fd [ 68.856683][ T1345] loop1: detected capacity change from 0 to 512 [ 68.938307][ T1345] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,,errors=continue. Quota mode: none. [ 69.012870][ T1345] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 69.025474][ T898] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.139362][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.162112][ T1357] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.188979][ T1357] device bridge_slave_0 entered promiscuous mode [ 69.216073][ T1357] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.242727][ T1357] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.261397][ T1357] device bridge_slave_1 entered promiscuous mode [ 69.427130][ T1357] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.434268][ T1357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.441682][ T1357] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.448742][ T1357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.705572][ T8] device bridge_slave_1 left promiscuous mode [ 69.711900][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.719688][ T8] device bridge_slave_0 left promiscuous mode [ 69.726010][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.734654][ T8] device veth1_macvtap left promiscuous mode [ 69.742228][ T8] device veth0_vlan left promiscuous mode [ 70.082801][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.092205][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.099936][ T1395] loop3: detected capacity change from 0 to 512 [ 70.147129][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.156189][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.163848][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.172317][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.180724][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.187777][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.195319][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.204259][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.212629][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.219684][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.227449][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.229802][ T1395] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.267: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 70.244036][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.253465][ T1395] EXT4-fs error (device loop3): ext4_quota_enable:6411: comm syz.3.267: Bad quota inode: 3, type: 0 [ 70.261584][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.271979][ T1395] EXT4-fs warning (device loop3): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 70.280319][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.294802][ T1395] EXT4-fs (loop3): mount failed [ 70.302673][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.315593][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.328638][ T1357] device veth0_vlan entered promiscuous mode [ 70.336476][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.345064][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.364319][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.372343][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.380146][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.388592][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.409772][ T1357] device veth1_macvtap entered promiscuous mode [ 70.423787][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.432584][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.437185][ T1406] 9pnet: Insufficient options for proto=fd [ 70.442427][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.484827][ T1408] cgroup: release_agent respecified [ 70.491442][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.516368][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.774589][ T1411] loop0: detected capacity change from 0 to 512 [ 70.850907][ T1411] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 70.863665][ T1411] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.026306][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 71.026324][ T30] audit: type=1400 audit(1758887025.524:678): avc: denied { map } for pid=1419 comm="syz.0.274" path="/proc/165/fd" dev="proc" ino=20898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 71.054965][ T348] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.066472][ T1424] incfs_lookup_dentry err:-14 [ 71.071413][ T1424] incfs: Can't find or create .index dir in ./file0 [ 71.071415][ T1058] Bluetooth: hci0: command 0x1003 tx timeout [ 71.071487][ T1363] Bluetooth: hci0: sending frame failed (-49) [ 71.078115][ T1424] incfs: mount failed -14 [ 71.096377][ T1424] 9pnet: bogus RREAD count (3 > 1) [ 71.133061][ T1426] fuse: Unknown parameter '0x00000000000000040000000000000000000300000000000000000000' [ 71.438816][ T1435] overlayfs: missing 'lowerdir' [ 71.639783][ T348] usb 6-1: Using ep0 maxpacket: 32 [ 71.727707][ T1442] netlink: 52 bytes leftover after parsing attributes in process `syz.0.279'. [ 71.759810][ T348] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 71.768548][ T348] usb 6-1: config 0 has no interface number 0 [ 71.803379][ T1503] netlink: 112 bytes leftover after parsing attributes in process `syz.3.280'. [ 71.929818][ T348] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 71.939006][ T348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.959331][ T348] usb 6-1: Product: syz [ 71.963946][ T348] usb 6-1: Manufacturer: syz [ 71.968558][ T348] usb 6-1: SerialNumber: syz [ 71.984528][ T348] usb 6-1: config 0 descriptor?? [ 72.020688][ T348] ftdi_sio 6-1:0.217: FTDI USB Serial Device converter detected [ 72.040304][ T348] usb 6-1: Detected SIO [ 72.048860][ T348] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 72.223316][ T348] usb 6-1: USB disconnect, device number 2 [ 72.232716][ T348] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 72.243822][ T348] ftdi_sio 6-1:0.217: device disconnected [ 72.409760][ T332] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 72.550586][ T1525] incfs_lookup_dentry err:-14 [ 72.555483][ T1525] incfs: Can't find or create .index dir in ./file0 [ 72.562211][ T1525] incfs: mount failed -14 [ 72.862805][ T1534] loop0: detected capacity change from 0 to 512 [ 72.889928][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.925877][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.937481][ T332] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.948459][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.957811][ T1534] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.969842][ T1534] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.985893][ T332] usb 3-1: config 0 descriptor?? [ 73.011414][ T1495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.025363][ T1534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 73.111424][ T1539] netlink: 324 bytes leftover after parsing attributes in process `syz.3.291'. [ 73.165920][ T1540] overlayfs: './file0' not a directory [ 73.168466][ T285] Bluetooth: hci0: command 0x1001 tx timeout [ 73.177566][ T30] audit: type=1326 audit(1758887027.694:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e759e2ec9 code=0x7ffc0000 [ 73.201461][ T1363] Bluetooth: hci0: sending frame failed (-49) [ 73.207762][ T30] audit: type=1326 audit(1758887027.694:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5e759e2ec9 code=0x7ffc0000 [ 73.231411][ T30] audit: type=1326 audit(1758887027.694:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e759e2ec9 code=0x7ffc0000 [ 73.269878][ T1058] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.331495][ T30] audit: type=1326 audit(1758887027.694:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f5e759e2ec9 code=0x7ffc0000 [ 73.527617][ T30] audit: type=1326 audit(1758887027.694:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e759e2ec9 code=0x7ffc0000 [ 73.551846][ T30] audit: type=1326 audit(1758887027.694:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5e759e1617 code=0x7ffc0000 [ 73.575197][ T30] audit: type=1326 audit(1758887027.694:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e759e2ec9 code=0x7ffc0000 [ 73.598665][ T30] audit: type=1326 audit(1758887027.694:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5e759e2ec9 code=0x7ffc0000 [ 73.622379][ T30] audit: type=1326 audit(1758887027.734:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e759e2ec9 code=0x7ffc0000 [ 73.679882][ T332] usb 3-1: language id specifier not provided by device, defaulting to English [ 73.829906][ T1058] usb 6-1: New USB device found, idVendor=1c9e, idProduct=9801, bcdDevice=25.d8 [ 73.839176][ T1058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.847270][ T1058] usb 6-1: Product: syz [ 73.851521][ T1058] usb 6-1: Manufacturer: syz [ 73.856200][ T1058] usb 6-1: SerialNumber: syz [ 73.861773][ T1058] usb 6-1: config 0 descriptor?? [ 73.880318][ T1511] UDC core: couldn't find an available UDC or it's busy: -16 [ 73.887893][ T1511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 73.900367][ T1058] rndis_host 6-1:0.0: skipping garbage [ 73.905913][ T1058] usb 6-1: bad CDC descriptors [ 73.919955][ T398] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 74.159832][ T398] usb 4-1: Using ep0 maxpacket: 16 [ 74.279863][ T398] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 74.288687][ T398] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.298864][ T398] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 74.308017][ T398] usb 4-1: config 1 has no interface number 1 [ 74.314218][ T348] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 74.321777][ T398] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 74.334689][ T398] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 10 [ 74.345817][ T398] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 25715, setting to 1024 [ 74.349877][ T332] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 74.366020][ T332] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 74.374371][ T332] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 74.382515][ T332] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 74.390030][ T332] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 74.400725][ T332] usb 3-1: USB disconnect, device number 5 [ 74.519996][ T398] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.529111][ T398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.537182][ T398] usb 4-1: Product: syz [ 74.541415][ T398] usb 4-1: Manufacturer: syz [ 74.546003][ T398] usb 4-1: SerialNumber: syz [ 74.609544][ T1077] usb 6-1: USB disconnect, device number 3 [ 74.635934][ T1556] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.643175][ T1556] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.699912][ T348] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.710986][ T348] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 74.722206][ T348] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 74.806165][ T1560] xt_bpf: check failed: parse error [ 74.813768][ T1560] loop5: detected capacity change from 0 to 512 [ 74.868720][ T1562] loop2: detected capacity change from 0 to 512 [ 74.881734][ T398] usb 4-1: USB disconnect, device number 12 [ 74.890043][ T348] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.902164][ T1560] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 74.912016][ T1560] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 74.912446][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.921828][ T1560] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 74.931582][ T348] usb 1-1: Product: syz [ 74.944159][ T348] usb 1-1: Manufacturer: syz [ 74.944450][ T1560] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 74.948998][ T348] usb 1-1: SerialNumber: syz [ 74.956743][ T1560] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e041e01c, mo2=0100] [ 74.969347][ T1560] EXT4-fs (loop5): failed to initialize system zone (-117) [ 74.976866][ T1560] EXT4-fs (loop5): mount failed [ 74.992813][ T1562] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 75.005635][ T1562] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.110254][ T389] udevd[389]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.250907][ T1576] loop5: detected capacity change from 0 to 256 [ 75.257540][ T332] Bluetooth: hci0: command 0x1009 tx timeout [ 76.399837][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 76.399853][ T30] audit: type=1400 audit(1758887030.924:689): avc: denied { nlmsg_read } for pid=1580 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.429787][ T1583] loop2: detected capacity change from 0 to 128 [ 76.436617][ T1581] incfs: Options parsing error. -22 [ 76.442037][ T1581] incfs: mount failed -22 [ 76.450809][ T1583] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 76.497934][ T1583] SELinux: duplicate or incompatible mount options [ 76.511977][ T1585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.303'. [ 76.526162][ T30] audit: type=1400 audit(1758887031.064:690): avc: denied { create } for pid=1584 comm="syz.3.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 76.632199][ T30] audit: type=1400 audit(1758887031.164:691): avc: denied { connect } for pid=1579 comm="syz.2.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.794240][ T30] audit: type=1400 audit(1758887031.324:692): avc: denied { ioctl } for pid=1590 comm="syz.5.305" path="socket:[20304]" dev="sockfs" ino=20304 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.011780][ T1554] loop0: detected capacity change from 0 to 128 [ 77.040763][ T1554] FAT-fs (loop0): Unrecognized mount option "0x0000000000000005" or missing value [ 77.082487][ T30] audit: type=1400 audit(1758887031.614:693): avc: denied { unmount } for pid=1553 comm="syz.0.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.089836][ T348] cdc_ncm 1-1:1.0: bind() failure [ 77.145233][ T348] usb 1-1: USB disconnect, device number 5 [ 77.310686][ T30] audit: type=1400 audit(1758887031.844:694): avc: denied { write } for pid=1599 comm="syz.2.307" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.336760][ T1600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 77.367759][ T1602] loop2: detected capacity change from 0 to 1024 [ 77.378023][ T1602] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.401339][ T1602] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,minixdf,journal_dev=0x0000000000000fff,dioread_nolock,user_xattr,,errors=continue. Quota mode: none. [ 77.418928][ T1602] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.490350][ T1602] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 77.490366][ T30] audit: type=1400 audit(1758887032.024:695): avc: denied { ioctl } for pid=1601 comm="syz.2.308" path="/66/file1/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.525253][ T1602] tipc: Started in network mode [ 77.530229][ T1602] tipc: Node identity , cluster identity 4711 [ 77.536305][ T1602] tipc: Failed to obtain node identity [ 77.542079][ T1602] tipc: Enabling of bearer rejected, failed to enable media [ 77.721177][ T1618] netlink: 64 bytes leftover after parsing attributes in process `syz.0.313'. [ 77.839773][ T332] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 77.914547][ T1607] loop5: detected capacity change from 0 to 131072 [ 77.959799][ T1058] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 77.967382][ T1607] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 77.975790][ T1607] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 77.985032][ T1607] F2FS-fs (loop5): invalid crc value [ 77.992254][ T1607] F2FS-fs (loop5): Found nat_bits in checkpoint [ 78.022718][ T1607] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 78.029867][ T1607] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 78.048748][ T1607] device bridge1 entered promiscuous mode [ 78.089770][ T332] usb 4-1: Using ep0 maxpacket: 16 [ 78.209802][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.222320][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.235091][ T1624] 9pnet: Insufficient options for proto=fd [ 78.241072][ T332] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 78.253221][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.270280][ T332] usb 4-1: config 0 descriptor?? [ 78.348069][ T1058] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 78.359372][ T1058] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 78.373206][ T1058] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.379864][ T1058] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 78.389060][ T1058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.398320][ T1058] usb 3-1: config 0 descriptor?? [ 78.650320][ T332] usbhid 4-1:0.0: can't add hid device: -71 [ 78.680406][ T332] usbhid: probe of 4-1:0.0 failed with error -71 [ 78.721194][ T332] usb 4-1: USB disconnect, device number 13 [ 78.742981][ T1637] device macsec1 entered promiscuous mode [ 78.748873][ T1637] bridge0: port 3(macsec1) entered blocking state [ 78.756124][ T1637] bridge0: port 3(macsec1) entered disabled state [ 78.900859][ T1058] apple 0003:05AC:0245.0005: item fetching failed at offset 3/5 [ 78.908901][ T1058] apple 0003:05AC:0245.0005: parse failed [ 78.914757][ T1058] apple: probe of 0003:05AC:0245.0005 failed with error -22 [ 79.033352][ T1645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 79.210067][ T348] usb 3-1: USB disconnect, device number 6 [ 79.252527][ T30] audit: type=1326 audit(1758887033.784:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1648 comm="syz.5.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfcd98ec9 code=0x7ffc0000 [ 79.277721][ T30] audit: type=1326 audit(1758887033.804:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1648 comm="syz.5.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cfcd98ec9 code=0x7ffc0000 [ 79.301513][ T30] audit: type=1326 audit(1758887033.804:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1648 comm="syz.5.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cfcd98ec9 code=0x7ffc0000 [ 79.510141][ T1669] 9pnet: Insufficient options for proto=fd [ 79.607465][ T1674] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 79.829819][ T332] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 80.230026][ T1058] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 80.260433][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.273985][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.287905][ T332] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 80.299564][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.317964][ T332] usb 2-1: config 0 descriptor?? [ 80.619817][ T1058] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.624555][ T1736] loop5: detected capacity change from 0 to 1024 [ 80.636375][ T1058] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 80.691324][ T1736] EXT4-fs (loop5): Test dummy encryption mode enabled [ 80.700540][ T1736] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 80.863712][ T1058] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.873596][ T1058] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.881832][ T1058] usb 4-1: Product: syz [ 80.886102][ T1058] usb 4-1: Manufacturer: syz [ 80.890826][ T1058] usb 4-1: SerialNumber: syz [ 81.050377][ T1690] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.163388][ T1747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 81.173516][ T1747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 81.579797][ T398] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 81.591040][ T1759] loop5: detected capacity change from 0 to 2048 [ 81.632123][ T1759] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.643143][ T1759] ext4 filesystem being mounted at /19/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.877252][ T398] usb 3-1: Using ep0 maxpacket: 8 [ 82.294180][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 82.294194][ T30] audit: type=1400 audit(1758887036.824:725): avc: denied { read } for pid=1758 comm="syz.5.352" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 82.399887][ T398] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 82.410088][ T398] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 82.529862][ T1058] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 82.536434][ T1058] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 82.570287][ T30] audit: type=1400 audit(1758887037.104:726): avc: denied { mounton } for pid=1769 comm="syz.5.354" path="/syzcgroup/cpu/syz5/cpuset.cpus" dev="cgroup" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 82.571111][ T1771] tmpfs: Unknown parameter 'wecl`ed' [ 82.606852][ T398] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.616186][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.624425][ T398] usb 3-1: Product: Ќ [ 82.628520][ T398] usb 3-1: Manufacturer: 嵹䤚矁ᐫ⊁몖痴鎻렎雦ꈫ鲦㥾捈㱃짵㣳幾降婿誵宨獋촲듫녥ｆꙸᙏ⦇縻᳤ꚭꋷ蟙쥧咧⿶灠륍㚩ꎓ嘂ꥇ欆磄쩸㔡靖見ᩡ볯阻㔐鳤誤뮈䫲앓⴫䣵쯣盃켍䌡鶌労츷섊鑦ቐ걽寄靟㚊訮ꁟ迂⌲僃 [ 82.662636][ T398] usb 3-1: SerialNumber: ᣵ먭諩ᇁ簧漟Ŷ愑沀곱餤⺎꼷섾쮷嗘꺞⥗팹贎동軺㛡邱倊찒귝㓜ﾔ폁嘌᠐뵴㜻譗礀⻗鏱媊⻺膕溧㞅鴾纡ൔ⬦䬷솠圙폋䎝䧐퐆뷻ㆷ늦纒唧椐◸뚲棨復ো괯㒈踪࿧޸釅倆챑왑渀介谼钮⡊麯堜넊坸쟘♚荨♥ﮄ䔫홪꟫鮸傞኷몚鯪 [ 82.748322][ T30] audit: type=1400 audit(1758887037.274:727): avc: denied { getopt } for pid=1787 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.771446][ T1058] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 82.799788][ T332] usbhid 2-1:0.0: can't add hid device: -71 [ 82.801233][ T30] audit: type=1400 audit(1758887037.324:728): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 82.805802][ T332] usbhid: probe of 2-1:0.0 failed with error -71 [ 82.838690][ T1058] usb 4-1: USB disconnect, device number 14 [ 82.853315][ T1058] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 82.866036][ T332] usb 2-1: USB disconnect, device number 4 [ 82.893990][ T30] audit: type=1400 audit(1758887037.334:729): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.932000][ T30] audit: type=1400 audit(1758887037.334:730): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=4169 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.963246][ T285] ================================================================== [ 82.971369][ T285] BUG: KASAN: use-after-free in worker_thread+0xa2e/0x1200 [ 82.977369][ T30] audit: type=1400 audit(1758887037.334:731): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4169 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.978687][ T285] Read of size 8 at addr ffff88811ef0cc60 by task kworker/1:2/285 [ 82.978707][ T285] [ 82.978723][ T285] CPU: 1 PID: 285 Comm: kworker/1:2 Not tainted syzkaller #0 [ 83.002204][ T30] audit: type=1400 audit(1758887037.334:732): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4169 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.009249][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.009263][ T285] Workqueue: 0x0 (rcu_gp) [ 83.011904][ T30] audit: type=1400 audit(1758887037.374:733): avc: denied { create } for pid=1789 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.018999][ T285] [ 83.019023][ T285] Call Trace: [ 83.019030][ T285] [ 83.019036][ T285] __dump_stack+0x21/0x30 [ 83.042682][ T30] audit: type=1400 audit(1758887037.374:734): avc: denied { write } for pid=1789 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.052215][ T285] dump_stack_lvl+0xee/0x150 [ 83.052245][ T285] ? show_regs_print_info+0x20/0x20 [ 83.117497][ T285] ? load_image+0x3a0/0x3a0 [ 83.122003][ T285] ? __schedule+0xb76/0x14c0 [ 83.126590][ T285] print_address_description+0x7f/0x2c0 [ 83.132146][ T285] ? worker_thread+0xa2e/0x1200 [ 83.137031][ T285] kasan_report+0xf1/0x140 [ 83.141437][ T285] ? worker_thread+0xa2e/0x1200 [ 83.146386][ T285] __asan_report_load8_noabort+0x14/0x20 [ 83.152011][ T285] worker_thread+0xa2e/0x1200 [ 83.156687][ T285] kthread+0x411/0x500 [ 83.160768][ T285] ? worker_clr_flags+0x190/0x190 [ 83.165792][ T285] ? kthread_blkcg+0xd0/0xd0 [ 83.170379][ T285] ret_from_fork+0x1f/0x30 [ 83.174797][ T285] [ 83.177833][ T285] [ 83.180157][ T285] Allocated by task 1058: [ 83.184471][ T285] __kasan_kmalloc+0xda/0x110 [ 83.189139][ T285] __kmalloc+0x13d/0x2c0 [ 83.193375][ T285] kvmalloc_node+0x206/0x300 [ 83.197963][ T285] alloc_netdev_mqs+0x8d/0xc90 [ 83.202721][ T285] alloc_etherdev_mqs+0x34/0x40 [ 83.207564][ T285] usbnet_probe+0x219/0x2860 [ 83.212142][ T285] usb_probe_interface+0x5ff/0xae0 [ 83.217239][ T285] really_probe+0x285/0x970 [ 83.221734][ T285] __driver_probe_device+0x198/0x280 [ 83.227011][ T285] driver_probe_device+0x54/0x3e0 [ 83.232023][ T285] __device_attach_driver+0x2a6/0x460 [ 83.237382][ T285] bus_for_each_drv+0x175/0x200 [ 83.242223][ T285] __device_attach+0x2a2/0x400 [ 83.246974][ T285] device_initial_probe+0x1a/0x20 [ 83.251986][ T285] bus_probe_device+0xc0/0x1e0 [ 83.256741][ T285] device_add+0xb31/0xed0 [ 83.261078][ T285] usb_set_configuration+0x19c2/0x1f10 [ 83.266528][ T285] usb_generic_driver_probe+0x91/0x150 [ 83.271977][ T285] usb_probe_device+0x148/0x260 [ 83.276816][ T285] really_probe+0x285/0x970 [ 83.281308][ T285] __driver_probe_device+0x198/0x280 [ 83.286599][ T285] driver_probe_device+0x54/0x3e0 [ 83.291719][ T285] __device_attach_driver+0x2a6/0x460 [ 83.297114][ T285] bus_for_each_drv+0x175/0x200 [ 83.301961][ T285] __device_attach+0x2a2/0x400 [ 83.306718][ T285] device_initial_probe+0x1a/0x20 [ 83.311737][ T285] bus_probe_device+0xc0/0x1e0 [ 83.316495][ T285] device_add+0xb31/0xed0 [ 83.320816][ T285] usb_new_device+0xd06/0x1620 [ 83.325590][ T285] hub_event+0x29c4/0x4480 [ 83.330006][ T285] process_one_work+0x6be/0xba0 [ 83.334866][ T285] worker_thread+0xa59/0x1200 [ 83.339537][ T285] kthread+0x411/0x500 [ 83.343601][ T285] ret_from_fork+0x1f/0x30 [ 83.348027][ T285] [ 83.350341][ T285] Freed by task 1058: [ 83.354308][ T285] kasan_set_track+0x4a/0x70 [ 83.358885][ T285] kasan_set_free_info+0x23/0x40 [ 83.363812][ T285] ____kasan_slab_free+0x125/0x160 [ 83.368912][ T285] __kasan_slab_free+0x11/0x20 [ 83.373692][ T285] slab_free_freelist_hook+0xc2/0x190 [ 83.379074][ T285] kfree+0xc4/0x270 [ 83.382888][ T285] kvfree+0x35/0x40 [ 83.386694][ T285] netdev_freemem+0x3f/0x60 [ 83.391220][ T285] netdev_release+0x7f/0xb0 [ 83.395735][ T285] device_release+0x96/0x1c0 [ 83.400328][ T285] kobject_put+0x18a/0x270 [ 83.404741][ T285] put_device+0x1f/0x30 [ 83.408888][ T285] free_netdev+0x34b/0x450 [ 83.413295][ T285] usbnet_disconnect+0x24b/0x3a0 [ 83.418258][ T285] usb_unbind_interface+0x212/0x8c0 [ 83.423713][ T285] device_release_driver_internal+0x4c1/0x760 [ 83.429795][ T285] device_release_driver+0x19/0x20 [ 83.434916][ T285] bus_remove_device+0x2dd/0x340 [ 83.439848][ T285] device_del+0x696/0xe90 [ 83.444173][ T285] usb_disable_device+0x3a8/0x750 [ 83.449188][ T285] usb_disconnect+0x31e/0x850 [ 83.453856][ T285] hub_event+0x1a96/0x4480 [ 83.458265][ T285] process_one_work+0x6be/0xba0 [ 83.463110][ T285] worker_thread+0xd7b/0x1200 [ 83.467781][ T285] kthread+0x411/0x500 [ 83.471838][ T285] ret_from_fork+0x1f/0x30 [ 83.476250][ T285] [ 83.478564][ T285] Last potentially related work creation: [ 83.484280][ T285] kasan_save_stack+0x3a/0x60 [ 83.488967][ T285] __kasan_record_aux_stack+0xd2/0x100 [ 83.494511][ T285] kasan_record_aux_stack_noalloc+0xb/0x10 [ 83.500327][ T285] insert_work+0x51/0x310 [ 83.504651][ T285] __queue_work+0x8e5/0xc60 [ 83.509144][ T285] queue_work_on+0xd2/0x140 [ 83.513639][ T285] usbnet_link_change+0x189/0x1b0 [ 83.518655][ T285] usbnet_probe+0x1dfd/0x2860 [ 83.523322][ T285] usb_probe_interface+0x5ff/0xae0 [ 83.528422][ T285] really_probe+0x285/0x970 [ 83.532924][ T285] __driver_probe_device+0x198/0x280 [ 83.538217][ T285] driver_probe_device+0x54/0x3e0 [ 83.543252][ T285] __device_attach_driver+0x2a6/0x460 [ 83.548625][ T285] bus_for_each_drv+0x175/0x200 [ 83.553476][ T285] __device_attach+0x2a2/0x400 [ 83.558239][ T285] device_initial_probe+0x1a/0x20 [ 83.563261][ T285] bus_probe_device+0xc0/0x1e0 [ 83.568022][ T285] device_add+0xb31/0xed0 [ 83.572359][ T285] usb_set_configuration+0x19c2/0x1f10 [ 83.577808][ T285] usb_generic_driver_probe+0x91/0x150 [ 83.583256][ T285] usb_probe_device+0x148/0x260 [ 83.588109][ T285] really_probe+0x285/0x970 [ 83.592598][ T285] __driver_probe_device+0x198/0x280 [ 83.597873][ T285] driver_probe_device+0x54/0x3e0 [ 83.602887][ T285] __device_attach_driver+0x2a6/0x460 [ 83.608248][ T285] bus_for_each_drv+0x175/0x200 [ 83.613112][ T285] __device_attach+0x2a2/0x400 [ 83.617878][ T285] device_initial_probe+0x1a/0x20 [ 83.622893][ T285] bus_probe_device+0xc0/0x1e0 [ 83.627650][ T285] device_add+0xb31/0xed0 [ 83.631970][ T285] usb_new_device+0xd06/0x1620 [ 83.636727][ T285] hub_event+0x29c4/0x4480 [ 83.641136][ T285] process_one_work+0x6be/0xba0 [ 83.645987][ T285] worker_thread+0xa59/0x1200 [ 83.650651][ T285] kthread+0x411/0x500 [ 83.654710][ T285] ret_from_fork+0x1f/0x30 [ 83.659116][ T285] [ 83.661429][ T285] The buggy address belongs to the object at ffff88811ef0c000 [ 83.661429][ T285] which belongs to the cache kmalloc-4k of size 4096 [ 83.675476][ T285] The buggy address is located 3168 bytes inside of [ 83.675476][ T285] 4096-byte region [ffff88811ef0c000, ffff88811ef0d000) [ 83.688926][ T285] The buggy address belongs to the page: [ 83.694568][ T285] page:ffffea00047bc200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ef08 [ 83.704823][ T285] head:ffffea00047bc200 order:3 compound_mapcount:0 compound_pincount:0 [ 83.713220][ T285] flags: 0x4000000000010200(slab|head|zone=1) [ 83.719319][ T285] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 83.727893][ T285] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 83.736462][ T285] page dumped because: kasan: bad access detected [ 83.742862][ T285] page_owner tracks the page as allocated [ 83.748580][ T285] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 765, ts 48721502309, free_ts 48684144744 [ 83.768973][ T285] post_alloc_hook+0x192/0x1b0 [ 83.773741][ T285] prep_new_page+0x1c/0x110 [ 83.778234][ T285] get_page_from_freelist+0x2cc5/0x2d50 [ 83.783776][ T285] __alloc_pages+0x18f/0x440 [ 83.788355][ T285] new_slab+0xa1/0x4d0 [ 83.792422][ T285] ___slab_alloc+0x381/0x810 [ 83.797006][ T285] __slab_alloc+0x49/0x90 [ 83.801442][ T285] __kmalloc_track_caller+0x169/0x2c0 [ 83.806808][ T285] kmemdup+0x26/0x60 [ 83.810693][ T285] nf_conntrack_pernet_init+0xb7/0xbb0 [ 83.816142][ T285] ops_init+0x1ba/0x4a0 [ 83.820288][ T285] setup_net+0x344/0xa90 [ 83.824520][ T285] copy_net_ns+0x355/0x5c0 [ 83.829013][ T285] create_new_namespaces+0x3a2/0x660 [ 83.834286][ T285] copy_namespaces+0x1d1/0x220 [ 83.839042][ T285] copy_process+0x118d/0x3210 [ 83.843722][ T285] page last free stack trace: [ 83.848380][ T285] free_unref_page_prepare+0x542/0x550 [ 83.853830][ T285] free_unref_page+0xa2/0x550 [ 83.858495][ T285] __free_pages+0x6c/0x100 [ 83.862913][ T285] __free_slab+0xe8/0x1e0 [ 83.867411][ T285] __unfreeze_partials+0x160/0x190 [ 83.872524][ T285] put_cpu_partial+0xc6/0x120 [ 83.877191][ T285] __slab_free+0x1d4/0x290 [ 83.881598][ T285] ___cache_free+0x104/0x120 [ 83.886178][ T285] qlink_free+0x4d/0x90 [ 83.890345][ T285] qlist_free_all+0x5f/0xb0 [ 83.894837][ T285] kasan_quarantine_reduce+0x14a/0x170 [ 83.900290][ T285] __kasan_slab_alloc+0x2f/0xf0 [ 83.905160][ T285] slab_post_alloc_hook+0x4f/0x2b0 [ 83.910261][ T285] kmem_cache_alloc+0xf7/0x260 [ 83.915022][ T285] __alloc_skb+0xe0/0x740 [ 83.919341][ T285] inet6_netconf_notify_devconf+0xd6/0x190 [ 83.925142][ T285] [ 83.927463][ T285] Memory state around the buggy address: [ 83.933081][ T285] ffff88811ef0cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.941132][ T285] ffff88811ef0cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.949184][ T285] >ffff88811ef0cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.957230][ T285] ^ [ 83.964423][ T285] ffff88811ef0cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.972472][ T285] ffff88811ef0cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.980536][ T285] ================================================================== [ 83.988582][ T285] Disabling lock debugging due to kernel taint [ 84.083498][ T1802] loop1: detected capacity change from 0 to 512 [ 84.194843][ T1802] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #3: comm syz.1.362: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 84.215498][ T1802] EXT4-fs error (device loop1): ext4_quota_enable:6411: comm syz.1.362: Bad quota inode: 3, type: 0 [ 84.227571][ T1802] EXT4-fs warning (device loop1): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 84.242913][ T1802] EXT4-fs (loop1): mount failed [ 84.280284][ T398] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 84.287214][ T398] cdc_ncm 3-1:1.0: bind() failure [ 84.306871][ T398] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 84.315638][ T398] cdc_ncm 3-1:1.1: bind() failure [ 84.322648][ T398] usb 3-1: USB disconnect, device number 7