last executing test programs: 5.150310724s ago: executing program 0 (id=1): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x5598, &(0x7f00000013c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={r4, @private=0xa010101, @multicast2}, 0xc) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) fallocate(r5, 0x0, 0x800, 0x8000c62) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newsa={0x14c, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x200}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x64010100, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0x400800, 0x0, 0x400}, {}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x5a, 0x2, {{'cbc(aes)\x00'}, 0x90, "e0fad3f10cd3a506627800000100074fa117"}}]}, 0x14c}}, 0x4050) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140), 0x0, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x86c7e, 0x100000002, 0x81, 0x7}) 4.980794616s ago: executing program 2 (id=3): unshare(0x22020600) fchmod(0xffffffffffffffff, 0xcc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040810) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c01020301090212000100000000090400", @ANYRES16], 0x0) unshare(0x22020600) (async) fchmod(0xffffffffffffffff, 0xcc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x6, 0x80, 0x80}]}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005200010001cb485c67dbdf250a008a4108000140", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x20040810) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c01020301090212000100000000090400", @ANYRES16], 0x0) (async) 4.677106909s ago: executing program 4 (id=7): r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000000), 0x0) 4.632259909s ago: executing program 4 (id=8): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x1c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x400}}}}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2d, 0x2, 0x3, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, @loopback, 0x7800, 0x7800, 0xe51, 0x3}}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000001c0)={0x3, 0x5, 0x4, 0x5, 0x7}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000630000ff000000009500680000000000", @ANYRESDEC=0x0, @ANYRES16, @ANYRES64], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffebe}, 0x21) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000005000200000000008505000000000000a7000000000000000500feff0000000095000000000000003994113f88acf2d44f920e6be2acde136d2b929c9f1d48a8a20be4941ee384eaca2c45bb74a5af834e9992ed6c3553f72723788ddf83378ac8ce649cf3f5d84fd5043f426aceecd7cd692c314c86cad8e2691636d8246f46b558337d188dac07ffda807f347f563e1a19bdcc746f985ab835ceefcdf076613ff3d813b566bcaeeb539b085c674bb9df7bed7da91acb6e4d42af5e1c6e93cdc2a6f5143641a528a88c69345b586618809e79c839d619c2e6f5c52737f0e6742a63f84029"], &(0x7f00000003c0)='GPL\x00', 0x5, 0xff9, &(0x7f0000000a80)=""/4089}, 0x25) r6 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r7 = socket$tipc(0x1e, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000240)={'security\x00', 0x0, [0x7, 0x8000, 0x8, 0x0, 0xfffff201]}, &(0x7f00000002c0)=0x54) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r8, 0x5422, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r10, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r10, 0x0, 0x40000004, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r11, &(0x7f0000001480)=""/90, 0x5a, 0x0) ioctl$VT_ACTIVATE(r9, 0x5606, 0x7) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 4.273050183s ago: executing program 4 (id=9): r0 = socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f0000000280)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14}}], 0x18}, 0x0) unshare(0x2040400) r1 = open(&(0x7f0000000100)='.\x00', 0x40080, 0x150) timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{r2, r3+10000000}, {r4, r5+10000000}}, &(0x7f00000000c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) timer_create(0x3, &(0x7f0000000200)={0x0, 0xf, 0x1, @tid=r6}, &(0x7f0000000240)) 4.271752403s ago: executing program 4 (id=10): syz_usb_disconnect(0xffffffffffffffff) (async) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pidfd_send_signal(r0, 0x28, &(0x7f0000000300)={0x3f, 0x2, 0x6}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@debug}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000010000104000000000040000000000000", @ANYRES32=0x0, @ANYBLOB="5d5800000000000008000f00590a00002c0012800b00010062726964676500001c0002800c00220002000000000000000c002100b2"], 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4.266527203s ago: executing program 4 (id=11): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/63, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) 3.980724056s ago: executing program 0 (id=12): getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @empty, 0x5}, 0x3) listen(r0, 0x3) listen(r0, 0x10040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x31, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@mpls_uc={0x8847, {[{0x5, 0x0, 0x1}, {0x0, 0x0, 0x1}], @generic="423af4af7efa0eb7ff1948f53a20eae3d41ee9f948a5bdb8dbd651"}}}}, 0x0) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) syz_emit_ethernet(0x34b, &(0x7f00000002c0)={@local, @broadcast, @void, {@mpls_mc={0x8848, {[{0x200, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xc}, {}, {0x401, 0x0, 0x1}, {0xffffa}, {0x4, 0x0, 0x1}], @ipv6=@generic={0x3, 0x6, "d3b6ba", 0x2f9, 0x3c, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, {[@routing={0x5e, 0x12, 0x0, 0xe2, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x6, 0x4, 0x1, 0x40, 0x0, [@private1, @local]}, @dstopts={0x1b, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xd}}, @enc_lim={0x4, 0x1, 0x5}]}, @dstopts={0x3b, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, @hopopts={0x6, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x5a}, @ra={0x5, 0x2, 0x401}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x6}, @pad1]}, @srh={0x89, 0x10, 0x4, 0x8, 0x2, 0x98, 0x80, [@local, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x37}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0x6, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @generic={0x3, 0x84, "012ba8c0552e63d03271e1147985f1c2eed35a10d2332ce54d416b90f46f0286cc55a962effd5619c49de1e242b04c916c24a02a346af0652449f79df563a73ad933614bbba52efbe13c63256db405f07e03b417dd8c7926e32f7389b3e6ac9791bd34b40da38ff1c16866e4e10e3c8328420b38f0bfbae7ee412bba761fa7c4fe4b5617"}, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x20, {0x2, 0x6, 0x2, 0x3, [0x7, 0x10000, 0x1]}}]}, @fragment={0x67, 0x0, 0xf, 0x1, 0x0, 0x2, 0x67}, @routing={0x33, 0x6, 0x0, 0xff, 0x0, [@private2, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0xc2, 0x0, 0x3, 0x0, 0x0, 0x3, 0x67}], "3ad2b3b61bdb81ee6cd3ace730da96abdecaec6019ceb3727990e231e1adf727b79e24cf1031076076fbc16b41cad7ea86f646bd6ff254e60803406d16a105bc03b9a8a6f07bc1ad9ab30389a262df4913"}}}}}}, 0x0) 3.565055781s ago: executing program 2 (id=16): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x7, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffa, 0xff, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x9, 0xfc}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xc0, 0xf8, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x8, 0x6d, 0x1, {0x22, 0x45a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x8, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x22, 0x40, 0x5}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xf7, 0x4, 0x40, 0xff, 0x4}, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x809}}, {0xd6, &(0x7f0000000340)=@string={0xd6, 0x3, "7e6d262f32905b5feb840d8c2764ee0ebc3af7b36b979afb92f4919d7957b8e2153137053c290b214324a84f397d7644c62f1efeca53928f890a9cb334a54fd0cf4143efeffdf3698bdb459b3eeaf846729dd01b35c6cf478a3f6436bf9d1f7b48bca0a08e1b31fd1c33293384486c7e495867df82085d544d5787a17d7d54bebd88a27176ff87950a647cf74dd81c00b6ebfb566dc187b0eadfa3a276f93b930ffb3e8d68fd7cd868e3ef0f66ab34312ad287f19a150b4d0e4756dbbc0c2507b9baf7f02c04a1852cd755f6353da5899109130d"}}, {0x2d, &(0x7f0000000440)=@string={0x2d, 0x3, "8d171f5a3a471824835ea0d8e971f1d18591b4e70ad707b07ae9f4d1734bbbd6a2335050a1e79e9866aa93"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x140a}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="398c859fb5315e6f303298"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x4001, 0x4) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 3.466997132s ago: executing program 0 (id=17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000002c0)={0xa0000013}) io_setup(0x5, &(0x7f0000000240)=0x0) inotify_init() (async) r5 = inotify_init() io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x400200, 0x43, 0x5}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x5df, 0xffffffffffffffff, 0x8be6, 0x25}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000881}, 0x2400c808) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x5df, 0xffffffffffffffff, 0x8be6, 0x25}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000881}, 0x2400c808) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) 3.353035643s ago: executing program 4 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1, r2}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0xd) fadvise64(r4, 0x200000007f, 0x0, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000001640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x94, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x58, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010100}}}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x4c091) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000280)={[{@user_xattr}], [{@obj_role={'obj_role', 0x3d, 'user_xattr'}}, {@uid_lt={'uid<', r5}}]}, 0x80, 0x650, &(0x7f0000000ec0)="$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") r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="e774800fd607"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r6, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000940)={0x2c, &(0x7f0000000080)={0x0, 0x10, 0x88, {0x88, 0x8, "00e577fe6e0867f12802339e22940aa20f80ada02eee4410651439bedd71e0bd3b89e714e787a645eb90566b8f7c8e67702e3ce2b39c38e7ca0a2f0f2fe6179c60351788b1204a7fea8a727168e150cef4b44020306663acd7c3b9b4cb4d3b776ae56911ac203f4b206b819dae2364f3ffe305a1f7516250e5407d411ac3f25f0809d38be07a"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, &(0x7f0000000880)=ANY=[@ANYBLOB="000f1e000002050f1e00030b1001020000090501002503100b0b100108a1000902ff0ff8"], &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x8, 0x81, "f2fefade", "267667ac"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x80, 0x8b, 0x18, 0x9, 0xfff8, 0x23f}}}, &(0x7f0000000e00)={0x84, &(0x7f0000000980)={0x0, 0x16, 0x95, "dfe3447803e50cca3f9aedb28767da9f3168808575f356f00d3e6351d1c41bbaa5be323d04ff6e76f902d103f9664dd4dca0a0b26b22be578371b6617bf342b403e2acf684656f661b1a9577f39523235557f87efab4f4d667c1e73d389f84b3659afbaf51a1b5763cefc1237c5438efc4b702094920e72df8cf4e809b8bbf1ec83037e2d47fa7792f360872a3b3e03235582900b3"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x200, 0x10}}, &(0x7f0000000b40)={0x40, 0x7, 0x2}, &(0x7f0000000b80)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "1c57"}, &(0x7f0000000c00)={0x40, 0xf, 0x2, 0x728}, &(0x7f0000000c40)={0x40, 0x13, 0x6}, &(0x7f0000000c80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, "a0be"}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0xf591}, &(0x7f0000000d40)={0x40, 0x1c, 0x1}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000dc0)={0x40, 0x21, 0x1, 0xf1}}) 3.225140134s ago: executing program 0 (id=19): fsopen(&(0x7f0000004900)='tmpfs\x00', 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002000000207d1e50fb0053eb00000109022400010000a0000904000709030000000921810044012227000905810340"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x4b, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9, 0x21, 0x7, 0xfc, 0x1, {0x22, 0x3b0}}}}, &(0x7f0000000080)={0xfe2f, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0000}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.914157369s ago: executing program 1 (id=26): r0 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) alarm(0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) fcntl$addseals(r3, 0x409, 0x7) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) open(&(0x7f0000000180)='./file0\x00', 0x66842, 0xa0) 1.521641833s ago: executing program 2 (id=28): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/63, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) 817.112091ms ago: executing program 3 (id=30): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x4408, 0x8}) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80f01, 0x10) 813.839591ms ago: executing program 3 (id=31): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2963}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000242f00fc0000000000000000000000000000002b17c18e000000000000000000000001242081000000000000000800000086dd080088be86ddffff100000000100000000000000080022"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e26, 0xedf7d184, @remote, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1c, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3fff8000}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 638.054533ms ago: executing program 1 (id=32): r0 = socket(0x26, 0x803, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x7, 0x7, 0xf, 0x6, 0xfffffff0, 0x9}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[{@shortname_lower}, {@fat=@check_strict}, {@fat=@gid}, {@shortname_mixed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8}, {@uni_xlateno}, {@fat=@nfs}, {@utf8no}, {@fat=@uid}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@numtail}]}, 0x5, 0x38c, &(0x7f00000015c0)="$eJzs3U+IW8UfAPBv+pLdTeHX3cMPioISvQm69A8eFA9byhaKuaiEVg9isFuUzVrYYHB7aLpexKPgUUHwIh704KFnERTx5sGrVbQqHrS3gsWRJC/Ja5PdrtRtXfx8DuWb78y8mXmdTd6+R2ZfuJ5Wz1Ti7NWrV2JurhTlpeNLca0UC5HF0MWYNDMlBwDsDddSit/TwCiZTYnGSndoaADALul9/qduMfP659vVTz79AWDPy3//r25XZ24y9eMTvX/P7d64AIDdM3H//8Fx2f2Dx/yFR/3lqQ8EAIC95Zlnn3vyWD3i6WptLmLtjU6j04jHx+XHzsbL0YqVOBTzcT1icKGQUjr9ff/FiZP15UO1Wq0bPy1EIyLe6zQi1rqdxuBK4VjWbz8bh2M+FvL2+dVGSik78Ul9+XCtLyIudvv9x1qp06jE/rz/b/fHShyJWvx/on3EyfrykVp+gMbasH03YnN836I3/sWYj69fjHPRijPVU5HS8LKmvnzhcK12PNVvaN9pzMaZ0VmYcgcEAAAAAAAAAAAAAAAAAAAAAABuw2JtZGG0/00a79+zuDilvL8/zqB9vj/Q5mB/oDSbIqXfXnuk8WY22KtnuD/QzfvzdBrl2Hd3pw4AAAAAAAAAAAAAAAAAAAD/Gu2NmWi2Wivr7Y3zq8Wgu97e2BcRvcwrX370WTUm69wiKOd9FIpqeer8ajNlw8opu6FOHmS9zoeZDy+NRlysMzuaxdRh9IrbM1vU+d8DP7wzztyXDY/857hOFtMnmN00jGFQiYi1AxFRjRgVVcZT3vKMHc2DI7c4q5dTSlsd58Lzk62iFFH++/9x2wepF3xx5aV7jrYPPtrPfJoGHnp4/tTlt9//ZbXZ6vXc0/pgZr19Pa0289fTF9tKqbxFp1lh/ZTyc1gqroTydkPdvDHTzL759fS9b321s5mmYubVKXWywXQ+Xm9vlPKflH7RzCDo5W5qVW2dzCLOL0XxOJUpi//2gqmL7eC7S81LF777eafHKbxJjDfqqP7T7z8AAAAAAAAAAAAAAAAAAMBY4bviufzLvpXtWj32VB7M7e7oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODOGP/9/0KwOZHZSfBHNyaLZlfW2xEH7vY0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/srAAD//x9pY8c=") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800e00}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x100, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x28000000}, 0x4004040) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "f6ff01", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, {}, {0xdd86, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b43}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x5, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0x3}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) 620.149023ms ago: executing program 3 (id=33): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffa, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x400, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4004d3, 0x2b}, @in=@multicast2, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x688f, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8, 0x1}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x26}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x30, 0x0, 0x8000c62) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r4, 0x0, 0xfffffffffffffffc}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r7 = accept4$nfc_llcp(r3, &(0x7f0000000100), &(0x7f0000000180)=0x60, 0x100800) fcntl$lock(r7, 0x25, &(0x7f0000000280)={0x0, 0x2, 0x9, 0xae5, r0}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x8000000}, 0x4c) 540.166734ms ago: executing program 2 (id=34): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000000840)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6a742c756e695f786c6174653d312c696f636861727b65743d6370312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f77650000008066383d302c726f6469722c73686f72746e616d653d77696e39352c756e695f786c6174653d312c757466383d302c726f6469722c757466383d302c747a3d5554432c00000000000000000000000000000000002f0eab5b3e46b8fae1c2c80c2751"], 0x81, 0x2a6, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x4000000248}, 0x0) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e) (async) r3 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='ccnA\xf6gro-p\x00', 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000180), 0x56, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa401}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7000000000000}]}}}, @IFLA_LINKMODE={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe80900", 0x40}], 0x1) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000040) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x45e, &(0x7f00000008c0)="$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") (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x403, 0x40) openat(r8, &(0x7f0000000240)='./bus\x00', 0x183442, 0x30) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 318.722836ms ago: executing program 1 (id=35): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = open(0x0, 0x8000, 0x0) fsync(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0x0, &(0x7f0000000540)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x37, 0x1, 0x8000, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0]}, 0x40) syz_emit_ethernet(0x67, &(0x7f0000000000)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x31, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @loopback, [{0x4, 0x1, "6da123e1762e27"}]}}}}}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="14009341059b7172126e5c082bdd49a70000", @ANYRES16=r1, @ANYBLOB="010528bd7000fcdbdf251f000000"], 0x14}}, 0x8000) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="922129bd7000fbdbdf25150000000a001a0008021100000100000a000600ffffffffffff00000a001a000802110000010000bbdbb574d31df3b29aaca1605703d2a45f4b93e9f08e9cdb2bab3143c1fc3e3fd69d184bc2d9371ae13e37e7e7d59beb69ed720ba50a0fee6bbc51c5154862210d6720ccc524c47ec9359fd04eade20fe6a7116231cea74d3210471edd0874a56f96ee7d62a6067713785808332d7e66964e4d8e22a3b166b3070309b416d1b571"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 249.108447ms ago: executing program 0 (id=36): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)={0x17, 0x7, 0x2, {{0xa, ',,-!\\#!$,]'}, 0x9}}, 0x17) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x4, 0x3, 0x5}}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{}, {0x27}}, [@printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40007}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069199a00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10000, 0x15) 213.843087ms ago: executing program 0 (id=37): lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000040)=@md0, r0, &(0x7f00000001c0)={0x9, 0x12, 0x1}) delete_module(&(0x7f0000000000)='\x00', 0x200) syz_usb_connect$uac2(0x3, 0xa8, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110030000004000004c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c240302070300040007"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) (async) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000040)=@md0, r0, &(0x7f00000001c0)={0x9, 0x12, 0x1}) (async) delete_module(&(0x7f0000000000)='\x00', 0x200) (async) syz_usb_connect$uac2(0x3, 0xa8, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110030000004000004c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240a0001ff23000c240302070300040007"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) (async) 180.877908ms ago: executing program 1 (id=38): r0 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x40}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x40}}, 0x0) (async) 116.850738ms ago: executing program 1 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x2010, 0xffffffffffffffff, 0x22f9f000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) (async, rerun: 32) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) (async, rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x5) (async) socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x80) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000001c00), 0x12) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) (async) r8 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) (rerun: 64) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x6351, @mcast2, 0x68}, 0x1c) (async) listen(r9, 0x8) (async) r10 = fsmount(r8, 0x0, 0x0) fchdir(r10) 114.843028ms ago: executing program 2 (id=40): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x841e, 0xa04f, 0x90, 0x0, 0x8, 0xfffffffe, 0xc, 0x9, 0x6, 0x9, 0x4, 0x3, 0x0, 0xe, 0x6, 0xf05e, 0x7, 0x401, 0x180000, 0xffffff7f, 0x27e, 0xffffffff}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000340)={{r1, r2+10000000}}, 0x0) r3 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x6}], {}, [], {0x10, 0x3}}, 0x34, 0x2) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000202505a1a4400001020301090247000101040004c2d200f803020600090824060000bd4253052400ff000d240f0113000000070006008009058103000040080709058202000207800e090503020004f20404"], &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x9, 0x6, 0x40, 0x8}, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB="050f1b00020b10010c400010060008040b10010225000d09040007d2f62069c0066e7b36e9b650cebfacf8160f460c305908c66fac2a7f8dc040c72757141cd718a085196511a6b973f83f9f6828171447b64ff5f4c4a0bc4611ccab19395a24688d342be17df66f86c80d6c"], 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41f}}, {0x5c, &(0x7f0000000140)=@string={0x5c, 0x3, "3a493e8e55c0526c54b752748d5f11a82fce66aaa314a95262654a39d56d493f0fa952ff7251639d6406fa67044e7f3d81c005e03e56fc6b862a12fa7a6c2d4c5ec61217a586e36d2d40f2a26c468db0fbced80c99803dd4152f"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x419}}]}) 109.839188ms ago: executing program 1 (id=41): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@noinit_itable}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x6c, 0x0, 0x0, 0xb7a}, {0x6, 0x0, 0x8, 0x7ffffcb9}]}) write(r2, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r2, &(0x7f0000006000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/50, 0x32}, 0x5}], 0x1, 0x20002042, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280), &(0x7f0000000200)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000063010400000000009500000000000000db0ca6c4c711b2269f54725d770338958f6cb4f6285b46b06df83bc2324cf6ab2290a095824b5cd844a44d9b968ee34ce207b00128a2b1d8a93d09892beda9f1c90ba8bbd54cc5fa2ce70c1f380259283d907979d47e196e6a4a3d94c51203"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100), &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYBLOB="b9"], 0xfe37, 0x0) 102.511179ms ago: executing program 3 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010008", @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000000c001a80080002", @ANYRES8=r5], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0x7}, {0xf, 0x2}, {0x10, 0xfff1}}, [{0x8, 0xb, 0xfffffff7}]}, 0x2c}}, 0x0) 94.759708ms ago: executing program 3 (id=43): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = inotify_init() ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r1, &(0x7f0000000000)='&#}^\x00', 0x10000, &(0x7f0000000040)={@align=0x4, {0x86, 0x0, 0x80000000, 0x2}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x76}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x54) r5 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x10c, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x2, 0xa}, @fda={0x66646185, 0x6, 0x1, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/101, 0x65, 0x0, 0x38}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x8}, @fda={0x66646185, 0x9, 0x2, 0x3d}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}}, @register_looper, @dead_binder_done, @acquire={0x40046305, 0x1}, @free_buffer={0x40086303, r4}, @free_buffer={0x40086303, r5}], 0x9e, 0x0, &(0x7f0000000540)="528dfd6fbcc060c84c043449d0918c2ffcab602de238dcda7350308274438e13940e4cda9ce7c5f0e8d8fdef9f1b99c65f01351680991cf16d788f8621e62a26261fb28adeb8b782a3628816cf766f91ed47c8abbfecb4779fc2304fe730c56a386999219659c8be843065c5d72e5a3b82c7f17ffebb737e50010adb70f8fd32cbf44f4498e4e4bfb17da637bb9d65516f6ac16de6a191c49d2e46dedc51"}) r6 = dup3(r0, r1, 0x80000) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2d) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000640)={'mangle\x00', 0x0, [0x7, 0x6fa, 0x4, 0x3, 0x5]}, &(0x7f00000006c0)=0x54) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f0000000700)={0x2}) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000740), &(0x7f0000000780)={0x0, 0xfb, 0xd8, 0x0, 0x1, "c7c8156b4d2ec784c71a0c9bcf3ea7ba", "ca42998e1301d2a0f59185f652184126173ec5bd7c7078b70495f16ee48ed997bb4aaa363de066885a5292ddbf88291ea8805c2a17343fd51846e40a4482403f1c9450a8c41fb0d139b6002d599a67c2450476693cf7ef2c58a4f354098cac68c8fd9555a4576a0f456af2faff9a66459f7452180be73cb41dde76803090b123d06bfc2b77b73e4be3357091e31918a876349e53a6916f17001e6c59114f403e081db5fef9ee01e7db55acf4ce87cb83fcf348486e8d5f8a73771b0be9fab82b6eba0d"}, 0xd8, 0x2) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f0000000880)={r7, 0x0, 0x7, 0x708, 0x101, 0x4}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, &(0x7f00000008c0)={'icmp\x00'}, &(0x7f0000000900)=0x1e) mount$overlay(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x200000, &(0x7f00000009c0)={[{@verity_off}, {@xino_on}, {@uuid_off}, {@redirect_dir_nofollow}], [{@audit}, {@smackfsdef}]}) sendmsg$key(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x2, 0x18, 0x90, 0x7, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x3, 0x23, 0x5, 0x6, 0x247}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x6e6bb4, 0x4, {0x6, 0xff, 0x87, 0xfc, 0x0, 0x5, 0x0, @in6=@remote, @in=@loopback}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_filter={0x5, 0x1a, @in6=@private0, @in6=@loopback, 0x3f, 0x8, 0x6}, @sadb_sa={0x2, 0x1, 0x4d2, 0x9, 0xf7, 0xe5, 0x4, 0x40000000}]}, 0xd0}}, 0x48010) write$binfmt_aout(r2, &(0x7f0000000bc0)={{0x107, 0x3, 0x2e, 0x270, 0x14d, 0xc, 0x2bf, 0x10000}, "6277d11664683f13305b97cd083d2fbc03e71273abcccd5669822bb03a9edc0393360515df02e6adbe4e42ab4b4e65fcf71c91a4f2186764dcfed6d2a3644ad1957f33c592ba1ad9758c91912610710592e3f2732fe062c614591d38d913e1b35465ff3a6092a23b33bf9cfb00a5af08e74cb06bd28ddf485f511d8ff3c4f143f350", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7a2) ioctl$OCFS2_IOC_UNRESVSP64(r1, 0x4030582b, &(0x7f0000001380)={0x1, 0x2, 0x3b45, 0x54, 0x30000000, 0x7c06}) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000013c0)={0x1, 0x0, 0x6, 0xf6, 0x7, 0x4}) lgetxattr(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)=@random={'osx.', 'xino=on'}, &(0x7f0000001480)=""/80, 0x50) r9 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000001500)=0x70000, 0x4) mount$bind(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0), 0xb85000, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_GOINGDOWN(r10, 0x8004587d, &(0x7f0000001600)=0x3) sendmsg$inet(r8, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001640)="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", 0x1000}], 0x1, &(0x7f0000002680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}, 0x4008000) r11 = accept4$packet(r6, &(0x7f0000002700)={0x11, 0x0, 0x0}, &(0x7f0000002740)=0x14, 0x0) close_range(r6, r11, 0x2) sendmsg$nl_route_sched_retired(r6, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)=@deltfilter={0x4c, 0x2d, 0x8, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x6, 0x5}, {0x7, 0xfff4}, {0x3, 0xa}}, [@f_tcindex={{0xc}, {0x1c, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xf, 0x8}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2a}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 3 (id=44): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffcc1, 0x0, 0x0, 0x2}]) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x20}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @multicast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b", 0x21}], 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d0090000060011000700000008000100706369001100020030082e303a30303a31302e3000000000080003"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) sendto$inet(r0, &(0x7f00000000c0)="f4d1a75d1f6b848a393867892b52", 0xe, 0x40, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xde, 0x56, 0x14, 0x8, 0x46d, 0x89b, 0x6b0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4a, 0x9, 0x20, 0xd, "", [{{0x9, 0x4, 0x41, 0x5, 0x0, 0xe, 0x1, 0x0, 0x2}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000240)=@string={0x2}}, {0x6c, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 17.897098][ T24] audit: type=1400 audit(1777948697.919:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.898179][ T271] cgroup: Unknown subsys name 'net' [ 17.901752][ T24] audit: type=1400 audit(1777948697.919:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.905874][ T24] audit: type=1400 audit(1777948697.929:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.906026][ T271] cgroup: Unknown subsys name 'devices' [ 18.091685][ T271] cgroup: Unknown subsys name 'hugetlb' [ 18.097288][ T271] cgroup: Unknown subsys name 'rlimit' [ 18.323890][ T24] audit: type=1400 audit(1777948698.349:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.345643][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 18.347064][ T24] audit: type=1400 audit(1777948698.349:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.380313][ T24] audit: type=1400 audit(1777948698.349:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.403446][ T24] audit: type=1400 audit(1777948698.389:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.428816][ T24] audit: type=1400 audit(1777948698.389:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.428845][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.454372][ T24] audit: type=1400 audit(1777948698.429:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.488520][ T24] audit: type=1400 audit(1777948698.429:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.213512][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.220630][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.228004][ T279] device bridge_slave_0 entered promiscuous mode [ 19.235109][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.242308][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.249611][ T279] device bridge_slave_1 entered promiscuous mode [ 19.337733][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.344909][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.352370][ T280] device bridge_slave_0 entered promiscuous mode [ 19.360115][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.367220][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.374508][ T280] device bridge_slave_1 entered promiscuous mode [ 19.426637][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.433931][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.441293][ T281] device bridge_slave_0 entered promiscuous mode [ 19.453478][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.460570][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.467928][ T282] device bridge_slave_0 entered promiscuous mode [ 19.474838][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.481932][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.489152][ T281] device bridge_slave_1 entered promiscuous mode [ 19.505984][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.513105][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.520517][ T282] device bridge_slave_1 entered promiscuous mode [ 19.541192][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.548227][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.555638][ T283] device bridge_slave_0 entered promiscuous mode [ 19.565211][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.572358][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.579636][ T283] device bridge_slave_1 entered promiscuous mode [ 19.627959][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.635010][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.642296][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.649311][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.719421][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.726475][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.733718][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.740735][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.752575][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.759588][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.766841][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.773858][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.797658][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.804710][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.811952][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.818958][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.836857][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.844011][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.852324][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.859406][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.866844][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.873956][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.881115][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.888205][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.895710][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.903082][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.932768][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.940483][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.948575][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.955595][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.963224][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.971648][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.978644][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.985969][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.994524][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.001551][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.008839][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.016978][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.023986][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.031319][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.039311][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.064208][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.073656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.081628][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.089431][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.097692][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.104717][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.112403][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.120617][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.127618][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.134987][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.160729][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.170166][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.177744][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.185580][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.194066][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.201103][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.208451][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.216709][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.223739][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.231115][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.239167][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.246191][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.253557][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.261466][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.269504][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.276521][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.283879][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.291786][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.299585][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.310242][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.323422][ T281] device veth0_vlan entered promiscuous mode [ 20.338231][ T280] device veth0_vlan entered promiscuous mode [ 20.345327][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.352905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.360287][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.368633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.377413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.385238][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.393089][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.401139][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.408946][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.417303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.425672][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.433732][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.441708][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.449452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.457418][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.464808][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.472207][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.479513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.486975][ T279] device veth0_vlan entered promiscuous mode [ 20.505657][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.513953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.523511][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.532423][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.540813][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.548552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.556599][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.564347][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.572178][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.580264][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.589822][ T282] device veth0_vlan entered promiscuous mode [ 20.596717][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.604703][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.614123][ T281] device veth1_macvtap entered promiscuous mode [ 20.622931][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.630753][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.638091][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.645581][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.653798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.662511][ T280] device veth1_macvtap entered promiscuous mode [ 20.671065][ T283] device veth0_vlan entered promiscuous mode [ 20.687886][ T279] device veth1_macvtap entered promiscuous mode [ 20.695164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.703421][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.711583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.719775][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.728104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.736468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.744880][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.753141][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.761239][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.769402][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.777621][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.785766][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.803180][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 20.804124][ T283] device veth1_macvtap entered promiscuous mode [ 20.817812][ T282] device veth1_macvtap entered promiscuous mode [ 20.824837][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.833156][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.841369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.848857][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.857763][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.865940][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.884786][ T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 20.894720][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.903002][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.916132][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.924625][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.934184][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.942619][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.951194][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.959394][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.994131][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.004701][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.013526][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.022488][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.061351][ T306] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.2: inode has both inline data and extents flags [ 21.064949][ T312] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 21.082692][ T313] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 21.084371][ T306] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 21.105598][ T306] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 21.107095][ T304] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 21.155508][ T319] fuse: Bad value for 'fd' [ 21.182036][ T304] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 21.194976][ T319] cgroup: Unexpected value for 'all' [ 21.205139][ T304] F2FS-fs (loop0): invalid crc value [ 21.222664][ T304] F2FS-fs (loop0): Found nat_bits in checkpoint [ 21.253424][ T327] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.271395][ T321] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 21.271395][ T321] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 21.271395][ T321] [ 21.289141][ T321] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 21.304772][ T304] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 21.315731][ T304] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 21.337073][ T321] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,journal_ioprio=0x0000000000000006,stripe=0x0000000000000081,nogrpid,auto_da_alloc,max_dir_size_kb=0x00000000004007b2,dioread_nolock,nouid32,quota,user_xattr,noacl,max_batch_time=0x0000000000000001,,errors=continue [ 21.435832][ T321] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3357: comm syz.3.6: Allocating blocks 497-513 which overlap fs metadata [ 21.460399][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 21.468203][ T321] EXT4-fs (loop3): pa ffff88811a44b498: logic 128, phys. 385, len 8 [ 21.476337][ T321] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4367: group 0, free 0, pa_free 1 [ 21.564646][ T302] attempt to access beyond end of device [ 21.564646][ T302] loop0: rw=2049, want=49824, limit=40427 [ 21.641809][ T304] attempt to access beyond end of device [ 21.641809][ T304] loop0: rw=2049, want=53248, limit=40427 [ 21.662818][ T336] capability: warning: `syz.4.8' uses deprecated v2 capabilities in a way that may be insecure [ 21.675044][ T304] attempt to access beyond end of device [ 21.675044][ T304] loop0: rw=2049, want=45064, limit=40427 [ 21.710478][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 21.723258][ T338] attempt to access beyond end of device [ 21.723258][ T338] loop0: rw=2049, want=67192, limit=40427 [ 21.743198][ T322] attempt to access beyond end of device [ 21.743198][ T322] loop0: rw=2049, want=67448, limit=40427 [ 21.792710][ T338] attempt to access beyond end of device [ 21.792710][ T338] loop0: rw=2049, want=70600, limit=40427 [ 21.808307][ T304] attempt to access beyond end of device [ 21.808307][ T304] loop0: rw=2049, want=71208, limit=40427 [ 21.850504][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 21.870562][ T25] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 21.900375][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 22.075678][ T7] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 22.084814][ T25] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 22.094452][ T7] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 22.097133][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.126296][ T25] usb 3-1: Product: syz [ 22.134880][ T25] usb 3-1: Manufacturer: syz [ 22.143799][ T25] usb 3-1: SerialNumber: syz [ 22.152744][ T7] attempt to access beyond end of device [ 22.152744][ T7] loop0: rw=524288, want=45080, limit=40427 [ 22.157296][ T25] usb 3-1: config 0 descriptor?? [ 22.180449][ T7] attempt to access beyond end of device [ 22.180449][ T7] loop0: rw=524288, want=45088, limit=40427 [ 22.195514][ T7] attempt to access beyond end of device [ 22.195514][ T7] loop0: rw=524288, want=45096, limit=40427 [ 22.231289][ T25] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 22.250937][ T361] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 22.394876][ T366] ====================================================== [ 22.394876][ T366] WARNING: the mand mount option is being deprecated and [ 22.394876][ T366] will be removed in v5.15! [ 22.394876][ T366] ====================================================== [ 22.439525][ T25] usb 3-1: USB disconnect, device number 2 [ 22.524729][ T366] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.14: inode has both inline data and extents flags [ 22.545315][ T374] xt_hashlimit: size too large, truncated to 1048576 [ 22.550480][ T376] xt_hashlimit: size too large, truncated to 1048576 [ 22.572229][ T366] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.14: couldn't read orphan inode 15 (err -117) [ 22.652632][ T366] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 22.750444][ T366] loop_set_status: loop1 () has still dirty pages (nrpages=1) [ 22.832389][ T384] EXT4-fs (loop4): Unrecognized mount option "obj_role=user_xattr" or missing value [ 22.860436][ T25] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 22.880410][ T54] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.002336][ T24] kauditd_printk_skb: 74 callbacks suppressed [ 23.002345][ T24] audit: type=1400 audit(1777948703.029:148): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 23.028410][ T24] audit: type=1400 audit(1777948703.029:149): avc: denied { remove_name } for pid=280 comm="syz-executor" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.051308][ T24] audit: type=1400 audit(1777948703.029:150): avc: denied { unlink } for pid=280 comm="syz-executor" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.115745][ T391] netlink: 5 bytes leftover after parsing attributes in process `syz.1.20'. [ 23.124470][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 23.124778][ T391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 23.129623][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 23.144887][ T392] : renamed from team_slave_1 [ 23.152352][ T301] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.216773][ T401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22'. [ 23.226521][ T24] audit: type=1400 audit(1777948703.249:151): avc: denied { create } for pid=400 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 23.246107][ T25] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.246123][ T25] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 23.246140][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 23.256230][ T54] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.286594][ T25] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 23.286889][ T54] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.305511][ T54] usb 4-1: config 0 interface 0 has no altsetting 0 [ 23.310367][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.312139][ T54] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 23.322726][ T25] usb 3-1: config 0 descriptor?? [ 23.329188][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.343685][ T54] usb 4-1: config 0 descriptor?? [ 23.400420][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 23.405575][ T301] usb 1-1: Using ep0 maxpacket: 32 [ 23.514197][ T402] 9pnet: Insufficient options for proto=fd [ 23.530430][ T5] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 23.538552][ T301] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.549427][ T5] usb 5-1: config 0 has no interface number 0 [ 23.555531][ T301] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 23.568315][ T5] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 23.578458][ T301] usb 1-1: config 0 interface 0 has no altsetting 0 [ 23.578778][ T372] udc-core: couldn't find an available UDC or it's busy [ 23.585088][ T5] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 23.602103][ T372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 23.680490][ T301] usb 1-1: New USB device found, idVendor=1e7d, idProduct=fb50, bcdDevice=53.00 [ 23.689509][ T301] usb 1-1: New USB device strings: Mfr=235, Product=0, SerialNumber=0 [ 23.697727][ T301] usb 1-1: Manufacturer: syz [ 23.702830][ T301] usb 1-1: config 0 descriptor?? [ 23.760478][ T5] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 23.769578][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.777564][ T5] usb 5-1: Product: syz [ 23.781768][ T5] usb 5-1: Manufacturer: syz [ 23.786334][ T5] usb 5-1: SerialNumber: syz [ 23.791452][ T5] usb 5-1: config 0 descriptor?? [ 23.810598][ T384] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 23.817828][ T384] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 23.828628][ T24] audit: type=1400 audit(1777948703.849:152): avc: denied { create } for pid=410 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 23.849545][ T24] audit: type=1400 audit(1777948703.849:153): avc: denied { create } for pid=410 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 23.869498][ T24] audit: type=1400 audit(1777948703.849:154): avc: denied { create } for pid=410 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 23.880415][ T54] usbhid 4-1:0.0: can't add hid device: -71 [ 23.890259][ T24] audit: type=1400 audit(1777948703.849:155): avc: denied { setopt } for pid=410 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 23.896269][ T54] usbhid: probe of 4-1:0.0 failed with error -71 [ 23.916686][ T25] usbhid 3-1:0.0: can't add hid device: -71 [ 23.927242][ T54] usb 4-1: USB disconnect, device number 2 [ 23.935191][ T25] usbhid: probe of 3-1:0.0 failed with error -71 [ 23.936293][ T24] audit: type=1400 audit(1777948703.849:156): avc: denied { write } for pid=410 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 23.943912][ T25] usb 3-1: USB disconnect, device number 3 [ 23.969141][ T24] audit: type=1400 audit(1777948703.849:157): avc: denied { connect } for pid=410 comm="syz.3.23" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 24.049333][ T384] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 24.056477][ T384] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 24.202024][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.209769][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.217598][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.225230][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.238974][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.246670][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.254437][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.261876][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.269275][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.276698][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.284098][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.291681][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.299212][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 24.351812][ T421] device batadv_slave_1 entered promiscuous mode [ 25.180460][ T5] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 25.190269][ T418] device batadv_slave_1 left promiscuous mode [ 25.196555][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.207713][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.215340][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.223009][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.237552][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.245293][ T5] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 25.255602][ T5] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 25.266163][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.273664][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.281414][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.288793][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.296375][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.303936][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.311528][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.318914][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.326561][ T5] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 25.336921][ T301] hid-generic 0003:1E7D:FB50.0001: unknown main item tag 0x0 [ 25.345394][ T301] hid-generic 0003:1E7D:FB50.0001: hidraw0: USB HID v0.81 Device [syz] on usb-dummy_hcd.0-1/input0 [ 25.358213][ T301] usb 1-1: USB disconnect, device number 2 [ 25.394000][ T438] fido_id[438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 25.563243][ T440] FAT-fs (loop1): Directory bread(block 64) failed [ 25.594278][ T440] FAT-fs (loop1): Directory bread(block 65) failed [ 25.601012][ T440] FAT-fs (loop1): Directory bread(block 66) failed [ 25.607642][ T440] FAT-fs (loop1): Directory bread(block 67) failed [ 25.614296][ T440] FAT-fs (loop1): Directory bread(block 68) failed [ 25.621366][ T440] FAT-fs (loop1): Directory bread(block 69) failed [ 25.627928][ T440] FAT-fs (loop1): Directory bread(block 70) failed [ 25.634570][ T440] FAT-fs (loop1): Directory bread(block 71) failed [ 25.641116][ T440] FAT-fs (loop1): Directory bread(block 72) failed [ 25.647723][ T440] FAT-fs (loop1): Directory bread(block 73) failed [ 25.862327][ T457] Zero length message leads to an empty skb [ 25.997005][ T471] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 26.011074][ T478] netlink: 'syz.3.44': attribute type 12 has an invalid length. [ 26.018746][ T478] netlink: 'syz.3.44': attribute type 29 has an invalid length. [ 26.026559][ T478] netlink: 148 bytes leftover after parsing attributes in process `syz.3.44'. [ 26.035598][ T478] netlink: 'syz.3.44': attribute type 2 has an invalid length. [ 26.037143][ T471] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,mblk_io_submit,,errors=continue [ 26.043416][ T478] netlink: 'syz.3.44': attribute type 3 has an invalid length. [ 26.064205][ T478] netlink: 15 bytes leftover after parsing attributes in process `syz.3.44'. [ 26.068972][ T481] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 26.082997][ T481] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 26.083659][ T471] ================================================================== [ 26.095622][ T478] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 26.098511][ T471] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x1d79/0x3860 [ 26.114826][ T471] Read of size 18446744073709550624 at addr ffff8881291767e0 by task syz.1.41/471 [ 26.123979][ T471] [ 26.126325][ T471] CPU: 1 PID: 471 Comm: syz.1.41 Not tainted syzkaller #0 [ 26.130713][ T301] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.133409][ T471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 26.150861][ T471] Call Trace: [ 26.154123][ T471] __dump_stack+0x21/0x24 [ 26.158421][ T471] dump_stack_lvl+0x1a7/0x208 [ 26.163068][ T471] ? show_regs_print_info+0x18/0x18 [ 26.168234][ T471] ? thaw_kernel_threads+0x220/0x220 [ 26.173487][ T471] print_address_description+0x7f/0x2c0 [ 26.179014][ T471] ? ext4_xattr_set_entry+0x1d79/0x3860 [ 26.180432][ T389] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 26.184538][ T471] kasan_report+0xe2/0x130 [ 26.184550][ T471] ? ext4_xattr_set_entry+0x1d79/0x3860 [ 26.184565][ T471] ? ext4_xattr_set_entry+0x1d79/0x3860 [ 26.207391][ T471] kasan_check_range+0x249/0x2a0 [ 26.212309][ T471] ? ext4_xattr_set_entry+0x1d79/0x3860 [ 26.217829][ T471] memmove+0x2d/0x70 [ 26.221697][ T471] ext4_xattr_set_entry+0x1d79/0x3860 [ 26.227047][ T471] ? ext4_xattr_ibody_set+0x360/0x360 [ 26.232394][ T471] ? kmem_cache_free+0x100/0x2d0 [ 26.237304][ T471] ? __mb_cache_entry_free+0x225/0x340 [ 26.242740][ T471] ? mb_cache_entry_delete_or_get+0x203/0x220 [ 26.248778][ T471] ext4_xattr_block_set+0x4e0/0x2a80 [ 26.254036][ T471] ? __kasan_check_read+0x11/0x20 [ 26.259030][ T471] ? __ext4_xattr_check_block+0x265/0x8e0 [ 26.264720][ T471] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 26.270150][ T471] ext4_xattr_set_handle+0xbc4/0x12b0 [ 26.275499][ T471] ? ext4_xattr_set_entry+0x3860/0x3860 [ 26.281018][ T471] ? __kasan_check_read+0x11/0x20 [ 26.286015][ T471] ? __ext4_journal_start_sb+0x2e2/0x490 [ 26.291621][ T471] ext4_xattr_set+0x1f4/0x310 [ 26.296273][ T471] ? ext4_xattr_set_credits+0x290/0x290 [ 26.301792][ T471] ext4_xattr_trusted_set+0x3b/0x50 [ 26.306961][ T471] ? ext4_xattr_trusted_get+0x40/0x40 [ 26.312307][ T471] __vfs_setxattr+0x42a/0x480 [ 26.316958][ T471] __vfs_setxattr_noperm+0x11e/0x4e0 [ 26.322221][ T471] __vfs_setxattr_locked+0x203/0x220 [ 26.327478][ T471] vfs_setxattr+0x8d/0x1c0 [ 26.331866][ T471] setxattr+0x1df/0x3f0 [ 26.335994][ T471] ? path_setxattr+0x230/0x230 [ 26.340731][ T471] ? __mnt_want_write+0x1e6/0x260 [ 26.345726][ T471] ? mnt_want_write+0x19d/0x270 [ 26.350548][ T471] path_setxattr+0x11f/0x230 [ 26.355109][ T471] ? __kasan_check_write+0x14/0x20 [ 26.360194][ T471] ? simple_xattr_list_add+0x120/0x120 [ 26.365627][ T471] __x64_sys_lsetxattr+0xc2/0xe0 [ 26.370537][ T471] do_syscall_64+0x31/0x40 [ 26.374927][ T471] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.380792][ T471] RIP: 0033:0x7fa8a8e90dd9 [ 26.385182][ T471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.404779][ T471] RSP: 002b:00007fa8a78eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 26.413173][ T471] RAX: ffffffffffffffda RBX: 00007fa8a9109fa0 RCX: 00007fa8a8e90dd9 [ 26.421127][ T471] RDX: 00002000000002c0 RSI: 0000200000000100 RDI: 0000200000000040 [ 26.429077][ T471] RBP: 00007fa8a8f26d69 R08: 0000000000000000 R09: 0000000000000000 [ 26.437034][ T471] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 26.444993][ T471] R13: 00007fa8a910a038 R14: 00007fa8a9109fa0 R15: 00007ffd22c25e58 [ 26.452946][ T471] [ 26.455254][ T471] The buggy address belongs to the page: [ 26.460867][ T471] page:ffffea0004a45d80 refcount:2 mapcount:0 mapping:ffff88811074a8d0 index:0x1c pfn:0x129176 [ 26.471169][ T471] aops:def_blk_aops ino:0 [ 26.475504][ T471] flags: 0x400000000000203a(referenced|dirty|lru|active|private) [ 26.483212][ T471] raw: 400000000000203a ffffea000443c188 ffffea0004a45dc8 ffff88811074a8d0 [ 26.491778][ T471] raw: 000000000000001c ffff88812bc7b930 00000002ffffffff ffff88810df46000 [ 26.500338][ T471] page dumped because: kasan: bad access detected [ 26.506727][ T471] page->mem_cgroup:ffff88810df46000 [ 26.511895][ T471] page_owner tracks the page as allocated [ 26.517594][ T471] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 471, ts 26074118039, free_ts 25916524442 [ 26.534576][ T471] prep_new_page+0x179/0x180 [ 26.539138][ T471] get_page_from_freelist+0x223b/0x23d0 [ 26.544657][ T471] __alloc_pages_nodemask+0x290/0x620 [ 26.550003][ T471] pagecache_get_page+0x63e/0x930 [ 26.554999][ T471] __getblk_gfp+0x212/0x780 [ 26.559478][ T471] ext4_xattr_block_set+0x1ccc/0x2a80 [ 26.564821][ T471] ext4_xattr_set_handle+0xbc4/0x12b0 [ 26.570191][ T471] ext4_xattr_set+0x1f4/0x310 [ 26.574845][ T471] ext4_xattr_user_set+0xc9/0xf0 [ 26.579797][ T471] __vfs_setxattr+0x42a/0x480 [ 26.584453][ T471] __vfs_setxattr_noperm+0x11e/0x4e0 [ 26.589710][ T471] __vfs_setxattr_locked+0x203/0x220 [ 26.594970][ T471] vfs_setxattr+0x8d/0x1c0 [ 26.599359][ T471] setxattr+0x1df/0x3f0 [ 26.603485][ T471] path_setxattr+0x11f/0x230 [ 26.608054][ T471] __x64_sys_setxattr+0xc5/0xe0 [ 26.612875][ T471] page last free stack trace: [ 26.617530][ T471] free_unref_page_prepare+0x2b7/0x2d0 [ 26.622978][ T471] free_unref_page_list+0x129/0x9c0 [ 26.628157][ T471] release_pages+0xe52/0xea0 [ 26.632728][ T471] free_pages_and_swap_cache+0x86/0xa0 [ 26.638164][ T471] tlb_flush_mmu+0xdf/0x190 [ 26.642650][ T471] unmap_page_range+0x1d66/0x2130 [ 26.647656][ T471] unmap_vmas+0x25f/0x360 [ 26.651959][ T471] exit_mmap+0x309/0x590 [ 26.656176][ T471] __mmput+0x93/0x2f0 [ 26.660131][ T471] mmput+0x4e/0x150 [ 26.663916][ T471] do_exit+0x9ec/0x2500 [ 26.668044][ T471] do_group_exit+0x141/0x310 [ 26.672606][ T471] __x64_sys_exit_group+0x3f/0x40 [ 26.677602][ T471] do_syscall_64+0x31/0x40 [ 26.681993][ T471] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.687855][ T471] [ 26.690154][ T471] Memory state around the buggy address: [ 26.695761][ T471] ffff888129176680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 26.703798][ T471] ffff888129176700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 26.711834][ T471] >ffff888129176780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 26.719875][ T471] ^ [ 26.727041][ T471] ffff888129176800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 26.735080][ T471] ffff888129176880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 26.743125][ T471] ================================================================== [ 26.751192][ T471] Disabling lock debugging due to kernel taint [ 26.780452][ T5] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 26.790712][ T5] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336: ffffffb9 [ 26.806086][ T5] asix: probe of 5-1:0.34 failed with error -71 [ 26.814126][ T5] usb 5-1: USB disconnect, device number 2 [ 26.900390][ T414] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.000380][ T389] usb 3-1: device descriptor read/64, error -71 [ 27.030430][ T301] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.110464][ T301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.120628][ T301] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.280446][ T301] usb 1-1: New USB device found, idVendor=0000, idProduct=004c, bcdDevice= 0.40 [ 27.289534][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.297532][ T301] usb 1-1: Product: syz [ 27.301741][ T414] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.309382][ T301] usb 1-1: Manufacturer: syz [ 27.313979][ T301] usb 1-1: SerialNumber: syz [ 27.340421][ T414] usb 4-1: not running at top speed; connect to a high speed hub [ 27.390417][ T389] usb 3-1: device descriptor read/64, error -71 [ 27.420414][ T414] usb 4-1: config 74 has an invalid interface number: 65 but max is 0 [ 27.428593][ T414] usb 4-1: config 74 has no interface number 0 [ 27.434791][ T414] usb 4-1: config 74 interface 65 has no altsetting 0 [ 27.480432][ T414] usb 4-1: language id specifier not provided by device, defaulting to English [ 27.550934][ T483] udc-core: couldn't find an available UDC or it's busy [ 27.557910][ T483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.600418][ T414] usb 4-1: New USB device found, idVendor=046d, idProduct=089b, bcdDevice=6b.0d [ 27.609466][ T414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.617615][ T414] usb 4-1: Product: syz [ 27.621798][ T414] usb 4-1: Manufacturer: 熅䄠摘뱋蔥ី嗘ஃ⯡▄꺝墹欰ዖ䴛⚆᝽⨌酕ᄡᗍ䯽渢ѷ⌃兕聆繼铁沿ⵤㄭȠ杤䶷ꭼ㦕睰6뷆駆ᒜ쿑紬 [ 27.638789][ T414] usb 4-1: SerialNumber: syz [ 27.660420][ T389] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 27.670499][ T301] usb 1-1: unit 4 not found! [ 27.676574][ T301] usb 1-1: USB disconnect, device number 3 [ 27.880934][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.930433][ T389] usb 3-1: device descriptor read/64, error -71 [ 28.000425][ T414] uvcvideo: Found UVC 0.00 device syz (046d:089b) [ 28.006877][ T414] uvcvideo: No valid video chain found. [ 28.014451][ T414] usb 4-1: USB disconnect, device number 3 [ 28.320392][ T389] usb 3-1: device descriptor read/64, error -71 [ 28.440436][ T389] usb usb3-port1: attempt power cycle [ 28.453704][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 28.453712][ T24] audit: type=1400 audit(1777948708.479:196): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 28.850867][ T389] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 28.990521][ T389] usb 3-1: device descriptor read/8, error -71 [ 29.200442][ T389] usb 3-1: device descriptor read/8, error -71