last executing test programs: 22m17.706183552s ago: executing program 1 (id=1742): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) dup(r2) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[]) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88102) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) 22m17.619693774s ago: executing program 1 (id=1745): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 22m17.619435973s ago: executing program 1 (id=1746): ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='macvtap0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_da_write_pages_extent\x00', r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) 22m17.612970974s ago: executing program 1 (id=1747): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000000180)=ANY=[], 0x3, 0x348, &(0x7f0000000d00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000001c0)='./file0/../file0\x00') syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000280)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$eJzs3MtvG0UYAPBv10lLXyRUpdAHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QXWQaBRBQKgcUSXuiCMSfwEHBBcEnJC4wh1VqlAuLZyM1vYmjmuncepkC/79pI1ndseZ+bw79sxOnAD61kj2I4nYHRG/R8RQPbu6wEj94ebSwtTfSwtTSVSrb/6V1MrdWFqYyovmz9uVZwYi0k+TONSm3srl+fOT5fLMpUZ+bO7Ce2OVy/PPnrsweXbm7MzFiVOnThwff/7kxHM9iTOL68bBD2cPH3j17auvT52++s7P3yR5/C1x9MjIWgefqFZ7XF2x9jSlk4ECG0JXSvVuGoO1/j8UpVg5eUPxyieFNg7YVNVqtbo/4rsOhxerwP9YEkW3AChG/kGfzX/zbetGH8W7/mJ9ApTFfbOx1Y8MRNooM9gyv+2lkYg4vfjPl9kWm3MfAgBgle+z8c8z7cZ/aexvKndvYw1lOCLui4i9EXEyIvZFxP0RtbIPRMSDXdbfukhy6/gnvdb+mdu7rKm9bPz3QmNta/X4Lx/9xXCpkdtTi38wOXOuPHOs8ZocjcHtWX58jTp+ePm3zzsdax7/ZVtWf/a4sjqUXhtoCXV6cm7yjoJucv3jiIMD7eJPllcCkog4EBEHN1jHuae+PtzpWKf41/WLe7DOVP0q4sn6+V+Mlvhzydrrk2P3RHnm2Fh+Vdzql1+vvNGp/juKvwey87+z7fW/HP9w0rxeW+m+jit/fNZxTnP7+Ntf/9uSt1bt+2Bybu7SeMS25LV6o5v3T7SUm1gpn8V/9Ej7/r83Vl6JQxGRXcQPRcTDEfFIo+2PRsRjEXFkjfh/eunxdzce/+bK4p/u6vyvJLZF6572idL5H79dVelwN/Fn5/9ELXW0sWc973/radfGrmYAAAD470kjYnck6ehyOk1HR+t/w78vdqbl2crc02dm3784Xf+OwHAMpvmdrqGm+6HjjWl9np9oyR9v3Df+orSjlh+dmi1PFx089LldHfp/5s9S0a0DNp3va0H/0v+hf+n/0L/0f+hfbfr/jiLaAWy9dp//HxXQDmDrtfR/y37QR8z/oX/p/9C/9H/oS5UdcfsvyUsUncj/GcPd0p7K5flI74pmSGxSouA3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB75NwAA//9wCOUr") open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0x8, &(0x7f0000000080)={[{@dax_never}, {@nodioread_nolock}]}, 0x4, 0x511, &(0x7f0000000540)="$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") creat(&(0x7f0000000100)='./file1\x00', 0x186) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 22m17.56945318s ago: executing program 1 (id=1749): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000005980)=ANY=[], 0x11, 0x5505, &(0x7f0000000340)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1a1b40, 0x0) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x50) (async) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa942, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xffffbffa) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) poll(&(0x7f00000000c0)=[{r1, 0x20}], 0x1, 0x7981) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1004}, 0x94) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00'}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40810) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000005ac0)=ANY=[@ANYBLOB="09000000c2083a9c1347248579e83fba3ae9b763826d56d4dcd570e102e37de01eb381d3d5f057a988f5962de4cebeb9e9b70b05ba642df66770f9d113996bbd", @ANYRES32=r8, @ANYRES8=r4, @ANYBLOB="000100000000001e76b5abd85a5411066e6d00b7080000000000007b8af8ff0000", @ANYRES64=0x0, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff7fff}, 0x94) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0xfffffffd) eventfd2(0x0, 0x0) io_setup(0x3, &(0x7f0000000080)) (async) io_pgetevents(0x0, 0x800000000007, 0xc, &(0x7f0000005880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) 22m17.223245595s ago: executing program 1 (id=1751): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000900)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x7, 0x5, 0x9, 0x90, 0x3}, 0x52, &(0x7f0000000380)={0x5, 0xf, 0x52, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xf5, "5bf3db5d52af86732a0672e3864ca2cc"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "0c0574513d655ee846e761616a90908d"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "107e67a566833aebe113808fbf50209d"}]}, 0x7, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3401}}, {0x92, &(0x7f0000000840)=@string={0x92, 0x3, "f6a2f44f389331cc924d4634dbda9af235c1d04f943e0305db2d8a6dd1c2db5eff5184ff41e61a02cc4823f9221e658a69f14e9f2de1706c7dd328a0e44ed7240b6c7019853bcabd6f9d3fbb9145dc2fdcf2a22bc9cd79e9d45291ac8af8e013d8e35c2864d6dbd0bb2ee9deffc380cdbfbd40c3d56db9e37cbe18a274db4607b2641cad45026077ffaceb8d9c9e87a5"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x430}}, {0x25, &(0x7f00000007c0)=@string={0x25, 0x3, "334bd5b923d49d9f94aa01e9b0c4cb62c9a5c86c4f0fc884c0f459be16e4dc188df156"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000ac0)={0x14, &(0x7f0000000980)={0x40, 0x1, 0xc0, {0xc0, 0x7, "ffd21781dc27277a44db1541662eef934f701f6359f854c3f6295d4d55e95d2affb8457b7b22cbe6920ee38cf5c4b28a04b394d5f3eeef9911cb597ea1f2211b60c443525a7cea8f41119e19d71184a778efa58ffce56e1d7282772fd1be44ee4928400f355edd68a70ef03ac5c76a458a7fc8c928b90b75f92d65476eefe2e3b3807a5115b79e7d826d7cbf7baac994a056b4ad86f45cb4b4991b1d34765a0151b2718cb08a3f3d14c7a1148e2762df3da8c21f29cac4b428f079214ca7"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000b00)={0x40, 0x17, 0x6f, "85d56ad26217769d2d00acbdbc8026bffe953baec7663c446286a851f64129483b5e4bae6e1991d11832b030d85f209b54d8dcf9bb2c4d6ef480f4dbb114cf5b1a49c32615ea257c05bd10f2e7797491223f13e83f00e9a76c34e2869b9bac099591848199692ef231a449eee4eaf9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c00)={0x20, 0x81, 0x1, "8b"}, &(0x7f0000000c40)={0x20, 0x82, 0x2, "ff4b"}, &(0x7f0000000c80)={0x20, 0x83, 0x2, "05bf"}, &(0x7f0000000cc0)={0x20, 0x84, 0x4, "5903251f"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "cd0cad"}}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x28e35851, 0x7a}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x2000a000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x4, &(0x7f0000000000)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x45, 0x9, 0x0, 0x0, r2}]) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 22m17.205082637s ago: executing program 32 (id=1751): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000900)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x7, 0x5, 0x9, 0x90, 0x3}, 0x52, &(0x7f0000000380)={0x5, 0xf, 0x52, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0xf5, "5bf3db5d52af86732a0672e3864ca2cc"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "0c0574513d655ee846e761616a90908d"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x9, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "107e67a566833aebe113808fbf50209d"}]}, 0x7, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3401}}, {0x92, &(0x7f0000000840)=@string={0x92, 0x3, "f6a2f44f389331cc924d4634dbda9af235c1d04f943e0305db2d8a6dd1c2db5eff5184ff41e61a02cc4823f9221e658a69f14e9f2de1706c7dd328a0e44ed7240b6c7019853bcabd6f9d3fbb9145dc2fdcf2a22bc9cd79e9d45291ac8af8e013d8e35c2864d6dbd0bb2ee9deffc380cdbfbd40c3d56db9e37cbe18a274db4607b2641cad45026077ffaceb8d9c9e87a5"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x430}}, {0x25, &(0x7f00000007c0)=@string={0x25, 0x3, "334bd5b923d49d9f94aa01e9b0c4cb62c9a5c86c4f0fc884c0f459be16e4dc188df156"}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000ac0)={0x14, &(0x7f0000000980)={0x40, 0x1, 0xc0, {0xc0, 0x7, "ffd21781dc27277a44db1541662eef934f701f6359f854c3f6295d4d55e95d2affb8457b7b22cbe6920ee38cf5c4b28a04b394d5f3eeef9911cb597ea1f2211b60c443525a7cea8f41119e19d71184a778efa58ffce56e1d7282772fd1be44ee4928400f355edd68a70ef03ac5c76a458a7fc8c928b90b75f92d65476eefe2e3b3807a5115b79e7d826d7cbf7baac994a056b4ad86f45cb4b4991b1d34765a0151b2718cb08a3f3d14c7a1148e2762df3da8c21f29cac4b428f079214ca7"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000b00)={0x40, 0x17, 0x6f, "85d56ad26217769d2d00acbdbc8026bffe953baec7663c446286a851f64129483b5e4bae6e1991d11832b030d85f209b54d8dcf9bb2c4d6ef480f4dbb114cf5b1a49c32615ea257c05bd10f2e7797491223f13e83f00e9a76c34e2869b9bac099591848199692ef231a449eee4eaf9"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c00)={0x20, 0x81, 0x1, "8b"}, &(0x7f0000000c40)={0x20, 0x82, 0x2, "ff4b"}, &(0x7f0000000c80)={0x20, 0x83, 0x2, "05bf"}, &(0x7f0000000cc0)={0x20, 0x84, 0x4, "5903251f"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "cd0cad"}}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x28e35851, 0x7a}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004004}, 0x2000a000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r4, 0x4, &(0x7f0000000000)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x45, 0x9, 0x0, 0x0, r2}]) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 10m53.478670956s ago: executing program 0 (id=4884): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2010800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r0, &(0x7f00000001c0)='.log\x00', 0xe200, 0x130) 10m53.390939758s ago: executing program 0 (id=4886): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m53.361482091s ago: executing program 0 (id=4889): prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000d40)=ANY=[@ANYBLOB="200139"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="09829a09c1e522c45dd02d4647738bb05027aea71951359dd19a2b56a8a6751ca05de59df14bc6cc555400f3ffffffffffffff0000000000b0b6a1164638e871c1e1116cb62c2ad7fcd12167a6fa332cec39e35d036298009dee213b9f84acec428761e9b85e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000f00)=ANY=[@ANYBLOB="00174e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m52.802137133s ago: executing program 0 (id=4891): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8010, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000140)={0xdf, 0x0, 0x1000}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='io\x00') ftruncate(r2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x0, 0x0, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x8, 0x20, 0x4, 0xffffff4c}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000008c0)={@broadcast, @broadcast, r7}, 0xc) r8 = socket$inet6(0xa, 0x2, 0x0) dup(r3) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffe01, 0x0, 0x6, 0x1000000000}, 0x0, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x2b}, 0x0, @in6=@remote, 0x0, 0x3, 0x1}}, 0xe8) 10m51.251764354s ago: executing program 0 (id=4900): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m50.142559047s ago: executing program 0 (id=4901): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) unshare(0x60400) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x1000000) syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x20140) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./cgroup\x00', 0x0, &(0x7f0000000840)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@errors_continue}, {@inode_readahead_blks}, {@nodelalloc}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@nodiscard}, {@usrquota}, {@bsdgroups}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 10m49.869489003s ago: executing program 33 (id=4901): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) unshare(0x60400) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00'}, 0x10) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x1000000) syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x20140) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./cgroup\x00', 0x0, &(0x7f0000000840)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@errors_continue}, {@inode_readahead_blks}, {@nodelalloc}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@nodiscard}, {@usrquota}, {@bsdgroups}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 9m46.982119495s ago: executing program 6 (id=5169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 9m46.083704611s ago: executing program 6 (id=5173): bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r1 = openat(0xffffffffffffff9c, 0x0, 0xa4c42, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf2520010000000000000000000000000001200100000000000000000000001a0001000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000008000000000fe3200000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000001000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1, 0x0, 0x0) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x18, 0x0, 0xfffffffffe000001}) 9m45.037884646s ago: executing program 6 (id=5179): sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000000)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400}) 9m43.014313277s ago: executing program 6 (id=5186): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c66617374626f6f742c6261636b67726f756e645f67633d6f66662c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236332c6772706a71756f74613d6e6f61636c2c6e6f61636c2c636f6d70726573735f63616368652c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6772706a71756f74613d2c636865636b706f696e743d64697361626c652c00a5a7642f9a660638e921977e7ec85c46e1381b8284280d5c4f8bd7f04c1758f8b1a4d0b187feddbc05de8abe7b7d6b30f602580034939a2b32ed00800eff1b32a09c531ea22204b38485205c110e76dc82eab5f5"], 0x1, 0x550c, &(0x7f00000089c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./mnt\x00', 0x40440, 0x0, 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) fstat(r1, &(0x7f0000000340)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r2, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 9m42.742096562s ago: executing program 6 (id=5190): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="fae731c725a81ab0a2302e3be87d318c81f58a0ab2bb467f59fcfd946a7e227c3360ed8ea818d63c884b4fc205113e43403860fc6cb82f1dffb3eabff3e2ae38de9cc4517aaf53376f", 0x49}], 0x1}}], 0x2, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65b22feddfa9576b82377286", 0xc}], 0x1}}], 0x1, 0xf5ffffffffffffff) 9m42.704021128s ago: executing program 6 (id=5191): r0 = open(0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x9, 0x0, '\x00', @auto=[0x22, 0x10, 0x20, 0x33, 0x20, 0x23, 0x20, 0x1f, 0x21]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x8000}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000700)={0x9, 0x0, [{0x26b, 0x0, 0x406}, {0x40000102, 0x0, 0xfffffffffffffffa}, {0xa65, 0x0, 0x3}, {0xa80, 0x0, 0x8}, {0xb28, 0x0, 0x4}, {0x367, 0x0, 0x1ff}, {0x9b2}, {0x36c, 0x0, 0x40}, {0x3f9, 0x0, 0x5}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x108843, 0x98) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x3000000, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f0000000440)='mnt/encrypted_dir\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000500)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x4, 0xa, 0x8, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff10000400000020800", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "e4bd000000801900", [0x8000000000000000, 0xffffffff9673e35d]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") ioctl$BLKIOMIN(r8, 0x1278, &(0x7f00000002c0)) fchmodat(r6, &(0x7f0000000400)='./file1\x00', 0x20) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x1000, &(0x7f00000020c0)="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", 0xc, 0x0, &(0x7f0000000040)="fb1ebcca7677b4bfeb49ab38"}) openat(0xffffffffffffff9c, 0x0, 0x444ec3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000003c0)) 9m42.665436242s ago: executing program 34 (id=5191): r0 = open(0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x9, 0x0, '\x00', @auto=[0x22, 0x10, 0x20, 0x33, 0x20, 0x23, 0x20, 0x1f, 0x21]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x8000}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000700)={0x9, 0x0, [{0x26b, 0x0, 0x406}, {0x40000102, 0x0, 0xfffffffffffffffa}, {0xa65, 0x0, 0x3}, {0xa80, 0x0, 0x8}, {0xb28, 0x0, 0x4}, {0x367, 0x0, 0x1ff}, {0x9b2}, {0x36c, 0x0, 0x40}, {0x3f9, 0x0, 0x5}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x108843, 0x98) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x3000000, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}]}}) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(&(0x7f0000000440)='mnt/encrypted_dir\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000500)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x4, 0xa, 0x8, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff10000400000020800", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "e4bd000000801900", [0x8000000000000000, 0xffffffff9673e35d]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") ioctl$BLKIOMIN(r8, 0x1278, &(0x7f00000002c0)) fchmodat(r6, &(0x7f0000000400)='./file1\x00', 0x20) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000140)={0x1, 0x1, 0x1000, 0x1000, &(0x7f00000020c0)="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", 0xc, 0x0, &(0x7f0000000040)="fb1ebcca7677b4bfeb49ab38"}) openat(0xffffffffffffff9c, 0x0, 0x444ec3, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000003c0)) 6.649456414s ago: executing program 5 (id=8176): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.639059865s ago: executing program 5 (id=8177): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002b80)={0x2020}, 0x2020) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@delqdisc={0x134, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8, 0x4}, {0x3, 0xfff1}, {0xfff3, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x7f, 0x4}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x2400, 0x1e, 0x1, 0x10, 0x100}}, {0x4}}, {{0x1c, 0x1, {0xb, 0x1, 0x80, 0x7, 0x2, 0x86a, 0x80, 0x3}}, {0xa, 0x2, [0x1, 0x9, 0x8]}}, {{0x1c, 0x1, {0x2, 0xa7, 0xa, 0x4, 0x2, 0x0, 0x8001, 0x2}}, {0x8, 0x2, [0x81, 0x2]}}, {{0x1c, 0x1, {0x84, 0x8, 0xff, 0x6, 0x0, 0x3, 0x6, 0x5}}, {0xe, 0x2, [0x400, 0x3, 0x3, 0x7, 0x4]}}, {{0x1c, 0x1, {0x1, 0x6, 0x8b, 0xe3, 0x2, 0x0, 0x8, 0x6}}, {0x10, 0x2, [0x2, 0x4, 0x4, 0x2, 0x6, 0x9]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0x6, 0x4, 0x3, 0x0, 0xc, 0x2}}, {0x8, 0x2, [0x4, 0x44]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x134}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc7950b7310433edb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001000000082505a8a440000102220109021b00010100a0000904000001070101000905010200"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) 6.186228333s ago: executing program 4 (id=8180): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3810746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@user_xattr}, {@commit={'commit', 0x3d, 0x5}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4}}, {@errors_remount}, {@dioread_nolock}, {@lazytime}, {@quota}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") 6.175982875s ago: executing program 7 (id=8181): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a3c0)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) getdents64(r3, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r4, &(0x7f0000000580)=[{&(0x7f00000003c0)="ff071d6ce89d96666b08e828be032f55097076e40148c200000000fb00000200000000000000000000000000003f000000", 0x31}, {0x0}, {&(0x7f0000000040)="10", 0x1}], 0x3) 6.13172369s ago: executing program 4 (id=8182): socket$inet6(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf090000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0fff", 0x58}], 0x1) 5.296710408s ago: executing program 2 (id=8185): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x894) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000640)}) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x1400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0), 0x12) 5.235982136s ago: executing program 7 (id=8186): syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000300)={[{@nodioread_nolock}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@data_err_ignore}, {@resgid}, {}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46e, &(0x7f0000001040)="$eJzs281rHOUfAPDvzCZp++tL8qv1pbVqtAhBMWnSqj14URREKgp6qMeYbEvotpEmiq3FpiKeBCnoWTyK/gXeRBD1JHj15EkKRXtp6ykyszPtZpsXazaZmP18YLPPM/PszvebeXv2eXYD6FqD2Z8kYkdE/BoR/c3qwgaDzafrV89P3Lh6fiKJ+fnX/kjydteunp8om5av215UhtKI9MOk2MhCM2fPnRxvNOpnivrI7Km3RmbOnnvinVPjJ+on6qfHjhw5fGj06afGnuxInlle1/a9P71/74tvXHp54tilN3/8Oot3R7G+NY9OGcwS/3M+177u0U5vrGI7W8pJT4WBcEdqEZHtrt78/O+PWtzaef3xwgeVBgesqezetGXp1bV5YBNLouoIgGqUN/rs82/5WKeux4Zw5dnmB6As7+vFo7mmJ9KiTW/b59tOGoyIY3N/fZ49Yo3GIQAAWn088dnRvoh478ZXL2V9j/6ba9K4J3/+Lf+7q5hDGYiI/0fE7oi4KyL2RMTdEXnbeyPivlXGc3v/J728yrdcVtb/e6aY21rY/yt7fzFQK2o78/x7k+NTjfrB4n8yFL1bsvroMtv49vlfPllqXWv/L3tk2y/7gkUcl3vaBugmx2fH805pB1y5GLGvZ7H8k5szAUlE7I2IfXf21rvKwtRjX+5fqtHK+S+jA/NM819k6c1l+c9FW/6lpHV+cuq2+cmRrdGoHxwpj4rb/fTzR68utf1V5d8BV+rN55b9395kIGmdr53p7Pb/5fGf9iWv5/PMfcWyd8dnZ8+MRvQlR/P6guVjt15b1sv22fE/dGDx83938Zos//sjIjuIH4iIByPioSL2hyPikYg4sEyOPzy3cv6RVrT/L0ZMxtZFz/9C2/6/80Lt5PffLLX9f7b/D+eloWJJfv1bwWLhZJeL9gBX878DAACA/4o0/w58kg7fLKfp8HDzO/x74n9pY3pm9vHj02+fnmx+V34getNypKu/GA9tTDXqo8lc8Y7N8dGxYqy4HC89VIwbf1rblteHJ6YbkxXnDt1u+xLnf+b3WtXRAWts26JLx/rWPRCgAu3z6OnC6oVXwsUANiu/14butcL5n65XHMD6c/+H7rXY+X+hrW4uADYn93/oXs5/6FLpd1VHAFTI/R+60mp+17+Gha0bI4xqCht1p+SFiLKQboh4FNaoUPWVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DgAA///YH+YM") socket(0x10, 0x3, 0x6) socket$inet(0x2, 0x5, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0x28, 0x10, 0x14, 0x819, 0x7, 0x800, 0x3, 0x8b, 0x1}) creat(&(0x7f0000000040)='./file7\x00', 0x1a0) socket$inet(0x2, 0x801, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) clock_gettime(0x2, &(0x7f0000000500)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000001c0)={r3, r4/1000+10000}, 0x10) write(r2, &(0x7f0000000540)="fbd7c6d8f66fab", 0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'veth0_to_team\x00', &(0x7f0000000240)=@ethtool_eee={0x45, 0x2c6, 0x800, 0x10001, 0x1, 0x88, 0x6, 0xfff, [0x7, 0x8]}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r7, @ANYRES16=r0], 0x0) 4.915079687s ago: executing program 4 (id=8187): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.872728482s ago: executing program 4 (id=8188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x108) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, r3, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r8, 0x701, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xb0, r8, 0x310, 0x70bd2d, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x5}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) 4.42773948s ago: executing program 2 (id=8189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200003c00000000000000000000000000000000000000000000000000000000000003000200000200000089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000004401050000000000000000000000000000000000000000003200000000000000ac090000000000000000000000000000000000000000ff000000000000000000fdfffffffc02000000000000000000000000000000000000320000000000000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000000000000000000000000001000000003c0000000200000000000000000000000000000000000000000000000103400000000000000000000000000000000000000000000000000000000000000000002b"], 0x1fc}}, 0x0) 4.42743297s ago: executing program 2 (id=8190): prlimit64(0x0, 0x2, &(0x7f0000000180)={0x100000000, 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000400000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r3, 0x407, 0x0) (async) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) (async) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000000)=0x4, 0x4) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x190) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) (async) prctl$PR_SET_THP_DISABLE(0x29, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) sync_file_range(r5, 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6572726f72733d636f6e74696e75652c73686f72746e616d653d77696e39352c726f6469722c696f636861727365743d61736369692c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e39352c696f636861727365743d757466382c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c6e66733d6e6f7390096c655f726f2c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6d616363656c7469632c002004368c26352b5c73fd4b83dc"], 0x1, 0x36c, &(0x7f0000000540)="$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") (async) open(0x0, 0x0, 0x100) 4.368814908s ago: executing program 2 (id=8191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0xe) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000840)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0xf8, 0xd1, 0xc, 0x10, 0xb}, 0x1d, 0x0, 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000800)=@string={0x2}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 3.612292455s ago: executing program 5 (id=8193): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x290}]}) inotify_init1(0x80000) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r9}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x100, 0xb38dcf3f7bb4b8a7, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000002900)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x340, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x340, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x2, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x9}, {}, {}, {}, {}, {}, {}, {0xf5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x7, 0xffffffff, 0x6, 'snmp_trap\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x5, 0x22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 3.228270184s ago: executing program 7 (id=8194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f00028004001300050009"], 0x40}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="2d637075202b70696473205ce1423912511c574ca29742108557c354201a88e76b9f5035b67f5abc65cdb7177903afd6f1ab14804ba8305254100446b035fa16abb7c0d66482db7811ff1800178e904a8215cf735135014317e6e69f8be4b135977071798b5bbd8ef4b5ac841b252ce2d018fa493a24f1f030e15d7a7cb0fb649d3b84ee44"], 0xb) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) recvmmsg(r8, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) fstat(r8, &(0x7f00000007c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 2.635235241s ago: executing program 5 (id=8197): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a3c0)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) getdents64(r3, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) writev(r4, &(0x7f0000000580)=[{&(0x7f00000003c0)="ff071d6ce89d96666b08e828be032f55097076e40148c200000000fb00000200000000000000000000000000003f000000", 0x31}, {0x0}, {&(0x7f0000000040)="10", 0x1}], 0x3) 2.217340834s ago: executing program 7 (id=8198): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.216902215s ago: executing program 3 (id=8199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000000803010000000000000000070000011c00048008000a400000000908000940000000070808024000001000"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x80080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 2.215221855s ago: executing program 7 (id=8200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@mcast2, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xa, 0x800000000, 0x800f0, 0x0, 0xcf3c}, {0x4, 0x7fffffffffffffff}, {0x0, 0x8}, 0x70bd28, 0x3505, 0x2, 0x4, 0x0, 0x22}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.159535061s ago: executing program 7 (id=8201): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000002030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000060000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x10, 0xa08, 0x0, 0xb, 0x441, 0x5, 0xa, 0x4, 0x200, 0xd, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x47, 0x5, 0xfffff801, 0x28, @remote, @local, 0x10, 0x700, 0x0, 0xfffffff7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x40, 0x20, 0x1000, 0xffff8001, {{0x50, 0x4, 0x0, 0x2c, 0x140, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @loopback, {[@timestamp_addr={0x44, 0x24, 0x82, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x4c}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x8}, {@private=0xa010102, 0x7}]}, @rr={0x7, 0x1f, 0x26, [@dev={0xac, 0x14, 0x14, 0x27}, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @multicast2]}, @cipso={0x86, 0x5d, 0x1, [{0x6, 0x10, "b573e76a32ef9e4296147158f698"}, {0x0, 0xe, "a3403a4792562436272b74d2"}, {0x1, 0x10, "f1e6a8ed163b997e2e202b292787"}, {0x5, 0x8, "4264633dcd0f"}, {0x1, 0xa, "283f093fee080d52"}, {0x5, 0xc, "c37eea1b848cbe7c2230"}, {0x2, 0xb, "121dec138ad28c9a86"}]}, @cipso={0x86, 0x58, 0x0, [{0x7, 0xa, "a176b11fcf0cc755"}, {0x1, 0x8, "0330b1caf548"}, {0x6, 0xf, "fdb701759cbebc0e2b1daf2fc6"}, {0x2, 0x7, "bff186b024"}, {0x0, 0x6, "65bdfec1"}, {0x2, 0xb, "a7872cdb19694fcc39"}, {0x1, 0xd, "5d4ce3d1f27b7a4c9b3537"}, {0x1, 0x7, "c339e8162d"}, {0x0, 0x5, "6968dc"}]}, @timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}, {@multicast1, 0xffff}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x8, [{@empty, 0x1}, {@multicast1, 0x1}, {@loopback}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @dev}, &(0x7f0000000500)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x6, 0x6, {{0x2c, 0x4, 0x2, 0x9, 0xb0, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x44, 0xd4, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@loopback, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x5}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic={0x83, 0x2}, @rr={0x7, 0x17, 0xab, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @empty, @loopback]}, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0xb, [{@multicast2, 0xf3}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x1}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0x3c92}]}, @end]}}}}}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002840)={&(0x7f00000028c0)=ANY=[@ANYBLOB="b8210000", @ANYRES16=r2, @ANYBLOB="040028bd7000ffdbdf250c0000000c00018008000300030000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626f6e640000001400020076657468315f746f5f6272696467650008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="1400020076657468305f746f5f626f6e640000001400020076657468305f766972745f77696669001400020070696d0709000000000000000000000008000100c6c6d1f0981b0b1ba3e7bf4a34dc970f04b3cafb2a1c212c4e92c5e983d12f7575d6e435d729127532d5a28d6979b5d40b8070c7d7fe854541a305d0a9f59136b9c95dbed8565c969edc31dadb6e74c1bbe7b947804e3324f4", @ANYRES32=r8, @ANYBLOB="4400038008000200ffff00002b00050040e1675ca512d3ce5aa86211c56d790e46601f4d802b0821848e1c3db5700136aa58a8dfd0c81500040001000800020008000000"], 0x21b8}, 0x1, 0x0, 0x0, 0x10}, 0x8800) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000680)) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.745134985s ago: executing program 5 (id=8202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x57, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000000803010000000000000000070000011c00048008000a400000000908000940000000070808024000001000"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x80080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 1.739164636s ago: executing program 4 (id=8203): mkdir(&(0x7f0000000200)='./file0\x00', 0x28e08a7aa33ba155) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x41040, 0x0, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040), 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 1.147807952s ago: executing program 3 (id=8204): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x8000, 0x0, 0x1, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1.147442242s ago: executing program 2 (id=8205): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000380)='./bus\x00', 0x800804, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x275, &(0x7f00000003c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r3, 0x88, 0x64, 0x0, &(0x7f00000004c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x0, 0x0, 0x7}}) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7ff, 0x1fb, 0x1, 0x2}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/7, 0x7}, {0x0, 0x500}], 0x2, 0xe7, 0xf) 1.066850342s ago: executing program 3 (id=8206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000120018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r5}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000002c0)=0x8, 0x20) 1.019661668s ago: executing program 4 (id=8207): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x11, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x7, 0x0, &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002b80)={0x2020}, 0x2020) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@delqdisc={0x134, 0x25, 0x400, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x8, 0x4}, {0x3, 0xfff1}, {0xfff3, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x7f, 0x4}}, @TCA_STAB={0xc8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x2400, 0x1e, 0x1, 0x10, 0x100}}, {0x4}}, {{0x1c, 0x1, {0xb, 0x1, 0x80, 0x7, 0x2, 0x86a, 0x80, 0x3}}, {0xa, 0x2, [0x1, 0x9, 0x8]}}, {{0x1c, 0x1, {0x2, 0xa7, 0xa, 0x4, 0x2, 0x0, 0x8001, 0x2}}, {0x8, 0x2, [0x81, 0x2]}}, {{0x1c, 0x1, {0x84, 0x8, 0xff, 0x6, 0x0, 0x3, 0x6, 0x5}}, {0xe, 0x2, [0x400, 0x3, 0x3, 0x7, 0x4]}}, {{0x1c, 0x1, {0x1, 0x6, 0x8b, 0xe3, 0x2, 0x0, 0x8, 0x6}}, {0x10, 0x2, [0x2, 0x4, 0x4, 0x2, 0x6, 0x9]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0x6, 0x4, 0x3, 0x0, 0xc, 0x2}}, {0x8, 0x2, [0x4, 0x44]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x134}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc7950b7310433edb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001000000082505a8a440000102220109021b00010100a0000904000001070101000905010200"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) 1.019323628s ago: executing program 3 (id=8208): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000002c0)='ext4_get_implied_cluster_alloc_exit\x00', r6, 0x0, 0xa}, 0x18) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYRES32=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x80000000, r0, 'id1\x00'}) sendmmsg$unix(r9, &(0x7f0000000300)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x200590c4}}], 0x1, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r8, 0x0, 0xffff}, 0x18) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6, 0xfeffff, 0x0, 0x2}]) 845.539451ms ago: executing program 5 (id=8209): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000300)={[{@quota}, {@oldalloc}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@stripe={'stripe', 0x3d, 0xffffffffffffffff}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 267.719115ms ago: executing program 2 (id=8210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @ptr={0x70742a85, 0x11, 0x0, 0x0, 0xfcffffff, 0x1000000040}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 68.641641ms ago: executing program 3 (id=8211): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=8212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994214d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) kernel console output (not intermixed with test programs): sb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1544.325290][T17609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.444191][T17609] usb 4-1: config 0 descriptor?? [ 1544.453986][T17609] usb 4-1: can't set config #0, error -71 [ 1544.482666][T17609] usb 4-1: USB disconnect, device number 76 [ 1544.981069][ T515] usb 6-1: Using ep0 maxpacket: 32 [ 1544.988859][ T515] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1544.997370][ T515] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1545.006335][ T515] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1545.015430][ T515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1545.025260][ T515] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1545.035032][ T515] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1545.049562][ T515] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1545.066121][ T515] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.101880][ T515] usb 6-1: config 0 descriptor?? [ 1545.107858][ T28] audit: type=1400 audit(1545.078:2800): avc: denied { write } for pid=25657 comm="syz.3.7403" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1545.249514][T25671] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7406'. [ 1545.560383][ T515] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1545.596622][ T515] usb 6-1: USB disconnect, device number 14 [ 1545.609467][ T515] usblp0: removed [ 1546.021132][T17606] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1546.211088][T17606] usb 5-1: Using ep0 maxpacket: 8 [ 1546.217395][T17606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1546.235471][T17606] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1546.253585][T17606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.277661][T17606] usb 5-1: config 0 descriptor?? [ 1546.300178][T25707] netlink: 'syz.3.7420': attribute type 10 has an invalid length. [ 1546.498291][T17606] usb 5-1: USB disconnect, device number 63 [ 1548.037646][T25724] Unsupported ieee802154 address type: 0 [ 1548.058538][ T28] audit: type=1400 audit(1548.018:2801): avc: denied { bind } for pid=25719 comm="syz.5.7425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1548.843269][T25750] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7436'. [ 1548.852533][T25750] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7436'. [ 1548.867013][T25750] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7436'. [ 1549.755064][T25758] device ip6gre1 entered promiscuous mode [ 1549.771748][T17606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1549.779390][T17606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1549.802502][ T335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1549.811554][T25759] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1550.246932][T17606] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1550.431103][T17606] usb 4-1: Using ep0 maxpacket: 8 [ 1550.438424][T17606] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.458567][T17606] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1550.478360][T17606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.501009][T17606] usb 4-1: config 0 descriptor?? [ 1550.561177][T17606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1550.660213][T25773] netlink: 'syz.7.7442': attribute type 13 has an invalid length. [ 1552.297802][T25773] gretap0: refused to change device tx_queue_len [ 1552.304491][T25773] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1552.346079][T17609] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1552.358984][ T336] usb 4-1: USB disconnect, device number 77 [ 1552.720449][T25779] device wireguard0 entered promiscuous mode [ 1552.745350][T25789] futex_wake_op: syz.7.7447 tries to shift op by -1; fix this program [ 1553.152549][T25797] incfs: Backing dir is not set, filesystem can't be mounted. [ 1553.160389][T25797] incfs: mount failed -2 [ 1553.477208][T25802] x_tables: duplicate underflow at hook 1 [ 1553.601107][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1553.744655][T25813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7454'. [ 1553.895861][T25816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7455'. [ 1553.906338][T25815] netlink: 324 bytes leftover after parsing attributes in process `syz.7.7453'. [ 1553.938471][T25815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7453'. [ 1554.551120][ T515] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1554.741120][ T515] usb 5-1: Using ep0 maxpacket: 32 [ 1554.749617][ T515] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.792656][ T515] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.807634][ T515] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1554.831188][ T515] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1554.859410][ T515] usb 5-1: Product: syz [ 1554.874579][ T515] usb 5-1: Manufacturer: syz [ 1555.711093][ T335] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1555.742580][ T515] hub 5-1:4.0: USB hub found [ 1555.815844][T25846] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7463'. [ 1555.827975][T25846] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7463'. [ 1555.901247][ T335] usb 3-1: Using ep0 maxpacket: 8 [ 1555.909706][ T335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.228247][ T335] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1556.237941][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.258154][ T335] usb 3-1: config 0 descriptor?? [ 1556.844326][ T335] usb 3-1: USB disconnect, device number 60 [ 1557.150498][ T515] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 1557.221534][ T515] usb 5-1: USB disconnect, device number 64 [ 1557.586442][T25869] xt_CT: No such helper "pptp" [ 1558.678941][T25886] overlayfs: failed to resolve './bus': -2 [ 1560.491101][ T336] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1560.691079][ T336] usb 4-1: Using ep0 maxpacket: 32 [ 1560.697612][ T336] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.708692][ T336] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.720444][ T336] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1560.732890][ T336] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1560.742045][ T336] usb 4-1: Product: syz [ 1560.746502][ T336] usb 4-1: Manufacturer: syz [ 1560.753053][ T336] hub 4-1:4.0: USB hub found [ 1560.811114][ T19] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1560.953939][ T336] hub 4-1:4.0: 2 ports detected [ 1561.001161][ T19] usb 6-1: Using ep0 maxpacket: 8 [ 1561.007618][ T19] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.018316][ T19] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1561.027638][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1561.040884][ T19] usb 6-1: config 0 descriptor?? [ 1561.251420][ T19] usb 6-1: USB disconnect, device number 15 [ 1561.681120][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1562.271585][ T336] hub 4-1:4.0: activate --> -90 [ 1562.480294][ T28] audit: type=1400 audit(1562.458:2802): avc: denied { nlmsg_write } for pid=25935 comm="syz.7.7495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1563.242033][T25954] netlink: 'syz.2.7498': attribute type 12 has an invalid length. [ 1563.465065][T17609] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1563.691381][T17609] usb 5-1: Using ep0 maxpacket: 32 [ 1563.698423][T17609] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1563.711541][T10618] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1563.717711][T17609] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1563.787697][T17609] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1563.819584][T17609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1563.893639][T17609] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1563.929208][T17609] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1563.981408][T10618] usb 6-1: Using ep0 maxpacket: 8 [ 1563.986811][T17609] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1564.016330][T10618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.028582][T10618] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1564.036567][T17609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.053310][T10618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.136720][T17609] usb 5-1: config 0 descriptor?? [ 1564.149426][T10618] usb 6-1: config 0 descriptor?? [ 1564.321832][ T336] hub 4-1:4.0: hub_ext_port_status failed (err = -32) [ 1564.366137][ T336] usb 6-1: USB disconnect, device number 16 [ 1565.400165][T17609] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1565.420896][T17609] usb 5-1: USB disconnect, device number 65 [ 1565.484925][T17609] usblp0: removed [ 1568.361167][ T335] usb 4-1: USB disconnect, device number 78 [ 1568.380033][T26006] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7510'. [ 1568.539654][T26006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7510'. [ 1569.187115][T26033] netlink: 1420 bytes leftover after parsing attributes in process `syz.7.7519'. [ 1569.414766][T26044] overlayfs: failed to resolve './bus': -2 [ 1569.493531][T17609] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1569.606412][T26046] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7525'. [ 1569.851232][T17609] usb 5-1: Using ep0 maxpacket: 8 [ 1569.857585][T17609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.885647][T17609] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1569.901111][T17609] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.921201][T17609] usb 5-1: config 0 descriptor?? [ 1570.976529][ T336] usb 5-1: USB disconnect, device number 66 [ 1572.828106][T26120] overlayfs: failed to resolve './bus': -2 [ 1574.010887][T26137] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7551'. [ 1574.530602][T26139] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1575.331097][ T515] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1575.351166][T17609] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1575.561162][T17609] usb 8-1: Using ep0 maxpacket: 8 [ 1575.568511][T17609] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.590541][T26160] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7560'. [ 1575.604238][T17609] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1575.614757][T17609] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.646814][T17609] usb 8-1: config 0 descriptor?? [ 1575.829323][ T515] usb 4-1: Using ep0 maxpacket: 16 [ 1575.840318][ T515] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.851538][ T515] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.861696][ T515] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1575.868599][ T515] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1575.868631][ T515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.871660][ T515] usb 4-1: config 0 descriptor?? [ 1575.895335][T10618] usb 8-1: USB disconnect, device number 44 [ 1576.015926][T26169] overlayfs: failed to resolve './bus': -2 [ 1576.378058][ T515] hid-generic 0003:1E71:2009.002C: unknown main item tag 0x0 [ 1576.560437][ T515] hid-generic 0003:1E71:2009.002C: unknown main item tag 0x0 [ 1576.568659][ T515] hid-generic 0003:1E71:2009.002C: unknown main item tag 0x0 [ 1576.576993][ T515] hid-generic 0003:1E71:2009.002C: unknown main item tag 0x0 [ 1577.041138][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1578.181765][ T515] hid-generic 0003:1E71:2009.002C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1578.203204][ T515] usb 4-1: USB disconnect, device number 79 [ 1578.261703][T26180] fido_id[26180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1578.356682][T26196] syz.7.7569[26196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1578.356761][T26196] syz.7.7569[26196] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1578.510692][T26199] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7568'. [ 1579.161186][ T515] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1579.226242][T26216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7576'. [ 1579.236197][T26216] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1580.775491][ T28] audit: type=1400 audit(2000000017.240:2803): avc: denied { bind } for pid=26213 comm="syz.5.7576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1580.798269][ T28] audit: type=1400 audit(2000000017.270:2804): avc: denied { name_bind } for pid=26213 comm="syz.5.7576" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1580.819382][ T28] audit: type=1400 audit(2000000017.270:2805): avc: denied { node_bind } for pid=26213 comm="syz.5.7576" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1580.821186][ T515] usb 3-1: Using ep0 maxpacket: 8 [ 1580.888819][T26230] overlayfs: failed to resolve './bus': -2 [ 1580.932182][ T515] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.958687][ T515] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1580.980092][ T515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.017919][ T515] usb 3-1: config 0 descriptor?? [ 1581.952171][T17609] usb 3-1: USB disconnect, device number 61 [ 1582.336464][ T335] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1582.561171][ T335] usb 8-1: Using ep0 maxpacket: 8 [ 1582.569561][ T335] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.660844][ T335] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1582.716596][ T335] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.788031][ T335] usb 8-1: config 0 descriptor?? [ 1583.120372][ T335] usb 8-1: USB disconnect, device number 45 [ 1583.508189][T17609] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1583.781151][T17609] usb 3-1: Using ep0 maxpacket: 8 [ 1583.789309][T17609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.841282][T17609] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1583.939477][T17609] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.059020][T17609] usb 3-1: config 0 descriptor?? [ 1584.109358][T26271] netlink: 'syz.3.7589': attribute type 12 has an invalid length. [ 1584.166117][ T28] audit: type=1326 audit(2000000020.630:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26275 comm="syz.4.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3920b8f749 code=0x7ffc0000 [ 1584.200488][ T28] audit: type=1326 audit(2000000020.660:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26275 comm="syz.4.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3920b8f749 code=0x7ffc0000 [ 1584.247315][ T28] audit: type=1326 audit(2000000020.660:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26275 comm="syz.4.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3920b8f749 code=0x7ffc0000 [ 1584.283669][ T28] audit: type=1326 audit(2000000020.660:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26275 comm="syz.4.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f3920b8f749 code=0x7ffc0000 [ 1584.307609][ T28] audit: type=1326 audit(2000000020.660:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3920bc2005 code=0x7ffc0000 [ 1584.350667][ T28] audit: type=1326 audit(2000000020.810:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26278 comm="syz.4.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3920b8f749 code=0x7ffc0000 [ 1584.424154][ T28] audit: type=1326 audit(2000000020.840:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26275 comm="syz.4.7593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3920b2b829 code=0x7ffc0000 [ 1584.461219][ T515] usb 3-1: USB disconnect, device number 62 [ 1584.615670][T17609] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1584.623364][T17606] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1584.751089][ T336] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1584.811104][T17609] usb 8-1: Using ep0 maxpacket: 8 [ 1584.818981][T17606] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1584.828168][T17609] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1584.837331][T17606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.845384][T17609] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1584.853540][T17606] usb 4-1: Product: syz [ 1584.857730][T17606] usb 4-1: Manufacturer: syz [ 1584.862564][T17609] usb 8-1: Product: syz [ 1584.866788][T17609] usb 8-1: Manufacturer: syz [ 1584.871444][T17606] usb 4-1: SerialNumber: syz [ 1584.876364][T17609] usb 8-1: SerialNumber: syz [ 1584.931079][ T336] usb 6-1: Using ep0 maxpacket: 8 [ 1584.937464][ T336] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1584.947827][ T336] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1584.957169][ T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.966278][ T336] usb 6-1: config 0 descriptor?? [ 1585.077355][T26295] netlink: 'syz.2.7599': attribute type 27 has an invalid length. [ 1585.088801][T26295] device ip6tnl2 left promiscuous mode [ 1585.101329][ T336] usb 4-1: USB disconnect, device number 80 [ 1585.109242][T26295] device ip6gre1 left promiscuous mode [ 1585.147536][T26295] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1585.158270][T17609] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1585.179430][T26295] device veth0_vlan left promiscuous mode [ 1585.185567][T26295] device veth0_vlan entered promiscuous mode [ 1585.192942][T26295] device veth1_macvtap left promiscuous mode [ 1585.208877][T26295] device veth1_macvtap entered promiscuous mode [ 1585.225359][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1585.232978][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1585.240555][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1585.249254][T23065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.256353][T23065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.264080][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1585.272592][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1585.280947][T23065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.288059][T23065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.295838][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1585.311449][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1585.319996][T17606] usb 6-1: USB disconnect, device number 17 [ 1585.334527][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1585.342946][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1585.351161][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1585.364485][ T336] usb 8-1: USB disconnect, device number 46 [ 1585.375767][ T336] usblp0: removed [ 1585.380221][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1585.392771][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1585.401153][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1585.409398][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1585.418199][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1585.427170][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1585.437200][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1585.445852][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1585.454362][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1585.463100][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1585.471606][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1585.479791][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1585.488444][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1585.497336][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1585.505892][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1585.514535][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1585.522580][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1585.530143][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1585.537745][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1585.546175][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1585.554469][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1585.562237][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1585.571505][ T515] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1585.579152][ T515] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1585.587406][ T515] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1585.595608][ T515] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1585.603460][ T515] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1585.611357][ T515] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1585.744944][T26301] xt_bpf: check failed: parse error [ 1585.821303][ T515] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1585.864021][ T515] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1585.881541][ T515] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1585.891203][T17606] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1586.120508][T17603] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1586.151083][T17606] usb 5-1: Using ep0 maxpacket: 8 [ 1586.158727][T17606] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1586.172161][T17606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1586.185499][T17606] usb 5-1: Product: syz [ 1586.192948][T17606] usb 5-1: Manufacturer: syz [ 1586.201415][ T336] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1586.202021][T17606] usb 5-1: SerialNumber: syz [ 1586.291093][ T515] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1586.312215][T17603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.327600][T17603] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1586.346819][T17603] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1586.365316][T17603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1586.382717][T17603] usb 4-1: SerialNumber: syz [ 1586.401389][T17603] usb 4-1: 0:2 : does not exist [ 1586.471061][ T515] usb 8-1: Using ep0 maxpacket: 8 [ 1586.477352][ T515] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.505239][ T515] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1586.505623][T17606] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1586.525893][ T515] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.542333][ T515] usb 8-1: config 0 descriptor?? [ 1586.716453][ T515] usb 5-1: USB disconnect, device number 67 [ 1586.725180][ T515] usblp0: removed [ 1586.774853][ T336] usb 8-1: USB disconnect, device number 47 [ 1586.805773][T10618] usb 4-1: USB disconnect, device number 81 [ 1587.037447][T26321] netlink: 'syz.5.7607': attribute type 12 has an invalid length. [ 1587.465874][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1587.465889][ T28] audit: type=1400 audit(2000000023.930:2815): avc: denied { create } for pid=26333 comm="syz.7.7614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1588.939342][T26357] syz.3.7620[26357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1588.939462][T26357] syz.3.7620[26357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1588.971953][T26357] syz.3.7620[26357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1588.992493][T26359] overlayfs: failed to resolve './bus': -2 [ 1588.995620][T26357] syz.3.7620[26357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1589.111071][ T336] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1589.331136][ T336] usb 8-1: Using ep0 maxpacket: 16 [ 1589.337886][ T336] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.349120][ T336] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1589.359828][ T336] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1589.369256][ T336] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.377413][ T336] usb 8-1: Product: syz [ 1589.381654][ T336] usb 8-1: Manufacturer: syz [ 1589.386304][ T336] usb 8-1: SerialNumber: syz [ 1589.581068][ T515] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1590.023356][T26386] netlink: 'syz.5.7627': attribute type 12 has an invalid length. [ 1590.033890][ T336] usb 8-1: 0:2 : does not exist [ 1590.041536][ T336] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1590.075513][ T336] usb 8-1: USB disconnect, device number 48 [ 1590.131951][ T515] usb 4-1: Using ep0 maxpacket: 8 [ 1590.142380][ T515] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.236868][ T515] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1590.246244][ T515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.273265][ T515] usb 4-1: config 0 descriptor?? [ 1590.490682][T25124] udevd[25124]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1590.519015][ T336] usb 4-1: USB disconnect, device number 82 [ 1590.608714][T26400] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1591.011059][T17603] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1591.224271][T17603] usb 5-1: Using ep0 maxpacket: 8 [ 1591.267802][T17603] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.279891][T17603] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1591.289613][T17603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.298517][T17603] usb 5-1: config 0 descriptor?? [ 1591.705815][T26426] netlink: 196 bytes leftover after parsing attributes in process `syz.7.7637'. [ 1592.529533][T17609] usb 5-1: USB disconnect, device number 68 [ 1592.911099][T17606] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1593.091082][T17606] usb 4-1: Using ep0 maxpacket: 8 [ 1593.097576][T17606] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.108525][T17606] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1593.117819][T17606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.130366][T17606] usb 4-1: config 0 descriptor?? [ 1593.222184][ T28] audit: type=1400 audit(2000000029.690:2816): avc: denied { append } for pid=26442 comm="syz.4.7644" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1594.057626][T10618] usb 4-1: USB disconnect, device number 83 [ 1594.236461][ T28] audit: type=1400 audit(2000000030.700:2817): avc: denied { accept } for pid=26442 comm="syz.4.7644" path="socket:[106130]" dev="sockfs" ino=106130 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1594.926118][T26472] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7651'. [ 1595.474675][T26498] incfs: Backing dir is not set, filesystem can't be mounted. [ 1595.507568][T26498] incfs: mount failed -2 [ 1596.241307][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1596.241328][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1597.299865][ T28] audit: type=1400 audit(2000000033.760:2818): avc: denied { create } for pid=26515 comm="syz.2.7664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1597.521151][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1597.551539][T26530] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1597.613097][T10618] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1597.638525][T10618] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1598.041104][T10618] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1598.151119][ T515] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1598.173435][T26537] netlink: 'syz.3.7671': attribute type 3 has an invalid length. [ 1598.201156][T10618] usb 8-1: device descriptor read/64, error -71 [ 1598.451076][T17609] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1598.481566][T10618] usb 8-1: device descriptor read/64, error -71 [ 1598.561231][ T515] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1598.641082][T17609] usb 4-1: Using ep0 maxpacket: 32 [ 1598.647463][T17609] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.659320][T17609] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1598.668463][T17609] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.676583][T17609] usb 4-1: Product: syz [ 1598.680796][T17609] usb 4-1: Manufacturer: syz [ 1598.685452][T17609] usb 4-1: SerialNumber: syz [ 1598.690710][T17609] usb 4-1: config 0 descriptor?? [ 1598.696461][T17609] usb 4-1: bad CDC descriptors [ 1598.701442][T17609] usb 4-1: unsupported MDLM descriptors [ 1598.751138][T10618] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1598.901106][T10618] usb 8-1: device descriptor read/64, error -71 [ 1598.910145][ T28] audit: type=1400 audit(2000000035.370:2819): avc: granted { setsecparam } for pid=26536 comm="syz.3.7671" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1598.916053][ T515] usb 4-1: USB disconnect, device number 84 [ 1599.174426][T10618] usb 8-1: device descriptor read/64, error -71 [ 1599.291174][T10618] usb usb8-port1: attempt power cycle [ 1599.921393][T10618] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1599.962099][T10618] usb 8-1: device descriptor read/8, error -71 [ 1600.112256][T10618] usb 8-1: device descriptor read/8, error -71 [ 1601.931061][ T515] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1602.121078][ T515] usb 4-1: Using ep0 maxpacket: 32 [ 1602.127723][ T515] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1602.146566][ T515] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1602.159884][ T515] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1602.178717][ T515] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1602.198279][ T515] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1602.245038][ T515] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1602.258290][ T515] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1602.268009][ T515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.276992][ T515] usb 4-1: config 0 descriptor?? [ 1602.682685][ T515] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1602.708116][ T515] usb 4-1: USB disconnect, device number 85 [ 1602.739865][ T515] usblp0: removed [ 1603.283450][ T515] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1603.702193][T26620] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1603.741088][ T515] usb 4-1: Using ep0 maxpacket: 32 [ 1603.747685][ T515] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1603.756524][ T515] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1603.765540][ T515] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1603.775023][ T515] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1603.785126][ T515] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1603.795249][ T515] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1603.808753][ T515] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1603.818076][ T515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.827156][ T515] usb 4-1: config 0 descriptor?? [ 1604.277117][ T515] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1604.315384][T17606] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1604.332763][T26628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.340056][T26628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.433950][T26635] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7699'. [ 1604.471248][T17606] usb 5-1: device descriptor read/64, error -71 [ 1604.548530][T10618] usb 4-1: USB disconnect, device number 86 [ 1604.567763][T10618] usblp0: removed [ 1604.660354][ T28] audit: type=1400 audit(2000000041.120:2820): avc: denied { map } for pid=26650 comm="syz.5.7702" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1604.794072][T26660] netlink: 'syz.2.7705': attribute type 12 has an invalid length. [ 1604.802257][T17606] usb 5-1: device descriptor read/64, error -71 [ 1605.071093][T17606] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1605.217457][T26668] netlink: 324 bytes leftover after parsing attributes in process `syz.3.7707'. [ 1605.226799][T17606] usb 5-1: device descriptor read/64, error -71 [ 1605.233409][T26668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7707'. [ 1605.572440][T17606] usb 5-1: device descriptor read/64, error -71 [ 1605.691478][T17606] usb usb5-port1: attempt power cycle [ 1606.101096][T17606] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1606.142196][T17606] usb 5-1: device descriptor read/8, error -71 [ 1606.362275][T17606] usb 5-1: device descriptor read/8, error -71 [ 1608.104877][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7714'. [ 1608.192543][T10618] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1609.201179][T10618] usb 4-1: Using ep0 maxpacket: 8 [ 1609.211944][T10618] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.236091][T10618] usb 4-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1609.271563][T10618] usb 4-1: config 2 interface 0 has no altsetting 0 [ 1609.282722][T26708] netlink: 'syz.7.7719': attribute type 12 has an invalid length. [ 1609.293008][T10618] usb 4-1: string descriptor 0 read error: -71 [ 1609.305812][T10618] usb 4-1: New USB device found, idVendor=04e2, idProduct=141a, bcdDevice=ca.10 [ 1609.321221][T10618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.340697][T10618] usb 4-1: can't set config #2, error -71 [ 1609.354890][T10618] usb 4-1: USB disconnect, device number 87 [ 1609.716950][T26722] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7724'. [ 1609.726576][ T28] audit: type=1400 audit(2000000046.200:2821): avc: denied { getopt } for pid=26721 comm="syz.3.7724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1610.456653][T17606] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1610.491471][T17606] usb 5-1: Using ep0 maxpacket: 8 [ 1610.497831][T17606] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1610.508283][T17606] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1610.517579][T17606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.530376][T17606] usb 5-1: config 0 descriptor?? [ 1610.621786][T17609] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1610.658773][T26737] sch_fq: defrate 0 ignored. [ 1610.752760][T17606] usb 5-1: USB disconnect, device number 72 [ 1610.781109][T17609] usb 4-1: device descriptor read/64, error -71 [ 1610.787626][T17610] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1611.003661][T17610] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1611.049935][T17610] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1611.247139][T17609] usb 4-1: device descriptor read/64, error -71 [ 1611.296896][T17610] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1611.339042][T17610] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.436623][T17610] usb 8-1: config 0 descriptor?? [ 1611.624156][T17609] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1611.739110][T26759] netlink: 'syz.4.7738': attribute type 12 has an invalid length. [ 1612.321100][T17609] usb 4-1: device descriptor read/64, error -71 [ 1612.435080][T26731] tipc: Enabling of bearer rejected, already enabled [ 1612.448868][T26771] syz.2.7742[26771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1612.448948][T26771] syz.2.7742[26771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1612.457791][T17610] usbhid 8-1:0.0: can't add hid device: -71 [ 1612.474159][T26771] syz.2.7742[26771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1612.477998][T26771] syz.2.7742[26771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1612.488787][T17610] usbhid: probe of 8-1:0.0 failed with error -71 [ 1612.512973][T17610] usb 8-1: USB disconnect, device number 53 [ 1612.591071][T17609] usb 4-1: device descriptor read/64, error -71 [ 1612.711328][T17609] usb usb4-port1: attempt power cycle [ 1613.185631][ T28] audit: type=1400 audit(2000000049.650:2822): avc: denied { bind } for pid=26791 comm="syz.5.7750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1613.709221][T26797] netlink: 'syz.7.7751': attribute type 12 has an invalid length. [ 1614.029314][T10618] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1615.141057][T10618] usb 3-1: device descriptor read/64, error -71 [ 1615.355714][T17609] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1615.489829][T26833] netlink: 196 bytes leftover after parsing attributes in process `syz.5.7762'. [ 1615.511120][T17609] usb 5-1: device descriptor read/64, error -71 [ 1615.791173][T17609] usb 5-1: device descriptor read/64, error -71 [ 1616.071197][T17609] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1616.301060][T17609] usb 5-1: device descriptor read/64, error -71 [ 1616.521074][T10618] usb 3-1: device descriptor read/64, error -71 [ 1616.591120][T17609] usb 5-1: device descriptor read/64, error -71 [ 1616.711174][T17609] usb usb5-port1: attempt power cycle [ 1616.791052][T10618] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1616.840320][ T28] audit: type=1400 audit(2000000053.300:2823): avc: denied { accept } for pid=26844 comm="syz.5.7767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1616.937377][T26843] xt_TCPMSS: Only works on TCP SYN packets [ 1617.002115][T26855] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1617.298420][T26857] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7769'. [ 1617.371342][T17609] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1617.532914][T17609] usb 5-1: device descriptor read/8, error -71 [ 1617.609484][T26858] incfs: Backing dir is not set, filesystem can't be mounted. [ 1617.617403][T26858] incfs: mount failed -2 [ 1617.680023][ T28] audit: type=1400 audit(2000000054.070:2824): avc: denied { mount } for pid=26840 comm="syz.3.7765" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1617.712780][T17609] usb 5-1: device descriptor read/8, error -71 [ 1617.761173][ T28] audit: type=1400 audit(2000000054.070:2825): avc: denied { mounton } for pid=26840 comm="syz.3.7765" path="/378/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1617.830981][ T28] audit: type=1400 audit(2000000054.200:2826): avc: denied { create } for pid=26864 comm="syz.2.7771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 1617.856569][ T28] audit: type=1400 audit(2000000054.200:2827): avc: denied { write } for pid=26864 comm="syz.2.7771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 1617.883314][ T28] audit: type=1400 audit(2000000054.200:2828): avc: denied { read } for pid=26864 comm="syz.2.7771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 1617.905167][ T28] audit: type=1400 audit(2000000054.200:2829): avc: denied { create } for pid=26864 comm="syz.2.7771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 1617.926917][ T28] audit: type=1400 audit(2000000054.200:2830): avc: denied { write } for pid=26864 comm="syz.2.7771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 1618.383285][ T28] audit: type=1400 audit(2000000054.200:2831): avc: denied { create } for pid=26864 comm="syz.2.7771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1618.416290][ T28] audit: type=1400 audit(2000000054.200:2832): avc: denied { nlmsg_write } for pid=26864 comm="syz.2.7771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 1620.146568][T26906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7783'. [ 1620.461066][ T19] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1620.641047][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 1620.641051][T17609] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1620.655222][ T19] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1620.663659][ T19] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1620.672512][ T19] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1620.681182][T17606] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1620.683010][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1620.698962][ T19] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1620.708734][ T19] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1620.721936][ T19] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1620.731187][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.740642][ T19] usb 6-1: config 0 descriptor?? [ 1620.796318][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7792'. [ 1620.805418][T26926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.813361][T17609] usb 8-1: device descriptor read/64, error -71 [ 1620.813607][T26926] device bridge_slave_0 left promiscuous mode [ 1620.826108][T26926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.862345][T17606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1620.873454][T17606] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1620.883349][T17606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1620.895118][T17606] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1620.910058][T17606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.918171][T17606] usb 4-1: Product: syz [ 1620.922408][T17606] usb 4-1: Manufacturer: syz [ 1620.927036][T17606] usb 4-1: SerialNumber: syz [ 1620.935938][T17606] usb 4-1: config 0 descriptor?? [ 1620.942085][T17606] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1620.952916][ T19] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1620.966006][ T19] usb 6-1: USB disconnect, device number 19 [ 1620.982282][ T19] usblp0: removed [ 1621.101113][T17609] usb 8-1: device descriptor read/64, error -71 [ 1621.153907][T26936] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7794'. [ 1621.411119][T17609] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1621.420695][T17606] usb 4-1: USB disconnect, device number 91 [ 1621.571071][T17609] usb 8-1: device descriptor read/64, error -71 [ 1621.761065][ T19] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1621.854028][T17609] usb 8-1: device descriptor read/64, error -71 [ 1621.971261][T17609] usb usb8-port1: attempt power cycle [ 1622.231062][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 1622.246970][ T19] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1622.261097][ T19] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1622.273498][ T19] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1622.282863][ T19] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1622.292865][ T19] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1622.302807][ T19] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1622.316303][ T19] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1622.328785][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.333381][T17606] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1622.350071][ T19] usb 6-1: config 0 descriptor?? [ 1622.421106][T17609] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1622.474640][T17609] usb 8-1: device descriptor read/8, error -71 [ 1622.533631][T17606] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1622.546574][T17606] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.559224][T17606] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1622.569470][T17606] usb 3-1: config 1 has no interface number 1 [ 1622.576425][T17606] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1622.593426][T17606] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1622.626003][T17606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.636892][T17609] usb 8-1: device descriptor read/8, error -71 [ 1622.646707][T17606] usb 3-1: Product: syz [ 1622.651730][T17606] usb 3-1: Manufacturer: syz [ 1622.656899][T17606] usb 3-1: SerialNumber: syz [ 1622.711500][ T19] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1622.765329][T26955] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8219 sclass=netlink_xfrm_socket pid=26955 comm=syz.4.7800 [ 1622.857129][ T19] usb 6-1: USB disconnect, device number 20 [ 1622.865799][ T19] usblp0: removed [ 1622.871635][T26962] overlayfs: failed to resolve './bus': -2 [ 1622.921129][T17609] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1622.952036][T17609] usb 8-1: device descriptor read/8, error -71 [ 1623.107970][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1623.107987][ T28] audit: type=1400 audit(2000000059.570:2836): avc: denied { ioctl } for pid=26963 comm="syz.3.7804" path="socket:[107862]" dev="sockfs" ino=107862 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1623.141619][T17609] usb 8-1: device descriptor read/8, error -71 [ 1623.318980][T17609] usb usb8-port1: unable to enumerate USB device [ 1623.530317][T26973] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1625.075619][T17606] usb 3-1: MIDIStreaming interface descriptor not found [ 1625.094824][T17606] usb 3-1: USB disconnect, device number 65 [ 1625.138604][T27009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7818'. [ 1625.360212][T27017] xt_CT: No such helper "pptp" [ 1625.634935][T27027] overlayfs: failed to resolve './bus': -2 [ 1625.791094][ T336] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1625.960537][ T336] usb 5-1: device descriptor read/64, error -71 [ 1625.982360][T27035] FAULT_INJECTION: forcing a failure. [ 1625.982360][T27035] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.995074][T27035] CPU: 0 PID: 27035 Comm: syz.3.7827 Tainted: G W syzkaller #0 [ 1626.004909][T27035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1626.014988][T27035] Call Trace: [ 1626.018295][T27035] [ 1626.021261][T27035] __dump_stack+0x21/0x24 [ 1626.025635][T27035] dump_stack_lvl+0xee/0x150 [ 1626.030255][T27035] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1626.035318][T27035] ? __cfi_fib_validate_source+0x10/0x10 [ 1626.041076][T27035] dump_stack+0x15/0x24 [ 1626.045267][T27035] should_fail_ex+0x3d4/0x520 [ 1626.049953][T27035] ? dst_alloc+0x16a/0x1e0 [ 1626.054383][T27035] __should_failslab+0xac/0xf0 [ 1626.059166][T27035] should_failslab+0x9/0x20 [ 1626.063672][T27035] kmem_cache_alloc+0x3b/0x330 [ 1626.068449][T27035] dst_alloc+0x16a/0x1e0 [ 1626.072701][T27035] ip_route_input_rcu+0x18b7/0x2580 [ 1626.077928][T27035] ? ip_route_input_noref+0x110/0x110 [ 1626.083312][T27035] ip_route_input_noref+0xbb/0x110 [ 1626.088459][T27035] ? __cfi_ip_route_input_noref+0x10/0x10 [ 1626.094190][T27035] ? tcp_v4_early_demux+0x3a7/0x960 [ 1626.099393][T27035] ? tcp_v4_early_demux+0x554/0x960 [ 1626.104591][T27035] ip_rcv_finish_core+0x4b0/0x1490 [ 1626.109708][T27035] ip_rcv+0xe0/0x270 [ 1626.113772][T27035] ? do_syscall_64+0x4c/0xa0 [ 1626.118363][T27035] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.124448][T27035] ? __cfi_ip_rcv+0x10/0x10 [ 1626.129041][T27035] ? __cfi_ip_rcv_finish+0x10/0x10 [ 1626.134147][T27035] ? __cfi_ip_rcv+0x10/0x10 [ 1626.138645][T27035] __netif_receive_skb+0xd7/0x2a0 [ 1626.143669][T27035] ? tun_rx_batched+0x158/0x770 [ 1626.148538][T27035] netif_receive_skb+0x98/0x3d0 [ 1626.153386][T27035] ? __cfi_netif_receive_skb+0x10/0x10 [ 1626.158933][T27035] ? kasan_save_alloc_info+0x25/0x30 [ 1626.164234][T27035] ? tun_rx_batched+0x158/0x770 [ 1626.169083][T27035] tun_rx_batched+0x1b6/0x770 [ 1626.173764][T27035] ? pskb_may_pull+0x100/0x100 [ 1626.178550][T27035] ? tun_get_user+0x1f21/0x3320 [ 1626.183397][T27035] tun_get_user+0x2494/0x3320 [ 1626.188095][T27035] ? tun_do_read+0x1c20/0x1c20 [ 1626.193726][T27035] ? __kasan_check_write+0x14/0x20 [ 1626.199023][T27035] ? ref_tracker_alloc+0x30f/0x430 [ 1626.204156][T27035] ? file_has_perm+0x4a1/0x640 [ 1626.208958][T27035] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 1626.214631][T27035] ? selinux_file_permission+0x3ef/0x510 [ 1626.220284][T27035] tun_chr_write_iter+0x1fb/0x300 [ 1626.225320][T27035] vfs_write+0x5db/0xca0 [ 1626.229706][T27035] ? slab_free_freelist_hook+0xc2/0x190 [ 1626.235293][T27035] ? __cfi_vfs_write+0x10/0x10 [ 1626.240177][T27035] ? __fget_files+0x2d5/0x330 [ 1626.244877][T27035] ? __fdget_pos+0x1f2/0x380 [ 1626.249535][T27035] ? ksys_write+0x71/0x240 [ 1626.253982][T27035] ksys_write+0x140/0x240 [ 1626.258319][T27035] ? __cfi_ksys_write+0x10/0x10 [ 1626.263186][T27035] ? debug_smp_processor_id+0x17/0x20 [ 1626.268686][T27035] __x64_sys_write+0x7b/0x90 [ 1626.273362][T27035] x64_sys_call+0x27b/0x9a0 [ 1626.277872][T27035] do_syscall_64+0x4c/0xa0 [ 1626.282300][T27035] ? clear_bhb_loop+0x30/0x80 [ 1626.286985][T27035] ? clear_bhb_loop+0x30/0x80 [ 1626.291670][T27035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.297571][T27035] RIP: 0033:0x7f4719d8e1ff [ 1626.301986][T27035] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1626.321593][T27035] RSP: 002b:00007f471abbe000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1626.330008][T27035] RAX: ffffffffffffffda RBX: 00007f4719fe5fa0 RCX: 00007f4719d8e1ff [ 1626.337979][T27035] RDX: 000000000000003a RSI: 0000200000000080 RDI: 00000000000000c8 [ 1626.345973][T27035] RBP: 00007f471abbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.353946][T27035] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 1626.361931][T27035] R13: 00007f4719fe6038 R14: 00007f4719fe5fa0 R15: 00007ffc7efe8d58 [ 1626.369909][T27035] [ 1626.379988][ T19] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1627.218017][ T28] audit: type=1400 audit(2000000063.650:2837): avc: denied { shutdown } for pid=27036 comm="syz.3.7828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1627.512535][T27044] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1627.621105][ T19] usb 8-1: device descriptor read/64, error -71 [ 1629.577482][ T336] usb 5-1: device descriptor read/64, error -71 [ 1629.973429][T27058] netlink: 37 bytes leftover after parsing attributes in process `syz.5.7833'. [ 1629.991171][T27058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1629.998444][T27058] IPv6: NLM_F_CREATE should be set when creating new route [ 1630.006160][T27058] IPv6: NLM_F_CREATE should be set when creating new route [ 1630.839187][T27076] overlayfs: failed to resolve './bus': -2 [ 1631.828952][T27082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7842'. [ 1631.867843][T17606] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1632.081648][T27082] FAULT_INJECTION: forcing a failure. [ 1632.081648][T27082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1632.161296][T17606] usb 6-1: Using ep0 maxpacket: 32 [ 1632.168676][T17606] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1632.214508][T17606] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1632.227406][T27082] CPU: 1 PID: 27082 Comm: syz.3.7842 Tainted: G W syzkaller #0 [ 1632.236492][T27082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1632.246760][T27082] Call Trace: [ 1632.250072][T27082] [ 1632.253032][T27082] __dump_stack+0x21/0x24 [ 1632.257391][T27082] dump_stack_lvl+0xee/0x150 [ 1632.262030][T27082] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1632.267105][T27082] dump_stack+0x15/0x24 [ 1632.271311][T27082] should_fail_ex+0x3d4/0x520 [ 1632.276065][T27082] should_fail+0xb/0x10 [ 1632.280256][T27082] should_fail_usercopy+0x1a/0x20 [ 1632.285317][T27082] copyin+0x20/0xa0 [ 1632.289169][T27082] _copy_from_iter+0x3e2/0xfd0 [ 1632.293967][T27082] ? __cfi__copy_from_iter+0x10/0x10 [ 1632.299287][T27082] ? __check_object_size+0x45a/0x600 [ 1632.304609][T27082] skb_copy_datagram_from_iter+0xf7/0x6b0 [ 1632.310355][T27082] ? packet_sendmsg+0x3392/0x51f0 [ 1632.315406][T27082] ? skb_put+0x10e/0x1f0 [ 1632.319677][T27082] packet_sendmsg+0x3aa2/0x51f0 [ 1632.324559][T27082] ? __kasan_check_read+0x11/0x20 [ 1632.329605][T27082] ? preempt_schedule_irq+0xbb/0x110 [ 1632.334914][T27082] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1632.340660][T27082] ? selinux_socket_sendmsg+0x208/0x2e0 [ 1632.346239][T27082] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 1632.352174][T27082] ? __schedule+0xb8f/0x14e0 [ 1632.356795][T27082] ? __cfi_packet_sendmsg+0x10/0x10 [ 1632.362028][T27082] ? __cfi_packet_sendmsg+0x10/0x10 [ 1632.367251][T27082] __sys_sendto+0x464/0x5e0 [ 1632.371788][T27082] ? __cfi___sys_sendto+0x10/0x10 [ 1632.376883][T27082] ? __sched_text_start+0x8/0x8 [ 1632.381757][T27082] ? ksys_write+0x1eb/0x240 [ 1632.386292][T27082] __x64_sys_sendto+0xe5/0x100 [ 1632.391085][T27082] x64_sys_call+0x83/0x9a0 [ 1632.395528][T27082] do_syscall_64+0x4c/0xa0 [ 1632.399980][T27082] ? clear_bhb_loop+0x30/0x80 [ 1632.404700][T27082] ? clear_bhb_loop+0x30/0x80 [ 1632.409435][T27082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1632.415453][T27082] RIP: 0033:0x7f4719d8f749 [ 1632.419902][T27082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1632.439563][T27082] RSP: 002b:00007f471abbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1632.448102][T27082] RAX: ffffffffffffffda RBX: 00007f4719fe5fa0 RCX: 00007f4719d8f749 [ 1632.456101][T27082] RDX: 000000000000000e RSI: 00002000000002c0 RDI: 0000000000000003 [ 1632.464189][T27082] RBP: 00007f471abbe090 R08: 0000200000000440 R09: 0000000000000014 [ 1632.472188][T27082] R10: 0000000000000030 R11: 0000000000000246 R12: 0000000000000001 [ 1632.480190][T27082] R13: 00007f4719fe6038 R14: 00007f4719fe5fa0 R15: 00007ffc7efe8d58 [ 1632.488190][T27082] [ 1632.494546][T17606] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1632.503795][T17606] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1632.514033][T17606] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1632.524871][T17606] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1632.538109][T17606] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1632.547338][T17606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.558066][T17606] usb 6-1: config 0 descriptor?? [ 1632.817453][T17606] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1632.855893][T17606] usb 6-1: USB disconnect, device number 21 [ 1632.872278][T17606] usblp0: removed [ 1633.421038][ T19] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1633.961722][T27118] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1633.974393][T17610] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1635.007275][T27122] overlayfs: failed to resolve './bus': -2 [ 1635.017615][T17606] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1635.101033][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 1635.111532][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.122741][ T19] usb 3-1: config 0 has no interfaces? [ 1635.128546][ T19] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1635.203191][T17610] usb 4-1: Using ep0 maxpacket: 8 [ 1635.209579][T17610] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1635.220173][T17610] usb 4-1: config 0 has no interfaces? [ 1635.227314][T17610] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1635.236934][T17610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1635.245127][T17610] usb 4-1: Product: syz [ 1635.249444][T17610] usb 4-1: Manufacturer: syz [ 1635.254099][T17610] usb 4-1: SerialNumber: syz [ 1635.291408][T17610] usb 4-1: config 0 descriptor?? [ 1635.293860][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.311299][ T19] usb 3-1: config 0 descriptor?? [ 1635.691305][T17610] usb 3-1: USB disconnect, device number 66 [ 1635.979639][T27140] xt_CT: No such helper "pptp" [ 1636.789438][T17606] usb 4-1: USB disconnect, device number 92 [ 1636.963860][T27155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1636.971216][T27155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1637.240493][T27155] device veth0_vlan left promiscuous mode [ 1637.246666][T27155] device veth0_vlan entered promiscuous mode [ 1637.254556][T27155] device veth1_macvtap left promiscuous mode [ 1637.262550][T27155] device veth1_macvtap entered promiscuous mode [ 1637.275155][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1637.320689][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1637.338787][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1637.355976][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1637.365435][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1637.374003][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1637.383060][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1637.391720][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1637.400508][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1637.409030][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1637.419466][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1637.428550][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1637.436993][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1637.446691][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1637.459105][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1637.470188][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1637.480913][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1637.491337][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1637.501704][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1637.512380][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1637.530120][T27174] overlayfs: failed to resolve './bus': -2 [ 1637.563383][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1637.844633][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1637.853231][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1637.864840][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1637.874675][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1637.883312][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1637.891433][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1637.899009][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1637.907020][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1637.915453][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1637.923842][T23065] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1637.933664][T17603] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1637.943454][T17603] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1637.951758][T27180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7870'. [ 1637.961853][T17606] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1637.992312][T17603] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1638.014500][T17603] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1638.099581][T17606] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1638.121280][T17606] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1638.197830][T17606] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1638.470336][T17609] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1638.506893][T27211] syz.7.7879[27211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.506968][T27211] syz.7.7879[27211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.521672][T17609] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1638.541807][T27211] syz.7.7879[27211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.541899][T27211] syz.7.7879[27211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.559845][T27211] syz.7.7879[27211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.571904][T27211] syz.7.7879[27211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.584289][T27211] syz.7.7879[27211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.596315][T27211] syz.7.7879[27211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1638.621092][T17603] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1638.979227][T27232] xt_CT: No such helper "snmp_trap" [ 1639.008691][T17603] usb 4-1: Using ep0 maxpacket: 8 [ 1639.017219][T17603] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.226267][T17603] usb 4-1: config 0 has no interfaces? [ 1639.232261][T17603] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1639.241660][T17603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.250895][T17603] usb 4-1: config 0 descriptor?? [ 1639.573887][ T19] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1639.596357][ T336] usb 4-1: USB disconnect, device number 93 [ 1639.703119][T27248] overlayfs: failed to resolve './bus': -2 [ 1639.811321][ T19] usb 6-1: Using ep0 maxpacket: 8 [ 1639.881642][ T19] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.894029][ T19] usb 6-1: config 0 has no interfaces? [ 1640.074653][ T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1640.085251][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1640.094043][ T19] usb 6-1: Product: syz [ 1640.098318][ T19] usb 6-1: Manufacturer: syz [ 1640.109218][ T19] usb 6-1: SerialNumber: syz [ 1640.120056][ T19] usb 6-1: config 0 descriptor?? [ 1640.130107][ T28] audit: type=1400 audit(2000000076.600:2838): avc: denied { read } for pid=27249 comm="syz.7.7889" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1640.150814][T27251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27251 comm=syz.7.7889 [ 1640.164854][T27251] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7889'. [ 1640.306086][T27258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7892'. [ 1640.387663][T27260] fuse: Bad value for 'group_id' [ 1641.704314][T17606] usb 6-1: USB disconnect, device number 23 [ 1643.245816][T17609] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1643.408938][T27289] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7900'. [ 1643.471073][T17609] usb 3-1: Using ep0 maxpacket: 16 [ 1643.477778][T17609] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.488164][T17609] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1643.554753][T27308] overlayfs: failed to resolve './bus': -2 [ 1643.651270][T17606] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1643.703579][T17609] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1643.721183][T17603] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1643.756164][T17609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.822045][T17609] usb 3-1: Product: syz [ 1643.871509][T17606] usb 6-1: Using ep0 maxpacket: 8 [ 1643.882199][T17606] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.893267][T17606] usb 6-1: config 0 has no interfaces? [ 1643.898815][T17609] usb 3-1: can't set config #1, error -71 [ 1643.905156][T17606] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1643.914366][T17609] usb 3-1: USB disconnect, device number 67 [ 1643.920551][T17606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.928738][T17603] usb 4-1: Using ep0 maxpacket: 16 [ 1643.935739][T17603] usb 4-1: config 1 has an invalid interface number: 214 but max is 0 [ 1643.944420][T17606] usb 6-1: config 0 descriptor?? [ 1643.949547][T17603] usb 4-1: config 1 has no interface number 0 [ 1643.956235][T17603] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1643.970547][T17603] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 1643.980923][T17603] usb 4-1: config 1 interface 214 has no altsetting 0 [ 1644.011884][T17603] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 1644.021628][T17603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.029813][T17603] usb 4-1: Product: syz [ 1644.037492][T17603] usb 4-1: Manufacturer: syz [ 1644.067012][T17603] usb 4-1: SerialNumber: syz [ 1644.150597][T27306] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1644.185967][T27306] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1644.234235][T17603] ums-alauda 4-1:1.214: USB Mass Storage device detected [ 1644.244722][ T336] usb 6-1: USB disconnect, device number 24 [ 1644.259652][T17603] scsi host1: usb-storage 4-1:1.214 [ 1644.281585][T17609] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1644.456619][ T28] audit: type=1400 audit(2000000080.920:2839): avc: denied { name_bind } for pid=27305 comm="syz.3.7907" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1644.533540][ T336] usb 4-1: USB disconnect, device number 94 [ 1644.571073][T17609] usb 3-1: Using ep0 maxpacket: 8 [ 1644.623340][T17609] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.633695][T17609] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1644.643615][T17609] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1644.658148][T17609] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1644.667561][T17609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.702369][T17609] usb 3-1: Product: በ[ 1644.706660][T17609] usb 3-1: Manufacturer: á°£ [ 1644.712382][T17609] usb 3-1: SerialNumber: â°Š [ 1644.776985][T27313] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1645.771452][T27349] xt_CT: No such helper "pptp" [ 1646.011924][T27313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.041317][T27313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.068047][T27346] netlink: 'syz.3.7918': attribute type 32 has an invalid length. [ 1646.081502][ T28] audit: type=1400 audit(2000000082.550:2840): avc: denied { map } for pid=27312 comm="syz.2.7908" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1646.170212][T17609] usb 3-1: 0:2 : does not exist [ 1646.188565][T17609] usb 3-1: USB disconnect, device number 68 [ 1646.339717][T27370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7922'. [ 1646.701088][T17609] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1646.881238][T17609] usb 4-1: Using ep0 maxpacket: 8 [ 1646.887704][T17609] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1646.898312][T17609] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1646.955005][T17609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.964142][T17609] usb 4-1: config 0 descriptor?? [ 1647.021073][T17606] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1647.213346][T17606] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.258789][T17606] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1647.327516][T17603] usb 4-1: USB disconnect, device number 95 [ 1647.339618][T17606] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1647.362171][T17606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1647.378905][T17606] usb 3-1: SerialNumber: syz [ 1649.081506][ T28] audit: type=1400 audit(2000000084.930:2841): avc: denied { ioctl } for pid=27378 comm="syz.2.7928" path="socket:[109677]" dev="sockfs" ino=109677 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1650.001092][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1650.001113][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1650.761890][T27411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1650.808864][T11285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1650.821256][T27419] FAULT_INJECTION: forcing a failure. [ 1650.821256][T27419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.835983][T27419] CPU: 0 PID: 27419 Comm: syz.5.7939 Tainted: G W syzkaller #0 [ 1650.844968][T27419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1650.855052][T27419] Call Trace: [ 1650.858355][T27419] [ 1650.861315][T27419] __dump_stack+0x21/0x24 [ 1650.865699][T27419] dump_stack_lvl+0xee/0x150 [ 1650.870333][T27419] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1650.875396][T27419] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1650.880821][T27419] dump_stack+0x15/0x24 [ 1650.885018][T27419] should_fail_ex+0x3d4/0x520 [ 1650.889751][T27419] should_fail+0xb/0x10 [ 1650.893935][T27419] should_fail_usercopy+0x1a/0x20 [ 1650.898992][T27419] _copy_from_user+0x1e/0xc0 [ 1650.903615][T27419] do_ipv6_setsockopt+0x2b5/0x39a0 [ 1650.908769][T27419] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 1650.914354][T27419] ? 0xffffffffa0000978 [ 1650.918536][T27419] ? is_bpf_text_address+0x177/0x190 [ 1650.923864][T27419] ? kernel_text_address+0xa0/0xd0 [ 1650.929054][T27419] ? __kernel_text_address+0xd/0x30 [ 1650.934286][T27419] ? unwind_get_return_address+0x4d/0x90 [ 1650.939962][T27419] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1650.946155][T27419] ? arch_stack_walk+0xfc/0x150 [ 1650.951140][T27419] ? stack_trace_save+0x98/0xe0 [ 1650.956026][T27419] ? __stack_depot_save+0x36/0x480 [ 1650.961168][T27419] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1650.966573][T27419] ? _parse_integer+0x2a/0x40 [ 1650.971284][T27419] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1650.977036][T27419] ? kstrtouint_from_user+0xf7/0x150 [ 1650.982361][T27419] ? avc_has_perm+0x158/0x240 [ 1650.987073][T27419] ? __cfi_avc_has_perm+0x10/0x10 [ 1650.992135][T27419] ? __kasan_check_write+0x14/0x20 [ 1650.997272][T27419] ? proc_fail_nth_write+0x17a/0x1f0 [ 1651.002591][T27419] ipv6_setsockopt+0x59/0x1a0 [ 1651.007309][T27419] rawv6_setsockopt+0x263/0x620 [ 1651.012189][T27419] ? __cfi_rawv6_setsockopt+0x10/0x10 [ 1651.017591][T27419] ? __fget_files+0x2d5/0x330 [ 1651.022303][T27419] sock_common_setsockopt+0xb1/0xc0 [ 1651.027534][T27419] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 1651.033462][T27419] __sys_setsockopt+0x306/0x4e0 [ 1651.038351][T27419] ? __cfi___sys_setsockopt+0x10/0x10 [ 1651.043756][T27419] ? ksys_write+0x1eb/0x240 [ 1651.048294][T27419] ? __cfi_ksys_write+0x10/0x10 [ 1651.053180][T27419] __x64_sys_setsockopt+0xbf/0xd0 [ 1651.058240][T27419] x64_sys_call+0x124/0x9a0 [ 1651.062780][T27419] do_syscall_64+0x4c/0xa0 [ 1651.067242][T27419] ? clear_bhb_loop+0x30/0x80 [ 1651.071958][T27419] ? clear_bhb_loop+0x30/0x80 [ 1651.076678][T27419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1651.082616][T27419] RIP: 0033:0x7f213bf8f749 [ 1651.087069][T27419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1651.106795][T27419] RSP: 002b:00007f213a9f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1651.115244][T27419] RAX: ffffffffffffffda RBX: 00007f213c1e5fa0 RCX: 00007f213bf8f749 [ 1651.123248][T27419] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000006 [ 1651.131256][T27419] RBP: 00007f213a9f7090 R08: 0000000000000004 R09: 0000000000000000 [ 1651.139256][T27419] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1651.147293][T27419] R13: 00007f213c1e6038 R14: 00007f213c1e5fa0 R15: 00007ffd5f81d608 [ 1651.155397][T27419] [ 1651.281844][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1651.587564][T17606] usb 3-1: 0:2 : does not exist [ 1651.595099][T27426] syz.5.7942[27426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1651.595182][T27426] syz.5.7942[27426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1651.609960][T17606] usb 3-1: USB disconnect, device number 69 [ 1651.677212][T27431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7944'. [ 1652.331143][T17606] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1652.647424][T17606] usb 8-1: Using ep0 maxpacket: 8 [ 1652.654811][T17606] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.671799][T17606] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1652.681672][T17606] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.701355][T17606] usb 8-1: config 0 descriptor?? [ 1652.867693][ T28] audit: type=1400 audit(2000000089.330:2842): avc: denied { mounton } for pid=27452 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1652.917486][T17606] usb 8-1: USB disconnect, device number 59 [ 1653.005738][T27452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.012919][T27452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.020569][T27452] device bridge_slave_0 entered promiscuous mode [ 1653.027848][T27452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.035234][T27452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.083548][T27452] device bridge_slave_1 entered promiscuous mode [ 1653.169651][T27459] binder: 27458:27459 ioctl 4018620d 0 returned -22 [ 1653.247818][T27452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.254964][T27452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1653.262333][T27452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.269397][T27452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1653.295545][T11285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1653.303338][T11285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.310725][T11285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.320732][T11285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1653.329419][T11285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.336544][T11285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1653.371719][T27471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7952'. [ 1653.520633][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1653.529984][T11293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.537124][T11293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1653.580704][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1653.789331][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1653.912919][T27477] fuse: Bad value for 'fd' [ 1654.214598][T27452] device veth0_vlan entered promiscuous mode [ 1654.229214][T27452] device veth1_macvtap entered promiscuous mode [ 1657.607186][T27494] overlayfs: failed to resolve './bus': -2 [ 1658.009529][T23072] device veth1_macvtap left promiscuous mode [ 1658.020592][T23072] device veth0_vlan left promiscuous mode [ 1661.647854][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1661.656388][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1661.664606][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1661.672537][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1661.680537][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1661.705114][ T28] audit: type=1400 audit(2000000098.170:2843): avc: denied { mounton } for pid=27452 comm="syz-executor" path="/root/syzkaller.1R3M7V/syz-tmp" dev="sda1" ino=2069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1661.741411][T27504] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1661.750812][T27504] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1661.766594][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1661.796760][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1661.810096][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1661.818817][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1661.833914][ T28] audit: type=1400 audit(2000000098.190:2844): avc: denied { mounton } for pid=27452 comm="syz-executor" path="/root/syzkaller.1R3M7V/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1661.886486][ T28] audit: type=1400 audit(2000000098.200:2845): avc: denied { mounton } for pid=27452 comm="syz-executor" path="/root/syzkaller.1R3M7V/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=110029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1661.921101][ T28] audit: type=1400 audit(2000000098.200:2846): avc: denied { mounton } for pid=27452 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1662.311032][T17609] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1663.781048][T17609] usb 8-1: Using ep0 maxpacket: 8 [ 1663.787238][T17609] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.821050][T17609] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1663.860648][T17609] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.907035][T17609] usb 8-1: config 0 descriptor?? [ 1663.915928][T27545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7970'. [ 1663.945339][T27545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7970'. [ 1664.139715][T17609] usb 8-1: USB disconnect, device number 60 [ 1664.191036][T17603] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1664.381028][T17603] usb 4-1: Using ep0 maxpacket: 8 [ 1664.387225][T17603] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.415211][T17603] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1664.443923][T17603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.534687][T17603] usb 4-1: config 0 descriptor?? [ 1664.693476][T17609] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1664.881175][T17609] usb 3-1: Using ep0 maxpacket: 8 [ 1664.888652][T17609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.003446][T17609] usb 3-1: config 0 has no interfaces? [ 1665.034198][T17609] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1665.060710][T17609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1665.086011][T17609] usb 3-1: Product: syz [ 1665.098392][T17609] usb 3-1: Manufacturer: syz [ 1665.111793][T17609] usb 3-1: SerialNumber: syz [ 1665.155548][T27559] overlayfs: failed to resolve './bus': -2 [ 1665.183747][T17609] usb 3-1: config 0 descriptor?? [ 1665.361058][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1665.377881][T17609] usb 4-1: USB disconnect, device number 96 [ 1665.760153][ T28] audit: type=1400 audit(2000000102.220:2847): avc: denied { read } for pid=27569 comm="syz.4.7977" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1665.807562][ T28] audit: type=1400 audit(2000000102.220:2848): avc: denied { open } for pid=27569 comm="syz.4.7977" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1666.581051][T17603] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1666.771041][T17603] usb 5-1: Using ep0 maxpacket: 16 [ 1666.777535][T17603] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1666.795210][T17603] usb 5-1: config 1 has no interface number 0 [ 1666.856571][T17603] usb 5-1: config 1 interface 105 altsetting 247 bulk endpoint 0x4 has invalid maxpacket 16 [ 1666.877624][T17603] usb 5-1: config 1 interface 105 altsetting 247 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1666.893601][T17603] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1666.902376][T17603] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1666.911742][T17603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.920179][T17603] usb 5-1: Product: syz [ 1666.924654][T17603] usb 5-1: Manufacturer: syz [ 1666.929485][T17603] usb 5-1: SerialNumber: syz [ 1666.946448][T27574] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1666.953804][T27574] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1667.026034][T17610] usb 3-1: USB disconnect, device number 70 [ 1667.164291][T17603] aqc111: probe of 5-1:1.105 failed with error -22 [ 1667.250240][T27597] overlayfs: conflicting lowerdir path [ 1667.372106][T17610] usb 5-1: USB disconnect, device number 79 [ 1667.921269][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1668.147933][T27609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1668.335356][T27611] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7989'. [ 1670.271084][T10618] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 1671.501019][ T336] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1671.688593][T27645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7999'. [ 1671.702746][ T336] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1671.713784][T27640] fuse: Unknown parameter 'rootm5Ìûù¬0000000000004000' [ 1671.720926][ T336] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.748738][ T336] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1671.767432][ T336] usb 3-1: config 1 has no interface number 1 [ 1671.774581][ T336] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1671.813502][ T336] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1671.834433][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.204732][ T336] usb 3-1: Product: syz [ 1673.209038][ T336] usb 3-1: Manufacturer: syz [ 1673.545134][ T336] usb 3-1: SerialNumber: syz [ 1673.594913][ T336] usb 3-1: can't set config #1, error -71 [ 1673.630171][ T336] usb 3-1: USB disconnect, device number 71 [ 1674.821120][T17603] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1675.070033][T27699] syz.2.8018[27699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1675.070113][T27699] syz.2.8018[27699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1675.139390][ T28] audit: type=1400 audit(2000000111.600:2849): avc: denied { relabelto } for pid=27692 comm="syz.5.8016" name="rdma.current" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 1675.176689][ T28] audit: type=1400 audit(2000000111.600:2850): avc: denied { associate } for pid=27692 comm="syz.5.8016" name="rdma.current" dev="tmpfs" ino=74 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 1675.182187][T17603] usb 4-1: Using ep0 maxpacket: 8 [ 1675.353545][T17603] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1675.577013][T17603] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1675.616537][T17603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1675.635175][T17603] usb 4-1: Product: syz [ 1675.651890][T17603] usb 4-1: Manufacturer: syz [ 1675.672812][T17603] usb 4-1: SerialNumber: syz [ 1675.740269][T27716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.748038][T27716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.755687][T27716] device bridge_slave_0 entered promiscuous mode [ 1675.763785][T27716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.770906][T27716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.778834][T27716] device bridge_slave_1 entered promiscuous mode [ 1675.785544][ T28] audit: type=1400 audit(2000000112.260:2851): avc: denied { unlink } for pid=27452 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 1676.188137][ T28] audit: type=1400 audit(2000000112.630:2852): avc: denied { listen } for pid=27727 comm="syz.4.8025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1676.256936][T27739] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1676.274966][T27716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.282121][T27716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.289456][T27716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.296552][T27716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.331473][T11293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1676.341520][T11293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1676.359629][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1676.374767][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1676.399822][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1676.416522][T11293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.423774][T11293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.446824][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1676.456696][T11293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.463823][T11293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.480117][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1676.490386][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1676.506240][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1676.519328][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1676.527764][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1676.535620][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1676.544405][T27716] device veth0_vlan entered promiscuous mode [ 1676.552191][T23065] tipc: Disabling bearer [ 1676.557945][T23065] tipc: Left network mode [ 1676.568804][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1676.586663][T27716] device veth1_macvtap entered promiscuous mode [ 1676.604903][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1676.635183][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1677.118973][T10618] usb 4-1: USB disconnect, device number 97 [ 1677.251183][T27768] netlink: 324 bytes leftover after parsing attributes in process `syz.7.8020'. [ 1677.308902][T27768] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8020'. [ 1677.449063][ T28] audit: type=1400 audit(2000000113.910:2853): avc: denied { create } for pid=27762 comm="syz.3.8032" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1677.474761][T23065] device bridge_slave_1 left promiscuous mode [ 1677.486291][T23065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.500165][T23065] device bridge_slave_0 left promiscuous mode [ 1677.511087][ T28] audit: type=1400 audit(2000000113.940:2854): avc: denied { wake_alarm } for pid=27762 comm="syz.3.8032" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1677.533316][T27763] netlink: 'syz.3.8032': attribute type 32 has an invalid length. [ 1677.539751][T23065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.541780][T27763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8032'. [ 1677.590477][T23065] device veth1_macvtap left promiscuous mode [ 1677.604001][T23065] device veth0_vlan left promiscuous mode [ 1677.933237][T27786] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1678.741051][T27793] xt_bpf: check failed: parse error [ 1678.982626][T27779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8037'. [ 1679.217223][ T28] audit: type=1400 audit(2000000115.680:2855): avc: denied { setcheckreqprot } for pid=27804 comm="syz.5.8045" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1679.380683][T27811] netlink: 324 bytes leftover after parsing attributes in process `syz.7.8044'. [ 1679.392413][T27811] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8044'. [ 1679.481016][T17606] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1679.691079][T17606] usb 3-1: Using ep0 maxpacket: 8 [ 1679.697481][T17606] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1679.711910][T17606] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1679.721039][T17606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1679.729300][T17606] usb 3-1: Product: syz [ 1679.733605][T17606] usb 3-1: Manufacturer: syz [ 1679.738372][T17606] usb 3-1: SerialNumber: syz [ 1681.536304][ T28] audit: type=1400 audit(2000000118.000:2856): avc: denied { write } for pid=27840 comm="syz.3.8054" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1681.995241][T27841] random: crng reseeded on system resumption [ 1682.037058][T27848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8052'. [ 1682.130062][ T28] audit: type=1400 audit(2000000118.460:2857): avc: denied { open } for pid=27840 comm="syz.3.8054" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1682.169531][T10618] usb 3-1: USB disconnect, device number 72 [ 1683.558389][T27876] incfs: Backing dir is not set, filesystem can't be mounted. [ 1683.566454][T27876] incfs: mount failed -2 [ 1684.334650][T27886] FAULT_INJECTION: forcing a failure. [ 1684.334650][T27886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1684.351236][T27886] CPU: 1 PID: 27886 Comm: syz.3.8065 Tainted: G W syzkaller #0 [ 1684.360251][T27886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1684.370341][T27886] Call Trace: [ 1684.373674][T27886] [ 1684.376637][T27886] __dump_stack+0x21/0x24 [ 1684.381096][T27886] dump_stack_lvl+0xee/0x150 [ 1684.385718][T27886] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1684.390825][T27886] ? __stack_depot_save+0x36/0x480 [ 1684.396135][T27886] dump_stack+0x15/0x24 [ 1684.400368][T27886] should_fail_ex+0x3d4/0x520 [ 1684.405090][T27886] should_fail+0xb/0x10 [ 1684.409292][T27886] should_fail_usercopy+0x1a/0x20 [ 1684.414367][T27886] _copy_from_user+0x1e/0xc0 [ 1684.419006][T27886] copy_from_sockptr+0x59/0x70 [ 1684.423811][T27886] ip6_mroute_setsockopt+0x6c4/0xb10 [ 1684.429138][T27886] ? __cfi_ip6_mroute_setsockopt+0x10/0x10 [ 1684.434975][T27886] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1684.440420][T27886] ? __kasan_check_write+0x14/0x20 [ 1684.445563][T27886] do_ipv6_setsockopt+0x35b/0x39a0 [ 1684.450715][T27886] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 1684.456309][T27886] ? 0xffffffffa0000968 [ 1684.460485][T27886] ? is_bpf_text_address+0x177/0x190 [ 1684.465813][T27886] ? kernel_text_address+0xa0/0xd0 [ 1684.470953][T27886] ? __kernel_text_address+0xd/0x30 [ 1684.476180][T27886] ? unwind_get_return_address+0x4d/0x90 [ 1684.481845][T27886] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1684.488030][T27886] ? arch_stack_walk+0xfc/0x150 [ 1684.492922][T27886] ? stack_trace_save+0x98/0xe0 [ 1684.497801][T27886] ? __stack_depot_save+0x36/0x480 [ 1684.502938][T27886] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1684.508611][T27886] ? _parse_integer+0x2a/0x40 [ 1684.513326][T27886] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1684.519098][T27886] ? kstrtouint_from_user+0xf7/0x150 [ 1684.524434][T27886] ? avc_has_perm+0x158/0x240 [ 1684.529205][T27886] ? __cfi_avc_has_perm+0x10/0x10 [ 1684.534268][T27886] ? __kasan_check_write+0x14/0x20 [ 1684.539415][T27886] ? proc_fail_nth_write+0x17a/0x1f0 [ 1684.544820][T27886] ipv6_setsockopt+0x59/0x1a0 [ 1684.549552][T27886] rawv6_setsockopt+0x263/0x620 [ 1684.554438][T27886] ? __cfi_rawv6_setsockopt+0x10/0x10 [ 1684.559840][T27886] ? __fget_files+0x2d5/0x330 [ 1684.564543][T27886] sock_common_setsockopt+0xb1/0xc0 [ 1684.569765][T27886] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 1684.575688][T27886] __sys_setsockopt+0x306/0x4e0 [ 1684.580569][T27886] ? __cfi___sys_setsockopt+0x10/0x10 [ 1684.585992][T27886] ? ksys_write+0x1eb/0x240 [ 1684.590531][T27886] ? __cfi_ksys_write+0x10/0x10 [ 1684.595411][T27886] __x64_sys_setsockopt+0xbf/0xd0 [ 1684.600468][T27886] x64_sys_call+0x124/0x9a0 [ 1684.605029][T27886] do_syscall_64+0x4c/0xa0 [ 1684.609495][T27886] ? clear_bhb_loop+0x30/0x80 [ 1684.614216][T27886] ? clear_bhb_loop+0x30/0x80 [ 1684.618938][T27886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1684.624874][T27886] RIP: 0033:0x7f4719d8f749 [ 1684.629323][T27886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1684.648955][T27886] RSP: 002b:00007f471abbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1684.657576][T27886] RAX: ffffffffffffffda RBX: 00007f4719fe5fa0 RCX: 00007f4719d8f749 [ 1684.665596][T27886] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000006 [ 1684.673692][T27886] RBP: 00007f471abbe090 R08: 0000000000000004 R09: 0000000000000000 [ 1684.681700][T27886] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1684.689693][T27886] R13: 00007f4719fe6038 R14: 00007f4719fe5fa0 R15: 00007ffc7efe8d58 [ 1684.697701][T27886] [ 1685.190540][T17606] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1685.441035][T17606] usb 6-1: Using ep0 maxpacket: 8 [ 1685.447216][T17606] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.467624][T17606] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1685.488146][T17606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.531499][T17606] usb 6-1: config 0 descriptor?? [ 1685.715853][T27899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.723111][T27899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.131474][T17606] usb 6-1: USB disconnect, device number 25 [ 1686.161097][T17610] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1686.222345][T27906] xt_CT: No such helper "snmp_trap" [ 1686.456069][T27909] syz.7.8072[27909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1686.456162][T27909] syz.7.8072[27909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1686.473650][T27909] syz.7.8072[27909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1686.486238][T27909] syz.7.8072[27909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1686.622130][T27913] overlayfs: failed to resolve './bus': -2 [ 1686.654563][T17610] usb 3-1: Using ep0 maxpacket: 8 [ 1686.662839][T17610] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1686.684934][T17610] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1686.695712][T17610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1686.704868][T17610] usb 3-1: Product: syz [ 1686.709831][T17610] usb 3-1: Manufacturer: syz [ 1686.715535][T17610] usb 3-1: SerialNumber: syz [ 1687.607148][T27926] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1688.318348][T17606] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1688.738011][T17610] usb 3-1: USB disconnect, device number 73 [ 1688.758179][T27941] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8082'. [ 1688.781137][T27941] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8082'. [ 1688.811087][T17606] usb 4-1: Using ep0 maxpacket: 8 [ 1688.817548][T17606] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.943992][T17606] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1688.957924][T17606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.970603][T17606] usb 4-1: config 0 descriptor?? [ 1688.978258][T17606] usb 4-1: Found UVC 0.00 device (2833:0201) [ 1688.985670][T17606] usb 4-1: No valid video chain found. [ 1689.867947][ T28] audit: type=1326 audit(2000000126.330:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27952 comm="syz.5.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff938f749 code=0x7ffc0000 [ 1689.895907][ T28] audit: type=1326 audit(2000000126.360:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27952 comm="syz.5.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ff938f749 code=0x7ffc0000 [ 1689.920078][ T28] audit: type=1326 audit(2000000126.360:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27952 comm="syz.5.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff938f749 code=0x7ffc0000 [ 1689.945272][ T336] usb 4-1: USB disconnect, device number 98 [ 1689.991140][ T28] audit: type=1326 audit(2000000126.360:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27952 comm="syz.5.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1ff938f749 code=0x7ffc0000 [ 1690.047441][ T28] audit: type=1326 audit(2000000126.360:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27952 comm="syz.5.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff938f749 code=0x7ffc0000 [ 1690.071178][ T28] audit: type=1326 audit(2000000126.360:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27952 comm="syz.5.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ff938f749 code=0x7ffc0000 [ 1690.094793][ T28] audit: type=1326 audit(2000000126.360:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27952 comm="syz.5.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff938f749 code=0x7ffc0000 [ 1690.118426][ T28] audit: type=1326 audit(2000000126.360:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27952 comm="syz.5.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1ff938f749 code=0x7ffc0000 [ 1690.488940][T27959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1690.760087][T27961] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1690.769053][T27961] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1690.842003][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1690.849903][ T28] audit: type=1326 audit(2000000126.360:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27952 comm="syz.5.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ff938f749 code=0x7ffc0000 [ 1690.873949][ T28] audit: type=1326 audit(2000000126.360:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27952 comm="syz.5.8086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1ff938f749 code=0x7ffc0000 [ 1690.928506][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1690.955679][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1690.964823][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1690.973189][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1690.981645][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1690.992696][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1691.000923][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1695.451264][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1695.480233][T27989] overlayfs: failed to resolve './bus': -2 [ 1695.510575][T27990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27990 comm=syz.4.8090 [ 1696.583612][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1696.583629][ T28] audit: type=1400 audit(2000000133.050:2897): avc: denied { write } for pid=27985 comm="syz.2.8094" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1696.737207][T27992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1696.744662][T27992] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1696.811795][T23087] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1696.821495][T23087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1696.830691][T23087] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1696.839634][T23087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1696.864954][T23087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1696.881682][T23087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1696.901475][T23087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1696.909922][T23087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1696.958919][T28008] overlayfs: missing 'workdir' [ 1696.979989][ T28] audit: type=1400 audit(2000000133.440:2898): avc: denied { setopt } for pid=28009 comm="syz.4.8101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1697.319766][T28010] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8101'. [ 1697.340661][T28013] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1697.363444][T28013] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1697.596792][T28035] FAULT_INJECTION: forcing a failure. [ 1697.596792][T28035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1697.611978][T28034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8109'. [ 1697.636414][T28035] CPU: 1 PID: 28035 Comm: syz.7.8108 Tainted: G W syzkaller #0 [ 1697.645427][T28035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1697.655579][T28035] Call Trace: [ 1697.658872][T28035] [ 1697.661984][T28035] __dump_stack+0x21/0x24 [ 1697.666369][T28035] dump_stack_lvl+0xee/0x150 [ 1697.670985][T28035] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1697.676038][T28035] dump_stack+0x15/0x24 [ 1697.680391][T28035] should_fail_ex+0x3d4/0x520 [ 1697.685091][T28035] should_fail+0xb/0x10 [ 1697.689268][T28035] should_fail_usercopy+0x1a/0x20 [ 1697.694321][T28035] _copy_from_user+0x1e/0xc0 [ 1697.698953][T28035] iovec_from_user+0x1aa/0x2e0 [ 1697.703791][T28035] ? _parse_integer+0x2a/0x40 [ 1697.708523][T28035] __import_iovec+0x71/0x470 [ 1697.713168][T28035] import_iovec+0x7c/0xb0 [ 1697.717549][T28035] ___sys_sendmsg+0x1e4/0x290 [ 1697.722275][T28035] ? __sys_sendmsg+0x270/0x270 [ 1697.727102][T28035] ? __kasan_check_write+0x14/0x20 [ 1697.732341][T28035] ? proc_fail_nth_write+0x17a/0x1f0 [ 1697.737679][T28035] ? vfs_write+0x9d6/0xca0 [ 1697.742135][T28035] ? __fdget+0x19c/0x220 [ 1697.746416][T28035] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1697.751403][T28035] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1697.756920][T28035] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1697.763030][T28035] x64_sys_call+0x171/0x9a0 [ 1697.767584][T28035] do_syscall_64+0x4c/0xa0 [ 1697.772091][T28035] ? clear_bhb_loop+0x30/0x80 [ 1697.776820][T28035] ? clear_bhb_loop+0x30/0x80 [ 1697.782150][T28035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1697.788095][T28035] RIP: 0033:0x7fcd6238f749 [ 1697.792547][T28035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1697.812190][T28035] RSP: 002b:00007fcd63206038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1697.820656][T28035] RAX: ffffffffffffffda RBX: 00007fcd625e6090 RCX: 00007fcd6238f749 [ 1697.828761][T28035] RDX: 0000000000044010 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1697.836773][T28035] RBP: 00007fcd63206090 R08: 0000000000000000 R09: 0000000000000000 [ 1697.844792][T28035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1697.852795][T28035] R13: 00007fcd625e6128 R14: 00007fcd625e6090 R15: 00007ffd3b78cb68 [ 1697.860821][T28035] [ 1698.004843][T28037] syz.4.8111[28037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1698.004918][T28037] syz.4.8111[28037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1698.020149][T28037] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1698.052952][T28037] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1698.662377][T28047] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8219 sclass=netlink_xfrm_socket pid=28047 comm=syz.2.8113 [ 1698.738460][T28063] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1700.821559][T28080] kthread_run failed with err -4 [ 1701.107198][T28106] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8123'. [ 1701.519160][T28115] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1701.712901][T28114] netlink: 324 bytes leftover after parsing attributes in process `syz.7.8127'. [ 1701.965610][T28114] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8127'. [ 1702.482748][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1702.536395][T28124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8134'. [ 1702.591108][T10618] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1702.732840][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8137'. [ 1702.791076][T10618] usb 6-1: Using ep0 maxpacket: 8 [ 1702.797406][T10618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.808856][T10618] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1702.818395][T10618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.835443][T10618] usb 6-1: config 0 descriptor?? [ 1702.843365][T10618] usb 6-1: Found UVC 0.00 device (2833:0201) [ 1702.850367][T10618] usb 6-1: No valid video chain found. [ 1703.001040][ T336] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1703.045184][T10618] usb 6-1: USB disconnect, device number 26 [ 1703.181029][ T336] usb 4-1: Using ep0 maxpacket: 8 [ 1703.187692][ T336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.197913][ T336] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1703.207114][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.216243][ T336] usb 4-1: config 0 descriptor?? [ 1703.431721][T10618] usb 4-1: USB disconnect, device number 99 [ 1703.582211][T28143] tipc: Failed to remove unknown binding: 66,1,1/0:4045786034/4045786036 [ 1703.891032][ T687] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1704.321636][ T687] usb 6-1: Using ep0 maxpacket: 8 [ 1704.328102][ T687] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1704.328141][ T687] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1704.328169][ T687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.343129][ T687] usb 6-1: config 0 descriptor?? [ 1704.769073][ T687] usb 6-1: USB disconnect, device number 27 [ 1705.515357][T28188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8153'. [ 1705.803040][T28202] tmpfs: Bad value for 'size' [ 1705.811108][ T687] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1706.901269][T17610] usb 8-1: new full-speed USB device number 61 using dummy_hcd [ 1706.980998][ T687] usb 5-1: Using ep0 maxpacket: 8 [ 1707.086193][T17610] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1707.151946][T17610] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1707.152725][T17610] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.203681][T17610] usb 8-1: config 0 descriptor?? [ 1707.205243][T28210] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1707.356527][ T687] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1707.370816][ T687] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1707.383463][ T687] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1707.393017][ T687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1707.401217][ T687] usb 5-1: Product: syz [ 1707.405608][ T687] usb 5-1: Manufacturer: syz [ 1707.410265][ T687] usb 5-1: SerialNumber: syz [ 1707.441080][T28210] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1707.449379][T28210] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1707.648836][ T687] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1707.666640][T28210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.675385][T28210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.101161][T28228] incfs: Backing dir is not set, filesystem can't be mounted. [ 1708.108722][T28228] incfs: mount failed -2 [ 1708.269002][ T19] usb 5-1: USB disconnect, device number 81 [ 1708.275992][ T19] usblp0: removed [ 1708.965860][T17610] usbhid 8-1:0.0: can't add hid device: -71 [ 1708.971919][T17610] usbhid: probe of 8-1:0.0 failed with error -71 [ 1708.980150][T17610] usb 8-1: USB disconnect, device number 61 [ 1709.152668][T28245] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8170'. [ 1709.170504][T28245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8170'. [ 1709.180159][T28245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8170'. [ 1709.189783][T28245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8170'. [ 1709.199396][T28245] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8170'. [ 1709.208560][T28245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8170'. [ 1709.217711][T28245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8170'. [ 1709.451133][ T687] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1709.651192][ T687] usb 4-1: Using ep0 maxpacket: 8 [ 1709.658812][ T687] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.701113][T10618] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1709.712527][ T687] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1709.755994][ T687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.818277][ T687] usb 4-1: config 0 descriptor?? [ 1709.825727][ T687] usb 4-1: Found UVC 0.00 device (2833:0201) [ 1709.833005][ T687] usb 4-1: No valid video chain found. [ 1709.881142][T10618] usb 5-1: Using ep0 maxpacket: 8 [ 1709.887561][T10618] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.898049][T10618] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1709.907442][T10618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.919484][T10618] usb 5-1: config 0 descriptor?? [ 1709.927062][T10618] usb 5-1: Found UVC 0.00 device (2833:0201) [ 1709.934159][T10618] usb 5-1: No valid video chain found. [ 1709.971075][ T19] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1710.030556][T10618] usb 4-1: USB disconnect, device number 100 [ 1710.101101][ T336] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1710.151054][ T19] usb 8-1: Using ep0 maxpacket: 8 [ 1710.157387][ T19] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.168711][ T19] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1710.178965][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.214489][ T19] usb 8-1: config 0 descriptor?? [ 1710.231315][ T19] usb 8-1: Found UVC 0.00 device (2833:0201) [ 1710.238258][ T19] usb 8-1: No valid video chain found. [ 1710.282827][ T336] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1710.293298][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.326064][ T336] usb 3-1: config 0 descriptor?? [ 1710.817246][T17610] usb 5-1: USB disconnect, device number 82 [ 1710.869962][T17606] usb 8-1: USB disconnect, device number 62 [ 1711.001986][T28261] netlink: 277 bytes leftover after parsing attributes in process `syz.5.8175'. [ 1711.013245][T28261] IPv6: NLM_F_CREATE should be specified when creating new route [ 1711.021141][T28261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1711.028359][T28261] IPv6: NLM_F_CREATE should be set when creating new route [ 1711.083986][T28266] syzkaller0: Caught tx_queue_len zero misconfig [ 1712.069038][ T336] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1712.357789][T17606] usb 3-1: USB disconnect, device number 74 [ 1712.441143][ T336] usb 6-1: Using ep0 maxpacket: 8 [ 1712.447890][ T336] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1712.468064][ T336] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1712.803879][ T336] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1712.813434][ T336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1712.821995][ T336] usb 6-1: Product: syz [ 1712.826243][ T336] usb 6-1: Manufacturer: syz [ 1712.830881][ T336] usb 6-1: SerialNumber: syz [ 1713.047479][ T336] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1713.101039][T17610] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1713.269220][ T336] usb 6-1: USB disconnect, device number 28 [ 1713.280898][ T336] usblp0: removed [ 1713.291102][T17610] usb 8-1: Using ep0 maxpacket: 16 [ 1713.297985][T17610] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.308481][T17610] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1713.319804][T17610] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1713.329172][T17610] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.343260][T17610] usb 8-1: Product: syz [ 1713.347791][T17610] usb 8-1: Manufacturer: syz [ 1713.352819][T17610] usb 8-1: SerialNumber: syz [ 1713.563137][T17610] usb 8-1: 0:2 : does not exist [ 1713.570318][T17610] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1713.595203][T17610] usb 8-1: USB disconnect, device number 63 [ 1714.495317][T28325] device ipip0 entered promiscuous mode [ 1714.577071][T28328] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8219 sclass=netlink_xfrm_socket pid=28328 comm=syz.3.8195 [ 1715.672794][T28348] overlayfs: failed to resolve './bus': -2 [ 1715.792916][ T336] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1715.992205][ T336] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1716.005249][ T336] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1716.014516][ T336] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1716.022765][ T336] usb 8-1: Product: syz [ 1716.027096][ T336] usb 8-1: SerialNumber: syz [ 1717.253131][ T336] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1717.260244][ T336] cdc_ncm 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1717.267975][ T336] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 1717.321017][T26637] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1717.379632][T28374] overlayfs: failed to resolve './file0': -2 [ 1717.460642][ T336] cdc_ncm 8-1:1.0: setting tx_max = 88 [ 1717.471462][ T336] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1717.488925][ T336] usb 8-1: USB disconnect, device number 64 [ 1717.563295][ T336] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM (NO ZLP) [ 1717.572835][T26637] usb 5-1: Using ep0 maxpacket: 8 [ 1717.579306][T26637] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1717.594872][T28377] binder: BINDER_SET_CONTEXT_MGR already set [ 1717.654272][T28377] binder: 28375:28377 ioctl 4018620d 200000004a80 returned -16 [ 1717.666428][T26637] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1717.748226][ T687] ================================================================== [ 1717.756363][ T687] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 1717.764218][ T687] Read of size 8 at addr ffff88811c936cf0 by task kworker/0:5/687 [ 1717.772321][ T687] [ 1717.774682][ T687] CPU: 0 PID: 687 Comm: kworker/0:5 Tainted: G W syzkaller #0 [ 1717.783682][ T687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1717.794028][ T687] Workqueue: events destroy_super_work [ 1717.799539][ T687] Call Trace: [ 1717.802846][ T687] [ 1717.805950][ T687] __dump_stack+0x21/0x24 [ 1717.810316][ T687] dump_stack_lvl+0xee/0x150 [ 1717.814962][ T687] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1717.820024][ T687] ? __list_del_entry_valid+0xa6/0x130 [ 1717.825517][ T687] print_address_description+0x71/0x200 [ 1717.831192][ T687] print_report+0x4a/0x60 [ 1717.835551][ T687] kasan_report+0x122/0x150 [ 1717.840088][ T687] ? __list_del_entry_valid+0xa6/0x130 [ 1717.845584][ T687] __asan_report_load8_noabort+0x14/0x20 [ 1717.851287][ T687] __list_del_entry_valid+0xa6/0x130 [ 1717.856644][ T687] process_one_work+0x4b9/0xc40 [ 1717.861798][ T687] worker_thread+0xa29/0x11f0 [ 1717.866730][ T687] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1717.872361][ T687] kthread+0x281/0x320 [ 1717.876478][ T687] ? __cfi_worker_thread+0x10/0x10 [ 1717.881622][ T687] ? __cfi_kthread+0x10/0x10 [ 1717.886254][ T687] ret_from_fork+0x1f/0x30 [ 1717.890745][ T687] [ 1717.893879][ T687] [ 1717.896235][ T687] Allocated by task 336: [ 1717.900510][ T687] kasan_set_track+0x4b/0x70 [ 1717.905145][ T687] kasan_save_alloc_info+0x25/0x30 [ 1717.910296][ T687] __kasan_kmalloc+0x95/0xb0 [ 1717.915044][ T687] __kmalloc_node+0xb2/0x1e0 [ 1717.919692][ T687] kvmalloc_node+0x294/0x480 [ 1717.924319][ T687] alloc_netdev_mqs+0x8d/0xf90 [ 1717.929131][ T687] alloc_etherdev_mqs+0x37/0x40 [ 1717.934013][ T687] usbnet_probe+0x20c/0x2780 [ 1717.938661][ T687] usb_probe_interface+0x610/0xaf0 [ 1717.943807][ T687] really_probe+0x2cb/0x960 [ 1717.948345][ T687] __driver_probe_device+0x198/0x280 [ 1717.953656][ T687] driver_probe_device+0x54/0x3e0 [ 1717.958716][ T687] __device_attach_driver+0x2e9/0x4a0 [ 1717.964161][ T687] bus_for_each_drv+0x183/0x210 [ 1717.969147][ T687] __device_attach+0x2a2/0x400 [ 1717.974047][ T687] device_initial_probe+0x1a/0x20 [ 1717.979249][ T687] bus_probe_device+0xc0/0x1f0 [ 1717.984070][ T687] device_add+0xb4d/0xef0 [ 1717.988437][ T687] usb_set_configuration+0x19c2/0x1f10 [ 1717.993954][ T687] usb_generic_driver_probe+0x91/0x150 [ 1717.999460][ T687] usb_probe_device+0x159/0x270 [ 1718.004356][ T687] really_probe+0x2cb/0x960 [ 1718.008899][ T687] __driver_probe_device+0x198/0x280 [ 1718.014251][ T687] driver_probe_device+0x54/0x3e0 [ 1718.019315][ T687] __device_attach_driver+0x2e9/0x4a0 [ 1718.024724][ T687] bus_for_each_drv+0x183/0x210 [ 1718.029643][ T687] __device_attach+0x2a2/0x400 [ 1718.034430][ T687] device_initial_probe+0x1a/0x20 [ 1718.039483][ T687] bus_probe_device+0xc0/0x1f0 [ 1718.044279][ T687] device_add+0xb4d/0xef0 [ 1718.048725][ T687] usb_new_device+0xa70/0x1520 [ 1718.053611][ T687] hub_event+0x2850/0x4350 [ 1718.058058][ T687] process_one_work+0x71f/0xc40 [ 1718.062929][ T687] worker_thread+0xa29/0x11f0 [ 1718.067639][ T687] kthread+0x281/0x320 [ 1718.071738][ T687] ret_from_fork+0x1f/0x30 [ 1718.076187][ T687] [ 1718.078548][ T687] Freed by task 336: [ 1718.082539][ T687] kasan_set_track+0x4b/0x70 [ 1718.087253][ T687] kasan_save_free_info+0x31/0x50 [ 1718.092342][ T687] ____kasan_slab_free+0x132/0x180 [ 1718.097681][ T687] __kasan_slab_free+0x11/0x20 [ 1718.102830][ T687] slab_free_freelist_hook+0xc2/0x190 [ 1718.108437][ T687] __kmem_cache_free+0xb7/0x1b0 [ 1718.113331][ T687] kfree+0x6f/0xf0 [ 1718.117086][ T687] kvfree+0x35/0x40 [ 1718.120932][ T687] netdev_freemem+0x3f/0x60 [ 1718.125476][ T687] netdev_release+0x7f/0xb0 [ 1718.130096][ T687] device_release+0xa4/0x1d0 [ 1718.134695][ T687] kobject_put+0x19d/0x280 [ 1718.139152][ T687] put_device+0x1f/0x30 [ 1718.143346][ T687] free_netdev+0x392/0x490 [ 1718.147823][ T687] usbnet_disconnect+0x25a/0x3b0 [ 1718.152810][ T687] usb_unbind_interface+0x223/0x8d0 [ 1718.158238][ T687] device_release_driver_internal+0x508/0x820 [ 1718.164352][ T687] device_release_driver+0x19/0x20 [ 1718.169498][ T687] bus_remove_device+0x2ee/0x350 [ 1718.174468][ T687] device_del+0x6a4/0xeb0 [ 1718.178869][ T687] usb_disable_device+0x3a8/0x750 [ 1718.183979][ T687] usb_disconnect+0x31e/0x860 [ 1718.188703][ T687] hub_event+0x1a78/0x4350 [ 1718.193156][ T687] process_one_work+0x71f/0xc40 [ 1718.198034][ T687] worker_thread+0xd2e/0x11f0 [ 1718.203088][ T687] kthread+0x281/0x320 [ 1718.207272][ T687] ret_from_fork+0x1f/0x30 [ 1718.212072][ T687] [ 1718.214429][ T687] Last potentially related work creation: [ 1718.220162][ T687] kasan_save_stack+0x3a/0x60 [ 1718.224873][ T687] __kasan_record_aux_stack+0xb6/0xc0 [ 1718.230284][ T687] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1718.236124][ T687] insert_work+0x51/0x300 [ 1718.240569][ T687] __queue_work+0x9b1/0xd30 [ 1718.245102][ T687] queue_work_on+0xd2/0x140 [ 1718.249638][ T687] usbnet_link_change+0x189/0x1b0 [ 1718.254702][ T687] usbnet_probe+0x1d55/0x2780 [ 1718.259414][ T687] usb_probe_interface+0x610/0xaf0 [ 1718.264555][ T687] really_probe+0x2cb/0x960 [ 1718.269081][ T687] __driver_probe_device+0x198/0x280 [ 1718.274513][ T687] driver_probe_device+0x54/0x3e0 [ 1718.279583][ T687] __device_attach_driver+0x2e9/0x4a0 [ 1718.285044][ T687] bus_for_each_drv+0x183/0x210 [ 1718.289972][ T687] __device_attach+0x2a2/0x400 [ 1718.294767][ T687] device_initial_probe+0x1a/0x20 [ 1718.299817][ T687] bus_probe_device+0xc0/0x1f0 [ 1718.304610][ T687] device_add+0xb4d/0xef0 [ 1718.308965][ T687] usb_set_configuration+0x19c2/0x1f10 [ 1718.314465][ T687] usb_generic_driver_probe+0x91/0x150 [ 1718.319960][ T687] usb_probe_device+0x159/0x270 [ 1718.324838][ T687] really_probe+0x2cb/0x960 [ 1718.329373][ T687] __driver_probe_device+0x198/0x280 [ 1718.334677][ T687] driver_probe_device+0x54/0x3e0 [ 1718.339725][ T687] __device_attach_driver+0x2e9/0x4a0 [ 1718.345393][ T687] bus_for_each_drv+0x183/0x210 [ 1718.350364][ T687] __device_attach+0x2a2/0x400 [ 1718.355152][ T687] device_initial_probe+0x1a/0x20 [ 1718.360202][ T687] bus_probe_device+0xc0/0x1f0 [ 1718.364994][ T687] device_add+0xb4d/0xef0 [ 1718.369341][ T687] usb_new_device+0xa70/0x1520 [ 1718.374135][ T687] hub_event+0x2850/0x4350 [ 1718.378595][ T687] process_one_work+0x71f/0xc40 [ 1718.383468][ T687] worker_thread+0xa29/0x11f0 [ 1718.388172][ T687] kthread+0x281/0x320 [ 1718.392285][ T687] ret_from_fork+0x1f/0x30 [ 1718.396743][ T687] [ 1718.399087][ T687] The buggy address belongs to the object at ffff88811c936000 [ 1718.399087][ T687] which belongs to the cache kmalloc-4k of size 4096 [ 1718.413171][ T687] The buggy address is located 3312 bytes inside of [ 1718.413171][ T687] 4096-byte region [ffff88811c936000, ffff88811c937000) [ 1718.426660][ T687] [ 1718.429016][ T687] The buggy address belongs to the physical page: [ 1718.435450][ T687] page:ffffea0004724c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c930 [ 1718.445725][ T687] head:ffffea0004724c00 order:3 compound_mapcount:0 compound_pincount:0 [ 1718.454083][ T687] flags: 0x4000000000010200(slab|head|zone=1) [ 1718.460209][ T687] raw: 4000000000010200 ffffea0004baea00 dead000000000002 ffff888100043380 [ 1718.468824][ T687] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1718.477438][ T687] page dumped because: kasan: bad access detected [ 1718.483893][ T687] page_owner tracks the page as allocated [ 1718.489642][ T687] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 27528, tgid 27528 (udevd), ts 1666944476489, free_ts 1666842755885 [ 1718.512347][ T687] post_alloc_hook+0x1f5/0x210 [ 1718.517162][ T687] prep_new_page+0x1c/0x110 [ 1718.521714][ T687] get_page_from_freelist+0x2c7b/0x2cf0 [ 1718.527296][ T687] __alloc_pages+0x1c3/0x450 [ 1718.531965][ T687] alloc_slab_page+0x6e/0xf0 [ 1718.536600][ T687] new_slab+0x98/0x3d0 [ 1718.540726][ T687] ___slab_alloc+0x6bd/0xb20 [ 1718.545362][ T687] __slab_alloc+0x5e/0xa0 [ 1718.549735][ T687] __kmem_cache_alloc_node+0x203/0x2c0 [ 1718.555242][ T687] __kmalloc_node+0xa1/0x1e0 [ 1718.559879][ T687] kvmalloc_node+0x294/0x480 [ 1718.564493][ T687] seq_read_iter+0x1fc/0xdd0 [ 1718.569107][ T687] kernfs_fop_read_iter+0x14a/0x4e0 [ 1718.574410][ T687] vfs_read+0x41e/0x8c0 [ 1718.578614][ T687] ksys_read+0x140/0x240 [ 1718.582870][ T687] __x64_sys_read+0x7b/0x90 [ 1718.587385][ T687] page last free stack trace: [ 1718.592068][ T687] free_unref_page_prepare+0x742/0x750 [ 1718.597553][ T687] free_unref_page+0x8f/0x530 [ 1718.602246][ T687] __free_pages+0x67/0x100 [ 1718.606688][ T687] __free_slab+0xca/0x1a0 [ 1718.611041][ T687] discard_slab+0x29/0x40 [ 1718.615393][ T687] __slab_free+0x201/0x280 [ 1718.619853][ T687] ___cache_free+0xbf/0xd0 [ 1718.624481][ T687] qlist_free_all+0xc6/0x140 [ 1718.629266][ T687] kasan_quarantine_reduce+0x14a/0x170 [ 1718.634920][ T687] __kasan_slab_alloc+0x24/0x80 [ 1718.639807][ T687] slab_post_alloc_hook+0x4f/0x2d0 [ 1718.644948][ T687] kmem_cache_alloc+0x16e/0x330 [ 1718.649885][ T687] getname_flags+0xb9/0x500 [ 1718.654431][ T687] user_path_at_empty+0x30/0x1c0 [ 1718.659402][ T687] __x64_sys_umount+0xf1/0x160 [ 1718.664192][ T687] x64_sys_call+0x86a/0x9a0 [ 1718.668740][ T687] [ 1718.671088][ T687] Memory state around the buggy address: [ 1718.677097][ T687] ffff88811c936b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1718.685444][ T687] ffff88811c936c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1718.693523][ T687] >ffff88811c936c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1718.701594][ T687] ^ [ 1718.709328][ T687] ffff88811c936d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1718.717669][ T687] ffff88811c936d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1718.725762][ T687] ================================================================== [ 1718.734467][ T687] Disabling lock debugging due to kernel taint [ 1718.757286][ T28] audit: type=1400 audit(2000000155.220:2899): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1718.767950][T26637] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1718.799399][ T28] audit: type=1400 audit(2000000155.220:2900): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1718.808712][T26637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=34 [ 1718.847067][ T28] audit: type=1400 audit(2000000155.220:2901): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1718.849453][T26637] usb 5-1: Product: syz [ 1718.893038][ T28] audit: type=1400 audit(2000000155.220:2902): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1718.896081][T26637] usb 5-1: Manufacturer: syz [ 1718.919018][T26637] usb 5-1: SerialNumber: syz [ 1718.937192][ T28] audit: type=1400 audit(2000000155.220:2903): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1718.958130][ T28] audit: type=1400 audit(2000000155.220:2904): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1718.981432][ T28] audit: type=1400 audit(2000000155.220:2905): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1719.136505][T26637] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1719.360135][T17608] usb 5-1: USB disconnect, device number 83 [ 1719.371674][T17608] usblp0: removed