last executing test programs: 5.473929874s ago: executing program 3 (id=185): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110430000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 5.424010375s ago: executing program 3 (id=186): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 5.373142026s ago: executing program 3 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(&(0x7f0000000300), 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x0, 0x1, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast}}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e2300000b4d002e0000000400000000000000000001d30d0000200002000a004e2200000005fc000000000000000000000000000000fc0000000d0001007564703a73797a32000000"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000980)=[@rdmsr={0x66, 0x18, {0x5a7}}, @wrmsr={0x65, 0x20, {0x8f3, 0xffffffffffffbbf4}}, @out_dx={0x6a, 0x28, {0xcb67, 0x1, 0x2}}, @code={0xa, 0x81, {"c4017c2b4f3e48b80a000000000000000f23c80f21f835080060000f23f80f38097a4b66baf80cb80eb0f08fef66bafc0c66b82f0066efc422f1bc7b00c4817e7fe848b804000000000000000f23c80f21f835000090000f23f80fec196767430f880e00000066bad10466b8a50066ef"}}, @code={0xa, 0x84, {"48b807000000010000000f23c00f21f83501000b000f23f8c4e2f921ce650f01c8660f38807c510066b888008ed0d806c744240022000000c7442402be4f533ec7442406000000000f011424f366050600c744240090e4b73bc744240200000080c7442406000000000f011c2466b8bf008ed0"}}, @cpuid={0x64, 0x18, {0x8, 0x8}}, @uexit={0x0, 0x18, 0x4}, @rdmsr={0x66, 0x18, {0x119}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x5, 0x8}}, @cpuid={0x64, 0x18, {0x9, 0x1}}, @in_dx={0x69, 0x20, {0x9d49, 0x2}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x1b, 0x5, 0xfffffffffffffffe, 0x2}}], 0x285}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x7, 0x8000000000000001, 0x9, 0x0, 0x72b, 0xa, 0x6, 0x7, 0xffffffffffffffff, 0x8, 0x2, 0xb0cc, 0xfff, 0x8, 0xd], 0x40000, 0x101804}) 4.290768855s ago: executing program 3 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x1, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044002d00200001000a004e2300000b4d00000000000400000000000000000001d30d0000200002000a004e2200000005fc000000000000000000000000000000fc0000000d0001007564703a73797a32000000"], 0x6c}}, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000980)=[@rdmsr={0x66, 0x18, {0x5a7}}, @wrmsr={0x65, 0x20, {0x8f3, 0xffffffffffffbbf4}}, @out_dx={0x6a, 0x28, {0xcb67, 0x1, 0x2}}, @code={0xa, 0x81, {"c4017c2b4f3e48b80a000000000000000f23c80f21f835080060000f23f80f38097a4b66baf80cb80eb0f08fef66bafc0c66b82f0066efc422f1bc7b00c4817e7fe848b804000000000000000f23c80f21f835000090000f23f80fec196767430f880e00000066bad10466b8a50066ef"}}, @code={0xa, 0x84, {"48b807000000010000000f23c00f21f83501000b000f23f8c4e2f921ce650f01c8660f38807c510066b888008ed0d806c744240022000000c7442402be4f533ec7442406000000000f011424f366050600c744240090e4b73bc744240200000080c7442406000000000f011c2466b8bf008ed0"}}, @cpuid={0x64, 0x18, {0x8, 0x8}}, @uexit={0x0, 0x18, 0x4}, @rdmsr={0x66, 0x18, {0x119}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x5, 0x8}}, @cpuid={0x64, 0x18, {0x9, 0x1}}, @in_dx={0x69, 0x20, {0x9d49, 0x2}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x1b, 0x5, 0xfffffffffffffffe, 0x2}}], 0x285}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x7, 0x8000000000000001, 0x9, 0x0, 0x72b, 0xa, 0x6, 0x7, 0xffffffffffffffff, 0x8, 0x2, 0xb0cc, 0xfff, 0x8, 0xd], 0x40000, 0x101804}) 3.37809895s ago: executing program 3 (id=200): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400140000000306241a00000008241c0600070d000959b32bfdbc6eebb50904010000020d00000904010102020d0000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x24, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0xe4, 0x94, 0x0, 0x40, 0x7, 0x4, 0x9, 0x7fff, 0x8000, 0x80, 0x8, 0x2}}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x1, 0xfff1}, {0x2, 0xfff1}, {0xffff, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4040000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = syz_usb_connect$cdc_ecm(0x4, 0x63, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x1, 0x10, 0x0, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x1, {{0xb, 0x24, 0x6, 0x0, 0x0, "efc91413a822"}, {0x5, 0x24, 0x0, 0xef}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x41, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x3, 0x4, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x3, 0x53}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe, 0x24, 0xee}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x5, 0x2, 0x4, 0xff, 0x9}, 0x0, 0x0, 0x2, [{0xe4, &(0x7f0000000180)=@string={0xe4, 0x3, "fe9b95fa0e375eefdea61237a10583849fea344e5e1c2351459b5c19fa20783bdd14324c1199864a0563a5fa960f1da525edbd2c73b1ff309f4beb9e843776b97f346e9276921d66cda98dc98494ecf3e186fdc6b4f76e0c13ad57db1e808e5508cef6260dd97119b15faea9c198080cffdc9cd04489d17c668e52fbceddba1abbb1cda342b314a349a173c2007f2d637a754c91de09f41201aef343ac5f007ecb1fb2aa365abaf09c1f26cd866ddde0eed75f305375f41b7867fe9dd8f642613a47d575587e458e92dc068306fb0ff378ef4023a9f904cc17fff3e70d695c48c5ea"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2009}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x40, 0x30, 0xb8, {0xb8, 0x24, "5bd597a0104c0b83de9abdef2f1be0ac8516815443cf58abdb8318b28d38276a404df201bf02c68a27b246371982fc20b7d6e9fb77cb9785d932b9ce102ea0381cc7023e80f707c855898581b59e9ef9b0d2c026996883dfadfde8f4e70790dc59d0bb279bcce3c0e8556988e7e7d0b7a410c102eab42dc364897cc2139129b01fe822dfefc1e5eb0567b0d5fa63161b387b17aee0ecf5d3f33f2dae9e2709c2c5b383c95aed092282b966e60c07fc24452aed878a9f"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="001b98000000e3365e8ece41a2702f0fa909dc71bb39e69db77fa76e4161e33b557db205c20348d4787001effe2ca1b4289829aa6601644c23601003370990c8d888f7afaa179d611ddcef740104e07d0e0cb92950a7009737402093cee048fde395b59a8f1129ca54251a7cc3d6fce98e79d35e3b6e07644de71d434523b32d9e6c174196ec5cfbc6699bd4f8805701a97467fc80c44a698a7739ef8743"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x4}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf251b00000008009a005c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) 2.798693255s ago: executing program 4 (id=203): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe806000000000000000000000000042fe8000006400000000000000000000aa4e200e22"], 0x0) 2.737184076s ago: executing program 4 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(&(0x7f0000000300), 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x0, 0x1, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e2300000b4d3a000000000400000000000000000001d30d0000200002000a004e2200000005fc000000000000000000000000000000fc0000000d0001007564703a73797a32000000"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000980)=[@rdmsr={0x66, 0x18, {0x5a7}}, @wrmsr={0x65, 0x20, {0x8f3, 0xffffffffffffbbf4}}, @out_dx={0x6a, 0x28, {0xcb67, 0x1, 0x2}}, @code={0xa, 0x81, {"c4017c2b4f3e48b80a000000000000000f23c80f21f835080060000f23f80f38097a4b66baf80cb80eb0f08fef66bafc0c66b82f0066efc422f1bc7b00c4817e7fe848b804000000000000000f23c80f21f835000090000f23f80fec196767430f880e00000066bad10466b8a50066ef"}}, @code={0xa, 0x84, {"48b807000000010000000f23c00f21f83501000b000f23f8c4e2f921ce650f01c8660f38807c510066b888008ed0d806c744240022000000c7442402be4f533ec7442406000000000f011424f366050600c744240090e4b73bc744240200000080c7442406000000000f011c2466b8bf008ed0"}}, @cpuid={0x64, 0x18, {0x8, 0x8}}, @uexit={0x0, 0x18, 0x4}, @rdmsr={0x66, 0x18, {0x119}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x5, 0x8}}, @cpuid={0x64, 0x18, {0x9, 0x1}}, @in_dx={0x69, 0x20, {0x9d49, 0x2}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x1b, 0x5, 0xfffffffffffffffe, 0x2}}], 0x285}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x7, 0x8000000000000001, 0x9, 0x0, 0x72b, 0xa, 0x6, 0x7, 0xffffffffffffffff, 0x8, 0x2, 0xb0cc, 0xfff, 0x8, 0xd], 0x40000, 0x101804}) 2.727941147s ago: executing program 2 (id=208): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00302bfffe8000000000000000000000000000aaff020000000000000000600000000001", @ANYRES8=r2, @ANYRES64=r3], 0xfdef) 2.471962014s ago: executing program 2 (id=209): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) (async) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) (async) munmap(&(0x7f000031a000/0x3000)=nil, 0x3000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) (async) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fadvise64(r1, 0xe00000000000002, 0x1000002, 0x1000000) (async) write(r0, &(0x7f0000000080)='4', 0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @map_idx={0x18, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0x7, 0xd, 0xf, 0x4, 0x8001}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x6, 0x10, &(0x7f00000003c0)=""/16, 0x41100, 0x50, '\x00', r3, @fallback=0x1b, r4, 0x8, &(0x7f0000000480)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x7, 0x7, 0xa6c3}, 0x10, 0x0, r1, 0x6, &(0x7f0000000500)=[r1], &(0x7f0000000540)=[{0x5, 0x5, 0x1, 0x9}, {0x4, 0x1, 0x5, 0x3}, {0x0, 0x3, 0xa, 0x1}, {0x3, 0x4, 0x0, 0xb}, {0x4, 0x1, 0x2, 0x3}, {0x3, 0x1, 0x2, 0x6}], 0x10, 0x7}, 0x94) 2.349253097s ago: executing program 2 (id=210): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00', @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x8840) r0 = epoll_create(0x1) pselect6(0x40, &(0x7f0000000180)={0xb, 0x7fff, 0x0, 0x1, 0x3, 0x1000000000000008, 0xe25, 0x5}, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000042c0)={0x2000}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4894, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74772c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x21c, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) setpgid(r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/kheaders.tar.xz', 0x400, 0x0) 2.311896288s ago: executing program 2 (id=211): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f00000002c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8], 0x3, 0x239, &(0x7f0000000940)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303030323030d6af2c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000680)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0xa, 0x2000, 0x3, 0xfffe, 0x4, 0x2, 0x0, 0xff, 0x0, 0xc, 0x20000000, 0x7882, 0x0, 0x1, 0x1, 0x6, [0x0, 0x80000000]}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000004}) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x3, 0x5, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0xf007, 0x9, 0x100}}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000480)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x3, 0xf56, 0x0, 0x3}}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r7 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000000100)='ns/cgroup\x00') r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001200000025bd7000fedbdf252b0603064e204e2304000d00020000003c020200010000800000000006000000080000009e000000", @ANYRES32=r4, @ANYBLOB="03000000050000000e00000006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x44014}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x460280, 0x0) 2.307190618s ago: executing program 1 (id=212): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x180801e, &(0x7f0000006180)=ANY=[], 0x5, 0x5597, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000840)) unshare(0x64000600) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4007, 0x20000400) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000200001050000000000000000021400000000000000000000080001"], 0x24}}, 0x8844) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000006180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x478, 0xe8, 0xe8, 0x1b0, 0x1b0, 0x1b0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xce}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x14, 0x400, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x16}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xe}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x19}, 0xff, 0xffffffff, 'syzkaller1\x00', 'veth1_vlan\x00', {}, {}, 0x2e, 0x3}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x2, @ipv6=@empty, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) shutdown(r1, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xff}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2.172099862s ago: executing program 2 (id=213): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3e}, &(0x7f0000000780)=0x40) mount$9p_virtio(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000140), 0x4001, &(0x7f00000003c0)) 2.041225265s ago: executing program 2 (id=214): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x100}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in=@private=0xa0100fe, 0x4e28, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1b7, 0x0, 0xfffffffffffffffa, 0x100000001, 0x6, 0x3, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x8}, 0x25fe9add, 0x2000001, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x32}, 0x2, @in6=@loopback, 0x1502, 0x4, 0x0, 0x9, 0x7fff, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x99, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 2.040422535s ago: executing program 32 (id=214): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x84) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x100}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in=@private=0xa0100fe, 0x4e28, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1b7, 0x0, 0xfffffffffffffffa, 0x100000001, 0x6, 0x3, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x8}, 0x25fe9add, 0x2000001, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x32}, 0x2, @in6=@loopback, 0x1502, 0x4, 0x0, 0x9, 0x7fff, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x99, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 1.920550318s ago: executing program 4 (id=220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x101, 0x1, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xfff1, 0xa}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x10) 1.808695321s ago: executing program 1 (id=222): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000ffd0000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.541805019s ago: executing program 1 (id=224): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f00000006c0)=@svm={0x5, 0x1, 0x1080, {0x100000}, {"ae55e15ee07f5e8a7d2ecc86aa8ccd236b7141e2aa6aa476c241cb2c855ee069fa179945f770d371a04f885d42eaad9294812c02bfbc2a3ef2b39e4f4737e532c1d77907448b14e08d56baadd6d9ad46c4d7530d4e421d8ad10787ef8566d366850aadeaa53fff1f9d1cb271819f7e50b48c291a4ebe5c00ec2b38b770a8e94b5de1231d29481e1f0e6a265d8fb0372acfb3d5d9d0341b958dcb101bbaf0c56d37d8b1cd993734160cf6b9b8ad074eb5d0910c6583bd3e760d75a97e0defcabb467cd33a2de3f913084e83a9e9cb4118e8a3c0c505a352e0199dfdd099d047c86bcee3a7378d37cfbfa0895f27483a41460894f8ff8e750b60f6b35f916f85c0cb134acfb08ab6a809f92aa45056296c73eae70a48f058fb9e3277683389fd73db5277e45490e56c2458efa2a2d7b4b463af239c7777b63fd0571e115c5a29d1e0a714e49ae2e21859adfef13cf873bef4fb17bc146e2814bf6c7bb3bc038822e7b9b962ce9fe4730687425c30fb3a4b3146fa22383fedd0929e31210662d90b2a1cd496238fe8914fedbf2d7e1463470e5d168b61ec673e698f8604f3b5e1ecb52a389338254e7f49de7dcbb1e94f3e94b6685dca6e909e9dd742d7e55206b7dacbf9a9be42a65fccbcaf86215abf6b14f0348437af65d5929a2de916cc7dbaf2b619fd4afafe1f9f586769f464ae7a64ffa87571b09387ea66ade89757526a4768e9a730e086738faea9998f6c28efcdb06c0daec6c1efb328194b5be1defb214b133cd6eacaa5dc9786f08ed99cf6649f976a1cbb2c376a1e45d78ce6574f3cd16adc770865461c5a92047ef48fbe1ff49e78a4ff3ad527b89e25fde7822213d65af83b73f9a5438cf225408a26f393299b64cd7316a6b4d1b4c7ba11653563ca8bf2930bb18e1f1bfb730bb3f46d8c561e93524dcddb44ee3d07646346251f87645b1676cdf595233c5ddea0fba6c4093887d655af1f86d1cd02318550d54842a00d9dca8e2dba5048c47663a2bb4303e647681b43928b05731f2f0ba51d4c370d5ecd55ce7440b9f7bc9a4ef74c6dc790ea3265908cebaf74225abad1e55215cc42aca6c79f7da31f5befe60c23fc54cd6c656f5794e8382db6895a286f6ba1ea99f1a7d9c93e36d103179dfac69ee11018df29cae342da681fc0d5a208c44846cef7538aecd7f37d6c20c7289e58d1c96a6aed14c53dd0b9247404b45ad269c34e035aa744cf515dee7c2653f50cfbe0a2e8946e98d7baf526ae3dfd02450a0ef0f5b2df3affa474569e6fc5c8e486670269494b81e53d2c57ce3585d515a13bb9753566268843df79ffd8213b20364379ca3f8a8c6110d7f96066c2e35f7e6b0726bac9b6a7c92dfefe6cd1811b4365d84d8b9a20cbec714f264f6fccd8179a09d650ad93804b32f1339252b37b63c36f4a34943704c6beeb727b3bad77a65bc80f80e5d96a687b250ca9f8669bba7397b03d446576c07b04aef69ee7eef5fd8caf0bce235097bf4e1049c63c5fa0252248577d6c636b20e8d09457ec7db7df5a13de49693caa445c836f4f07076dbdb87f8ada745285db15c473316f064179fa4bf161a374e76a49919df3820b3e777214c4495a6ce99db8d05a2275411f37b78db2394b2f5eab83004a3361a2dd742aab21e94958447b003df6be029a4f63df0bcf9067db7842ab4b5df3a4c9b319dfb8af0b8ddf2669dd6082fa35117a2f7fecc3e4ce1854351783875a560dfbe3397a3c617d875b91e81064a1354ca636f8e3fe19b93cc65f7d031bbdfc23f6abec57a32cf281bd5297557ab7713be0bfd9e51729295b41249c8c6e2100b6b02d311ebfa06bab386badab5c7f41a83cc810613f6affb5bf85f16850b2e1ebd43c65a8f29e5a28c3b7ee59b66712746dfef37817cbbd265b28ba37c7e1c5b40ea211c0a36a3419b0cc9e175554a21dd4af695e4729581872e1cbfcd1962dc3d3addf69a2854adca19ef3a4b90d5f23f5d86919ee8e87913eecb455ca21c157513817e057967b25977d6c58a353f8a9e8ab6c7d350dc13dd6b19cc7669416d463b9cecd1f94ce37959cb6afffb8c50e8d021d3a60f3dadf3c15e504b4780631f21d17135b5bbc880d7ae355818aa0611cebd8eb5a776121fcb23057d52c85bbb4a9a0422f80fff7691e2eb388f1d29d5fb02021bdcab4356137526f77b6d8a87e59891870a38a39333a85034e52817e21b754ece7754735d8376a197cde9a850d14159bfb6036ec270eac41d71d8af985de12b655851ea55bb5eb81ac6ae27637dc49270c4fcf84e5469b357274586c0fd7b192a57dd49d95d6d94810bbf05d906b60a6a3aca01993778fc29ab88522c0605ceb38c6d5e29bf0af3d6af66cff491821c0975af1f3b127bc49adb79f7937ac4bf62ac1d32569f401dba8aa5b6566a02bf758aa604618ec750ff9d69b574e5e04bf2ec309b5a2df2d54a382c40485ff17e284bb5fc37cf4e540262ab92669a9aaca4ca68a1a34907b2e89e22c7dd64697f9d5a4d0a69dfcf02615d8c7d41f93b46fd2965b773915698ba62dbb86b73f69d02c4ba9db9f3e97d469adc853d8fd464cfd3ebcdf6f4bbe0c5da5607c615b32904e65fda2c6c047cebab22b40bb06f813b4b59cfd4ba512c7fed34181a47235b6e24807dcf8f20a66391ea5c23511c2615136ab11a881d20a57722a099941f5703211280d09428235c751632c25a0cc9f11a2615f9e85dfe0747ba3595f26084f8a92ef99998a4965a47d6bdafe3c90388c54814c1c6b5e842a726bad1b496cee605edb84f2080b57304ac72f15d0ff7220b1c2d228e4e846a626996f052dc7a745789faa539584e76102a5badcef1905700c4c9eaf314ab061e8810b5e818a0261c8cc2298a0e91e82818c152942c4cc0696e1a65739c456bb2cac2b8eed60d403a1cef113f0c469446c3c4888d479c9c4072ae5f084434c4c70deba71ef11a2a8b9c7c95953a03f96fd067c683a468d08b087f955f6181cfb406ddfea5b482793b3ac061b7a589ab9d170a131c593f280977d68134a62821c11c6241cbe2a3305dc6fde4b2d85215cd8f14cc0ee2edde579460144745cff1461d671413a3cc800488e896e4ac6b6fefe75293872dc5ed5a9384a4e850bf5cf86f3a3b748639d875cd96693b7a1d1f983de7b84ccdb126b35fc705acb511b1220a7589a7677a21ec1ca5549b7a682ff2b495acf6219006d1b5a3b9a02d3efddce02eed2feafb06061fffec56c7bf7670061b9b7a977b4c334ed3616997c91c8dde7f3b654391d7766ddfa93cd49bd2c5684fa8992ad8f970d5670d0404468eb0870c148a0b6fe8524caa7dad6c56a76069748641bba5d4833d3fc59d5812a22c37adcc3ff341b31d85625f5451d2df5c3148d739eca1bbeef2be61b8506fec8745827e09b96c03e2a721da6ab1fcc2fe4649f21630b2772c1bbde2a0a3ae2c6bc5553a8f37f7d43e21c0dc18b4316b13fa29278394ef17e9c46da2e8012c58a407f1a9b6d28bea6dc85303d59eb4413754928b47aa9b5d3326d81e865c2f944238c78bc7a3d0d23944205b3dd01186d764dcdf867168944802069db28981afea384a881d8b1a3925db4f4c5e467776c48a8012a63363b05e1ae1c6923f0a669d3ae7c022498d7139eb9df3e22f0acdc900cfdc4b5c65ace3a3905de7b14efe4c6c589285139f20837b7aa065528a56b91c24db161a5270ad1c27ad924862652f811f5c9ee1e1c2515556b9d43f303abaed9a41f87cb3ab2137fad5fba9cd85aa1eea27bd373cebd8ce13ed7e0ef4a6b04bce0fc5a655ac8690f63a2eaf76c3d0e9fd58f3305b3e03a8a1531cb49d1dfcd38bd8dee80872dcadc7203d9a83f561f1f8ceec061e2a52ba26154861bcb97fae1b1e02f60a9552444987b9fdc0856da9965e7dfadae914311b9af6d871ed235704d66ea5822876a9587790fdc157a44e78e07353016d2d3098fb4a1df961974ccbc1a5d36864dcaa80379d1da37fe60ec5f498e00be97de4741d40bf5e929484e3348dd36040c0f0f14aa903e03cd84e8a6733c57e51b999082bd85fe131a2e2195eb4251a70e637252acd94405736e80954b601206880ad087e7541cee27b3b1c89f41a3e151134b6c0519d5bce093a28ff859a543a18f0d127ba878c92fde9c773528630bdc13fdb17f1c48da53dcc60481b358ea7f9211ea3967546e72d45703f149904ee6b436e4eab3f56b955aaafbbcc10ab25f83efd1b720079d026bac922bb9dc1fd1d012bee75a85e33fef22c14c76f09ed3c841eb449a6c0cedbb79bbc9f2071f6f4d223bc3ea4f4eda27891841e5679b05a4775613bc268d551dd660c85526aeb318ae380fc76769d6998e682a431bdd63d2fbe55c6516eeac4789a1d9f344d4f1056030a79604390db6c00aae86ea5a984f15c3f1aba8ac791b51e10e8ac59c653c036bab55a0fdb69fd6a26d9de6e305c25738371451b14e1c6faaf8829c18e737263aabd7fb86c1d52fb3ec3718b6800af28a8ff6c6b14ded906644beb3747dda95ec8d8f985d8ff567c5c96f1b6b4293bd0307a7c2b36c162a776626da62bc410dea0fbf8da66784ca21f21066b6633c1fd327deb7a01a6efeca8388fcbdc5de314e8c54f9613ff00e28669f8899acb20ee99ed6a5f1e8fcd01e1cb1d1b808e32be4d53c07a91b8c9008eecea5e859fa6253060cbc2f1b13e51707c26d9565e2167b30bbfb7cac74aac5202937ccd9567903bf2a92fe64b74b6e978bec7102a76b7685386d6cc945ad708087a1d51703be109d2eb4d66e7e0427f506a972c42dd68fd2cdc123f061a959163ea197706fcbb70c8aebb971835cf1ffa42333aeadc5d109114c4f123a7bb939f84134f62f79fa45a0c124ce0f087890233b25c6901e9d1acef99436359404a29ca3cf0e0d5d52728ca2b28bb18a53071a1729ceb4e66add4cad3522ecab75d8792c636d8cc9f43f2baeb55a184d696295f1b7c9afa924edfd9b9833bcfdf62329cb9e4cd3f0acf7041d2940dc684351c9aa64ada9648e05e7b1f9cdae0051d2749c504b19ce644b29aa7a7d728f82527e1c8c9c90df4d07fc785189c60fa1d91275cc1855b3ce9c3859fee85907d67efd49099ceb14615e450ed2ed867998e5872ac0394392af11f1455a274301766288a71122393f81fbec7d8ffef897450d5ca1af163c84e94bf85b1641c7c172ae3ded54af1fa7db7e74f4c15300eb86351b818705a99222361ffff9979bdb55ad7dcc3239575f20904adacfdb8f1ab7ff7b7dd475db530f49c37a73af8717a28e6839090c117908a7128959526254f7f0edfe1cec26ec1d7f2efdfb529197a4f87491149a93c675cc3ab26f8a8acc3aa17b4b72c1bc39391ab3aee885c42342b5d79d4979e1c07e3b8f61ad1ea7a131b36c35ecf76bad6c35c89b1d0ff7266777acd758925903dd24d9d011fe48938192b83580c9bc63072bbe9c92bf8890922ad5cf3bab49a44022959a99eef6816d750697f5bcabd5b3370436f6cebda5954ab64032a4642768ec189b60e6b84bef450870000c858d468db71c98a2e30f9e087af207912db7b4a54775088beb8ce29ce609c6ab29226605117258799e6e8312218d832e7120185ba48bc83f440b5cdc4f53e435f867fd4f4521494edfb60fbda8ee42014c6a26dd0ae76ad458e02ee02f00a978d7c9869393ccfbddae53549c1420adc9b1f8f62ecb7d1036cd4bd09d39a98844138d0c168e5f817f93035d5ddda01103e05a53071447e41e19c8c6df59a6ab57d734330bde42ed5ea8fb"}}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@generic={0x73, 0x1, 0x1, 0xb}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x27) (async) r6 = syz_usb_connect$midi(0x5, 0x60, &(0x7f0000000300)=ANY=[@ANYBLOB="120100020000001099044b4740000102030109024e0001010980e80904000003ffff0000072401ac00070009050c03"], 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xa5023fff) (async) syz_usb_control_io(r6, &(0x7f0000000140)={0x2c, &(0x7f0000000000)={0x20, 0xa, 0x19, {0x19, 0x2, "21952690b51e8de57be424ab31762660d5c50660b0796c"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, &(0x7f0000001800)=ANY=[@ANYBLOB="000f23000000050f2300020a100300090080003c001410048894bb57600ff43407426ee81c253aab333cad55cd58c71acdefbbb3d438f311f8242e8feff5853c49a20049776dba7f4070ae10175eb0b2327afd103a95aac4ba5d6ac08808317d90e3b9c459f0c85a8c2405505aaa549221eee6bf47b7e7cde5c2c93e222ec9e4177466d2725654a4ee19610000000000000000"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x10, 0x98, 0x5, "865968e4", "e431d18b"}}, &(0x7f0000000100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x70, 0x8, 0x8, 0x19, 0xae, 0x5, 0xfffd}}}, &(0x7f0000000600)={0x84, &(0x7f0000000180)={0x0, 0x9, 0x67, "440945babbf818a70935820b77c3af6798f54e31e63e56005ce65d41bc241821bee069fda2b7d7a77113cb111a931335575c4f6eecb44dd963b4b1905fa38e9d11d7c9a3395a9c53b8ea2fe387dfae846ed55cb984f369ecc74a35569bc78a9bf872924d0a610f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x800, 0x8}}, &(0x7f0000000340)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000380)={0x40, 0x9, 0x1, 0x80}, &(0x7f00000003c0)={0x40, 0xb, 0x2, 'gs'}, &(0x7f0000000400)={0x40, 0xf, 0x2, 0x6f}, &(0x7f0000000440)={0x40, 0x13, 0x6, @random="b28a21b21d79"}, &(0x7f0000000480)={0x40, 0x17, 0x6, @local}, &(0x7f00000004c0)={0x40, 0x19, 0x2, '0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) recvfrom(r1, 0x0, 0x0, 0x2121, 0x0, 0x0) 1.347580974s ago: executing program 1 (id=226): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x42a}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400d0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x10b080) read$usbmon(r4, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x78}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 1.347269424s ago: executing program 0 (id=227): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110430000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 1.297231845s ago: executing program 0 (id=228): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) getdents(0xffffffffffffff9c, &(0x7f0000000000)=""/60, 0x3c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800, 0x0, 0x2, 0x9, 0x203, 0x5}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{0x2}, {0x9, 0x5, 0x9}, {0x0, 0x4}, {0xe, 0x3, 0x8}]}]}}, 0x0, 0x56}, 0x28) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x4a) fallocate(r2, 0x0, 0x1, 0x2000402) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000500)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/81, 0x51}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.284568986s ago: executing program 5 (id=215): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000fff50042fe8000000000000000000000000000aa4e200e22"], 0x0) 1.261982796s ago: executing program 5 (id=229): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe806000000000000000000000000042fe8000fff500000000000000000000aa4e200e22"], 0x0) 1.209356117s ago: executing program 0 (id=230): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 1.208774708s ago: executing program 1 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(&(0x7f0000000300), 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x0, 0x1, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e2300000b4d3a000000000400000000000000000001d30d0000200002000a004e2200000005fc000000000000000000000000000000fc0000000d0001007564703a73797a32000000"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000980)=[@rdmsr={0x66, 0x18, {0x5a7}}, @wrmsr={0x65, 0x20, {0x8f3, 0xffffffffffffbbf4}}, @out_dx={0x6a, 0x28, {0xcb67, 0x1, 0x2}}, @code={0xa, 0x81, {"c4017c2b4f3e48b80a000000000000000f23c80f21f835080060000f23f80f38097a4b66baf80cb80eb0f08fef66bafc0c66b82f0066efc422f1bc7b00c4817e7fe848b804000000000000000f23c80f21f835000090000f23f80fec196767430f880e00000066bad10466b8a50066ef"}}, @code={0xa, 0x84, {"48b807000000010000000f23c00f21f83501000b000f23f8c4e2f921ce650f01c8660f38807c510066b888008ed0d806c744240022000000c7442402be4f533ec7442406000000000f011424f366050600c744240090e4b73bc744240200000080c7442406000000000f011c2466b8bf008ed0"}}, @cpuid={0x64, 0x18, {0x8, 0x8}}, @uexit={0x0, 0x18, 0x4}, @rdmsr={0x66, 0x18, {0x119}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x5, 0x8}}, @cpuid={0x64, 0x18, {0x9, 0x1}}, @in_dx={0x69, 0x20, {0x9d49, 0x2}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x1b, 0x5, 0xfffffffffffffffe, 0x2}}], 0x285}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x7, 0x8000000000000001, 0x9, 0x0, 0x72b, 0xa, 0x6, 0x7, 0xffffffffffffffff, 0x8, 0x2, 0xb0cc, 0xfff, 0x8, 0xd], 0x40000, 0x101804}) 1.208300977s ago: executing program 5 (id=232): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000000c0)=ANY=[], 0x0, 0x1da, &(0x7f0000000600)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000022f0414f670bc70eaaaaaaaaaabb86dd6100070000153c00fe880000000000000000000020000001200100000000000000000000000000002f00"], 0x4f) 1.208036088s ago: executing program 33 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(&(0x7f0000000300), 0x6b, 0x901) setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @private=0x10000}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r5, 0x0, 0x1, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e2300000b4d3a000000000400000000000000000001d30d0000200002000a004e2200000005fc000000000000000000000000000000fc0000000d0001007564703a73797a32000000"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000980)=[@rdmsr={0x66, 0x18, {0x5a7}}, @wrmsr={0x65, 0x20, {0x8f3, 0xffffffffffffbbf4}}, @out_dx={0x6a, 0x28, {0xcb67, 0x1, 0x2}}, @code={0xa, 0x81, {"c4017c2b4f3e48b80a000000000000000f23c80f21f835080060000f23f80f38097a4b66baf80cb80eb0f08fef66bafc0c66b82f0066efc422f1bc7b00c4817e7fe848b804000000000000000f23c80f21f835000090000f23f80fec196767430f880e00000066bad10466b8a50066ef"}}, @code={0xa, 0x84, {"48b807000000010000000f23c00f21f83501000b000f23f8c4e2f921ce650f01c8660f38807c510066b888008ed0d806c744240022000000c7442402be4f533ec7442406000000000f011424f366050600c744240090e4b73bc744240200000080c7442406000000000f011c2466b8bf008ed0"}}, @cpuid={0x64, 0x18, {0x8, 0x8}}, @uexit={0x0, 0x18, 0x4}, @rdmsr={0x66, 0x18, {0x119}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x5, 0x8}}, @cpuid={0x64, 0x18, {0x9, 0x1}}, @in_dx={0x69, 0x20, {0x9d49, 0x2}}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x4, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x1b, 0x5, 0xfffffffffffffffe, 0x2}}], 0x285}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x7, 0x8000000000000001, 0x9, 0x0, 0x72b, 0xa, 0x6, 0x7, 0xffffffffffffffff, 0x8, 0x2, 0xb0cc, 0xfff, 0x8, 0xd], 0x40000, 0x101804}) 1.187939238s ago: executing program 0 (id=235): r0 = eventfd2(0xfff, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) r1 = syz_ublk_setup_io_uring(0x7435, &(0x7f0000000000)={0x0, 0x9b9, 0x400, 0x3, 0x72}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000140)=r0, 0x1) timer_create(0x0, &(0x7f0000000380)={0x0, 0x1a, 0x2, @thr={&(0x7f0000000180)="1bbbb3ec3fab116e4827e2d24fca87b6efaaf000bbb3a7c72ffbcc40c22c301ecd2b860487a926ea81868c83358e0f34cca68a19a1d71f00b16ce6dc017d892e7652fa15713c75339a823d3fbff9c74d5c6c0a35b329b8d6dae63816b92c97b3682fe23c9f22f197608bdb3d56d1f71c1ae71334b1b29d7886eb8e09723325eb5f5722ab7ef3e4ed0bb1e3f6221d17430abfa9e6732f4dc0e82d6d3c542bc57c5ab14485da9de3da868ab640a00e0d1a93543f87ff70bdd69d6eb18e4d9fd94ba82896b6328e99aa00f89028a3e7b5ac6e0977c9ed0e5d1bcf650be4d24f93be480e8ff6621c41752dd91f6868fe6b83d2d3f1217bcb", &(0x7f0000000280)="26e869832550dc5877f98f166fc65fb111795875cc4836dff0a8b8b110a5cb25dab090cea1064910f96dd50a9c9001c86354397bd511601e861d6f49d66d853e1574a3bb26b0e376422364ec4bd5e578766eeef756608edd708c117b9504c52d53adeae879ed3dd1d5399b5a4f89f2e99c2bbb1076e7bf8859467dd3b35d84d872172b89c0b82bd262bd9bd50e48f69820e279dacfd3375d1f959447e8df1435c5ac1c49e9d2bc299cb8bd43cea55fd53662d7fc4e8528b72dcdf420946884fa1e06594ead02c3ed0218e28524200b12e2d22edfbfdd633127e1dcc91ee656c8e2eb8da175682d833bf86a4bee08ad52"}}, &(0x7f00000003c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000440)) (async) r3 = socket$inet(0x2, 0x5, 0x789) faccessat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1, 0x200) (async) timer_getoverrun(r2) (async) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000004c0)={0x84, @rand_addr=0x64010100, 0x4e24, 0x1, 'dh\x00', 0x16, 0x3ff, 0x5f}, 0x2c) fcntl$setown(r3, 0x8, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x80040, 0x0) timer_create(0x5, &(0x7f0000000540)={0x0, 0x24, 0x4}, &(0x7f0000000580)=0x0) timer_delete(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x2000, 0xcbc5f913c0c6796c) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000600)={@local}) sendto$packet(r6, &(0x7f0000000640)="de7a3bc8957f56ef30762ab8e9e086bb994d68c2f40b561c5a0c615321820d5be83e9c037f3334a0c51e74875d2fcec7d141994631a65045cf05f185ca137684c54fca5afdd9dc53639c49e747019f404f60cedf1d4b59ff2341d926e678f7ea2ce60a8e17e069934e153d89b64dea81c16f1d3c3a6296accfe9c9ff475350d589f6f3cc4dbfe6042141fb119e9b51cfd6e70fbfb4761ee441909dc58caa2429217202195d7a02bac111fb462e1bdcd8231392a6bf16f4fe15dbe735723ac095400b4a8b665da3ea65c98082f45231013cfa5f701865777fee77e86f93d764", 0xdf, 0x20040000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file1\x00', 0x0, 0x8, r4}, 0x18) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) getpeername$packet(r6, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x6, 0x49, 0x9, 0x8, 0x1a, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x700, 0xb9, 0xffffffff}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000940)={'vxcan1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x0, 0xe, 0x14, @mcast2, @remote, 0x80, 0x7, 0x8ea, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000a80)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r8, &(0x7f0000000d80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x24c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000dc0)=@req3={0xf, 0x0, 0x6, 0x6, 0x2, 0x4, 0x6}, 0x1c) (async) mkdirat(r6, &(0x7f0000000e00)='./file0\x00', 0x81) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x80, 0x188, 0x13}, 0x18) 1.177262928s ago: executing program 0 (id=236): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141142, 0x80) unshare(0x20060400) pidfd_getfd(r1, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000280)=ANY=[@ANYBLOB="880900"], 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xffffff4c}]) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) io_destroy(r4) (async) io_destroy(r4) close_range(r5, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x400480, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x8, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x8, 0x4) 992.929723ms ago: executing program 4 (id=237): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_socket_connect_nvme_tcp() recvfrom(r0, 0x0, 0x0, 0x2121, 0x0, 0x0) 888.250856ms ago: executing program 5 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) (async) syz_usb_connect$midi(0x0, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x18, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd8, 0x2, {0x4}}}, {{0x9, 0x5, 0x8c, 0x2, 0x200, 0x6d, 0xf7, 0x80, {0x4}}}]}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 542.519265ms ago: executing program 3 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x6000c1, 0x0) lseek(r1, 0xfffffffffffffffc, 0x3) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000000), 0x10, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="050000000200620200000000000084462476691749154b000000800000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000a001000000030000a01301000042484a71cfd349ed0ea7ef31bee7d8d3025aee7cc7403c9354f5baa742512a1ae6527ed0c0d3d0652ff6a620a7de5c2f5ca70dce297d4ec4c122255058825d4f"], 0x80}, 0x1, 0x0, 0x0, 0x40890}, 0x8031) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x8000005}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x440, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f0000000200)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)="71d5f86ffdf290e4508b2c818a5d7317334c832cbc08b6559784c63a64685429d827d3b8bec15a118287c5c6e01e182f62fda4360cc6f1809e05d7f67fb12202d853c69b834794ff2c14a6d5654b35d48431bca21c14e9bb8be05a22da5f8f70aefae1e5d2b3f6db3ec0d102683ce84a5869427a42f618573942e85cc32f50e1e6dddea5d1", 0x85}], 0x1, &(0x7f0000000580)=[{0xa0, 0x113, 0x6bfb, "a684a6bab6b004e9b16ab5ddcb4d4c2de4bb48f0f9aa38e09f33caa586c4b6cdee8db92cf9180ae3d8bf60064a3d2984c533dfbceaecc4682cb3f05faef8480e3fd1701025dc5a4fadfc17941f1644d76460b94604a38dc21e5b4cf9bc27a3bd6a29b43babb76d9ee686181599483ba3707294679baf71f851dbdff4dfeed663acf131ad7ff33bc88e1b2ce4"}], 0xa0}, 0x8840) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000400)="05804ab38284c7d5a5b66406d704", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd11}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffeb}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000780)='./file0\x00', r4}, 0x28) unlink(&(0x7f00000001c0)='./file0/../file0/file0\x00') sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4800) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f00000002c0)={0x9, 0xd1, 0x4, 0xb, 0x80000000, 0x0, 0x8001}) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$uac3(0x1, 0x98, &(0x7f0000000240)=ANY=[], 0x0) 284.711172ms ago: executing program 6 (id=233): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 201.190734ms ago: executing program 6 (id=240): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @initdev, @remote}, &(0x7f0000000580)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x4, 0x5, 0x9, 0x1, 0x5, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8, 0x9}}) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0xa0008, &(0x7f0000000140)=ANY=[@ANYRES16=0x0]) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=""/134, 0x86) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000680)='./bus/file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000006c0)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) wait4(r6, 0x0, 0x2, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x70bd0a, 0x25dfdbfd, {0x2, 0x1f, 0x51, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'erspan0\x00'}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @rand_addr=0x64010101}}) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = dup(r8) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x10000000000000ed, 0x0, [{0x484, 0xec000000, 0xcd}]}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./bus/file0\x00', 0x400000, 0xb2) fsync(r12) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000240)={0xd7, "384824062b8f528916eb1692243cc5d352797199961b4f27428dfeca3d92ca49a974644060eb58c968631fb3fc19a5cf9ef6e8e947ac984ee2b1423ed84ce54ae9eb568af4c13934306f3f54a25624757dff962909c4950ca8540d9186ac3763552ca0009c742ec7d99dcdc6f1aa46b681c1217cab5481ddcaacff28c7d185bfa2f20e65f9790260bfa077c805f17839b1c6365e2dd00d3f6c96921314bdc49e59de6f925e49922d92f80bed4f4849d2e94c9adbeea4a50b1407f052db2d2c32bc98adbf7815e737058a187d0379569735d65e4fb1b1ae"}) 201.016094ms ago: executing program 0 (id=241): syz_usb_connect$uac3(0x5, 0xa7, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x249c, 0x9002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x45, 0x10, 0xe4, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x35}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x31, 0x5}, [@input_terminal={0x14, 0x24, 0x2, 0x2, 0x404, 0x6, 0x4, 0xc9, 0x3, 0x80, 0x2, 0x7}, @output_terminal={0x13, 0x24, 0x3, 0x3, 0x405, 0x1, 0x5, 0x2, 0xffffffff, 0x1ff, 0x3ff, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x9, 0x9, {0xa, 0x25, 0x25, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0xc, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0xd, 0xd}}}}}}}}]}}, 0x0) (async, rerun: 64) syz_usb_connect$uac1(0x6, 0x96, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0xfa, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x23f, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7ff, 0x2, 0x2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x8, 0xa, {0x7, 0x25, 0x1, 0xc, 0xb, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0xfc, 0x1, "0c9a"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x2, 0x6, 0xfb, "", "dc"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x2a, 0x1, 0x5, {0x7, 0x25, 0x1, 0x0, 0x3, 0x40}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x6, 0x4, 0x10, 0x3}, 0x48, &(0x7f0000000100)={0x5, 0xf, 0x48, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7f, "ffb8f2bef4fd4c005c73c1a5c5b0aff0"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "ce7588559ce123b5a481c29ea2fa3fbe"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0xda6, 0xf000, 0x4, [0xc0, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0x3, 0x8}]}, 0x1, [{0x8c, &(0x7f0000000180)=@string={0x8c, 0x3, "9504b62980e0c144aab998fedcd6ca6b41254f39d5f28fc17f3c874b474d5c293ad1b03cfd4a2dcf2fdb3b870ee063f83a0319d4b9edd4f42066000109e7b43144dbb94999c3f99adbf15ae6e8b06e183dcc725e0a9f9277ce57b1527d3b3f28a6944c6d97e7452b7070cdf4c6c624d5ddeca3943db6204c9f28760fe6552d2fdb365a1f5ee6b3587cea"}}]}) (rerun: 64) 183.745165ms ago: executing program 6 (id=242): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_ethernet(0x49, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08050207fdc278fe5601cbbc3f173632e2ee8b5e754330fe9bf852d137b7a5aafdda42710c8b73eb10ffb2e2bf72b9e9fcc9977a5c0c67bdb8b73b000000"], &(0x7f00000000c0)={0x0, 0x1, [0x1d0, 0xc95, 0xcd9, 0x945]}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r3, 0x80047453, 0x0) r4 = socket(0x2, 0x6, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x2, 0x9, {{0xf, 0x4, 0x3, 0x4, 0x3c, 0x68, 0x0, 0xb4, 0x2f, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0xb, 0x30, [@dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp_prespec={0x44, 0x14, 0x2f, 0x3, 0xe, [{@remote, 0xffff}, {@multicast2, 0x6}]}, @end, @rr={0x7, 0x7, 0x89, [@local]}]}}}}}) bind$packet(r4, &(0x7f0000000200)={0x11, 0x8, r5, 0x1, 0x2, 0x6, @local}, 0x14) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11"], 0x17) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) syz_emit_ethernet(0x49, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e08050207fdc278fe5601cbbc3f173632e2ee8b5e754330fe9bf852d137b7a5aafdda42710c8b73eb10ffb2e2bf72b9e9fcc9977a5c0c67bdb8b73b000000"], &(0x7f00000000c0)={0x0, 0x1, [0x1d0, 0xc95, 0xcd9, 0x945]}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$EXT4_IOC_GETFSUUID(r3, 0x80047453, 0x0) (async) socket(0x2, 0x6, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x80, 0x40, 0x2, 0x9, {{0xf, 0x4, 0x3, 0x4, 0x3c, 0x68, 0x0, 0xb4, 0x2f, 0x0, @multicast2, @broadcast, {[@rr={0x7, 0xb, 0x30, [@dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp_prespec={0x44, 0x14, 0x2f, 0x3, 0xe, [{@remote, 0xffff}, {@multicast2, 0x6}]}, @end, @rr={0x7, 0x7, 0x89, [@local]}]}}}}}) (async) bind$packet(r4, &(0x7f0000000200)={0x11, 0x8, r5, 0x1, 0x2, 0x6, @local}, 0x14) (async) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11"], 0x17) (async) 161.994536ms ago: executing program 6 (id=243): unshare(0x62020600) (async) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x10000, 0x0, 0xfd, 0x0, 0x0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800000, &(0x7f0000000980)=ANY=[@ANYBLOB='nr_inodes=2']) (rerun: 64) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file1\x00', 0xc000, 0x3) (async, rerun: 64) r1 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) (rerun: 64) setsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f00000000c0)="bb80aca6214dc11bb2c129aa5c1158e6c58023d3dba7d0571daa7e0ee40fce38361fee6b4a5c20d7aa69167fb98d5ed1a64a542ff4813953f86cbe1e4db68196057e92fb78287c77d1419d2543505755e2e75fffda11012520032d1a8d33a60eb231ff45e75f9bbe7387df6bc91f9dd848824b46ea6ce682887464bdd3c91997475b9c41b3e02f8bcd8515136b3230013ff0f2f35fabe6d6f6b748fd0e6bbb61a044f31dd1393cd051a3e2858b", 0xad) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x80, 0x20, 0x7f, 0x0, 0x3, 0x0, 0x0, 0x2000}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @RTA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0x0) 69.569658ms ago: executing program 4 (id=244): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 69.453088ms ago: executing program 4 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) modify_ldt$write2(0x11, &(0x7f00000004c0)={0x9, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) syz_clone(0x23600, 0x0, 0xfffffd1a, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x1000002, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) munmap$IORING_OFF_CQ_RING(r4, 0x9) 0s ago: executing program 6 (id=246): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x101, 0x1, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xfff1, 0xa}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x10) kernel console output (not intermixed with test programs): rocess permissive=1 [ 13.450189][ T30] audit: type=1400 audit(1785991748.860:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 20.258083][ T30] audit: type=1400 audit(1785991755.680:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.259205][ T277] cgroup: Unknown subsys name 'net' [ 20.286035][ T30] audit: type=1400 audit(1785991755.680:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.308161][ T30] audit: type=1400 audit(1785991755.710:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.308556][ T277] cgroup: Unknown subsys name 'devices' [ 20.423108][ T277] cgroup: Unknown subsys name 'hugetlb' [ 20.428716][ T277] cgroup: Unknown subsys name 'rlimit' [ 20.594186][ T30] audit: type=1400 audit(1785991756.020:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.617390][ T30] audit: type=1400 audit(1785991756.020:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.642161][ T30] audit: type=1400 audit(1785991756.020:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.648299][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.674119][ T30] audit: type=1400 audit(1785991756.100:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.699530][ T30] audit: type=1400 audit(1785991756.100:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.736471][ T30] audit: type=1400 audit(1785991756.160:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.762024][ T30] audit: type=1400 audit(1785991756.160:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.762093][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.285369][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.292454][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.299770][ T285] device bridge_slave_0 entered promiscuous mode [ 21.306951][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.314019][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.321483][ T285] device bridge_slave_1 entered promiscuous mode [ 21.345446][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.352536][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.359939][ T288] device bridge_slave_0 entered promiscuous mode [ 21.366949][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.373997][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.381434][ T288] device bridge_slave_1 entered promiscuous mode [ 21.407555][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.414650][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.422018][ T286] device bridge_slave_0 entered promiscuous mode [ 21.451903][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.458938][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.466784][ T286] device bridge_slave_1 entered promiscuous mode [ 21.515031][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.522163][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.529427][ T289] device bridge_slave_0 entered promiscuous mode [ 21.536335][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.543525][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.550945][ T289] device bridge_slave_1 entered promiscuous mode [ 21.566799][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.573932][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.581265][ T287] device bridge_slave_0 entered promiscuous mode [ 21.611012][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.618061][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.625584][ T287] device bridge_slave_1 entered promiscuous mode [ 21.721452][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.728494][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.735787][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.742817][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.757144][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.764212][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.771524][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.778548][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.795144][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.802214][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.809473][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.816553][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.826623][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.833694][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.841007][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.848027][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.891662][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.898713][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.906011][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.913071][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.934703][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.942211][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.949308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.957199][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.964557][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.971757][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.978971][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.986622][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.994041][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.001421][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.008637][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.031830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.040170][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.047233][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.054817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.063139][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.070189][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.077685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.085118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.092624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.101214][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.108218][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.133041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.141074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.148905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.157026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.165213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.173506][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.180532][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.188279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.196441][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.203473][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.210881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.218969][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.226767][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.234308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.262179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.271756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.279925][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.286971][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.294990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.302448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.309826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.318212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.326374][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.333401][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.340918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.349207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.357387][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.364414][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.371942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.379926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.388057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.396151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.404435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.414761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.422981][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.431146][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.439672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.447934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.455997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.463950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.475460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.483821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.501949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.510039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.518110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.526619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.535217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.543384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.551479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.559451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.567588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.575249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.587697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.596946][ T287] device veth0_vlan entered promiscuous mode [ 22.611718][ T288] device veth0_vlan entered promiscuous mode [ 22.618467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.626693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.634978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.643383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.651789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.659173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.670111][ T285] device veth0_vlan entered promiscuous mode [ 22.677540][ T289] device veth0_vlan entered promiscuous mode [ 22.684681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.692795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.700581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.708849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.717240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.725610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.733257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.740925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.748314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.759045][ T287] device veth1_macvtap entered promiscuous mode [ 22.774315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.782087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.790164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.799212][ T285] device veth1_macvtap entered promiscuous mode [ 22.810398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.817964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.826222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.834591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.842989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.851445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.859492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.868069][ T288] device veth1_macvtap entered promiscuous mode [ 22.882903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.890692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.898863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.907351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.915799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.924246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.932583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.941026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.953571][ T286] device veth0_vlan entered promiscuous mode [ 22.964313][ T289] device veth1_macvtap entered promiscuous mode [ 22.971454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.979404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.987699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.996173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.004492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.012069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.022613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.039969][ T286] device veth1_macvtap entered promiscuous mode [ 23.041705][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 23.054370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.066446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.078042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.086302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.094743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.103180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.145958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.171192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.188029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.195652][ T320] loop4: detected capacity change from 0 to 1024 [ 23.203527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.255084][ T330] loop3: detected capacity change from 0 to 1024 [ 23.278215][ T320] EXT4-fs (loop4): Ignoring removed orlov option [ 23.314212][ T330] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 23.325397][ T320] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 23.522621][ T351] futex_wake_op: syz.4.11 tries to shift op by 144; fix this program [ 23.799435][ T351] tipc: Started in network mode [ 23.805099][ T351] tipc: Node identity 00000300000400000000000000000001, cluster identity 4711 [ 23.814559][ T351] tipc: Enabling of bearer rejected, failed to enable media [ 24.008022][ T324] loop1: detected capacity change from 0 to 40427 [ 24.056795][ T324] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(1536) [ 24.078422][ T353] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.096542][ T324] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 24.151927][ T324] F2FS-fs (loop1): invalid crc value [ 24.194459][ T324] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 24.222512][ T353] binder: BINDER_SET_CONTEXT_MGR already set [ 24.230943][ T353] binder: 352:353 ioctl 40046207 0 returned -16 [ 24.295075][ T324] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 24.320913][ T324] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 24.397067][ T366] netlink: 'syz.4.14': attribute type 16 has an invalid length. [ 24.404990][ T366] netlink: 'syz.4.14': attribute type 17 has an invalid length. [ 24.414881][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 24.423906][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 24.433234][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 24.442299][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 24.449982][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 24.457831][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 24.465936][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 24.473395][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 24.480987][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 24.488976][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 24.497997][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 24.505282][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 24.520753][ T366] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 24.619484][ T366] syz.4.14 (366) used greatest stack depth: 20864 bytes left [ 24.730474][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 24.748883][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.787727][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 24.810963][ T307] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 24.829430][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.869778][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 24.910129][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 24.936854][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 24.948450][ T356] loop2: detected capacity change from 0 to 40427 [ 24.981160][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.025062][ T356] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 25.058697][ T356] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 25.078246][ T356] F2FS-fs (loop2): invalid crc value [ 25.105447][ T356] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 25.177299][ T398] loop4: detected capacity change from 0 to 256 [ 25.312389][ T398] ======================================================= [ 25.312389][ T398] WARNING: The mand mount option has been deprecated and [ 25.312389][ T398] and is ignored by this kernel. Remove the mand [ 25.312389][ T398] option from the mount to silence this warning. [ 25.312389][ T398] ======================================================= [ 25.360851][ T307] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 25.442212][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.442393][ T356] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 25.469223][ T307] usb 4-1: Product: syz [ 25.473655][ T307] usb 4-1: Manufacturer: syz [ 25.478593][ T307] usb 4-1: SerialNumber: syz [ 25.491345][ T307] usb 4-1: config 0 descriptor?? [ 25.498074][ T356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.498702][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 25.498712][ T30] audit: type=1400 audit(1785991760.920:152): avc: denied { read } for pid=410 comm="syz.1.20" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.536448][ T30] audit: type=1400 audit(1785991760.960:153): avc: denied { open } for pid=410 comm="syz.1.20" path="net:[4026532377]" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.572003][ T307] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 25.651942][ T30] audit: type=1400 audit(1785991761.080:154): avc: denied { name_bind } for pid=421 comm="syz.1.23" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.675687][ T422] loop1: detected capacity change from 0 to 512 [ 25.688050][ T422] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 25.693549][ T30] audit: type=1400 audit(1785991761.080:155): avc: denied { node_bind } for pid=421 comm="syz.1.23" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.717648][ T422] SELinux: duplicate or incompatible mount options [ 25.838749][ T399] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.860959][ T307] usb 4-1: USB disconnect, device number 2 [ 26.090734][ T399] usb 5-1: Using ep0 maxpacket: 32 [ 26.155269][ T30] audit: type=1400 audit(1785991761.580:156): avc: denied { create } for pid=431 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.174545][ T30] audit: type=1400 audit(1785991761.580:157): avc: denied { ioctl } for pid=431 comm="syz.2.24" path="socket:[15946]" dev="sockfs" ino=15946 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.281236][ T399] usb 5-1: unable to get BOS descriptor or descriptor too short [ 26.378308][ T450] netlink: 'syz.2.25': attribute type 16 has an invalid length. [ 26.386091][ T450] netlink: 'syz.2.25': attribute type 17 has an invalid length. [ 26.396463][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 26.405414][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 26.415110][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 26.423075][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 26.432867][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 26.440328][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 26.449347][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 26.456982][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 26.468584][ T450] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 26.608242][ T399] usb 5-1: config 12 has an invalid interface number: 31 but max is 0 [ 26.651547][ T399] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 26.664459][ T453] loop1: detected capacity change from 0 to 2048 [ 26.698290][ T399] usb 5-1: config 12 has no interface number 0 [ 26.714867][ T399] usb 5-1: config 12 interface 31 altsetting 178 has an invalid endpoint descriptor of length 6, skipping [ 26.736681][ T399] usb 5-1: config 12 interface 31 has no altsetting 0 [ 26.759228][ T453] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 26.781733][ T30] audit: type=1400 audit(1785991762.210:158): avc: denied { name_bind } for pid=470 comm="syz.2.28" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 26.827194][ T464] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 26.895089][ T30] audit: type=1400 audit(1785991762.230:159): avc: denied { mount } for pid=452 comm="syz.1.26" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.918983][ T30] audit: type=1400 audit(1785991762.320:160): avc: denied { listen } for pid=472 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.922808][ T455] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 26.947242][ T399] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=b5.36 [ 26.956474][ T455] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 26.958330][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.987668][ T30] audit: type=1400 audit(1785991762.320:161): avc: denied { connect } for pid=472 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.015027][ T399] usb 5-1: Product: syz [ 27.019219][ T399] usb 5-1: Manufacturer: syz [ 27.027742][ T482] TCP: TCP_TX_DELAY enabled [ 27.028397][ T399] usb 5-1: SerialNumber: syz [ 27.093825][ T482] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 27.100860][ T307] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.110109][ T482] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 27.396827][ T531] netlink: 'syz.3.36': attribute type 16 has an invalid length. [ 27.404719][ T531] netlink: 'syz.3.36': attribute type 17 has an invalid length. [ 27.415679][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 27.425240][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 27.435248][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 27.443125][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 27.452988][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 27.460521][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 27.469704][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 27.477601][ T531] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 27.643179][ T531] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 27.791405][ T537] futex_wake_op: syz.3.37 tries to shift op by 144; fix this program [ 27.861641][ T537] tipc: Started in network mode [ 27.867063][ T537] tipc: Node identity 0000002e000400000000000000000001, cluster identity 4711 [ 27.876371][ T537] tipc: Enabling of bearer rejected, failed to enable media [ 27.910739][ T307] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.051189][ T307] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 28.235519][ T522] loop0: detected capacity change from 0 to 40427 [ 28.250844][ T307] usb 2-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 28.257035][ T522] F2FS-fs (loop0): invalid crc value [ 28.260159][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.265427][ T522] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root and reserve_node [ 28.282580][ T307] usb 2-1: Product: syz [ 28.286477][ T522] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.289317][ T307] usb 2-1: Manufacturer: syz [ 28.303993][ T307] usb 2-1: SerialNumber: syz [ 28.320931][ T522] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 28.327554][ T522] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 28.330744][ T453] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.334609][ T522] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 28.521298][ T42] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.665233][ T605] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 28.674764][ T605] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 28.750885][ T307] usb 2-1: MIDIStreaming interface descriptor not found [ 28.786265][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 28.792932][ T626] x_tables: duplicate underflow at hook 1 [ 28.803100][ T399] usb 5-1: USB disconnect, device number 2 [ 28.823069][ T307] usb 2-1: USB disconnect, device number 2 [ 28.930820][ T42] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 28.942371][ T42] usb 3-1: config 0 has no interface number 0 [ 28.948539][ T42] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 28.958979][ T42] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 28.970698][ T42] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 28.981738][ T42] usb 3-1: config 0 interface 196 has no altsetting 0 [ 29.140917][ T42] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 29.150129][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.169107][ T42] usb 3-1: Product: syz [ 29.173558][ T42] usb 3-1: Manufacturer: syz [ 29.184352][ T42] usb 3-1: SerialNumber: syz [ 29.193974][ T42] usb 3-1: config 0 descriptor?? [ 29.210763][ T543] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 29.550788][ T686] loop4: detected capacity change from 0 to 256 [ 30.000839][ T42] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -110 [ 30.001116][ T42] ipheth: probe of 3-1:0.196 failed with error -110 [ 30.223781][ T686] loop4: detected capacity change from 0 to 4096 [ 30.239721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 30.252061][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 30.260430][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 30.270842][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 30.279160][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.288820][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 30.297241][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.305668][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 30.390793][ T696] futex_wake_op: syz.0.49 tries to shift op by 144; fix this program [ 30.457283][ T695] loop4: detected capacity change from 0 to 512 [ 30.484059][ T695] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 30.493488][ T695] SELinux: duplicate or incompatible mount options [ 30.543618][ T703] loop3: detected capacity change from 0 to 256 [ 30.618314][ T703] exfat: Deprecated parameter 'utf8' [ 30.624390][ T703] exfat: Deprecated parameter 'namecase' [ 30.632742][ T707] futex_wake_op: syz.1.51 tries to shift op by 144; fix this program [ 30.656924][ T707] tipc: Started in network mode [ 30.661934][ T707] tipc: Node identity 0000003a000400000000000000000001, cluster identity 4711 [ 30.670864][ T707] tipc: Enabling of bearer rejected, failed to enable media [ 31.031775][ T703] exfat: Deprecated parameter 'namecase' [ 31.055734][ T710] futex_wake_op: syz.0.54 tries to shift op by 144; fix this program [ 31.069629][ T710] tipc: Enabling of bearer rejected, failed to enable media [ 31.080110][ T703] exfat: Deprecated parameter 'namecase' [ 31.145385][ T703] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 31.164588][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 31.164618][ T30] audit: type=1400 audit(1785991766.590:185): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.256707][ T716] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 31.281069][ T30] audit: type=1400 audit(1785991766.710:186): avc: denied { getopt } for pid=717 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 31.323889][ T722] loop4: detected capacity change from 0 to 16 [ 31.398790][ T399] usb 3-1: USB disconnect, device number 2 [ 31.403202][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 31.422922][ T722] erofs: (device loop4): mounted with root inode @ nid 36. [ 31.433216][ T732] loop2: detected capacity change from 0 to 512 [ 31.440009][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.449128][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 31.458319][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.467509][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.471172][ T732] EXT4-fs (loop2): Invalid want_extra_isize 2 [ 31.482302][ T307] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.497184][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.499787][ T740] loop0: detected capacity change from 0 to 512 [ 31.506026][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.519761][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.530062][ T740] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 31.540909][ T740] SELinux: duplicate or incompatible mount options [ 31.562899][ T732] loop2: detected capacity change from 0 to 512 [ 31.597364][ T732] EXT4-fs (loop2): 1 orphan inode deleted [ 31.603235][ T732] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,inlinecrypt,usrquota,jqfmt=vfsv1,jqfmt=vfsv0,delalloc,journal_dev=0x0000000000000008,debug_want_extra_isize=0x000000000000005c,i_version,,errors=continue. Quota mode: writeback. [ 31.632339][ T732] x_tables: duplicate underflow at hook 1 [ 31.655497][ T30] audit: type=1400 audit(1785991767.080:187): avc: denied { bind } for pid=746 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.796212][ T741] x_tables: unsorted entry at hook 3 [ 31.832091][ T30] audit: type=1400 audit(1785991767.080:188): avc: denied { setopt } for pid=746 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.921159][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.933335][ T307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.943817][ T307] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 31.952958][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.961668][ T307] usb 4-1: config 0 descriptor?? [ 32.056365][ T759] futex_wake_op: syz.1.72 tries to shift op by 144; fix this program [ 32.096008][ T759] tipc: Enabling of bearer rejected, failed to enable media [ 32.170737][ T399] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 32.421238][ T30] audit: type=1400 audit(1785991767.850:189): avc: denied { create } for pid=711 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.440657][ T30] audit: type=1400 audit(1785991767.850:190): avc: denied { read } for pid=711 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.481660][ T307] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 32.488702][ T307] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 32.495703][ T307] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 32.502787][ T307] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 32.509921][ T307] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 32.516919][ T307] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 32.523943][ T307] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 32.540715][ T399] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.550911][ T307] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 32.562314][ T30] audit: type=1400 audit(1785991767.980:191): avc: denied { sys_module } for pid=760 comm="syz.0.73" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 32.583107][ T399] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 32.596202][ T399] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.608545][ T30] audit: type=1400 audit(1785991768.020:192): avc: denied { read write } for pid=763 comm="syz.2.74" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.632412][ T30] audit: type=1400 audit(1785991768.040:193): avc: denied { open } for pid=763 comm="syz.2.74" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.669294][ T764] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 32.771036][ T399] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.787004][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.795823][ T399] usb 5-1: Product: syz [ 32.799998][ T399] usb 5-1: Manufacturer: syz [ 32.804662][ T399] usb 5-1: SerialNumber: syz [ 32.810077][ T770] futex_wake_op: syz.2.75 tries to shift op by 144; fix this program [ 32.819661][ T770] tipc: Enabling of bearer rejected, failed to enable media [ 32.822872][ T30] audit: type=1400 audit(1785991768.240:194): avc: denied { bind } for pid=768 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.847216][ T63] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.852478][ T399] cdc_ncm 5-1:1.0: skipping garbage [ 32.909656][ T778] capability: warning: `syz.1.79' uses deprecated v2 capabilities in a way that may be insecure [ 32.940782][ T782] loop1: detected capacity change from 0 to 256 [ 32.974520][ T782] FAT-fs (loop1): Directory bread(block 1285) failed [ 32.981499][ T782] FAT-fs (loop1): Directory bread(block 1286) failed [ 32.988219][ T782] FAT-fs (loop1): Directory bread(block 1287) failed [ 32.995246][ T782] FAT-fs (loop1): Directory bread(block 1288) failed [ 33.015604][ T782] FAT-fs (loop1): Directory bread(block 1285) failed [ 33.022571][ T782] FAT-fs (loop1): Directory bread(block 1286) failed [ 33.029242][ T782] FAT-fs (loop1): Directory bread(block 1287) failed [ 33.036120][ T782] FAT-fs (loop1): Directory bread(block 1288) failed [ 33.240751][ T63] usb 1-1: config index 0 descriptor too short (expected 45, got 28) [ 33.249024][ T63] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 33.257400][ T63] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 33.273385][ T791] loop1: detected capacity change from 0 to 512 [ 33.310933][ T791] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 33.351345][ T791] EXT4-fs (loop1): bad s_min_extra_isize: 544 [ 33.457720][ T793] FAULT_INJECTION: forcing a failure. [ 33.457720][ T793] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.460724][ T63] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 33.470949][ T793] CPU: 1 PID: 793 Comm: syz.1.85 Not tainted syzkaller #0 [ 33.479914][ T63] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.486897][ T793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.486925][ T793] Call Trace: [ 33.486931][ T793] [ 33.486937][ T793] __dump_stack+0x21/0x30 [ 33.486965][ T793] dump_stack_lvl+0x110/0x170 [ 33.486978][ T793] ? show_regs_print_info+0x20/0x20 [ 33.486994][ T793] dump_stack+0x15/0x20 [ 33.487007][ T793] should_fail+0x3ab/0x500 [ 33.487022][ T793] should_fail_usercopy+0x1a/0x20 [ 33.495939][ T63] usb 1-1: Product: syz [ 33.505026][ T793] _copy_to_user+0x20/0x90 [ 33.505049][ T793] simple_read_from_buffer+0xe9/0x160 [ 33.505066][ T793] proc_fail_nth_read+0x1a6/0x220 [ 33.508488][ T63] usb 1-1: Manufacturer: syz [ 33.511240][ T793] ? proc_fault_inject_write+0x310/0x310 [ 33.511262][ T793] ? security_file_permission+0x83/0xa0 [ 33.515626][ T63] usb 1-1: SerialNumber: syz [ 33.520223][ T793] ? proc_fault_inject_write+0x310/0x310 [ 33.520241][ T793] vfs_read+0x28c/0xc20 [ 33.520257][ T793] ? kernel_read+0x1f0/0x1f0 [ 33.592483][ T793] ? __kasan_check_write+0x14/0x20 [ 33.597610][ T793] ? mutex_lock+0x9b/0x1c0 [ 33.602016][ T793] ? wait_for_completion_killable_timeout+0x10/0x10 [ 33.608737][ T793] ? __fget_files+0x2e1/0x340 [ 33.611297][ T63] rtl8150 1-1:1.0: couldn't find required endpoints [ 33.613404][ T793] ? __fdget_pos+0x2d2/0x380 [ 33.613424][ T793] ? ksys_read+0x70/0x260 [ 33.620153][ T63] rtl8150: probe of 1-1:1.0 failed with error -5 [ 33.624566][ T793] ksys_read+0x14a/0x260 [ 33.624589][ T793] ? vfs_write+0xfd0/0xfd0 [ 33.624604][ T793] ? debug_smp_processor_id+0x17/0x20 [ 33.649245][ T793] __x64_sys_read+0x7b/0x90 [ 33.653756][ T793] x64_sys_call+0x96d/0x9a0 [ 33.658242][ T793] do_syscall_64+0x4c/0xa0 [ 33.662635][ T793] ? clear_bhb_loop+0x50/0xa0 [ 33.667290][ T793] ? clear_bhb_loop+0x50/0xa0 [ 33.671946][ T793] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.677824][ T793] RIP: 0033:0x7fd982b6590e [ 33.682242][ T793] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 33.701830][ T793] RSP: 002b:00007fd9815fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 33.710603][ T793] RAX: ffffffffffffffda RBX: 00007fd9815fe6c0 RCX: 00007fd982b6590e [ 33.718587][ T793] RDX: 000000000000000f RSI: 00007fd9815fe0a0 RDI: 0000000000000003 [ 33.726545][ T793] RBP: 00007fd9815fe090 R08: 0000000000000000 R09: 0000000000000000 [ 33.734506][ T793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.742465][ T793] R13: 00007fd982e2d038 R14: 00007fd982e2cfa0 R15: 00007ffd53b61b28 [ 33.750425][ T793] [ 33.826907][ T63] usb 1-1: USB disconnect, device number 2 [ 33.909156][ T816] futex_wake_op: syz.1.91 tries to shift op by 144; fix this program [ 33.926958][ T816] tipc: Enabling of bearer rejected, failed to enable media [ 34.090919][ T399] cdc_ncm 5-1:1.0: bind() failure [ 34.120717][ T399] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 34.140735][ T399] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 34.148809][ T399] usb 5-1: USB disconnect, device number 3 [ 34.181289][ T823] futex_wake_op: syz.2.96 tries to shift op by 144; fix this program [ 34.191000][ T823] tipc: Enabling of bearer rejected, failed to enable media [ 34.230736][ T307] cp2112 0003:10C4:EA90.0001: error requesting version [ 34.238349][ T307] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71 [ 34.247802][ T307] usb 4-1: USB disconnect, device number 3 [ 34.283220][ T828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.98'. [ 34.289981][ T826] fido_id[826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 34.601568][ T852] loop4: detected capacity change from 0 to 16 [ 34.647968][ T852] erofs: (device loop4): mounted with root inode @ nid 36. [ 34.747883][ T861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 34.789648][ T867] loop4: detected capacity change from 0 to 256 [ 34.810692][ T307] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 34.829278][ T867] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 34.839994][ T867] FAT-fs (loop4): Filesystem has been set read-only [ 34.958051][ T878] loop4: detected capacity change from 0 to 512 [ 34.979470][ T880] loop2: detected capacity change from 0 to 1024 [ 35.021206][ T880] EXT4-fs (loop2): Ignoring removed orlov option [ 35.027719][ T880] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 35.037970][ T880] EXT4-fs (loop2): invalid journal inode [ 35.061197][ T878] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #2: block 3: comm syz.4.119: lblock 0 mapped to illegal pblock 3 (length 1) [ 35.075664][ T878] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.119: error -117 reading directory block [ 35.093408][ T885] loop2: detected capacity change from 0 to 512 [ 35.094720][ T878] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 35.108033][ T878] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nolazytime,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000000ffc,grpid,,,errors=continue. Quota mode: writeback. [ 35.134969][ T885] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 35.140706][ T6] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 35.144442][ T885] SELinux: duplicate or incompatible mount options [ 35.158713][ T307] usb 4-1: not running at top speed; connect to a high speed hub [ 35.260711][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.270941][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 35.324872][ T891] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 35.410762][ T307] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 35.420425][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 35.429738][ T307] usb 4-1: Product: syz [ 35.434999][ T307] usb 4-1: Manufacturer: syz [ 35.660744][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.670933][ T6] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.683950][ T6] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 35.808162][ T899] UDC core: couldn't find an available UDC or it's busy: -16 [ 35.817848][ T899] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 35.828555][ T898] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 35.850742][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.860159][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.868377][ T6] usb 2-1: Product: syz [ 35.872670][ T6] usb 2-1: Manufacturer: syz [ 35.877340][ T6] usb 2-1: SerialNumber: syz [ 35.921222][ T6] cdc_ncm 2-1:1.0: skipping garbage [ 36.188800][ T928] loop2: detected capacity change from 0 to 512 [ 36.211961][ T928] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 36.221722][ T928] SELinux: duplicate or incompatible mount options [ 36.330542][ T932] tipc: Started in network mode [ 36.335462][ T932] tipc: Node identity , cluster identity 4711 [ 36.341670][ T932] tipc: Failed to obtain node identity [ 36.347150][ T932] tipc: Enabling of bearer rejected, failed to enable media [ 36.420082][ T906] loop4: detected capacity change from 0 to 131072 [ 36.472032][ T906] F2FS-fs (loop4): Test dummy encryption mode enabled [ 36.532818][ T906] F2FS-fs (loop4): invalid crc value [ 36.566018][ T906] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.633734][ T906] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.646105][ T905] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 36.655677][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 36.655689][ T30] audit: type=1400 audit(1785991772.080:208): avc: denied { read write open } for pid=904 comm="syz.4.126" path="/23/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.685393][ T905] device batadv_slave_0 entered promiscuous mode [ 36.829183][ T30] audit: type=1400 audit(1785991772.250:209): avc: denied { ioctl } for pid=943 comm="syz.4.139" path="socket:[17376]" dev="sockfs" ino=17376 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.833289][ T944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 37.096252][ T957] futex_wake_op: syz.4.142 tries to shift op by 144; fix this program [ 37.246548][ T957] tipc: Enabling of bearer rejected, failed to enable media [ 37.443194][ T967] futex_wake_op: syz.0.143 tries to shift op by 144; fix this program [ 37.645965][ T6] cdc_ncm 2-1:1.0: bind() failure [ 37.680734][ T6] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 37.700719][ T6] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 37.710163][ T6] usb 2-1: USB disconnect, device number 3 [ 37.740196][ T976] loop2: detected capacity change from 0 to 256 [ 37.746912][ T63] usb 4-1: USB disconnect, device number 4 [ 37.753892][ T30] audit: type=1400 audit(1785991773.180:210): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 37.758649][ T976] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.812931][ T982] loop4: detected capacity change from 0 to 512 [ 37.860748][ T30] audit: type=1400 audit(1785991773.280:211): avc: denied { remount } for pid=975 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.888410][ T982] EXT4-fs (loop4): Ignoring removed oldalloc option [ 37.911959][ T982] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 37.924842][ T982] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 37.934206][ T982] EXT4-fs (loop4): failed to open journal device unknown-block(0,3) -6 [ 37.961572][ T994] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 37.971296][ T994] SELinux: duplicate or incompatible mount options [ 38.040616][ T998] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 38.487003][ T1013] netlink: 'syz.3.159': attribute type 16 has an invalid length. [ 38.494886][ T1013] netlink: 'syz.3.159': attribute type 17 has an invalid length. [ 38.505390][ T1013] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 38.514581][ T1013] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 38.524214][ T1013] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 38.531906][ T1013] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 38.540089][ T1013] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 38.547805][ T1013] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 38.555722][ T1013] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 38.563203][ T1013] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 38.574021][ T1013] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 38.660925][ T1018] UDC core: couldn't find an available UDC or it's busy: -16 [ 38.712290][ T1018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.836360][ T1030] futex_wake_op: syz.4.164 tries to shift op by 144; fix this program [ 38.855765][ T1030] tipc: Enabling of bearer rejected, failed to enable media [ 38.950772][ T399] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.970772][ T307] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 39.260818][ T556] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.265634][ T1057] kvm [1055]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 39.277650][ T1057] kvm [1055]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 39.290462][ T1057] APIC base relocation is unsupported by KVM [ 39.351237][ T307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.361943][ T1074] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 39.369634][ T307] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.397648][ T399] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.409180][ T307] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 39.481125][ T399] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 39.493531][ T399] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 39.530032][ T1092] netlink: 'syz.2.172': attribute type 16 has an invalid length. [ 39.537953][ T1092] netlink: 'syz.2.172': attribute type 17 has an invalid length. [ 39.671071][ T1092] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 39.678560][ T1092] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 39.686125][ T1092] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 39.693593][ T1092] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 39.701025][ T1092] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 39.708271][ T1092] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 39.715525][ T1092] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 39.722826][ T1092] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 39.730227][ T1092] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.753920][ T556] usb 2-1: device descriptor read/64, error -71 [ 39.841290][ T307] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.874243][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.900777][ T30] audit: type=1400 audit(1785991775.310:212): avc: denied { connect } for pid=1105 comm="syz.2.176" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.921683][ T399] usb 4-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 39.955067][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.955089][ T399] usb 4-1: Product: syz [ 39.955100][ T399] usb 4-1: Manufacturer: syz [ 39.955112][ T399] usb 4-1: SerialNumber: syz [ 39.958345][ T30] audit: type=1400 audit(1785991775.310:213): avc: denied { write } for pid=1105 comm="syz.2.176" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.969596][ T307] usb 1-1: Product: syz [ 39.969614][ T307] usb 1-1: Manufacturer: syz [ 39.969626][ T307] usb 1-1: SerialNumber: syz [ 40.012174][ T307] cdc_ncm 1-1:1.0: skipping garbage [ 40.125960][ T30] audit: type=1400 audit(1785991775.550:214): avc: denied { mount } for pid=1126 comm="syz.2.179" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.150687][ T556] usb 2-1: device descriptor read/64, error -71 [ 40.152668][ T1127] set_capacity_and_notify: 3 callbacks suppressed [ 40.152680][ T1127] loop2: detected capacity change from 0 to 512 [ 40.185140][ T30] audit: type=1400 audit(1785991775.570:215): avc: denied { read } for pid=1126 comm="syz.2.179" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.205550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.212629][ T30] audit: type=1400 audit(1785991775.570:216): avc: denied { open } for pid=1126 comm="syz.2.179" path="/45/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.241193][ T30] audit: type=1400 audit(1785991775.570:217): avc: denied { ioctl } for pid=1126 comm="syz.2.179" path="/45/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 40.255875][ T1127] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.295134][ T1127] EXT4-fs (loop2): 1 orphan inode deleted [ 40.301530][ T1127] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 40.313852][ T1127] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.371215][ T399] usb 4-1: MIDIStreaming interface descriptor not found [ 40.398354][ T399] snd-usb-audio: probe of 4-1:1.0 failed with error -12 [ 40.443814][ T1154] netlink: 'syz.4.181': attribute type 16 has an invalid length. [ 40.451664][ T1154] netlink: 'syz.4.181': attribute type 17 has an invalid length. [ 40.461980][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 40.471146][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 40.480844][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 40.488462][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 40.496757][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 40.504312][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): ifb0: link becomes ready [ 40.512265][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 40.519802][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): ifb1: link becomes ready [ 40.528810][ T1154] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 40.652993][ T556] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.661873][ T399] usb 4-1: USB disconnect, device number 5 [ 40.690570][ T1157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1157 comm=syz.4.182 [ 40.924357][ T1157] loop4: detected capacity change from 0 to 40427 [ 40.930722][ T556] usb 2-1: device descriptor read/64, error -71 [ 40.941373][ T1176] loop2: detected capacity change from 0 to 256 [ 40.969872][ T1157] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 40.978157][ T1176] exFAT-fs (loop2): bogus number of FAT structure [ 40.990312][ T1157] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 40.991014][ T1176] exFAT-fs (loop2): failed to read boot sector [ 41.014797][ T1157] F2FS-fs (loop4): invalid crc value [ 41.020262][ T1187] loop3: detected capacity change from 0 to 2048 [ 41.023250][ T1176] exFAT-fs (loop2): failed to recognize exfat type [ 41.035583][ T1157] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 41.062254][ T1187] EXT4-fs (loop3): Ignoring removed nobh option [ 41.068046][ T1157] F2FS-fs (loop4): Start checkpoint disabled! [ 41.079357][ T1157] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 41.087450][ T1157] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 41.116153][ T1187] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,grpquota,nobh,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 41.132938][ T1187] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.152583][ T1176] loop2: detected capacity change from 0 to 256 [ 41.330841][ T556] usb 2-1: device descriptor read/64, error -71 [ 41.340738][ T307] cdc_ncm 1-1:1.0: bind() failure [ 41.360714][ T307] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 41.390711][ T307] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 41.414579][ T307] usb 1-1: USB disconnect, device number 3 [ 41.427268][ T1236] futex_wake_op: syz.3.187 tries to shift op by 144; fix this program [ 41.444696][ T1236] tipc: Enabling of bearer rejected, failed to enable media [ 41.456536][ T556] usb usb2-port1: attempt power cycle [ 41.480730][ T399] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 41.727035][ T629] attempt to access beyond end of device [ 41.727035][ T629] loop4: rw=2049, want=45104, limit=40427 [ 41.770787][ T399] usb 3-1: device descriptor read/64, error -71 [ 41.880768][ T556] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.943766][ T1267] loop1: detected capacity change from 0 to 1024 [ 41.973688][ T1267] EXT4-fs (loop1): Unrecognized mount option "dont_measure" or missing value [ 41.990760][ T556] usb 2-1: device descriptor read/8, error -71 [ 42.200549][ T399] usb 3-1: device descriptor read/64, error -71 [ 42.386791][ T1279] futex_wake_op: syz.1.192 tries to shift op by 144; fix this program [ 42.404247][ T1279] tipc: Enabling of bearer rejected, failed to enable media [ 42.460848][ T556] usb 2-1: device descriptor read/8, error -71 [ 42.577870][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.581161][ T1283] syz.3.193 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.638276][ T1283] futex_wake_op: syz.3.193 tries to shift op by 144; fix this program [ 42.810265][ T1283] tipc: Enabling of bearer rejected, failed to enable media [ 42.968467][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 42.968480][ T30] audit: type=1400 audit(1785991778.390:225): avc: denied { map } for pid=1288 comm="syz.1.196" path="socket:[18921]" dev="sockfs" ino=18921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 42.974952][ T1289] loop1: detected capacity change from 0 to 128 [ 42.998592][ T30] audit: type=1400 audit(1785991778.390:226): avc: denied { accept } for pid=1288 comm="syz.1.196" path="socket:[18921]" dev="sockfs" ino=18921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 43.028826][ T399] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 43.036766][ T30] audit: type=1400 audit(1785991778.390:227): avc: denied { map } for pid=1288 comm="syz.1.196" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.072707][ T1289] fuse: Bad value for 'fd' [ 43.093443][ T1296] 9pnet: Insufficient options for proto=fd [ 43.150792][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 43.161617][ T30] audit: type=1400 audit(1785991778.590:228): avc: denied { read } for pid=1295 comm="syz.4.199" dev="sockfs" ino=18997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.280722][ T6] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 43.289086][ T6] usb 1-1: config 179 has no interface number 0 [ 43.295519][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 43.306631][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 43.339589][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 43.350806][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 43.360684][ T399] usb 3-1: device descriptor read/64, error -71 [ 43.363442][ T6] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 43.381793][ T6] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 43.390923][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.410786][ T1269] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 43.630694][ T307] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 43.651241][ T6] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 43.662633][ T30] audit: type=1400 audit(1785991779.090:229): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=714 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.684955][ T30] audit: type=1400 audit(1785991779.090:230): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=714 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.708182][ T30] audit: type=1400 audit(1785991779.090:231): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=714 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.750716][ T399] usb 3-1: device descriptor read/64, error -71 [ 43.851737][ T30] audit: type=1400 audit(1785991779.280:232): avc: denied { create } for pid=1268 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.872339][ T399] usb usb3-port1: attempt power cycle [ 43.877800][ T30] audit: type=1400 audit(1785991779.280:233): avc: denied { write } for pid=1268 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.898446][ T30] audit: type=1400 audit(1785991779.300:234): avc: denied { read } for pid=1268 comm="syz.0.190" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.977808][ T1316] xt_hashlimit: size too large, truncated to 1048576 [ 44.010717][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.051220][ T307] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 44.064721][ T1322] futex_wake_op: syz.4.205 tries to shift op by 144; fix this program [ 44.081944][ T1322] tipc: Enabling of bearer rejected, failed to enable media [ 44.219961][ T307] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 44.277834][ T1327] loop2: detected capacity change from 0 to 128 [ 44.298801][ T1323] Zero length message leads to an empty skb [ 44.306147][ T26] usb 1-1: USB disconnect, device number 4 [ 44.320672][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 44.329158][ T26] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 44.404623][ T1332] loop2: detected capacity change from 0 to 256 [ 44.449204][ T1337] loop2: detected capacity change from 0 to 128 [ 44.460853][ T307] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.464301][ T1337] fuse: Bad value for 'rootmode' [ 44.475183][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.490405][ T307] usb 4-1: Product: syz [ 44.495320][ T307] usb 4-1: Manufacturer: syz [ 44.499959][ T307] usb 4-1: SerialNumber: syz [ 44.541543][ T307] cdc_ncm 4-1:1.0: skipping garbage [ 44.631296][ T1335] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 44.639784][ T1335] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.649600][ T1335] F2FS-fs (loop1): invalid crc value [ 44.656388][ T1335] F2FS-fs (loop1): Found nat_bits in checkpoint [ 44.689780][ T1335] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.701301][ T1335] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 44.807834][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.815488][ T1345] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.823321][ T1345] device bridge_slave_0 entered promiscuous mode [ 44.832912][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.840037][ T1345] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.843698][ T1360] xt_hashlimit: size too large, truncated to 1048576 [ 44.848242][ T1345] device bridge_slave_1 entered promiscuous mode [ 44.861483][ T1335] netlink: 'syz.1.212': attribute type 16 has an invalid length. [ 44.869214][ T1335] netlink: 'syz.1.212': attribute type 17 has an invalid length. [ 44.880842][ T1335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 44.902594][ T1361] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 44.926925][ T629] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 44.937305][ T629] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 44.991342][ T1345] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.998437][ T1345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.005744][ T1345] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.012784][ T1345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.047879][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.055886][ T629] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.078790][ T629] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.101010][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.109412][ T629] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.116477][ T629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.124747][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.133430][ T629] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.140496][ T629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.156879][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.166650][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.182168][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.195608][ T1345] device veth0_vlan entered promiscuous mode [ 45.202937][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.211168][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.218681][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.242792][ T1345] device veth1_macvtap entered promiscuous mode [ 45.249474][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.258455][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.266771][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.277245][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.285771][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.295012][ T45] device bridge_slave_1 left promiscuous mode [ 45.301369][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.308782][ T45] device bridge_slave_0 left promiscuous mode [ 45.315067][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.322841][ T45] device veth1_macvtap left promiscuous mode [ 45.328864][ T45] device veth0_vlan left promiscuous mode [ 45.403708][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.406916][ T1385] set_capacity_and_notify: 1 callbacks suppressed [ 45.406931][ T1385] loop0: detected capacity change from 0 to 1024 [ 45.420000][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.450992][ T1385] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.490525][ T1394] loop5: detected capacity change from 0 to 16 [ 45.564690][ T1406] loop0: detected capacity change from 0 to 512 [ 45.571969][ T1394] erofs: (device loop5): mounted with root inode @ nid 36. [ 45.602279][ T1406] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.615481][ T1406] ------------[ cut here ]------------ [ 45.620125][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.621097][ T1406] EA inode 11 i_nlink=2 [ 45.628152][ T1406] WARNING: CPU: 1 PID: 1406 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4f9/0x560 [ 45.629506][ T1398] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.632353][ T1406] Modules linked in: [ 45.643230][ T1398] device bridge_slave_0 entered promiscuous mode [ 45.649460][ T1406] CPU: 1 PID: 1406 Comm: syz.0.236 Not tainted syzkaller #0 [ 45.656138][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.674140][ T307] cdc_ncm 4-1:1.0: bind() failure [ 45.674152][ T1398] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.679872][ T1406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.686720][ T1398] device bridge_slave_1 entered promiscuous mode [ 45.700874][ T307] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 45.711343][ T1406] RIP: 0010:ext4_xattr_inode_update_ref+0x4f9/0x560 [ 45.718244][ T1406] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 fa cd bd ff 49 8b 34 24 48 c7 c7 c0 86 4f 85 44 89 fa e8 d7 45 bf 02 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 45.738207][ T1406] RSP: 0018:ffffc900009a7240 EFLAGS: 00010246 [ 45.739688][ T307] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 45.754235][ T1406] RAX: fe18c60274fd6a00 RBX: ffff8881294fa5c8 RCX: ffff88811ce1cf00 [ 45.761559][ T307] usb 4-1: USB disconnect, device number 6 [ 45.769274][ T1406] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 45.777783][ T45] tipc: Left network mode [ 45.777870][ T1406] RBP: ffffc900009a7330 R08: ffffc900009a6ca7 R09: 1ffff92000134d94 [ 45.790397][ T1406] R10: dffffc0000000000 R11: fffff52000134d95 R12: ffff8881294fa4a8 [ 45.798875][ T1406] R13: dffffc0000000000 R14: ffff8881294fa468 R15: 0000000000000002 [ 45.800483][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.806895][ T1406] FS: 00007fe6653a96c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.806913][ T1406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.813925][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.814018][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.822883][ T1406] CR2: 000000110c304e32 CR3: 0000000126258000 CR4: 00000000003506b0 [ 45.829433][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.836609][ T1406] Call Trace: [ 45.863525][ T1406] [ 45.866468][ T1406] ? ext4_xattr_block_csum+0x590/0x590 [ 45.872483][ T1417] tap0: tun_chr_ioctl cmd 1074025677 [ 45.872967][ T1406] ? __ext4_journal_ensure_credits+0x30/0x470 [ 45.877842][ T1417] tap0: linktype set to 804 [ 45.888422][ T1406] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 45.894564][ T1406] ? errseq_check+0x41/0x80 [ 45.899151][ T1406] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 45.903472][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.905062][ T1406] ? __ext4_journal_ensure_credits+0x470/0x470 [ 45.918224][ T1406] ? ext4_get_inode_loc+0x100/0x130 [ 45.918361][ T629] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.923478][ T1406] ext4_xattr_delete_inode+0xada/0xca0 [ 45.935969][ T1406] ? ext4_truncate+0xc1b/0x1000 [ 45.936351][ T629] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.940888][ T1406] ? ext4_expand_extra_isize_ea+0x1940/0x1940 [ 45.954463][ T1406] ext4_evict_inode+0xe0a/0x1420 [ 45.959429][ T1406] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 45.965395][ T1406] ? _raw_spin_unlock+0x4d/0x70 [ 45.970259][ T1406] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 45.976287][ T1406] evict+0x4b6/0x8b0 [ 45.980359][ T1406] ? proc_nr_inodes+0x310/0x310 [ 45.985265][ T1406] ? _raw_spin_lock+0x94/0xf0 [ 45.989951][ T1406] ? _raw_spin_trylock_bh+0x150/0x150 [ 45.995385][ T1406] ? __kasan_check_write+0x14/0x20 [ 46.000506][ T1406] iput+0x651/0x7e0 [ 46.004375][ T1406] ext4_process_orphan+0x298/0x300 [ 46.009492][ T1406] ext4_orphan_cleanup+0xa0b/0x1120 [ 46.009649][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.014737][ T1406] ? ext4_orphan_file_block_trigger+0x460/0x460 [ 46.014776][ T1406] ? ext4_orphan_del+0xc90/0xc90 [ 46.014790][ T1406] ? errseq_check_and_advance+0x66/0x130 [ 46.023609][ T629] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.029412][ T1406] ext4_fill_super+0x84ce/0x8bf0 [ 46.034050][ T629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.059162][ T1406] ? ext4_mount+0x40/0x40 [ 46.059663][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.063803][ T1406] ? set_blocksize+0x1e9/0x360 [ 46.071973][ T629] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.077066][ T1406] ? sb_set_blocksize+0xaa/0xf0 [ 46.083311][ T629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.095411][ T1406] ? ext4_mount+0x40/0x40 [ 46.095821][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.099744][ T1406] mount_bdev+0x28d/0x3c0 [ 46.108098][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.112109][ T1406] ? ext4_mount+0x40/0x40 [ 46.124268][ T1406] ext4_mount+0x34/0x40 [ 46.128436][ T1406] legacy_get_tree+0xed/0x190 [ 46.132687][ T1398] device veth0_vlan entered promiscuous mode [ 46.139253][ T1406] ? ext4_errno_to_code+0x160/0x160 [ 46.144641][ T1406] vfs_get_tree+0x89/0x260 [ 46.144799][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.149064][ T1406] do_new_mount+0x251/0xb40 [ 46.149083][ T1406] ? security_capable+0x87/0xb0 [ 46.157592][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.162003][ T818] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 46.167028][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.174310][ T1406] path_mount+0x640/0xff0 [ 46.187144][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.201430][ T1406] __se_sys_mount+0x320/0x390 [ 46.206277][ T1406] ? __x64_sys_mount+0xd0/0xd0 [ 46.211507][ T1406] __x64_sys_mount+0xbf/0xd0 [ 46.216183][ T1406] x64_sys_call+0x6bf/0x9a0 [ 46.220916][ T1406] do_syscall_64+0x4c/0xa0 [ 46.225458][ T1406] ? clear_bhb_loop+0x50/0xa0 [ 46.231209][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.231400][ T1406] ? clear_bhb_loop+0x50/0xa0 [ 46.239437][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.251025][ T1406] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.257703][ T1406] RIP: 0033:0x7fe66697234a [ 46.262475][ T1406] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.282547][ T1406] RSP: 002b:00007fe6653a8e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 46.283746][ T1398] device veth1_macvtap entered promiscuous mode [ 46.297429][ T1406] RAX: ffffffffffffffda RBX: 00007fe6653a8ee0 RCX: 00007fe66697234a [ 46.305965][ T1406] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fe6653a8ea0 [ 46.319388][ T1406] RBP: 00002000000009c0 R08: 00007fe6653a8ee0 R09: 0000000000800718 [ 46.327700][ T1406] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 46.335933][ T1406] R13: 00007fe6653a8ea0 R14: 000000000000048d R15: 0000200000000200 [ 46.336967][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.350775][ T1406] [ 46.354487][ T1406] ---[ end trace ec354dd589cb9a3b ]--- [ 46.361150][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.363332][ T1406] EXT4-fs (loop0): 1 orphan inode deleted [ 46.376083][ T1406] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000b7,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 46.380885][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.412307][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.422490][ T629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.451872][ T1422] netlink: 'syz.3.239': attribute type 4 has an invalid length. [ 46.470670][ T818] usb 6-1: Using ep0 maxpacket: 32 [ 46.630750][ T818] usb 6-1: unable to get BOS descriptor or descriptor too short [ 46.780785][ T307] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.911267][ T1435] ================================================================== [ 46.919451][ T1435] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 46.927527][ T1435] Read of size 4 at addr ffff888128f3dc00 by task syz.6.242/1435 [ 46.935254][ T1435] [ 46.937583][ T1435] CPU: 1 PID: 1435 Comm: syz.6.242 Tainted: G W syzkaller #0 [ 46.946333][ T1435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.951851][ T1450] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 46.956408][ T1435] Call Trace: [ 46.956416][ T1435] [ 46.969951][ T1435] __dump_stack+0x21/0x30 [ 46.974285][ T1435] dump_stack_lvl+0x110/0x170 [ 46.978955][ T1435] ? show_regs_print_info+0x20/0x20 [ 46.980684][ T776] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 46.984143][ T1435] ? load_image+0x3f0/0x3f0 [ 46.996007][ T1435] print_address_description+0x7f/0x2c0 [ 47.001559][ T1435] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 47.007296][ T1435] kasan_report+0x10f/0x150 [ 47.011809][ T1435] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 47.017535][ T1435] __asan_report_load4_noabort+0x14/0x20 [ 47.023256][ T1435] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 47.028810][ T1435] pppol2tp_release+0x150/0x2b0 [ 47.033662][ T1435] sock_close+0xb8/0x200 [ 47.037903][ T1435] ? sock_mmap+0xa0/0xa0 [ 47.042137][ T1435] __fput+0x22b/0x900 [ 47.046118][ T1435] ____fput+0x15/0x20 [ 47.050098][ T1435] task_work_run+0x127/0x190 [ 47.054683][ T1435] do_exit+0xb70/0x29a0 [ 47.058837][ T1435] ? put_task_struct+0x90/0x90 [ 47.063596][ T1435] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 47.069226][ T1435] __x64_sys_exit+0x40/0x40 [ 47.073726][ T1435] x64_sys_call+0x44/0x9a0 [ 47.078141][ T1435] do_syscall_64+0x4c/0xa0 [ 47.082559][ T1435] ? clear_bhb_loop+0x50/0xa0 [ 47.087241][ T1435] ? clear_bhb_loop+0x50/0xa0 [ 47.091925][ T1435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.097828][ T1435] RIP: 0033:0x7f3f36fc00d9 [ 47.102248][ T1435] Code: Unable to access opcode bytes at RIP 0x7f3f36fc00af. [ 47.109603][ T1435] RSP: 002b:00007f3f35a18ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 47.118014][ T1435] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f3f36fc00d9 [ 47.125988][ T1435] RDX: 00007f3f35a199c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.133960][ T1435] RBP: 00007f3f37057024 R08: 0000000000000000 R09: 0000000000000058 [ 47.142030][ T1435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.150012][ T1435] R13: 00007f3f37248038 R14: 00007f3f37247fa0 R15: 00007ffed439f608 [ 47.158000][ T1435] [ 47.161025][ T1435] [ 47.163342][ T1435] Allocated by task 1434: [ 47.167653][ T1435] __kasan_kmalloc+0xd4/0x100 [ 47.172332][ T1435] __kmalloc+0x13d/0x2c0 [ 47.176567][ T1435] l2tp_session_create+0x39/0xb60 [ 47.181586][ T1435] pppol2tp_connect+0xbf5/0x1640 [ 47.186518][ T1435] __sys_connect+0x3cb/0x450 [ 47.191100][ T1435] __x64_sys_connect+0x7a/0x90 [ 47.195860][ T1435] x64_sys_call+0x7c/0x9a0 [ 47.200268][ T1435] do_syscall_64+0x4c/0xa0 [ 47.204677][ T1435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.210658][ T1435] [ 47.212978][ T1435] Freed by task 629: [ 47.216986][ T1435] kasan_set_track+0x4a/0x70 [ 47.221581][ T1435] kasan_set_free_info+0x23/0x40 [ 47.226624][ T1435] ____kasan_slab_free+0x125/0x160 [ 47.231742][ T1435] __kasan_slab_free+0x11/0x20 [ 47.236512][ T1435] slab_free_freelist_hook+0xc2/0x190 [ 47.241907][ T1435] kfree+0xc4/0x270 [ 47.245733][ T1435] l2tp_session_put+0xaf/0x1a0 [ 47.250494][ T1435] l2tp_session_delete+0x3a9/0x4a0 [ 47.255603][ T1435] l2tp_tunnel_del_work+0x180/0x3d0 [ 47.260810][ T1435] process_one_work+0x6c8/0xbb0 [ 47.265657][ T1435] worker_thread+0xaa0/0x1250 [ 47.270327][ T1435] kthread+0x3f5/0x4f0 [ 47.270655][ T776] usb 4-1: device descriptor read/64, error -71 [ 47.274386][ T1435] ret_from_fork+0x1f/0x30 [ 47.274407][ T1435] [ 47.274411][ T1435] Last potentially related work creation: [ 47.293024][ T1435] kasan_save_stack+0x3a/0x60 [ 47.297699][ T1435] __kasan_record_aux_stack+0xd2/0x100 [ 47.303180][ T1435] kasan_record_aux_stack_noalloc+0xb/0x10 [ 47.308977][ T1435] call_rcu+0x10b/0xf60 [ 47.313125][ T1435] in_dev_finish_destroy+0x123/0x170 [ 47.318405][ T1435] inetdev_event+0x84c/0x1060 [ 47.323072][ T1435] raw_notifier_call_chain+0x90/0x100 [ 47.328434][ T1435] unregister_netdevice_many+0x103d/0x1a00 [ 47.334231][ T1435] ip_tunnel_delete_nets+0x343/0x390 [ 47.339518][ T1435] vti_exit_batch_net+0x22/0x30 [ 47.344471][ T1435] cleanup_net+0x605/0xae0 [ 47.349013][ T1435] process_one_work+0x6c8/0xbb0 [ 47.353871][ T1435] worker_thread+0xaa0/0x1250 [ 47.358549][ T1435] kthread+0x3f5/0x4f0 [ 47.362616][ T1435] ret_from_fork+0x1f/0x30 [ 47.367114][ T1435] [ 47.369440][ T1435] The buggy address belongs to the object at ffff888128f3dc00 [ 47.369440][ T1435] which belongs to the cache kmalloc-512 of size 512 [ 47.383578][ T1435] The buggy address is located 0 bytes inside of [ 47.383578][ T1435] 512-byte region [ffff888128f3dc00, ffff888128f3de00) [ 47.396684][ T1435] The buggy address belongs to the page: [ 47.402336][ T1435] page:ffffea0004a3cf00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128f3c [ 47.412576][ T1435] head:ffffea0004a3cf00 order:2 compound_mapcount:0 compound_pincount:0 [ 47.420903][ T1435] flags: 0x4000000000010200(slab|head|zone=1) [ 47.426974][ T1435] raw: 4000000000010200 ffffea0004a31d00 0000000400000002 ffff888100042f00 [ 47.435555][ T1435] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 47.444124][ T1435] page dumped because: kasan: bad access detected [ 47.450536][ T1435] page_owner tracks the page as allocated [ 47.456236][ T1435] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, ts 21870292308, free_ts 0 [ 47.474376][ T1435] post_alloc_hook+0x192/0x1b0 [ 47.479148][ T1435] prep_new_page+0x1c/0x110 [ 47.483655][ T1435] get_page_from_freelist+0x2c3a/0x2cd0 [ 47.489288][ T1435] __alloc_pages+0x1a2/0x460 [ 47.493873][ T1435] new_slab+0xa0/0x4d0 [ 47.497937][ T1435] ___slab_alloc+0x3ac/0x840 [ 47.502523][ T1435] __slab_alloc+0x49/0x90 [ 47.506843][ T1435] __kmalloc+0x16a/0x2c0 [ 47.511078][ T1435] fib6_info_alloc+0x34/0xe0 [ 47.515660][ T1435] ip6_route_info_create+0x51b/0x14d0 [ 47.521024][ T1435] addrconf_f6i_alloc+0x19c/0x3f0 [ 47.526054][ T1435] ipv6_add_addr+0x442/0xd90 [ 47.530635][ T1435] inet6_addr_add+0x446/0x9d0 [ 47.535312][ T1435] inet6_rtm_newaddr+0x6e7/0x9c0 [ 47.540242][ T1435] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 47.545199][ T1435] netlink_rcv_skb+0x1e9/0x430 [ 47.550050][ T1435] page_owner free stack trace missing [ 47.555404][ T1435] [ 47.557728][ T1435] Memory state around the buggy address: [ 47.563343][ T1435] ffff888128f3db00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.571400][ T1435] ffff888128f3db80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.579457][ T1435] >ffff888128f3dc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.587505][ T1435] ^ [ 47.591589][ T1435] ffff888128f3dc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.599641][ T1435] ffff888128f3dd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 47.607697][ T1435] ================================================================== [ 47.615782][ T1435] Disabling lock debugging due to kernel taint [ 47.656862][ T1435] ------------[ cut here ]------------ [ 47.663051][ T45] device bridge_slave_1 left promiscuous mode [ 47.670959][ T818] usb 6-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 47.670969][ T776] usb 4-1: device descriptor read/64, error -71 [ 47.670985][ T818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.690759][ T1422] syz.3.239 (1422) used greatest stack depth: 20416 bytes left [ 47.708341][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.715427][ T1435] WARNING: CPU: 0 PID: 1435 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 47.717239][ T818] usb 6-1: Product: syz [ 47.740802][ T818] usb 6-1: Manufacturer: syz [ 47.745424][ T818] usb 6-1: SerialNumber: syz [ 47.752436][ T45] device bridge_slave_0 left promiscuous mode [ 47.758583][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.771332][ T45] device veth1_macvtap left promiscuous mode [ 47.771785][ T1435] Modules linked in: [ 47.777351][ T45] device veth0_vlan left promiscuous mode [ 47.795372][ T1435] CPU: 0 PID: 1435 Comm: syz.6.242 Tainted: G B W syzkaller #0 [ 47.810804][ T1435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.820972][ T1435] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 47.827319][ T1435] Code: 5d c3 e8 9c 83 0b fd be 02 00 00 00 eb 0a e8 90 83 0b fd be 01 00 00 00 4c 89 f7 e8 33 02 f2 fd e9 0f ff ff ff e8 79 83 0b fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 68 83 0b fd 4c 89 f7 be 03 [ 47.846959][ T1435] RSP: 0018:ffffc90000c37bf0 EFLAGS: 00010293 [ 47.853073][ T1435] RAX: ffffffff845e3367 RBX: ffff88810b209000 RCX: ffff88810e05a780 [ 47.861121][ T1435] RDX: 0000000000000000 RSI: 00000000232732a0 RDI: 000000000c04eb7d [ 47.869136][ T1435] RBP: ffffc90000c37c10 R08: 0000000000000003 R09: 0000000000000004 [ 47.877274][ T1435] R10: dffffc0000000000 R11: fffffbfff0e18e4c R12: dffffc0000000000 [ 47.885305][ T1435] R13: dffffc0000000000 R14: 00000000232732a0 R15: ffff888128f3dc00 [ 47.900121][ T1435] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 47.909129][ T1435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.915821][ T1435] CR2: 00007f14a9a274c0 CR3: 000000011a885000 CR4: 00000000003506b0 [ 47.923815][ T1435] Call Trace: [ 47.927090][ T1435] [ 47.930021][ T1435] pppol2tp_release+0x150/0x2b0 [ 47.935078][ T1435] sock_close+0xb8/0x200 [ 47.939352][ T1435] ? sock_mmap+0xa0/0xa0 [ 47.943661][ T776] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 47.951695][ T1435] __fput+0x22b/0x900 [ 47.955696][ T1435] ____fput+0x15/0x20 [ 47.959683][ T1435] task_work_run+0x127/0x190 [ 47.964362][ T1435] do_exit+0xb70/0x29a0 [ 47.968562][ T1435] ? put_task_struct+0x90/0x90 [ 47.974579][ T1435] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 47.980248][ T1435] __x64_sys_exit+0x40/0x40 [ 47.984955][ T1435] x64_sys_call+0x44/0x9a0 [ 47.989401][ T1435] do_syscall_64+0x4c/0xa0 [ 47.994170][ T1435] ? clear_bhb_loop+0x50/0xa0 [ 47.998872][ T1435] ? clear_bhb_loop+0x50/0xa0 [ 48.003597][ T1435] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.009543][ T1435] RIP: 0033:0x7f3f36fc00d9 [ 48.014166][ T1435] Code: Unable to access opcode bytes at RIP 0x7f3f36fc00af. [ 48.021788][ T1435] RSP: 002b:00007f3f35a18ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 48.030219][ T1435] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f3f36fc00d9 [ 48.038291][ T1435] RDX: 00007f3f35a199c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.046315][ T1435] RBP: 00007f3f37057024 R08: 0000000000000000 R09: 0000000000000058 [ 48.054343][ T1435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.062507][ T1435] R13: 00007f3f37248038 R14: 00007f3f37247fa0 R15: 00007ffed439f608 [ 48.070529][ T1435] [ 48.073619][ T1435] ---[ end trace ec354dd589cb9a3c ]--- [ 48.090746][ T818] usb 6-1: can't set config #1, error -71 [ 48.114461][ T818] usb 6-1: USB disconnect, device number 2 [ 48.170838][ T307] usb 1-1: device descriptor read/all, error -71 [ 48.292265][ T45] tipc: Left network mode [ 48.296666][ T45] tipc: Left network mode [ 48.931624][ T45] device bridge_slave_1 left promiscuous mode [ 48.937766][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.945293][ T45] device bridge_slave_0 left promiscuous mode [ 48.951500][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.959154][ T45] device bridge_slave_1 left promiscuous mode [ 48.965538][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.973035][ T45] device bridge_slave_0 left promiscuous mode [ 48.979171][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.986844][ T45] device bridge_slave_1 left promiscuous mode [ 48.993017][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.000431][ T45] device bridge_slave_0 left promiscuous mode [ 49.006622][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.014899][ T45] device veth1_macvtap left promiscuous mode [ 49.020933][ T45] device veth0_vlan left promiscuous mode [ 49.026733][ T45] device veth1_macvtap left promiscuous mode [ 49.032760][ T45] device veth0_vlan left promiscuous mode [ 49.038573][ T45] device veth1_macvtap left promiscuous mode