last executing test programs: 1m38.20609768s ago: executing program 4 (id=10): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe80eaffffffffffffff000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) 1m37.572307649s ago: executing program 4 (id=11): r0 = syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3810746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@user_xattr}, {@commit={'commit', 0x3d, 0x5}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@dioread_nolock}, {@lazytime}, {@quota}]}, 0xff, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==") r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002180)={0x0, 0xffffffff, 0x0, [0x8000000000000001, 0x8, 0x400, 0x6, 0xb], [0x7, 0x1, 0x8000, 0x6, 0xe78b, 0x1, 0x7, 0x4, 0x6, 0x80000001, 0x8, 0x2, 0x7ff, 0x3, 0x2c2, 0x2, 0x2, 0x9, 0x7fffffff, 0x2, 0x4, 0x6528, 0xfffffffffffffff7, 0x1, 0x1, 0x80, 0x4, 0x9549, 0x0, 0x2, 0x8aa8, 0x5, 0x5, 0x8000000000000000, 0x8, 0xc1b, 0x6, 0x100000001, 0x0, 0x5, 0x9, 0x0, 0x6, 0x81, 0x101, 0x6, 0x7, 0x5, 0x9, 0x2, 0x8, 0x3, 0x8d9, 0x8, 0x5, 0x1b3a, 0x6, 0xffff, 0xc, 0x80000000, 0xf, 0xe35, 0x4, 0x7, 0x7, 0x0, 0x0, 0x3, 0x81, 0xe14, 0x75, 0x684, 0x6, 0x1, 0x9, 0x2, 0x6, 0x9, 0x9, 0x8, 0x8, 0x2, 0x4, 0x3, 0xffffffffffffcefd, 0x2, 0x3, 0x1, 0x4, 0x5, 0x10, 0x3, 0x5, 0x4, 0x8, 0x8, 0x7, 0x8, 0x80000001, 0x5, 0xad7, 0xb, 0xdf, 0x9, 0x5, 0x7, 0x8000, 0x9, 0x1, 0x80000001, 0x4a2aec5c, 0x10000, 0x6, 0x4f153587, 0x5, 0x6, 0x4, 0x9, 0x1, 0x1, 0x7]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002600)={r2, 0x4, 0x3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', 0x0}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fremovexattr(0xffffffffffffffff, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[], 0x10) r7 = dup(r1) read$FUSE(r7, &(0x7f0000000140)={0x2020}, 0x2020) ioctl$int_in(r1, 0x5452, &(0x7f00000025c0)=0x3) write$vga_arbiter(r7, 0x0, 0x0) ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x4000}], 0x1, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 1m36.949356179s ago: executing program 2 (id=19): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e24, 0xfffd, 0x2, 0x20, 0x20, 0x6}, {@in=@loopback=0x7f0000c1, 0x4d4, 0x32}, @in=@multicast1, {0x40000000, 0x2, 0x5, 0x80000000000010, 0xffffffffffffffff, 0x0, 0x20000000007}, {0x9, 0x3ff, 0x4, 0x400}, {0x400000f6, 0x0, 0x7}, 0x70bd26, 0xfe, 0xa, 0x4, 0x9, 0x110}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x60, "dc73e4d5fde1c6f1f6bb2d68a5da2a0f8c3304"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x41410) 1m36.888510251s ago: executing program 2 (id=20): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)='\b', 0x1}, {&(0x7f0000000140)="0000001e0000d15c", 0x8}], 0x2}, 0x24008004) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2a18c56, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c696f636861727365743d63703836392c726f6469722c747a3d5554432c73686f72746e616d653d77696e6e742c757466383d302c696f636861727365743d63703835302c757466383d312c636f6465706167653d313235352c757466383d312c757466383d302c756e695f786c6174653d302c757466383d302c00fd14681ec17d4e6a444cbc4225f4a049a9635c3a97e9cf600add9867573be18352da8d9da8f3c2cc6a88371cb6cc69207279e2e9dcf88ea30942e55d4824f93e7bd266da3b5b0c54990b3fd8facefadb0c6e596b15f060e4f31ae3c439e89c3b"], 0x7f, 0x2be, &(0x7f0000000580)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000dc0)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x110, 0x1f8, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0xff, 0x0, 0x4, 0x0, {}, {@mac=@local, {[0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_hsr\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@multicast, @multicast1, @empty, 0x2}}}, {{@arp={@multicast2, @multicast2, 0x0, 0xffffff00, 0x0, 0x45, {@empty, {[0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x40a0000}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8, 0x2}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xd2, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1286dd6a010000009c1100fc020000000000000000000000000000ff0200000000000000000000000000014e214e20009c907801000000010000003f91d13107df86992d125263216e10930e2039f45bde197f5f73ab888f78a1239ca641e7f41802d013d139c2dea7e25b73b03219dc431719f4acd60986b970c83651abbfd29a008b5471685052ec74650d651d32e315e0bd359e8c058169ffe2d4859af36cc1c63b1d7fa5398c12dd62dcc6615f06b78abc650f48d1cf202c1454ea76bab51022a8994ced9c"], 0x0) 1m36.750022448s ago: executing program 2 (id=21): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000060000008500000020000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000007300000095000000000000001cb542fa6dee2b9bc763114586d11686204068d953fe83adcf46d543840b9639221c6d6207edc5656b26da14658d7784b0dd7cb7e11e950888550100dba157607c11080f74a0d62fc9cd52d9c0f32e433e605e65da6a234ecc62c3357110c98f9afaf3c9d36328ab8b4a9a2790af37fb9709f91b06c94ef2e9aac42e04a110223a9349b0ca8f913556fae7246a26fa20bc6bb5608a20f45501cbe7aed77a3bfdc7e713a32bb9010eb682c5ac380d39a45566c5e507630a"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @empty}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000880)="080032427e15a330", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc294, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x79, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xc1}}}}}]}}]}}, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000c3fffb58000000000000000000000000000aa4e200e2200649078020000000100000004001000628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74882ed6741e7632daeaec0c95f2ad1cd68fb3d9fd3efe8e4ee6b5ec7448ddd6a3215990e1b896120966af0aaf7b8849f0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611950000000000095000000000000007f6210f89d083cfa797283c1c2fb21c526e24f8999c65ccea09b887e73d487afca6135534f459bc3d7e4750d2808"], &(0x7f0000000080)='GPL\x00'}, 0x80) 1m36.582793376s ago: executing program 4 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1e}, 0x0) 1m36.539306338s ago: executing program 4 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000600)='veth1_to_bond\x00') unshare(0x22020600) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x1b05c5a, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000b00)=[0xee00]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/23, 0x17}, 0x6}], 0x1, 0x40002000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0xfffffffffffffffe) setregid(0x0, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r2 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x10001, 0x8000, 0xfffffffc, r6, r7, 0x1, 0x40004}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340)) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x400) 1m36.463922631s ago: executing program 4 (id=24): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0xf00}, 0x94) 1m36.362326436s ago: executing program 4 (id=26): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x808, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@appraise_type}, {@dont_hash}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, '\'^:]+\xe7'}}, {@context={'context', 0x3d, 'system_u'}}]}}, 0x1, 0x0, &(0x7f0000000200)="66e74c69e96232c1afa845e806576c6859ac9375fb2c5df43b9b4637f25f11b05ace62bc4e62a3898fdbc6d13739892f96ac045fc7b7e64c38154ff8358a4150e9acc659667cf7248d37d385b4532d79f006d7fb547ff4191d52a3982399ef9bc250369ce061a9d546a04fbe081ffa1d9e2d2ddb397f5f67a2d5b3178d1662bca154a718c7e32e87bf8b99db3a5a467456c64ee7a73522d8da") (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r2 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async, rerun: 64) write$selinux_validatetrans(r3, 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) gettid() (async) sendto$unix(r4, 0x0, 0x0, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x8000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0xfffffffffffffffd) r7 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x242, 0x126) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) (async) unlink(&(0x7f00000002c0)='./file1\x00') (async, rerun: 64) sendfile(r7, r7, 0x0, 0xe3aa6ea) (rerun: 64) 1m36.228137142s ago: executing program 32 (id=26): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x808, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}], [{@euid_lt={'euid<', 0xffffffffffffffff}}, {@appraise_type}, {@dont_hash}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, '\'^:]+\xe7'}}, {@context={'context', 0x3d, 'system_u'}}]}}, 0x1, 0x0, &(0x7f0000000200)="66e74c69e96232c1afa845e806576c6859ac9375fb2c5df43b9b4637f25f11b05ace62bc4e62a3898fdbc6d13739892f96ac045fc7b7e64c38154ff8358a4150e9acc659667cf7248d37d385b4532d79f006d7fb547ff4191d52a3982399ef9bc250369ce061a9d546a04fbe081ffa1d9e2d2ddb397f5f67a2d5b3178d1662bca154a718c7e32e87bf8b99db3a5a467456c64ee7a73522d8da") (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r2 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) (async, rerun: 64) write$selinux_validatetrans(r3, 0x0, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) gettid() (async) sendto$unix(r4, 0x0, 0x0, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x8000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0xfffffffffffffffd) r7 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x242, 0x126) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) (async) unlink(&(0x7f00000002c0)='./file1\x00') (async, rerun: 64) sendfile(r7, r7, 0x0, 0xe3aa6ea) (rerun: 64) 1m34.78699761s ago: executing program 2 (id=30): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x1000800, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x2, 0x5524, &(0x7f00000108c0)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open(0x0, 0x40, 0x18e) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x81101) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x14) ioctl(r1, 0x40104d09, &(0x7f0000000900)) syz_mount_image$fuse(0x0, 0x0, 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1cd002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1m34.271845265s ago: executing program 2 (id=32): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0xf4, 0x1000f4) 1m33.986049758s ago: executing program 2 (id=34): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x5071, 0xffffffffffffffff, 0xfca33000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000804000/0x4000)=nil) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000d33000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000340)="a766b810008ee80f20c035000001000f22c0360f2202660f3881910e000000b9c8080000b81eeee7d3baf632e05b0f3066baf80cb8d0681986ef66bafc0c66b87a4d66ef0f01c3ea008000002b01660f00dd", 0x52}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m33.968302399s ago: executing program 33 (id=34): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x5071, 0xffffffffffffffff, 0xfca33000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000804000/0x4000)=nil) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000d33000/0x3000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000340)="a766b810008ee80f20c035000001000f22c0360f2202660f3881910e000000b9c8080000b81eeee7d3baf632e05b0f3066baf80cb8d0681986ef66bafc0c66b87a4d66ef0f01c3ea008000002b01660f00dd", 0x52}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m33.878123223s ago: executing program 5 (id=36): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) (async) unshare(0x2040400) (async) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) r7 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r8, 0x0, 0x0, @val=@netfilter={0x0, 0x1, 0x6}}, 0x20) (async) syz_usb_connect$midi(0x2, 0x65, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0xe, 0x30, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x8, [], [{{0x9, 0x5, 0x9, 0xc, 0x10, 0xfb, 0x7, 0x6, {0x14, 0x25, 0x1, 0x10, "7f8585e53397bf5ba5ea0e98d618d940"}}}, {{0x9, 0x5, 0xd, 0x3, 0x8, 0x6, 0xff, 0x6f, {0xc, 0x25, 0x1, 0x8, "87f66651a3c8eaad"}}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x6, 0x80, 0x8, {0x6, 0x25, 0x1, 0x2, "4584"}}}]}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x7, 0x1f, 0x2, 0x40, 0x1}, 0x32, &(0x7f00000008c0)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x34, 0x3, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x634a04471b236a1c, 0x0, 0x2, 0x6, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x0, 0x7, 0x55e7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "452475d1f237da6e35a339298f5f856b"}]}}) 1m30.832030496s ago: executing program 5 (id=43): socket$inet6(0xa, 0x80003, 0x6) open(&(0x7f0000000180)='./bus\x00', 0x48a7e, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) 1m30.242473104s ago: executing program 5 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x60, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0xd}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/fib_triestat\x00') writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="e5", 0x1}], 0x1) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x7, 0x36e, &(0x7f00000007c0)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800700, &(0x7f0000000000), 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)) 1m29.306164438s ago: executing program 1 (id=46): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@minixdf}, {@grpid}, {@resgid}, {@quota}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 1m29.305983718s ago: executing program 1 (id=47): r0 = io_uring_setup(0x31a, &(0x7f0000000000)={0x0, 0x1447, 0x10, 0x3, 0xbe}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000900006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf670000000000001506f7ff0fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1m29.305778958s ago: executing program 1 (id=48): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xfd, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000536000/0x4000)=nil, 0x4000, 0x9) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabb80ea943cbb86dd6c00000000082c0100000000000000000000000800000000ff03"], 0x0) 1m29.130090986s ago: executing program 5 (id=50): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000180)={0x0, 0x8, 0x0, @tid=r1}, &(0x7f00000001c0)) bind$bt_hci(r0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x2, 0x7fff7ffc}]}) tee(r2, 0xffffffffffffffff, 0x8, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1a000000, &(0x7f0000000200)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) 1m29.038116641s ago: executing program 5 (id=51): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd71, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x210000) r4 = openat(0xffffffffffffff9c, 0x0, 0x2141, 0xdd) ppoll(&(0x7f00000000c0)=[{r3, 0x1089}, {r4, 0x8000}], 0x2, &(0x7f0000000100), &(0x7f0000000140)={[0x4]}, 0x8) 1m28.769250963s ago: executing program 34 (id=51): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd71, &(0x7f0000001900)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaa3788a8440081002b000011aa00e775ae7b00f91045f28ed361867804228a7d6c7c98021042cd49e8906bbc7ed5ebc70d23818d45da5695104eaacf2ab7f7ecfb82c43175fbccffd9e652d967ba70f4e38132513778910369191e955ae725ed84e31bff5cbd1936c2990574f712a14366cbbf6b67cefdabb1b85ca8845a137f41c6a9d2f3b8a4ac51ca5aed990b6634ad1384f5d78925dad5f5c60cd34fdfb53bed8bf8a98bc77abb3f822dff586f7cbfb404503a5c30c10a77ee1c71f52f6503e25d8cb5334700e60e2b23524a791998698a60d7f6f9751667dab594d7cc326a8e6820685862df33c647dc06a5f0f2bcac5b5fa873b46a5c7aeff2a2a8f57b96e9c9234836bbd69da3407e20d5ff116b01b26771371f63f5d77dc99f2d1e334bd6e7b4c3027a09a3f2c1fa9b4cdbe5707989aea287fef7ea5ba4b308ffe7a38ceca61e57e6dae4401f19a8228f860184c8f0ae7511c4e6063e9344037a33911162337ff890fbd25de1a70ed63e4aa02aa92cca4c9edd60caa66806162df2f27f745699f8e73f189bd97d1bda420681dc7784af9c98a4f7c56dcdcb4ef4149e20d9d19b2c86fd2a95284019104117665e48932ab8ea6add0553d1807635e171c7f2c9f099a684289f9c3ccd194ee370edbba8832adebbe1c82009ae6f17fcba502bc9cc2ea9b2f51b18793076596150c83302b87a19eb16d3b296c8dd6080f369f480064260c0c1774880a9c6f56efb1b9a95f80ccf7b5529620edfabdfd4550bdfdba9383395837b273eab2359086ad27446b8dc04638200f1fafde9b044385956694c33cbda791d3f7a7065ad9365c1aec3f34caaa8c12a0dcbda42b85b64f425960ab76ff814f285b341c0a476f4b9a71943c5ea1ece34e45aac3161bcb61dc2ac3d0c19e8c5f03563e6dc02f5ff1601019c744e7d4f6746a8a8d2d22e0203a0a8faab68977edd17463586bfe9f71f522a0814bd896644b4bd9b01352e9b497a48f0e8d1212c770ac8c9931878483c865e31bf965236e0fb44c1282dcd2537978d9c3bcf8a0dab220ea2b9d54ba9cdd520a156538488eae1254c80550f9d3d532cab434294a65655df95214ddd3fa76d45bb627222ca386664f29ff55a72de79264b2b53d062635586612a25f86dbf9640b39f31a9abea56ddd382f08c73f93a94ae103fe3964848ce01a2d9a200e4b5b612c0e73637f40c321c185a28294f8ad20b29078045656a8becb041c9c665a78c0841d7d2eeeb6f4e526fded7c1caa05cdc453ff4c1c1f5dff5f80d462c30a7704fc40b11d32195e96ce6c4a581ecbc1f59824f32be6f81eeca3759d3b3cbf34f1d0b6f4e9dbc705c4ab0b950fa5a52d122980f90e647ebc394da4bd558457645958fc532ebd3df11dff6860bf8bc93205619feafed0f5d161f032eaea99cbc462a34e0c6507a79ee5c97ce746b829f714d27537e19b02bfb358e98bc6ee5d17de596ad2099fa27d656cb02bea431705ede61e79bc16675337e408366472d87fc512ae73599826d04f67926df499888636e5c5127c5c46487532de34054a6fcf30fc8fc56b748de10ac6123cd0cf564bbf87380a9ad7f74b6f811875644c4e583dedba55daaa7744a37cb8497d4a64150c53bd65a4e162a1a72ac7849aa36115838e1a9c1f4b3bbf3c8a63d45a0839af3a31a9f842e139b054e197929662fafaf6c032a115dcb3a5b308293bdc8d961fe068c048441236fb21cee26ad09a27396960db7dec5caa298f5f59602f31bf1b452ae788a232137c6eee1ec8621f9be3095a5964d1733b706e8f23231b14944b6f193cb5ea368c1af751b80c593beada7850bb0b9c3ce6ec6fd6abc3406e92ec265b6b8da98a4c2f06a6f444afb2b8fa21d75b41e7bbcab375bab0da89ddebb233820b5f4e0bc900fbdccc4d0ad1fb92ab9c2e0d912a6e9b008a93d807ea8d3a836525ca3ac0d287432f93e6274793a201e6b954ae114e46756ed6cf935bdea31af32ab07c1ff2ed5745dc4f2566ae6f4eff7e58244a4f3fe9c6339eb42e5cbc06978c43f0a3d82bd96a2483d2a553aadb38b51d6783b45b81da942a379f102bbd973847076c757270b724b59226f65693fdd5ff26fb072c221fac6e778aafe50dcd60179a0baaa9790023cc3339a8b40785dc04babb80aa3acb2866d73de1917b3e4d855bd9822823e41c6e5fca59862c261e2691b14c40b5f2e6b7b20e68fcf40959b9701ae9103a14940157a7c2ec3512be9a3ae77b6a1e7f07a3c078f4be6bb1c25a22dd9d3cb3a8a5ab6445925e65818e6056e5aabeda68b4030524c9106510c41fa8a3da21f3fa065ac665025b83ee472f69dd4e37e4034b8e394e5d81982060656b1574762a7d953b327bdba3b5b966745892e03244e9b3d0e8bdfcd5451411eaa46a82c462c80a48d923ed8db8866ce7c88e84d2e1eb96f55338f1032203434fe55edf23dc9a50087675e75e0967ed12e18ea128ff2900920ff63c02ba51538ae089acbe56e9944701e890337318598f62d5cad723ecd48dc47ce8e2f5b18e2ee5e47bd59bd26dced9d238d851addf53521f8f45204d1ff8ebf5ea39feec6e5238c8ac6e0fa86db751d947c26dcf7746062a44786f9384b33306b308072c9b50cc4e53ea483d3779c36c5bfe18b526a3cd6e5dfbcbd6dbc0b00880f16792477896e300920082751d3eefff3161102c604c9f9049f8afbd56b9594128b6ff6bf0a9b60c44ded847fb30e2487f68e362482135d8ea30eb581f192e3e0f25b108b48011a3dc1f0136bea2d45098617321b3051305934ef6901223565e70f2de5097a89b05d80285d1ce4cf6daf2f9db67f16123a55482b359f3545528f24134285922e46c086ecb783608ae658b0228b987d53fc986848a8848756e9496caff6c5a233af194314860b7332817b41bbacee5b29a4ffdb0300ca55df9fde67f99f4e6cfd781f00c4502a22fe25c8e27d4eb955d3ff4de7dbc16d531f1be559fcde71141b0c3cd78936fb7fcebcaca9dd321561c5cf88ea570941ea7a4fdc72c663a727d5f8671dfe8453b8b099ebd2785b8d929d323c694e74a272ba7ecf33acad99c8b35afda5e8ca114fe8c35864b6589a6d825202ac3e68c186435a0b4312b4d9525be728c92d686cc54ab7c9390b4216f9a3ac07e44d3143be37be4b5a93582ca66ef45098d5551567735b1d25f3a0dca74e6c2f9db5e040b0c9a7873135a40c306e5a9cfc217fe9c6f2ff8debbb7b870fc0316b0e2229c50e3f583ba9f14035de267f42c4e8ec3516c62ec4d2d27d724d8b81de38fc84dc3e0242b49b76f0ab44481ce1c980038732b4548074e6cacd66570f071191ce702a85be506ef8b5fcc2ef9ee4bc811f328cdd225316de95d49e70c97f7aa5d113434d5cec08c1bf2174a98229461134f7de0d08d5f750bb98c81fca4b6ceefd1212175438d9995d7e1a1d641336ef2ae9c00637a4ac2b200efc6cfae1f6dd34fe42bb1943cb2e6c655f53c0f68580b604f74c023b96957df0af373ba3e636e9736c4e5ace425d83cc852aadcc0f0c9f0432bd2bd55d5d5a5cf6a07293da94aac0aafc86e78c1cb2ab770813ba1c2234944fd5519d15685926208dfcfdaab2a3707baad3f1e9fc46c38829fef35c228d14f35349df52db0d71870f7fb3322ee90f6b7cad3df2b7dcf8fcfee80106951868abacb2715251f507197e9d640dfe1f39cc84447993b76b5dfbac1796f4c8142efb10de6e72f990324fbf87072c6405a78875278f020da337074d890c9401b14545c5c89ea8b5b01a4b18a85e2c46db8ad67dec6fce969e2895403eca0fbc191f1137df36b52852b252196a4beef75d7e09dceb90a18a9c342909a8d26a2dd9b3ccff68c221fd43ce2a2edcab4e8fc1a07e47287501fa3ca5c6a89f58a26a89a22405392d469dea156ab766161b84af11bfb08d5e820bf7230f509d177ca5a6faa86e54ea9ee5b6202dc90ac0f984e3bbd7aae094b0c941ab8107b5c52b131e69bb33730cfd2c1340663530e3408d664b4bb19fa472aa08b3df7b5f188987435182c799d23192948347692e86b6e6d6c9315234e4a7f65e2575181b9a868ce7e62bcb122f350f3e7b1e2d1826b81e8e236e534c8760b32f6f58ce014cef189a1c6db63af9628080f1c2892bc10918ddf048887964149860f56367fa72df30cd0d3e2bfe61569963057fa548505cde2d44a5cf874d2f6b2415a1f1fd27cc0e29e95b2c2f026e365f3ba5f28823773c401c1a29eb7084e11eb777ad5722bd82869fae871c1fc6bd9204c590f30b47a07c9bb9793e13c6a41c0533ceca9c06456d6f18f655398aa219f38f093294f5b1a3e9b5c1b220180b4b1573eec09040af89da07dae677292dbaf1e3bdab9cfc14868ab81602b66980f8986a130140efe09298097687fd01cd07fe54520f3aad3348ee4d09af26efe43d0c8c5b234aa9eb7a269f83f0494d011c7fb37216c54d29fc6391ffbdfc2c7bd2c7a41c20744845328177b7329e636d24b67fd882347ad92806981af42cb13f797cf0ab8a32572280889dfafacbb609a01e7301cb0770ff699a9283a49118c1f75fb2973b3d19700c2855843ef947bf9e74d429f8298bd2b5b25f83bc3210126e66882eff1c24288185e2c9c7942535fb6ad0200c8468980c5d1d9af7ebb665e62845045b03c861c08dd398aff43b18576e1e9e1ab99463c4774c0486f7c427d743fc38db9cc1ce6570e81d84d31d5cd975444f9a0f20025008213050e87166d3819982154e0685b6ab90f24348545496634fd02a1dc49ef1514997d50a08f8f0174ff16a8cdf542df15da2f44d0ca6046bd6971b1dcf8ca752d07f17a0138fac9e87dcad4671261e8e286f72fe1c708d7ed9757048dfdd6581d50772c47235ff723337690aa364354839549444f7a9cc1422f50fb864c7c465dd641341e089a77cfea795ea3701638f1e98825c16a2813efdab80ca2da33302c1fcff2e560c335c30323eb19ef6766e4723a3a18ccea8683a5a1b402276e89796d55fc0e22a7b5038f014d880287190c898737fc9aaaea2973e072331ade1f937c4ec57dbd758fee7cf62eaf6689e"], 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x210000) r4 = openat(0xffffffffffffff9c, 0x0, 0x2141, 0xdd) ppoll(&(0x7f00000000c0)=[{r3, 0x1089}, {r4, 0x8000}], 0x2, &(0x7f0000000100), &(0x7f0000000140)={[0x4]}, 0x8) 1m28.769020313s ago: executing program 1 (id=53): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r4}) unshare(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x4, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, 0x10, 0x80, 0x2, 0x6}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf251700000014000180080003000300000008000300030000003400018008000100", @ANYRES32=r1, @ANYBLOB="1400020065727370616e30000000000000000000140002006261746164765f736c6176655f3000005800018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030002000000080001005838597870295277009359c8bee5a9f7303d486feef0532e420f8257f8b8c43a62890d6e8620645018c38184e3d3e14340b50ba1200fe2f6a19e8d8630b53995251f398e842ca40980b9b5965613afe7c6d3b7f725db527c35304fce5ab3d4a0b0c6af6ae91818720b059e587f136608c4918bff14658ca6124ce5de", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f3000000800030003000000080003000000000018000180140002006272696467655f736c6176655f300000"], 0xcc}, 0x1, 0x0, 0x0, 0x20008850}, 0x8000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) 1m28.768586863s ago: executing program 1 (id=56): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0x20201, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000a00)={'\x00', 0x10000, 0x3, 0x7bef}) getresgid(0x0, 0x0, 0x0) 1m28.768402663s ago: executing program 1 (id=57): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000580000000400000003"], 0x50) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/169}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) getsockopt$inet6_opts(r3, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000000)) 1m28.756110394s ago: executing program 35 (id=57): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000580000000400000003"], 0x50) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x30) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/169}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8) getsockopt$inet6_opts(r3, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000000)) 1m2.430055593s ago: executing program 7 (id=242): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0), 0xfe, 0x59c, &(0x7f0000001840)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f) 1m2.346155507s ago: executing program 7 (id=245): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unshare(0x22020600) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000180)='proc\x00', 0x0, &(0x7f00000000c0)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x2, 0xe5}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$bt_l2cap(r4, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x80800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f0000000940)={&(0x7f00000000c0)=0xd94c, 0x6, &(0x7f00000006c0)=[{}, {}, {}], &(0x7f0000000900)}) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="c600"}) 1m1.989957554s ago: executing program 7 (id=249): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000dc0)={0xa, 0x4e22, 0x8, @empty, 0x5}, 0x1c, &(0x7f0000002300)=[{0x0}, {&(0x7f0000000e80)="a06e", 0x2}], 0x2}}], 0x1, 0x40800) (fail_nth: 5) 1m1.972295855s ago: executing program 7 (id=250): r0 = io_uring_setup(0x6118, &(0x7f0000005880)={0x0, 0x2c3f, 0x10, 0x5, 0x2ae}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x100010, r0, 0x28f43000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000540)='tasks\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000005c0), 0xffff7515, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={0xffffffffffffffff, r1}, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000059c0)={{}, {}, [], {0x4, 0x6}, [], {}, {0x20, 0x2}}, 0x24, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1m1.499337247s ago: executing program 7 (id=257): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80, &(0x7f0000000240), 0x0, 0x62c, &(0x7f0000000840)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0xfffc, 0x4}, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x4}}, @TCA_TBF_BURST={0x8, 0x6, 0x9dd0}, @TCA_TBF_PBURST={0x8, 0x7, 0x6b7}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000803}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c8d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m1.301203177s ago: executing program 7 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',pcr=4000000p000000000004,k']) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) 1m1.248986279s ago: executing program 36 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',pcr=4000000p000000000004,k']) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) 3.258076566s ago: executing program 0 (id=548): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x3, 0x29e, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x1, {{0x2, 0x4e23, @rand_addr=0x64010101}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000001100000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2200000000000000"], 0x190) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') 3.257864137s ago: executing program 0 (id=549): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a00000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff036bd9a3d0392eb005ead97f", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.255738897s ago: executing program 0 (id=550): r0 = syz_usb_connect$midi(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x30, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x411}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001080)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000640)={0x14, &(0x7f00000002c0)={0x40, 0x11, 0x2, {0x2, 0x4}}, &(0x7f0000000580)={0x0, 0x3, 0x48, @string={0x48, 0x3, "43ba1e6c41928772476f7a8882fe20bd646a6806b9ff2545af8bc2f98a825dc83de0964c671b3da27e83047b260a30a735883ece8daabfe371992327bbfd211e0d0048163475"}}}, &(0x7f0000000fc0)={0x34, &(0x7f0000000780)={0x0, 0x15}, 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000880)={0x20, 0x0, 0xd4, {0xd2, "203a6f7b4593f6943b1b750359cdc3ff19ecc2152b984cf7ffb161e3708258517d3a494cb01f3cd30213f935b2a04cd795a91320c35829c6b4a62bb4e49f05d8606b6f340978d89ad0db45f17e75f3fd13829c02a07634380535a222ab45de218cd3fe23a8e36005e552d234fee61b2d8183e36e1679a9825172e6a190f5fd3b90a0cf2b5ad1b2cfd8dd6f1d749eabf8d70a91db793ea4515170e3e78378207d77b24e3450f698de10a16494cb1535a0ee0ff14204cf2ffbc4babe512e1fccadcbb7683f80864a2f2fa8538a38b7aa67de2c"}}, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x1, 0x2}}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff1}, {0xffe0, 0xffff}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = syz_usb_connect$uac3(0x2, 0xfc, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xf7, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x9, 0x30, 0xe1, {0x8, 0xb, 0x2, 0x1, 0x1, 0x23, 0x30, 0xc8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x1f, 0x5}, [@feature_unit={0x15, 0x24, 0x7, 0x6, 0x3, [0xf, 0x7, 0x13, 0xb]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9d, 0x7, 0x0, {0xa, 0x25, 0x25, 0x9, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x800, 0x4, 0x5, 0xf5, 0x3, 0x5, 0x2}, @as_header={0x17, 0x24, 0x1, 0x7, 0x10001, 0x0, 0x4, 0x71, 0x9, 0x0, 0x5}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x18, 0x80, 0x7, "7236cf44dfaf457a86"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0x0, 0x7, "", "c094"}, @as_header={0x17, 0x24, 0x1, 0x9, 0x1, 0xfffa, 0x1, 0x5, 0x3, 0x9, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x9, 0x6, {0xa, 0x25, 0x25, 0x401, 0xff}}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000140)={0xa, 0x6, 0xfc0f22a505b45d69, 0x0, 0xd8, 0x0, 0x10, 0x3}, 0x123, &(0x7f0000000440)={0x5, 0xf, 0x123, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xb2, 0xd, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0x1, 0x7}, @generic={0x48, 0x10, 0xa, "b84ce6676bf1b3c9e4614a55559161dc294105507651a813a66a8cf104e6451586f6a6e814a1a672c8c8d1ef7347b5b8d02ef426cb8ca82dca18f2d9839a9b1a959ae70537"}, @ptm_cap={0x3}, @generic={0xc2, 0x10, 0x3, "e5867796dc7841ef2f7e6ea16ab736f4d6aef8c7b4f27e333bdac7418d5f53a1a163051fbe2aaf7060a2bab1a8465607ceee722480a3705854cbac416a2daf93dc2ccda76b7ac41ede4b048b866adbc50cebcd6ea6aae939c5f77d1c9be8335df45373fb46ff262ee582fa47659cbf2cbc6f8c3fee2f98cdeb9f3f0414e9baefe93cb2682fffcce96113bef4f0d65cf652e47882e367c3919bcbc711dda906c29a26ff933234b1a5244a28ae8c67fcae20a5756b9bf785a40c1c0c7462633d"}]}, 0x3, [{0xd4, &(0x7f0000000980)=@string={0xd4, 0x3, "6df03aa7de9dc2b296d576bc3d1bdc19cc842acc6d32f495b50f205e56582fa0e1e8e567350bd76935b660488d8481f1be4a4dd58c31a40b04f2192d02ce7d0eb92b26c2a87d5e480703f6b01fc0f1418213782ed79d38797029c23c7fd6a13e6893b84a7c9f27e522c09b95a652d9380f5be7a9e39671ff91578cd08e7036d08ca46e2b56299def545ec8e00bb033f0bca0dd3b8eb18c4f4c1b886471714129063ccc3e79a2965f57e03cfcb484458d40abdd0f2db0e781e91134bb6c1124fcc30b7fd3a00612956334f37bb80e6fed77d1"}}, {0x3b, &(0x7f0000000a80)=@string={0x3b, 0x3, "3d21541a7505d42b674285978738d0dc00089761dcd767e83f64fde194f11a53af57b17a51b71e75a0d5e7c6ed8fd8cbcf262372ed5e15dd12"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x5876}}]}) syz_usb_control_io$uac3(r3, &(0x7f0000000c80)={0x14, &(0x7f0000000b40)={0x20, 0x5, 0xd1, {0xd1, 0xd, "9fd8062f012782338bf29a805cc7b4e1a36b611e187b2df848bb1a6375251dda8c8ddfa89e5c95578d4801f692f96521427e08c46a740f085106cc48267d355fbd4467f8d59607514e7781ce5edae78fd6adaf63d814f227ea230a1ed5c31fb5f40269ba1c7e69ad6782470f69fe8f0cbafd52f706830f5f126939f61b846f071940e324bfaa81dd60b9a404b8f01c3db1e76190c83f1903aade35a5a03363d49f4d487cc213c8cfa885b5db673befca129474c48b2fdf82f1a19a0dec6fd14c2f4ef99bf0cbbfd02adbe486632410"}}, &(0x7f0000000c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc45}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000cc0)={0x40, 0x12, 0x85, "b9920f6cc76e1b043b84b1080bbb48ac8015b6c799ca419064bc15266faaf2909e9c9ec8879396fdd6a3d8015d3677e16bc1fdb0e0c381564a3ee173668854b0ccfb774f40757d1518d3726962ce7abcc6d3533713bdd48ad2656180a7ae300be46a6a94ad9caf35de94d6d0683f18acb073c07bb9b456f241f5f66832c44afb86c832534a"}, &(0x7f0000000d80)={0x0, 0xa, 0x1}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000e00)={0x20, 0x81, 0x3, "c220c9"}, &(0x7f0000000e40)={0x20, 0x82, 0x1, "a8"}, &(0x7f0000000e80)={0x20, 0x83, 0x3, "eca640"}, &(0x7f0000000ec0)={0x20, 0x84, 0x4, '@(0:'}, &(0x7f0000000f00)={0x20, 0x85, 0x3, "99ffd4"}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) 2.242042065s ago: executing program 8 (id=556): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000100)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@usrquota}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (fail_nth: 8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x14080880) 1.589635065s ago: executing program 8 (id=561): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0xe0, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0xfffffffffffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/53], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x35, 0x30, 0x32, 0x30, 0x30, 0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) 1.533092148s ago: executing program 8 (id=563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000180)={[{@resgid}, {@errors_remount}, {@usrjquota}, {@sysvgroups}, {@block_validity}]}, 0x3, 0x50d, &(0x7f0000001bc0)="$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") r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@setlink={0x3c, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x25781, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008810}, 0x24040840) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) inotify_add_watch(r6, 0x0, 0x3300000c) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r5, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r3, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) recvfrom(r0, &(0x7f0000000040)=""/61, 0x3d, 0x0, &(0x7f0000000200)=@can={0x1d, r5}, 0x80) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0xe400000e) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x131) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x14080880) 1.518064959s ago: executing program 9 (id=564): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000040)=0xfffffffffffffffc, 0xfffffffffffffddb) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) lseek(r0, 0xfffffffffffffff5, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000012c0)={0x1, 0x0, &(0x7f00000000c0)=""/74, &(0x7f0000000200)=""/146, &(0x7f00000002c0)=""/4096, 0xffc}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfec00000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x4008af04, &(0x7f0000000040)) 1.369958706s ago: executing program 9 (id=565): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x400000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = dup3(r2, r3, 0x0) write$tun(r4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0xb, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x8, 0x0, 0x0}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x4}, 0x3}) r8 = syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) openat(r8, &(0x7f00000000c0)='./file0\x00', 0x42000, 0x40) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) ioctl$BLKGETNRZONES(r9, 0x80041285, 0x0) 1.351461146s ago: executing program 3 (id=566): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000c00100000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) 1.280314699s ago: executing program 3 (id=567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000003a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042cbd7000fbdbdf2501000000140000000b"], 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) 1.227032102s ago: executing program 3 (id=568): mknod$loop(&(0x7f0000000240)='./file0\x00', 0x1, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000140)={0x0, 0x1, r4, 0xfffffff9, 0x80000}) dup2(r4, r0) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 1.226842312s ago: executing program 3 (id=569): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0007000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.226706402s ago: executing program 8 (id=570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.143641286s ago: executing program 8 (id=572): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.119450547s ago: executing program 3 (id=573): syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0), 0x1, 0x3f7, &(0x7f0000000ac0)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r2, &(0x7f0000000280)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000300)={0x200f}) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1f8, &(0x7f0000001300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000400)={'#! ', './file0', [{0x20, 'rose0\x00'}, {}], 0xa, "7303040ada0e854d00cbdccb29dfaef8df4ebfb0b82326388bb442c265ebf7daa46dc253eac49aae771c74365ef50eda7a40519363afda1fa4ff729ca1d86efbf2387157fa1f3e630987d5e4a69d364723220067a545b97839f444a512c2916ac04c6c6f592b49faf7c2e1561a1b41419b36531052ce4b6d01253451da239c98c787900f9d761568fe2cd30315a2de2503d041a2b74baebd2c2d905619a5052a5807c326835ed5d68df4c64fa61b81a16e75c9559cfcdd87184575fd23e8"}, 0xd7) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bdf700fcdbdf250e0000000c0002800c00050004000388810634ecb8274caf8bd6c0aaf63d96030b0f9e02caa17af2e120dc57a6e2642d712ada0682f6372dfc489bf5096b3d9b3732ad2d4cbe"], 0x20}, 0x1, 0x0, 0x0, 0x20008800}, 0x24048010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000000)={&(0x7f0000000340), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20042000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100001080400"/20, @ANYRES32=0x0, @ANYBLOB="0000000080000000140016801000018020000700ffffffff080000000806000000000000"], 0x3c}}, 0x0) pipe(&(0x7f0000000200)) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) 1.073690609s ago: executing program 6 (id=574): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0x1, 0xb, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0xd2, &(0x7f0000000380)=""/210, 0x41000, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x0, 0x2, 0x5, 0xa}], 0x10, 0xfffffffb}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000006c0)=0xe8) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r1, &(0x7f0000000700)='./trace\x00') socket$nl_route(0x10, 0x3, 0x0) setxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000280)='\x00', 0x1, 0x0) 908.752587ms ago: executing program 6 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 908.452297ms ago: executing program 8 (id=576): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = timerfd_create(0x1, 0x80800) timerfd_gettime(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0xfffffffffffffe39}}, 0xd209f6d814827b17) recvmsg$can_raw(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x42) read(r5, &(0x7f0000002fc0)=""/52, 0x34) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0], 0x78) unshare(0x64000600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x818d, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c844}, 0x0) 846.95166ms ago: executing program 3 (id=577): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="747a3d5554432c756e695f786c6174653d312c646973636172642c757466383d302c756e695f786c6174653d312c726f6469722c757466383d312c00ee284a015f4d897833fb742704c70630c7e3804afc5fe645f66ca614e17a7c3e5fcafc620b6af31b1896c6c50b36c73b7ad41b37f80916dee79d4e30902beed2"], 0x1, 0x247, &(0x7f0000000580)="$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") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000021000108fcfffffffcffffff0220000000000000000000000800010000000100"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r5}, 0x8) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@stripe={'stripe', 0x3d, 0x7}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0xff, 0x5bd, &(0x7f0000000800)="$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") 842.58194ms ago: executing program 6 (id=578): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x2, 0x0) write$P9_RWRITE(r0, &(0x7f0000000200)={0xb, 0x77, 0x1, 0x6}, 0xb) 778.917434ms ago: executing program 6 (id=579): sendto(0xffffffffffffffff, 0x0, 0x40, 0x810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x332b4000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0xfff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 645.539339ms ago: executing program 6 (id=580): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@local, 0x4d2, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0xec2, 0x0, 0x0, 0x6, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x4, 0x0, 0x0, 0x15, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e080ff01000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 573.805853ms ago: executing program 6 (id=581): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f00000000c0)) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYBLOB="0c0099"], 0x40}, 0x1, 0x0, 0x0, 0x2400c891}, 0x4008004) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 369.957452ms ago: executing program 9 (id=582): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x404, &(0x7f0000000740)=ANY=[]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x29, 0x0, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x8880) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r0) syz_ublk_setup_queues(r7, r6, &(0x7f0000000400)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa51c, 0x2000, 0x2, 0x33b, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x400000000000000, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 327.444364ms ago: executing program 0 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 236.791689ms ago: executing program 0 (id=584): pipe(0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x25, 0x4, @thr={&(0x7f0000000680)="2d9c23c1cc5580df63646d52de2abad30d8c51ede6ff58c8b1262908459dd891e7bc65826e63952f9a4e0cef4906dd9e9de5a108a425846e49b0644487389709c7a595e6570047fb5e66ad786d7874797362e68c84d68325feadfaf8bab45cd3a443a382cbffe7cb16019a800000fc2f8f758626f00b687ca987a1192ebf15b929f96207c244eecd6c", &(0x7f0000000840)="37b93e81ed838e477c7b99ab59b5b0057de71398719acb248569be9dfc083e4b0af999846ef4f0f9212fa90f7b7e4a373f10a66bb2b70fb35062b624c11a306339b478ca7f5cb08b3dcd07a6313e1dab358d7d13a86d16fa44ed3639592a42e86d675840fc46c5644e3401cdba4738929379598e8f60"}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x1) listxattr(&(0x7f0000006440)='./file0\x00', &(0x7f0000006480)=""/12, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setns(0xc9, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) connect$unix(r3, &(0x7f0000000600)=@file={0x0, './bus\x00'}, 0x6e) sendmsg$can_bcm(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x800}, 0xc060) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000680001040000000000000000020000000000000008000100010000000800050001"], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000680001040000000000000000020000000000000008000100020000000800050001"], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000006800010400000000000000000000000000000000080001000300000014000200010000000000000002"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000018000104000000000000000002180000fe0300010000000008000100c000020008001e0003"], 0x2c}}, 0x0) r6 = signalfd4(r1, &(0x7f0000000140)={[0x3]}, 0x8, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, &(0x7f00000001c0)) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r4, @ANYBLOB="0600000021a500000c00010003"], 0x2c}], 0x1}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x200000, 0xd2) open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x10) capget(&(0x7f0000000000)={0x20071026}, &(0x7f00000000c0)={0xfffff886, 0xa3ec, 0x80000001, 0x75, 0x1, 0x1}) 82.047746ms ago: executing program 9 (id=585): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x8401, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$TIOCNOTTY(r1, 0x5422) syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') (async) mount$9p_fd(0x0, &(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x8401, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (async) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) ioctl$TIOCNOTTY(r1, 0x5422) (async) 81.754386ms ago: executing program 9 (id=586): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xe, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0x1, 0xb, 0x1}]}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0xd2, &(0x7f0000000380)=""/210, 0x41000, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x0, 0x2, 0x5, 0xa}], 0x10, 0xfffffffb}, 0x94) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f00000006c0)=0xe8) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r1, &(0x7f0000000700)='./trace\x00') setxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000280)='\x00', 0x1, 0x0) 48.153118ms ago: executing program 0 (id=587): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40400000000000061111c0000000007000000000000000095007500000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r0, 0x20, 0x3, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x15}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x31}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x33}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84081}, 0x20008050) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r5, &(0x7f0000001800)="2d2519d010bae03d46fdca85c1a1862b9b169eceaaca9ccf1cb8d871123f1c9c5e4ee16a1d71f8876bd9dd39cbd2831a51bf6016afee9c90f6acc9f9da99563bcef07ea1a92a75", 0x47) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx}, 0x1c) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000002a80)=ANY=[@ANYBLOB="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", @ANYBLOB="f5c33a229f58e3c883815dd2ef8c44420e679cbdfd8f114bae9005bc2e65a3ed4cc21ca65c77a0fe84195446c44b5962be4aebe099d3f25731c857fe6311b2d0e7354e46bfce688beb7759d9a15f1063e6c38e92e492669c583b54c2ab191ba4b5c645bce614e5", @ANYRES64], 0x4, 0x153e, &(0x7f0000000240)="$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") r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[], 0x1cb) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) 0s ago: executing program 9 (id=588): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x118, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@local, @in=@loopback, @in6=@private2, 0x33, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@loopback, 0x0, 0x2}}]}, 0x118}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000000c0)=0x13, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x84, 0x2200c851, &(0x7f0000b63fe4)={0x20, 0x3, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000000)=0xc, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f00002b4000/0x2000)=nil}) kernel console output (not intermixed with test programs): Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.428575][ T947] Call Trace: [ 55.431852][ T947] [ 55.434776][ T947] __dump_stack+0x21/0x24 [ 55.439113][ T947] dump_stack_lvl+0x110/0x170 [ 55.443792][ T947] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.448822][ T947] dump_stack+0x15/0x24 [ 55.452981][ T947] should_fail_ex+0x3bf/0x510 [ 55.457654][ T947] __should_failslab+0xac/0xf0 [ 55.462418][ T947] should_failslab+0x9/0x20 [ 55.466919][ T947] __kmem_cache_alloc_node+0x3d/0x2d0 [ 55.472290][ T947] ? __rb_allocate_pages+0x16f/0x5e0 [ 55.477576][ T947] ? __rb_allocate_pages+0x16f/0x5e0 [ 55.482859][ T947] __kmalloc_node+0xa2/0x1e0 [ 55.487444][ T947] ? mutex_lock+0x93/0x1b0 [ 55.491858][ T947] __rb_allocate_pages+0x16f/0x5e0 [ 55.496974][ T947] ring_buffer_resize+0x4c6/0xfe0 [ 55.502001][ T947] __tracing_resize_ring_buffer+0x80/0x320 [ 55.507911][ T947] tracing_update_buffers+0x45/0x60 [ 55.513127][ T947] event_enable_write+0x105/0x270 [ 55.518171][ T947] ? __cfi_event_enable_write+0x10/0x10 [ 55.523732][ T947] ? security_file_permission+0x8a/0xb0 [ 55.529292][ T947] ? security_file_permission+0x94/0xb0 [ 55.534928][ T947] ? __cfi_event_enable_write+0x10/0x10 [ 55.540477][ T947] vfs_write+0x3fb/0xd00 [ 55.544722][ T947] ? __cfi_vfs_write+0x10/0x10 [ 55.549487][ T947] ? __kasan_check_write+0x14/0x20 [ 55.554597][ T947] ? mutex_lock+0x93/0x1b0 [ 55.559008][ T947] ? __cfi_mutex_lock+0x10/0x10 [ 55.563856][ T947] ? __fdget_pos+0x2cd/0x380 [ 55.568441][ T947] ? ksys_write+0x70/0x260 [ 55.572856][ T947] ksys_write+0x14a/0x260 [ 55.577183][ T947] ? __cfi_ksys_write+0x10/0x10 [ 55.582033][ T947] ? debug_smp_processor_id+0x17/0x20 [ 55.587412][ T947] __x64_sys_write+0x7b/0x90 [ 55.591999][ T947] x64_sys_call+0x27b/0x9a0 [ 55.596499][ T947] do_syscall_64+0x4c/0xa0 [ 55.600915][ T947] ? clear_bhb_loop+0x30/0x80 [ 55.605590][ T947] ? clear_bhb_loop+0x30/0x80 [ 55.610265][ T947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.616156][ T947] RIP: 0033:0x7f038739e159 [ 55.620569][ T947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.640173][ T947] RSP: 002b:00007f03881a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 55.648586][ T947] RAX: ffffffffffffffda RBX: 00007f0387625fa0 RCX: 00007f038739e159 [ 55.656563][ T947] RDX: 0000000000000032 RSI: 0000200000000040 RDI: 0000000000000003 [ 55.664534][ T947] RBP: 00007f03881a0090 R08: 0000000000000000 R09: 0000000000000000 [ 55.672514][ T947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.680493][ T947] R13: 00007f0387626038 R14: 00007f0387625fa0 R15: 00007ffd59a90118 [ 55.688469][ T947] [ 55.742640][ T953] set_capacity_and_notify: 3 callbacks suppressed [ 55.742657][ T953] loop3: detected capacity change from 0 to 1024 [ 55.790950][ T953] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 55.830634][ T953] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.919454][ T288] EXT4-fs (loop3): unmounting filesystem. [ 55.999214][ T512] EXT4-fs (loop8): unmounting filesystem. [ 56.008080][ T972] fuse: Bad value for 'fd' [ 56.056364][ T976] X.509: signatureAlgorithm (98) differs from tbsCertificate.signature (7) [ 56.123804][ T964] loop6: detected capacity change from 0 to 40427 [ 56.133636][ T964] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 56.134376][ T980] loop3: detected capacity change from 0 to 256 [ 56.140204][ T964] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 56.155224][ T964] F2FS-fs (loop6): invalid crc value [ 56.191136][ T980] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 56.203689][ T964] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 56.245678][ T964] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=70000, run fsck to fix. [ 56.331078][ T995] loop0: detected capacity change from 0 to 2048 [ 56.338994][ T459] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 56.350718][ T1000] loop3: detected capacity change from 0 to 1024 [ 56.373199][ T1000] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.394549][ T1000] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.436235][ T288] EXT4-fs (loop3): unmounting filesystem. [ 56.467459][ T1011] fuse: Invalid rootmode [ 56.474726][ T1009] mmap: syz.0.198 (1009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.534393][ T459] usb 9-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 56.552578][ T459] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.574091][ T459] usb 9-1: config 0 descriptor?? [ 56.792065][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.800639][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.912606][ T1032] loop7: detected capacity change from 0 to 40427 [ 56.961321][ T1032] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 56.974737][ T1032] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 57.004885][ T459] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 57.031071][ T459] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 57.093240][ T1032] F2FS-fs (loop7): invalid crc value [ 57.126269][ T459] smartjoyplus 0003:0925:8888.0007: item fetching failed at offset 2/8 [ 57.160617][ T459] smartjoyplus 0003:0925:8888.0007: parse failed [ 57.167120][ T459] smartjoyplus: probe of 0003:0925:8888.0007 failed with error -22 [ 57.181817][ T1032] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 57.211881][ T19] usb 9-1: USB disconnect, device number 3 [ 57.222914][ T1032] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 57.231589][ T1032] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 57.286849][ T507] syz-executor: attempt to access beyond end of device [ 57.286849][ T507] loop7: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 57.382087][ T1051] fuse: Invalid rootmode [ 57.627228][ T1060] loop7: detected capacity change from 0 to 512 [ 57.679766][ T1060] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 57.883063][ T379] udevd[379]: incorrect ext4 checksum on /dev/loop7 [ 58.037471][ T1063] loop6: detected capacity change from 0 to 512 [ 58.137529][ T379] udevd[379]: incorrect ext4 checksum on /dev/loop7 [ 58.196303][ T1063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.385192][ T1063] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 58.461697][ T1063] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.512900][ T429] EXT4-fs (loop6): unmounting filesystem. [ 58.878844][ T1059] loop7: detected capacity change from 0 to 131072 [ 58.888063][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 58.888227][ T704] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.924106][ T1079] loop3: detected capacity change from 0 to 512 [ 58.940270][ T1059] F2FS-fs (loop7): Test dummy encryption mode enabled [ 58.948222][ T1059] F2FS-fs (loop7): invalid crc value [ 59.039599][ T1079] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.046581][ T1079] ------------[ cut here ]------------ [ 59.052128][ T1079] WARNING: CPU: 1 PID: 1079 at fs/ext4/xattr.c:1865 ext4_xattr_block_set+0x2749/0x2f90 [ 59.061843][ T1079] Modules linked in: [ 59.065745][ T1079] CPU: 1 PID: 1079 Comm: syz.3.216 Not tainted syzkaller #0 [ 59.073047][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.083141][ T1079] RIP: 0010:ext4_xattr_block_set+0x2749/0x2f90 [ 59.089362][ T1079] Code: ff 48 8b 5c 24 08 48 8d 7b 28 be 08 00 00 00 e8 5d 99 ba ff f0 80 63 28 fd eb 1b e8 71 0b 75 ff e9 8f f2 ff ff e8 67 0b 75 ff <0f> 0b e9 8a da ff ff e8 5b 0b 75 ff 48 b8 00 00 00 00 00 fc ff df [ 59.109015][ T1079] RSP: 0018:ffffc90000d87120 EFLAGS: 00010283 [ 59.115093][ T1079] RAX: ffffffff81fc5e39 RBX: ffffc90000d87430 RCX: 0000000000080000 [ 59.123105][ T1079] RDX: ffffc90003f44000 RSI: 0000000000007012 RDI: 0000000000007013 [ 59.131111][ T1079] RBP: ffffc90000d872f8 R08: ffffc90000d8725f R09: 1ffff920001b0e4b [ 59.139116][ T1079] R10: dffffc0000000000 R11: fffff520001b0e4c R12: 0000000000000000 [ 59.147125][ T1079] R13: 1ffff920001b0e87 R14: ffffc90000d87438 R15: 1ffff920001b0e86 [ 59.155157][ T1079] FS: 00007f570b9b56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.164235][ T1079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.170948][ T1079] CR2: 00007f3fde57b000 CR3: 0000000111734000 CR4: 00000000003526a0 [ 59.179033][ T1079] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.187012][ T1079] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.195142][ T1079] Call Trace: [ 59.198436][ T1079] [ 59.201505][ T1079] ? __getblk_gfp+0x3b/0x7c0 [ 59.206117][ T1079] ? ext4_xattr_check_entries+0x342/0x3c0 [ 59.211977][ T1079] ? ext4_xattr_block_find+0x330/0x330 [ 59.217457][ T1079] ? ext4_xattr_block_find+0x2a5/0x330 [ 59.223066][ T1079] ext4_expand_extra_isize_ea+0x121a/0x1dd0 [ 59.229087][ T1079] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 59.234739][ T1079] __ext4_mark_inode_dirty+0x398/0x5d0 [ 59.240339][ T1079] ext4_evict_inode+0xbec/0x1450 [ 59.245301][ T1079] ? __cfi_ext4_evict_inode+0x10/0x10 [ 59.250893][ T1079] ? __ext4_iget+0x2dae/0x3e70 [ 59.255737][ T1079] ? __cfi_ext4_evict_inode+0x10/0x10 [ 59.261448][ T1079] evict+0x4c4/0x8c0 [ 59.265367][ T1079] ? memset+0x35/0x40 [ 59.269408][ T1079] ? proc_nr_inodes+0x2f0/0x2f0 [ 59.274300][ T1079] ? _raw_spin_lock+0x94/0xf0 [ 59.279043][ T1079] ? __cfi__raw_spin_lock+0x10/0x10 [ 59.284253][ T1079] ? __kasan_check_write+0x14/0x20 [ 59.289417][ T1079] iput+0x633/0x690 [ 59.293235][ T1079] ext4_process_orphan+0x298/0x300 [ 59.298361][ T1079] ext4_orphan_cleanup+0xb5d/0x1270 [ 59.303622][ T1079] ? __cfi_ext4_orphan_cleanup+0x10/0x10 [ 59.309307][ T1079] ? errseq_check_and_advance+0x66/0x130 [ 59.314963][ T1079] ext4_fill_super+0x6a53/0x73e0 [ 59.320040][ T1079] ? __cfi_ext4_fill_super+0x10/0x10 [ 59.325346][ T1079] ? set_blocksize+0x1cc/0x470 [ 59.330168][ T1079] ? sb_set_blocksize+0xaa/0xf0 [ 59.335031][ T1079] get_tree_bdev+0x450/0x6a0 [ 59.339710][ T1079] ? __cfi_ext4_fill_super+0x10/0x10 [ 59.345011][ T1079] ext4_get_tree+0x1c/0x20 [ 59.349510][ T1079] vfs_get_tree+0x9a/0x270 [ 59.353946][ T1079] do_new_mount+0x251/0xb40 [ 59.358467][ T1079] path_mount+0x640/0xfd0 [ 59.362847][ T1079] ? __se_sys_mount+0x306/0x390 [ 59.367702][ T1079] __se_sys_mount+0x320/0x390 [ 59.372425][ T1079] ? release_firmware_map_entry+0x190/0x190 [ 59.378347][ T1079] ? __x64_sys_mount+0xd0/0xd0 [ 59.383157][ T1079] ? __kasan_check_write+0x14/0x20 [ 59.388284][ T1079] __x64_sys_mount+0xbf/0xd0 [ 59.392921][ T1079] x64_sys_call+0x65d/0x9a0 [ 59.397431][ T1079] do_syscall_64+0x4c/0xa0 [ 59.401911][ T1079] ? clear_bhb_loop+0x30/0x80 [ 59.406604][ T1079] ? clear_bhb_loop+0x30/0x80 [ 59.411352][ T1079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.417251][ T1079] RIP: 0033:0x7f570cf9f3ca [ 59.421827][ T1079] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.441483][ T1079] RSP: 002b:00007f570b9b4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.449932][ T1079] RAX: ffffffffffffffda RBX: 00007f570b9b4ee0 RCX: 00007f570cf9f3ca [ 59.457919][ T1079] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f570b9b4ea0 [ 59.465966][ T1079] RBP: 0000200000000180 R08: 00007f570b9b4ee0 R09: 000000000080078b [ 59.473966][ T1079] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 59.481957][ T1079] R13: 00007f570b9b4ea0 R14: 0000000000000491 R15: 00002000000000c0 [ 59.490281][ T1079] [ 59.493312][ T1079] ---[ end trace 0000000000000000 ]--- [ 59.499204][ T1079] ------------[ cut here ]------------ [ 59.499877][ T1059] F2FS-fs (loop7): Found nat_bits in checkpoint [ 59.504654][ T1079] EA inode 11 i_nlink=2 [ 59.504747][ T1079] WARNING: CPU: 1 PID: 1079 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4f9/0x560 [ 59.525404][ T1079] Modules linked in: [ 59.529314][ T1079] CPU: 1 PID: 1079 Comm: syz.3.216 Tainted: G W syzkaller #0 [ 59.538072][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.548179][ T1079] RIP: 0010:ext4_xattr_inode_update_ref+0x4f9/0x560 [ 59.548379][ T1059] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 59.554788][ T1079] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 5a 25 ba ff 49 8b 34 24 48 c7 c7 80 4f b5 85 44 89 fa e8 47 20 45 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 59.554805][ T1079] RSP: 0018:ffffc90000d870a0 EFLAGS: 00010246 [ 59.587939][ T1079] RAX: d01f42db23f2f600 RBX: ffff88813358cd20 RCX: 0000000000080000 [ 59.595959][ T1079] RDX: ffffc90003f44000 RSI: 000000000007ffff RDI: 0000000000080000 [ 59.603951][ T1079] RBP: ffffc90000d87188 R08: ffff8881f6f2759b R09: 1ffff1103ede4eb3 [ 59.611936][ T1079] R10: dffffc0000000000 R11: ffffed103ede4eb4 R12: ffff88813358cc00 [ 59.619956][ T1079] R13: dffffc0000000000 R14: ffff88813358cbc0 R15: 0000000000000002 [ 59.627935][ T1079] FS: 00007f570b9b56c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 59.636871][ T1079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.643471][ T1079] CR2: 00007f3fde57b000 CR3: 0000000111734000 CR4: 00000000003526a0 [ 59.651456][ T1079] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.659438][ T1079] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.667393][ T1079] Call Trace: [ 59.670682][ T1079] [ 59.673609][ T1079] ? ext4_xattr_block_csum+0x560/0x560 [ 59.679091][ T1079] ? __kasan_check_write+0x14/0x20 [ 59.684206][ T1079] ? ext4_xattr_inode_iget+0x284/0x370 [ 59.689742][ T1079] ext4_xattr_set_entry+0xc7d/0x2230 [ 59.695041][ T1079] ext4_xattr_ibody_set+0x25b/0x720 [ 59.700290][ T1079] ext4_expand_extra_isize_ea+0x1416/0x1dd0 [ 59.706207][ T1079] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 59.711863][ T1079] __ext4_mark_inode_dirty+0x398/0x5d0 [ 59.717343][ T1079] ext4_evict_inode+0xbec/0x1450 [ 59.722302][ T1079] ? __cfi_ext4_evict_inode+0x10/0x10 [ 59.727699][ T1079] ? __ext4_iget+0x2dae/0x3e70 [ 59.732495][ T1079] ? __cfi_ext4_evict_inode+0x10/0x10 [ 59.737871][ T1079] evict+0x4c4/0x8c0 [ 59.741783][ T1079] ? memset+0x35/0x40 [ 59.745772][ T1079] ? proc_nr_inodes+0x2f0/0x2f0 [ 59.750640][ T1079] ? _raw_spin_lock+0x94/0xf0 [ 59.755331][ T1079] ? __cfi__raw_spin_lock+0x10/0x10 [ 59.760564][ T1079] ? __kasan_check_write+0x14/0x20 [ 59.765672][ T1079] iput+0x633/0x690 [ 59.769671][ T1079] ext4_process_orphan+0x298/0x300 [ 59.774783][ T1079] ext4_orphan_cleanup+0xb5d/0x1270 [ 59.779994][ T1079] ? __cfi_ext4_orphan_cleanup+0x10/0x10 [ 59.785722][ T1079] ? errseq_check_and_advance+0x66/0x130 [ 59.791384][ T1079] ext4_fill_super+0x6a53/0x73e0 [ 59.796326][ T1079] ? __cfi_ext4_fill_super+0x10/0x10 [ 59.801627][ T1079] ? set_blocksize+0x1cc/0x470 [ 59.806390][ T1079] ? sb_set_blocksize+0xaa/0xf0 [ 59.811297][ T1079] get_tree_bdev+0x450/0x6a0 [ 59.815906][ T1079] ? __cfi_ext4_fill_super+0x10/0x10 [ 59.821318][ T1079] ext4_get_tree+0x1c/0x20 [ 59.825744][ T1079] vfs_get_tree+0x9a/0x270 [ 59.830177][ T1079] do_new_mount+0x251/0xb40 [ 59.834691][ T1079] path_mount+0x640/0xfd0 [ 59.839052][ T1079] ? __se_sys_mount+0x306/0x390 [ 59.843899][ T1079] __se_sys_mount+0x320/0x390 [ 59.848563][ T1079] ? release_firmware_map_entry+0x190/0x190 [ 59.854558][ T1079] ? __x64_sys_mount+0xd0/0xd0 [ 59.859349][ T1079] ? __kasan_check_write+0x14/0x20 [ 59.864442][ T1079] __x64_sys_mount+0xbf/0xd0 [ 59.869060][ T1079] x64_sys_call+0x65d/0x9a0 [ 59.873562][ T1079] do_syscall_64+0x4c/0xa0 [ 59.877982][ T1079] ? clear_bhb_loop+0x30/0x80 [ 59.882708][ T1079] ? clear_bhb_loop+0x30/0x80 [ 59.887383][ T1079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.893289][ T1079] RIP: 0033:0x7f570cf9f3ca [ 59.897700][ T1079] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.917326][ T1079] RSP: 002b:00007f570b9b4e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.925778][ T1079] RAX: ffffffffffffffda RBX: 00007f570b9b4ee0 RCX: 00007f570cf9f3ca [ 59.933867][ T1079] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f570b9b4ea0 [ 59.941857][ T1079] RBP: 0000200000000180 R08: 00007f570b9b4ee0 R09: 000000000080078b [ 59.949844][ T1079] R10: 000000000080078b R11: 0000000000000246 R12: 00002000000001c0 [ 59.957817][ T1079] R13: 00007f570b9b4ea0 R14: 0000000000000491 R15: 00002000000000c0 [ 59.965808][ T1079] [ 59.968821][ T1079] ---[ end trace 0000000000000000 ]--- [ 59.978232][ T1079] EXT4-fs (loop3): 1 orphan inode deleted [ 59.978739][ T1059] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 59.984013][ T1079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 60.033719][ T1099] fuse: Invalid rootmode [ 60.054553][ T1101] raw_sendmsg: syz.6.221 forgot to set AF_INET. Fix it! [ 60.067989][ T1103] 9pnet_fd: Insufficient options for proto=fd [ 60.094197][ T1105] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 60.109506][ T1105] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.120374][ T288] EXT4-fs (loop3): unmounting filesystem. [ 60.191398][ T1109] FAULT_INJECTION: forcing a failure. [ 60.191398][ T1109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.211201][ T1105] xt_hashlimit: size too large, truncated to 1048576 [ 60.254979][ T1109] CPU: 1 PID: 1109 Comm: syz.3.225 Tainted: G W syzkaller #0 [ 60.263781][ T1109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.273835][ T1109] Call Trace: [ 60.277115][ T1109] [ 60.280040][ T1109] __dump_stack+0x21/0x24 [ 60.284374][ T1109] dump_stack_lvl+0x110/0x170 [ 60.289054][ T1109] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.294104][ T1109] dump_stack+0x15/0x24 [ 60.298271][ T1109] should_fail_ex+0x3bf/0x510 [ 60.302957][ T1109] should_fail+0xb/0x10 [ 60.307116][ T1109] should_fail_usercopy+0x1a/0x20 [ 60.312143][ T1109] _copy_from_user+0x1e/0xc0 [ 60.316737][ T1109] proc_control_compat+0xae/0x180 [ 60.321776][ T1109] ? proc_submiturb+0x150/0x150 [ 60.326629][ T1109] ? mutex_lock+0x93/0x1b0 [ 60.331040][ T1109] ? selinux_file_ioctl+0x3ad/0x4c0 [ 60.336250][ T1109] usbdev_ioctl+0x1355/0x1f10 [ 60.340928][ T1109] ? __cfi_usbdev_ioctl+0x10/0x10 [ 60.345953][ T1109] ? security_file_ioctl+0x95/0xc0 [ 60.351067][ T1109] ? __cfi_usbdev_ioctl+0x10/0x10 [ 60.356098][ T1109] __se_sys_ioctl+0x12f/0x1b0 [ 60.360775][ T1109] __x64_sys_ioctl+0x7b/0x90 [ 60.365366][ T1109] x64_sys_call+0x58b/0x9a0 [ 60.369869][ T1109] do_syscall_64+0x4c/0xa0 [ 60.374289][ T1109] ? clear_bhb_loop+0x30/0x80 [ 60.378967][ T1109] ? clear_bhb_loop+0x30/0x80 [ 60.383640][ T1109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.389529][ T1109] RIP: 0033:0x7f570cf9e159 [ 60.393941][ T1109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.413542][ T1109] RSP: 002b:00007f570b9f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.421948][ T1109] RAX: ffffffffffffffda RBX: 00007f570d225fa0 RCX: 00007f570cf9e159 [ 60.429901][ T1109] RDX: 0000200000000000 RSI: 00000000c0105500 RDI: 0000000000000003 [ 60.437851][ T1109] RBP: 00007f570b9f7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.445803][ T1109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.453841][ T1109] R13: 00007f570d226038 R14: 00007f570d225fa0 R15: 00007ffddf69cde8 [ 60.461799][ T1109] [ 60.471403][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 60.471415][ T28] audit: type=1400 audit(1789524499.751:273): avc: denied { setattr } for pid=1104 comm="syz.8.223" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 60.504521][ T1115] netlink: 108 bytes leftover after parsing attributes in process `syz.0.227'. [ 60.533424][ T1115] tipc: Enabling of bearer rejected, failed to enable media [ 60.586674][ T1120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 60.602266][ T1120] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.625515][ T512] EXT4-fs (loop8): unmounting filesystem. [ 60.654443][ T290] EXT4-fs (loop0): unmounting filesystem. [ 60.667116][ T1125] fuse: Bad value for 'rootmode' [ 60.700113][ T1131] 9pnet_fd: Insufficient options for proto=fd [ 60.704252][ T1127] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.718636][ T1127] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.722558][ T1129] exfat: Deprecated parameter 'utf8' [ 60.727830][ T1127] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 60.734228][ T1129] exfat: Deprecated parameter 'namecase' [ 60.746601][ T1127] System zones: 0-1, 3-36 [ 60.751878][ T1129] exfat: Deprecated parameter 'namecase' [ 60.762341][ T1129] exfat: Deprecated parameter 'utf8' [ 60.771403][ T1127] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 60.779236][ T1129] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d) [ 60.839000][ T6] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 60.851813][ T1138] set_capacity_and_notify: 4 callbacks suppressed [ 60.851830][ T1138] loop0: detected capacity change from 0 to 4096 [ 60.878319][ T1138] EXT4-fs: Ignoring removed orlov option [ 60.889598][ T1138] EXT4-fs (loop0): Test dummy encryption mode enabled [ 60.897723][ T1138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 60.909330][ T1138] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 61.003307][ T28] audit: type=1400 audit(1789524500.275:274): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.074608][ T290] EXT4-fs (loop0): unmounting filesystem. [ 61.138796][ T28] audit: type=1400 audit(1789524500.331:275): avc: denied { remove_name } for pid=290 comm="syz-executor" name="sys" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.266704][ T6] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.277822][ T6] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 61.289098][ T6] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.302057][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 61.308712][ T6] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 61.317950][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.331646][ T6] usb 4-1: config 0 descriptor?? [ 61.336911][ T1121] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.609475][ T507] EXT4-fs (loop7): unmounting filesystem. [ 61.749127][ T1158] fuse: Bad value for 'rootmode' [ 61.757453][ T1159] loop7: detected capacity change from 0 to 1024 [ 61.783226][ T6] input: HID 0079:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0079:0006.0008/input/input5 [ 61.785705][ C1] Adjusting tsc more than 11% (6082658 vs 8464021) [ 61.801148][ T1159] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 61.809768][ T1159] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.850135][ T507] EXT4-fs (loop7): unmounting filesystem. [ 61.877707][ T6] dragonrise 0003:0079:0006.0008: input,hidraw0: USB HID v0.00 Joystick [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 61.900447][ T6] dragonrise 0003:0079:0006.0008: not enough values in the field [ 61.917331][ T6] dragonrise 0003:0079:0006.0008: force feedback init failed [ 61.962413][ T1163] device syzkaller0 entered promiscuous mode [ 61.998393][ T1163] tipc: Started in network mode [ 62.003501][ T1163] tipc: Node identity 96d25d01a932, cluster identity 4711 [ 62.010701][ T1163] tipc: Enabled bearer , priority 0 [ 62.049599][ T1163] tipc: Resetting bearer [ 62.058455][ T6] usb 4-1: USB disconnect, device number 5 [ 62.064777][ T1163] tipc: Disabling bearer [ 62.086463][ T1165] device syzkaller0 entered promiscuous mode [ 62.094416][ T1165] tipc: Started in network mode [ 62.099432][ T1165] tipc: Node identity 9e61eba52ae3, cluster identity 4711 [ 62.106629][ T1165] tipc: Enabled bearer , priority 0 [ 62.115209][ T1165] tipc: Resetting bearer [ 62.129559][ T1174] loop6: detected capacity change from 0 to 256 [ 62.137409][ T1165] tipc: Resetting bearer [ 62.144795][ T1165] tipc: Disabling bearer [ 62.152000][ T28] audit: type=1400 audit(1789524501.292:276): avc: denied { bind } for pid=1173 comm="syz.6.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.191732][ T1176] netlink: 52 bytes leftover after parsing attributes in process `syz.6.247'. [ 62.208273][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.215462][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.229709][ T1182] netlink: 'syz.7.250': attribute type 16 has an invalid length. [ 62.239456][ T1182] netlink: 'syz.7.250': attribute type 17 has an invalid length. [ 62.251376][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.258736][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.266144][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.284402][ T1184] netlink: 'syz.6.251': attribute type 12 has an invalid length. [ 62.292522][ T1184] netlink: 'syz.6.251': attribute type 29 has an invalid length. [ 62.300956][ T1184] netlink: 148 bytes leftover after parsing attributes in process `syz.6.251'. [ 62.310479][ T1184] netlink: 59 bytes leftover after parsing attributes in process `syz.6.251'. [ 62.322035][ T28] audit: type=1400 audit(1789524501.427:277): avc: denied { unlink } for pid=1183 comm="syz.6.251" name="#1" dev="tmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 62.344324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 62.357894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.366370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 62.374364][ T28] audit: type=1400 audit(1789524501.451:278): avc: denied { read write } for pid=1186 comm="syz.6.252" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.398345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.406803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.415324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.423430][ T28] audit: type=1400 audit(1789524501.451:279): avc: denied { open } for pid=1186 comm="syz.6.252" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.427766][ T1182] loop7: detected capacity change from 0 to 40427 [ 62.449079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.462195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.468013][ T1182] F2FS-fs (loop7): fault_injection options not supported [ 62.470497][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 62.477737][ T1182] F2FS-fs (loop7): fault_type options not supported [ 62.484954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 62.491713][ T1182] F2FS-fs (loop7): invalid crc value [ 62.504621][ T1182] F2FS-fs (loop7): Found nat_bits in checkpoint [ 62.528002][ T1182] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 62.543069][ T28] audit: type=1400 audit(1789524501.603:280): avc: denied { rename } for pid=1181 comm="syz.7.250" name="#3" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.566856][ T28] audit: type=1400 audit(1789524501.611:281): avc: denied { unlink } for pid=1181 comm="syz.7.250" name="#3" dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.583929][ T1197] fuse: Bad value for 'rootmode' [ 62.589222][ T28] audit: type=1400 audit(1789524501.611:282): avc: denied { unlink } for pid=1181 comm="syz.7.250" name="#4" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.615705][ T1199] loop0: detected capacity change from 0 to 1024 [ 62.635454][ T1199] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.695856][ T507] syz-executor: attempt to access beyond end of device [ 62.695856][ T507] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 62.710146][ T507] syz-executor: attempt to access beyond end of device [ 62.710146][ T507] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 62.768705][ T8] kworker/u4:0: attempt to access beyond end of device [ 62.768705][ T8] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 62.784283][ T1219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 62.800597][ T1219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 62.809736][ T1219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 62.818969][ T1219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 62.830877][ T1219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 62.841197][ T323] tipc: Left network mode [ 62.846373][ T1219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.259'. [ 62.859732][ T1227] loop0: detected capacity change from 0 to 512 [ 62.902765][ T379] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.975268][ T1233] loop3: detected capacity change from 0 to 1024 [ 63.028024][ T1233] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.101384][ T1239] device gretap0 entered promiscuous mode [ 63.128158][ T1239] 0ªî{X¹¦: renamed from gretap0 [ 63.133904][ T1239] device 30ªî{X¹¦ left promiscuous mode [ 63.140648][ T1239] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 63.175061][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.182114][ T1237] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.189620][ T1237] device bridge_slave_0 entered promiscuous mode [ 63.199637][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.206788][ T1237] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.214778][ T1237] device bridge_slave_1 entered promiscuous mode [ 63.290163][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.297243][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.304527][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.311602][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.340919][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.348753][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.356889][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.370124][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.378615][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.387037][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.394118][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.406547][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.419108][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.429094][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.436245][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.441737][ T1246] loop6: detected capacity change from 0 to 512 [ 63.474200][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.483700][ T1246] loop6: detected capacity change from 0 to 128 [ 63.487590][ T704] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.490147][ T703] Bluetooth: hci0: command 0x1003 tx timeout [ 63.502211][ T6] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 63.507363][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.517886][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.539606][ T1246] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.539857][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.612520][ T323] device bridge_slave_1 left promiscuous mode [ 63.620804][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.639560][ T323] device bridge_slave_0 left promiscuous mode [ 63.661806][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.689191][ T323] device veth1_macvtap left promiscuous mode [ 63.721561][ T1253] loop8: detected capacity change from 0 to 512 [ 63.725218][ T323] device veth0_vlan left promiscuous mode [ 63.730300][ T1255] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 63.743631][ T1255] overlayfs: missing 'lowerdir' [ 63.751136][ T6] usb 4-1: Invalid ep0 maxpacket: 64 [ 63.759003][ T1253] EXT4-fs error (device loop8): ext4_map_blocks:637: inode #11: block 327694: comm syz.8.270: lblock 0 mapped to illegal pblock 327694 (length 1) [ 63.820417][ T1253] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.838999][ T1253] EXT4-fs (loop8): 1 orphan inode deleted [ 63.884186][ T1261] 9pnet_fd: Insufficient options for proto=fd [ 63.922292][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.931256][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.944149][ T6] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 63.949995][ T1237] device veth0_vlan entered promiscuous mode [ 63.983560][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.999096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.014534][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.022319][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.033992][ T1267] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.049699][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.058560][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.087958][ T1237] device veth1_macvtap entered promiscuous mode [ 64.118561][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.126571][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.137626][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.146126][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.155683][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.197492][ T6] usb 4-1: Invalid ep0 maxpacket: 64 [ 64.202980][ T6] usb usb4-port1: attempt power cycle [ 64.203647][ T1281] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.219326][ T1281] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 64.245444][ T1284] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 64.268915][ T1284] overlayfs: missing 'lowerdir' [ 64.321770][ T1285] netlink: 'syz.8.278': attribute type 2 has an invalid length. [ 64.348476][ T1281] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 64.504396][ T459] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 64.721243][ T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 65.115977][ T459] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.153677][ T459] usb 7-1: config 0 interface 0 has no altsetting 0 [ 65.160484][ T459] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 65.171622][ T459] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.198158][ T24] usb 9-1: config 0 has an invalid interface number: 238 but max is 0 [ 65.286824][ T459] usb 7-1: config 0 descriptor?? [ 65.292672][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.304326][ T24] usb 9-1: config 0 has no interface number 0 [ 65.313458][ T24] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 65.324787][ T24] usb 9-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 65.333548][ T24] usb 9-1: Product: syz [ 65.337966][ T24] usb 9-1: Manufacturer: syz [ 65.342566][ T24] usb 9-1: SerialNumber: syz [ 65.352669][ T24] usb 9-1: config 0 descriptor?? [ 65.539875][ T459] usbhid 7-1:0.0: can't add hid device: -71 [ 65.545889][ T459] usbhid: probe of 7-1:0.0 failed with error -71 [ 65.556230][ T459] usb 7-1: USB disconnect, device number 6 [ 65.591635][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 65.800150][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.808272][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 65.818384][ T24] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 65.827546][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.835572][ T24] usb 1-1: Product: syz [ 65.839718][ T24] usb 1-1: Manufacturer: syz [ 65.844320][ T24] usb 1-1: SerialNumber: syz [ 65.901923][ T293] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 66.039910][ T6] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 66.074707][ T6] usb 4-1: Invalid ep0 maxpacket: 64 [ 66.123868][ T293] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.125323][ T1295] EXT4-fs (loop6): bad block size 16384 [ 66.138895][ T293] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.150643][ T293] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.152362][ T397] udevd[397]: incorrect ext4 checksum on /dev/loop6 [ 66.163838][ T293] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.175190][ T397] udevd[397]: incorrect ext4 checksum on /dev/loop6 [ 66.179724][ T293] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.194709][ T293] usb 10-1: config 0 descriptor?? [ 66.246738][ T6] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 66.259280][ T1297] Illegal XDP return value 4294967277 on prog (id 41) dev syz_tun, expect packet loss! [ 66.282122][ T6] usb 4-1: Invalid ep0 maxpacket: 64 [ 66.289394][ T6] usb usb4-port1: unable to enumerate USB device [ 66.305917][ T1170] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.478005][ T1302] EXT4-fs mount: 12 callbacks suppressed [ 66.478022][ T1302] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 66.492299][ T1302] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.510837][ T429] EXT4-fs (loop6): unmounting filesystem. [ 66.545767][ T1312] 9pnet_fd: Insufficient options for proto=fd [ 66.566794][ T1314] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 66.575813][ T1314] overlayfs: missing 'lowerdir' [ 66.655020][ T293] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 66.670525][ T293] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 66.672889][ T28] kauditd_printk_skb: 5822 callbacks suppressed [ 66.672905][ T28] audit: type=1400 audit(1789524761.088:6105): avc: denied { bind } for pid=1317 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.718546][ T28] audit: type=1400 audit(1789524761.088:6106): avc: denied { setopt } for pid=1317 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.828375][ T1322] netlink: 'syz.6.293': attribute type 2 has an invalid length. [ 66.874163][ T24] usb 1-1: MIDIStreaming interface descriptor not found [ 67.141114][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 67.184800][ T1293] input: syz0 as /devices/virtual/input/input6 [ 67.225336][ T1324] overlayfs: missing 'lowerdir' [ 67.393638][ T24] usb 7-1: config 0 has an invalid interface number: 238 but max is 0 [ 67.593300][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.604328][ T6] usb 9-1: USB disconnect, device number 4 [ 67.627878][ T1291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.640803][ T1291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.648628][ T24] usb 7-1: config 0 has no interface number 0 [ 67.661222][ T474] usb 10-1: USB disconnect, device number 2 [ 67.669172][ T24] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 67.690375][ T24] usb 7-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 67.699133][ T24] usb 7-1: Product: syz [ 67.703373][ T24] usb 7-1: Manufacturer: syz [ 67.708295][ T24] usb 7-1: SerialNumber: syz [ 67.717452][ T24] usb 7-1: config 0 descriptor?? [ 67.723073][ T41] usb 1-1: USB disconnect, device number 6 [ 67.912045][ T1343] set_capacity_and_notify: 6 callbacks suppressed [ 67.912058][ T1343] loop8: detected capacity change from 0 to 1024 [ 67.958032][ T1343] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 67.966732][ T1343] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.982203][ T1320] loop6: detected capacity change from 0 to 1024 [ 67.992860][ T512] EXT4-fs (loop8): unmounting filesystem. [ 67.999836][ T1320] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 68.032563][ T1355] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.047346][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 68.055699][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.064032][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 68.072134][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.080462][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.088713][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.097054][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.105163][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.115124][ T1355] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.143108][ T28] audit: type=1400 audit(1789524762.453:6107): avc: denied { bind } for pid=1356 comm="syz.8.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.235720][ T474] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 68.246794][ T28] audit: type=1400 audit(1789524762.555:6108): avc: denied { read } for pid=1364 comm="syz.0.306" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.251978][ T1365] binder: 1364:1365 unknown command 0 [ 68.269890][ T28] audit: type=1400 audit(1789524762.555:6109): avc: denied { open } for pid=1364 comm="syz.0.306" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.274934][ T1365] binder: 1364:1365 ioctl c0306201 2000000004c0 returned -22 [ 68.299026][ T28] audit: type=1400 audit(1789524762.555:6110): avc: denied { ioctl } for pid=1364 comm="syz.0.306" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.331537][ T28] audit: type=1400 audit(1789524762.555:6111): avc: denied { set_context_mgr } for pid=1364 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 68.380677][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.431977][ T474] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 30768, setting to 1024 [ 68.448898][ T474] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 68.533082][ T474] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 68.542931][ T474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.551267][ T474] usb 4-1: Product: syz [ 68.555578][ T474] usb 4-1: Manufacturer: syz [ 68.560196][ T474] usb 4-1: SerialNumber: syz [ 68.568562][ T1346] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 68.762853][ T1374] loop0: detected capacity change from 0 to 1024 [ 69.212506][ T474] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 69.269918][ T1374] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.610233][ T1346] device ip6tnl1 entered promiscuous mode [ 69.617161][ T28] audit: type=1400 audit(1789524763.819:6112): avc: denied { read write } for pid=1345 comm="syz.3.300" name="lp0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 69.641383][ T28] audit: type=1400 audit(1789524763.837:6113): avc: denied { open } for pid=1345 comm="syz.3.300" path="/dev/usb/lp0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 69.731527][ T28] audit: type=1400 audit(1789524763.911:6114): avc: denied { write } for pid=1345 comm="syz.3.300" name="pfkey" dev="proc" ino=4026532450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 69.755492][ T293] usb 4-1: USB disconnect, device number 10 [ 69.764334][ T290] EXT4-fs (loop0): unmounting filesystem. [ 69.765034][ T293] usblp0: removed [ 69.794963][ T1390] loop0: detected capacity change from 0 to 2048 [ 69.821934][ T1390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 69.830881][ T1390] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.880652][ T474] usb 7-1: USB disconnect, device number 7 [ 69.887512][ T429] EXT4-fs (loop6): unmounting filesystem. [ 69.937728][ T290] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /57/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 69.989760][ T290] EXT4-fs (loop0): unmounting filesystem. [ 70.151379][ T1401] loop0: detected capacity change from 0 to 256 [ 70.242275][ T1406] bridge0: port 3(syz_tun) entered blocking state [ 70.248740][ T1406] bridge0: port 3(syz_tun) entered disabled state [ 70.255549][ T1406] device syz_tun entered promiscuous mode [ 70.261801][ T1406] bridge0: port 3(syz_tun) entered blocking state [ 70.268257][ T1406] bridge0: port 3(syz_tun) entered forwarding state [ 70.281958][ T1406] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 70.296088][ T1406] bridge0: port 3(syz_tun) entered disabled state [ 70.304228][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.312150][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.373877][ T474] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 70.550331][ T1411] netlink: 'syz.3.320': attribute type 2 has an invalid length. [ 70.567104][ T1247] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.643526][ T474] usb 7-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 70.653397][ T523] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 70.677656][ T474] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.762522][ T474] usb 7-1: config 0 descriptor?? [ 70.893223][ T523] usb 9-1: unable to get BOS descriptor or descriptor too short [ 70.909937][ T523] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 70.945213][ T293] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 70.978408][ T523] usb 9-1: New USB device found, idVendor=0499, idProduct=1053, bcdDevice= 0.40 [ 71.024713][ T523] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.102878][ T523] usb 9-1: Product: syz [ 71.107236][ T523] usb 9-1: Manufacturer: syz [ 71.152808][ T293] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 71.178569][ T293] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.199450][ T523] usb 9-1: SerialNumber: syz [ 71.221342][ T293] usb 4-1: config 0 has no interface number 0 [ 71.229562][ T1406] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 71.238648][ T474] smartjoyplus 0003:0925:8888.000A: unknown main item tag 0x0 [ 71.307010][ T474] smartjoyplus 0003:0925:8888.000A: unknown main item tag 0x0 [ 71.314950][ T474] smartjoyplus 0003:0925:8888.000A: item fetching failed at offset 2/8 [ 71.323712][ T474] smartjoyplus 0003:0925:8888.000A: parse failed [ 71.330260][ T474] smartjoyplus: probe of 0003:0925:8888.000A failed with error -22 [ 71.338477][ T293] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 71.359698][ T293] usb 4-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 71.361317][ T1416] xt_hashlimit: size too large, truncated to 1048576 [ 71.377133][ T1419] loop9: detected capacity change from 0 to 512 [ 71.383497][ T293] usb 4-1: Product: syz [ 71.387682][ T293] usb 4-1: Manufacturer: syz [ 71.392536][ T293] usb 4-1: SerialNumber: syz [ 71.532607][ T293] usb 4-1: config 0 descriptor?? [ 71.589323][ T523] usb 9-1: MIDIStreaming interface descriptor not found [ 71.657596][ T523] usb 9-1: USB disconnect, device number 5 [ 71.665826][ T293] usb 7-1: USB disconnect, device number 8 [ 71.685124][ T1419] loop9: detected capacity change from 0 to 512 [ 71.747707][ T397] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.749282][ T1419] loop9: detected capacity change from 0 to 512 [ 71.757264][ T397] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.772707][ T397] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.789122][ T1419] loop9: detected capacity change from 0 to 512 [ 71.801323][ T1419] loop9: detected capacity change from 0 to 512 [ 71.845664][ T397] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.914729][ T1410] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 71.942718][ T397] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.029815][ T379] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.073289][ T379] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.128794][ T379] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.543015][ T1436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.592752][ T523] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 72.995074][ T523] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.063455][ T523] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 73.176207][ T523] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.215565][ T523] usb 7-1: config 0 interface 0 has no altsetting 0 [ 73.227454][ T379] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.241207][ T290] EXT4-fs (loop0): unmounting filesystem. [ 73.279081][ T523] usb 7-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 73.308389][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 73.308402][ T28] audit: type=1400 audit(1789524767.224:6117): avc: denied { bind } for pid=1449 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.315566][ T523] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.341900][ T1450] usb usb9: usbfs: process 1450 (syz.0.328) did not claim interface 14 before use [ 73.369588][ T1452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.419783][ T523] usb 7-1: config 0 descriptor?? [ 73.427222][ T1452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.435127][ T1433] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 73.929628][ T1456] set_capacity_and_notify: 18 callbacks suppressed [ 73.929654][ T1456] loop0: detected capacity change from 0 to 256 [ 73.945824][ T475] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 73.960011][ T41] usb 4-1: USB disconnect, device number 11 [ 74.002970][ T1456] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.013695][ T1456] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 74.044996][ T1456] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 74.083134][ T288] EXT4-fs (loop3): unmounting filesystem. [ 74.218228][ T475] usb 10-1: Using ep0 maxpacket: 8 [ 74.225481][ T475] usb 10-1: config 1 descriptor has 1 excess byte, ignoring [ 74.402686][ T475] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7 [ 74.424238][ T523] usbhid 7-1:0.0: can't add hid device: -71 [ 74.427930][ T1458] loop3: detected capacity change from 0 to 256 [ 74.430191][ T523] usbhid: probe of 7-1:0.0 failed with error -71 [ 74.445034][ T475] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.476002][ T523] usb 7-1: USB disconnect, device number 9 [ 74.490570][ T1458] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.490751][ T475] usb 10-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 74.521160][ T1458] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 74.521462][ T475] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.546227][ T1458] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 74.554381][ T475] usb 10-1: Product: syz [ 74.587400][ T28] audit: type=1400 audit(1789524768.405:6118): avc: denied { read } for pid=1457 comm="syz.3.330" path="/53/file2/file0/file1" dev="loop3" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.589435][ T475] usb 10-1: Manufacturer: syz [ 74.622885][ T475] usb 10-1: SerialNumber: syz [ 74.628377][ T28] audit: type=1400 audit(1789524768.423:6119): avc: denied { rename } for pid=1457 comm="syz.3.330" name="file0" dev="loop3" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.754516][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.764270][ T475] usb 10-1: can't set config #1, error -71 [ 74.776110][ T475] usb 10-1: USB disconnect, device number 3 [ 74.880303][ T1464] device syzkaller0 entered promiscuous mode [ 74.889027][ T1464] tipc: Started in network mode [ 74.894238][ T1464] tipc: Node identity e69b2277165d, cluster identity 4711 [ 74.901716][ T1464] tipc: Enabled bearer , priority 0 [ 74.916568][ T1464] tipc: Resetting bearer [ 74.944335][ T523] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 75.064765][ T1464] tipc: Disabling bearer [ 75.152359][ T1469] loop6: detected capacity change from 0 to 256 [ 75.163642][ T1469] FAT-fs (loop6): Directory bread(block 64) failed [ 75.170295][ T1469] FAT-fs (loop6): Directory bread(block 65) failed [ 75.177190][ T1469] FAT-fs (loop6): Directory bread(block 66) failed [ 75.183987][ T1469] FAT-fs (loop6): Directory bread(block 67) failed [ 75.190641][ T1469] FAT-fs (loop6): Directory bread(block 68) failed [ 75.211796][ T1469] FAT-fs (loop6): Directory bread(block 69) failed [ 75.225102][ T1469] FAT-fs (loop6): Directory bread(block 70) failed [ 75.255052][ T1469] FAT-fs (loop6): Directory bread(block 71) failed [ 75.269227][ T1469] FAT-fs (loop6): Directory bread(block 72) failed [ 75.283270][ T1469] FAT-fs (loop6): Directory bread(block 73) failed [ 75.374527][ T28] audit: type=1400 audit(1789524769.125:6120): avc: denied { getopt } for pid=1466 comm="syz.6.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.399484][ T523] usb 4-1: Using ep0 maxpacket: 16 [ 75.406223][ T523] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 31, changing to 7 [ 75.419694][ T523] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 75.429086][ T523] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.438638][ T523] usb 4-1: Product: syz [ 75.443011][ T523] usb 4-1: Manufacturer: syz [ 75.447787][ T523] usb 4-1: SerialNumber: syz [ 75.683819][ T523] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 75.695555][ T523] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 75.706118][ T523] usb 4-1: USB disconnect, device number 12 [ 75.706870][ T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.800449][ T6] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 75.996928][ T6] usb 7-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 76.006031][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.033184][ T6] usb 7-1: config 0 descriptor?? [ 76.058802][ T28] audit: type=1400 audit(1789524769.752:6121): avc: denied { ioctl } for pid=1482 comm="syz.8.339" path="socket:[21987]" dev="sockfs" ino=21987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.323474][ T28] audit: type=1400 audit(1789524770.001:6122): avc: denied { setopt } for pid=1488 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.474059][ T6] smartjoyplus 0003:0925:8888.000B: unknown main item tag 0x0 [ 76.478013][ T1483] loop8: detected capacity change from 0 to 131072 [ 76.482138][ T6] smartjoyplus 0003:0925:8888.000B: unknown main item tag 0x0 [ 76.488943][ T1483] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 76.495890][ T6] smartjoyplus 0003:0925:8888.000B: item fetching failed at offset 2/8 [ 76.502956][ T1483] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 76.511229][ T6] smartjoyplus 0003:0925:8888.000B: parse failed [ 76.519571][ T1483] F2FS-fs (loop8): invalid crc value [ 76.525645][ T6] smartjoyplus: probe of 0003:0925:8888.000B failed with error -22 [ 76.538306][ T1483] F2FS-fs (loop8): Found nat_bits in checkpoint [ 76.572534][ T1483] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 76.579692][ T1483] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 76.594131][ T1500] device syzkaller0 entered promiscuous mode [ 76.602342][ T28] audit: type=1400 audit(1789524770.250:6123): avc: denied { map } for pid=1482 comm="syz.8.339" path="pipe:[16364]" dev="pipefs" ino=16364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 76.712246][ T41] usb 7-1: USB disconnect, device number 10 [ 76.981782][ T1247] Bluetooth: hci0: command 0x1003 tx timeout [ 76.981779][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.099315][ T1505] __nla_validate_parse: 3 callbacks suppressed [ 77.099331][ T1505] netlink: 680 bytes leftover after parsing attributes in process `syz.0.346'. [ 77.117191][ T28] audit: type=1400 audit(1789524770.730:6124): avc: denied { ioctl } for pid=1504 comm="syz.0.346" path="socket:[22024]" dev="sockfs" ino=22024 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.144018][ T1505] syz.0.346 (1505) used greatest stack depth: 21256 bytes left [ 77.164619][ T519] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.171091][ T1509] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.321260][ T1520] netlink: 'syz.6.353': attribute type 32 has an invalid length. [ 77.477147][ T1527] netlink: 'syz.3.351': attribute type 2 has an invalid length. [ 77.783879][ T523] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 77.941187][ T28] audit: type=1400 audit(1789524771.496:6125): avc: denied { create } for pid=1530 comm="syz.8.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.002265][ T1531] batadv_slave_0: Caught tx_queue_len zero misconfig [ 78.023740][ T523] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 78.045771][ T523] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.102856][ T28] audit: type=1400 audit(1789524771.533:6126): avc: denied { setopt } for pid=1530 comm="syz.8.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.139146][ T1531] FAULT_INJECTION: forcing a failure. [ 78.139146][ T1531] name failslab, interval 1, probability 0, space 0, times 0 [ 78.171568][ T523] usb 4-1: config 0 has no interface number 0 [ 78.203530][ T1531] CPU: 0 PID: 1531 Comm: syz.8.357 Tainted: G W syzkaller #0 [ 78.212329][ T1531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.212394][ T523] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 78.222389][ T1531] Call Trace: [ 78.222400][ T1531] [ 78.222409][ T1531] __dump_stack+0x21/0x24 [ 78.222446][ T1531] dump_stack_lvl+0x110/0x170 [ 78.246614][ T1531] ? __cfi_dump_stack_lvl+0x8/0x8 [ 78.251661][ T1531] ? __request_module+0x2a7/0x910 [ 78.256697][ T1531] dump_stack+0x15/0x24 [ 78.260866][ T1531] should_fail_ex+0x3bf/0x510 [ 78.265554][ T1531] __should_failslab+0xac/0xf0 [ 78.270336][ T1531] should_failslab+0x9/0x20 [ 78.274352][ T523] usb 4-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 78.275023][ T1531] __kmem_cache_alloc_node+0x3d/0x2d0 [ 78.288908][ T1531] ? __request_module+0x2a7/0x910 [ 78.293951][ T1531] ? __request_module+0x2a7/0x910 [ 78.297541][ T523] usb 4-1: Product: syz [ 78.298981][ T1531] kmalloc_trace+0x29/0xb0 [ 78.299003][ T1531] ? inet6_create+0x2eb/0x1060 [ 78.308925][ T523] usb 4-1: Manufacturer: syz [ 78.312278][ T1531] __request_module+0x2a7/0x910 [ 78.321705][ T1531] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 78.325055][ T523] usb 4-1: SerialNumber: syz [ 78.327456][ T1531] ? __cfi___request_module+0x10/0x10 [ 78.327478][ T1531] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 78.327499][ T1531] ? irqentry_exit+0x37/0x40 [ 78.344245][ T523] usb 4-1: config 0 descriptor?? [ 78.348034][ T1531] ? __cfi_selinux_inode_alloc_security+0x10/0x10 [ 78.348068][ T1531] ? __kasan_check_write+0x14/0x20 [ 78.348085][ T1531] ? _raw_spin_lock+0x94/0xf0 [ 78.369156][ T1531] ? __cfi__raw_spin_lock+0x10/0x10 [ 78.374454][ T1531] inet6_create+0x2eb/0x1060 [ 78.379050][ T1531] __sock_create+0x39e/0x7c0 [ 78.383658][ T1531] __sys_socket+0xcd/0x1a0 [ 78.388094][ T1531] __x64_sys_socket+0x7a/0x90 [ 78.392780][ T1531] x64_sys_call+0x449/0x9a0 [ 78.397290][ T1531] do_syscall_64+0x4c/0xa0 [ 78.401710][ T1531] ? clear_bhb_loop+0x30/0x80 [ 78.406407][ T1531] ? clear_bhb_loop+0x30/0x80 [ 78.411089][ T1531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.416988][ T1531] RIP: 0033:0x7f189959e159 [ 78.421399][ T1531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.441011][ T1531] RSP: 002b:00007f189a3a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 78.449435][ T1531] RAX: ffffffffffffffda RBX: 00007f1899825fa0 RCX: 00007f189959e159 [ 78.457409][ T1531] RDX: 0000000000000008 RSI: 000000000000000a RDI: 000000000000000a [ 78.465366][ T1531] RBP: 00007f189963506b R08: 0000000000000000 R09: 0000000000000000 [ 78.473318][ T1531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.481272][ T1531] R13: 00007f1899826038 R14: 00007f1899825fa0 R15: 00007ffc1307f7d8 [ 78.489258][ T1531] [ 78.718527][ T308] Bluetooth: hci1: Frame reassembly failed (-84) [ 78.772181][ T1539] device syzkaller0 entered promiscuous mode [ 78.791591][ T1539] tipc: Started in network mode [ 78.802070][ T1539] tipc: Node identity a66aaafe3a14, cluster identity 4711 [ 78.815979][ T1539] tipc: Enabled bearer , priority 0 [ 78.847070][ T1539] tipc: Resetting bearer [ 78.859380][ T1539] tipc: Disabling bearer [ 79.034168][ T1534] loop6: detected capacity change from 0 to 131072 [ 79.064721][ T1534] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945) [ 79.084369][ T1534] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 79.103166][ T1534] F2FS-fs (loop6): invalid crc value [ 79.119363][ T1534] F2FS-fs (loop6): Found nat_bits in checkpoint [ 79.156560][ T1534] F2FS-fs (loop6): Try to recover 1th superblock, ret: -30 [ 79.164053][ T1534] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 79.409412][ T704] Bluetooth: hci0: command 0x1003 tx timeout [ 79.409502][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.745398][ T576] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 79.745463][ T41] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 79.942109][ T576] usb 1-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 79.951458][ T576] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.956401][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 79.960420][ T576] usb 1-1: config 0 descriptor?? [ 79.977715][ T41] usb 7-1: config 0 interface 0 has no altsetting 0 [ 79.984413][ T41] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 79.993460][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.002879][ T41] usb 7-1: config 0 descriptor?? [ 80.095357][ T1560] device syzkaller0 entered promiscuous mode [ 80.405864][ T576] smartjoyplus 0003:0925:8888.000C: unknown main item tag 0x0 [ 80.413434][ T576] smartjoyplus 0003:0925:8888.000C: unknown main item tag 0x0 [ 80.420982][ T576] smartjoyplus 0003:0925:8888.000C: item fetching failed at offset 2/8 [ 80.429438][ T576] smartjoyplus 0003:0925:8888.000C: parse failed [ 80.435798][ T576] smartjoyplus: probe of 0003:0925:8888.000C failed with error -22 [ 80.445032][ T41] logitech 0003:046D:C294.000D: unknown main item tag 0x2 [ 80.452443][ T41] logitech 0003:046D:C294.000D: unknown main item tag 0x0 [ 80.459638][ T41] logitech 0003:046D:C294.000D: unknown main item tag 0x0 [ 80.466917][ T41] logitech 0003:046D:C294.000D: unknown main item tag 0x0 [ 80.474106][ T41] logitech 0003:046D:C294.000D: unknown main item tag 0x0 [ 80.481311][ T41] logitech 0003:046D:C294.000D: unknown main item tag 0x0 [ 80.488493][ T41] logitech 0003:046D:C294.000D: unknown main item tag 0x0 [ 80.495699][ T41] logitech 0003:046D:C294.000D: ignoring exceeding usage max [ 80.503730][ T41] logitech 0003:046D:C294.000D: item fetching failed at offset 38/40 [ 80.512025][ T41] logitech 0003:046D:C294.000D: parse failed [ 80.540109][ T41] logitech: probe of 0003:046D:C294.000D failed with error -22 [ 80.551307][ T475] usb 4-1: USB disconnect, device number 13 [ 80.627580][ T523] usb 1-1: USB disconnect, device number 7 [ 80.637255][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 80.637269][ T28] audit: type=1400 audit(1789524773.978:6128): avc: denied { read } for pid=1565 comm="syz.3.369" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 80.666445][ T28] audit: type=1400 audit(1789524773.978:6129): avc: denied { open } for pid=1565 comm="syz.3.369" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 80.697835][ T1567] loop3: detected capacity change from 0 to 512 [ 80.701477][ T576] usb 7-1: USB disconnect, device number 11 [ 80.753986][ T379] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.883369][ T1247] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 80.925864][ T1569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 80.933358][ T28] audit: type=1400 audit(1789524774.246:6130): avc: denied { ioctl } for pid=1570 comm="syz.8.371" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.959589][ T28] audit: type=1400 audit(1789524774.273:6131): avc: denied { sqpoll } for pid=1568 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.013756][ T1575] fuse: Bad value for 'fd' [ 81.182644][ T1588] loop9: detected capacity change from 0 to 1024 [ 81.197533][ T1588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.202005][ T28] audit: type=1400 audit(1789524774.504:6132): avc: denied { write } for pid=1589 comm="syz.8.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.223992][ T1588] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.225015][ T1591] netlink: 'syz.8.380': attribute type 126 has an invalid length. [ 81.237269][ T1588] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.246790][ T28] audit: type=1400 audit(1789524774.522:6133): avc: denied { read } for pid=1589 comm="syz.8.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.254273][ T1595] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 81.296556][ T1596] device syzkaller0 entered promiscuous mode [ 81.315181][ T1588] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 81.323622][ T1588] System zones: 0-1, 3-36 [ 81.335508][ T1588] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 81.339420][ T1603] loop8: detected capacity change from 0 to 256 [ 81.371296][ T1603] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.384351][ T1603] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 81.394191][ T1603] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 81.409680][ T28] audit: type=1400 audit(1789524774.698:6134): avc: denied { append } for pid=1600 comm="syz.8.383" name="file0" dev="loop8" ino=1048640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.433612][ T1237] EXT4-fs (loop9): unmounting filesystem. [ 81.544540][ T1605] netlink: 'syz.6.382': attribute type 2 has an invalid length. [ 82.294167][ T1615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.388'. [ 82.366773][ T1621] loop6: detected capacity change from 0 to 2048 [ 82.380369][ T28] audit: type=1400 audit(1789524775.593:6135): avc: denied { read } for pid=1622 comm="syz.3.391" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 82.408167][ T28] audit: type=1400 audit(1789524775.593:6136): avc: denied { open } for pid=1622 comm="syz.3.391" path="/68/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 82.416815][ T1626] fuse: Bad value for 'fd' [ 82.467357][ T28] audit: type=1400 audit(1789524775.611:6137): avc: denied { ioctl } for pid=1622 comm="syz.3.391" path="/68/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 82.470872][ T1621] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 82.513045][ T1621] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.641501][ T1648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.400'. [ 82.659593][ T1649] xt_CT: No such helper "pptp" [ 82.675141][ T1634] device syzkaller0 entered promiscuous mode [ 82.686785][ T1634] tipc: Enabled bearer , priority 0 [ 82.703578][ T1634] tipc: Resetting bearer [ 82.711437][ T1634] tipc: Disabling bearer [ 82.778406][ T1664] device syzkaller0 entered promiscuous mode [ 82.815419][ T1673] device bridge1 entered promiscuous mode [ 82.834151][ T65] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 82.942563][ T576] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 83.030596][ T65] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.038987][ T65] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.049144][ T65] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 83.058155][ T65] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.073206][ T65] usb 1-1: string descriptor 0 read error: -22 [ 83.079428][ T65] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 83.088500][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.097958][ T65] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 83.137646][ T315] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 83.146271][ T576] usb 7-1: config 1 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 83.157152][ T576] usb 7-1: config 1 interface 0 has no altsetting 0 [ 83.165186][ T576] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.174569][ T576] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.182613][ T576] usb 7-1: Product: syz [ 83.186791][ T576] usb 7-1: Manufacturer: syz [ 83.191401][ T576] usb 7-1: SerialNumber: syz [ 83.197197][ T1621] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 83.316278][ T1641] x86/PAT: syz.0.397:1641 freeing invalid memtype [mem 0xfe004000-0xfe008fff] [ 83.332800][ T315] usb 9-1: Using ep0 maxpacket: 16 [ 83.339437][ T315] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 83.350695][ T315] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.360693][ T315] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 83.374399][ T315] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 83.383731][ T315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.400975][ T315] usb 9-1: config 0 descriptor?? [ 83.420359][ T315] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 83.423185][ T1621] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 83.448027][ T576] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 83.467726][ T576] usb 7-1: USB disconnect, device number 12 [ 83.491987][ T65] usb 1-1: 0:2 : does not exist [ 83.503535][ T65] usb 1-1: USB disconnect, device number 8 [ 83.524029][ T1689] device syzkaller0 entered promiscuous mode [ 83.532332][ T1689] tipc: Enabled bearer , priority 0 [ 83.540343][ T1689] tipc: Resetting bearer [ 83.558197][ T1689] tipc: Disabling bearer [ 83.959366][ T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.978573][ T1703] overlayfs: missing 'lowerdir' [ 84.029554][ T429] EXT4-fs (loop6): unmounting filesystem. [ 84.046379][ T1706] loop6: detected capacity change from 0 to 512 [ 84.062896][ T1641] x86/PAT: syz.0.397:1641 freeing invalid memtype [mem 0xfe000000-0xfe003fff] [ 84.102607][ T1712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.419'. [ 84.389175][ T379] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.687881][ T1730] loop6: detected capacity change from 0 to 512 [ 84.696742][ T1730] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 85.528432][ T379] udevd[379]: incorrect ext4 checksum on /dev/loop6 [ 85.623210][ T1734] loop9: detected capacity change from 0 to 128 [ 85.652186][ T1734] syz.9.427: attempt to access beyond end of device [ 85.652186][ T1734] loop9: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 85.675440][ T1734] syz.9.427: attempt to access beyond end of device [ 85.675440][ T1734] loop9: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 85.689074][ T1734] Buffer I/O error on dev loop9, logical block 70, lost async page write [ 85.697811][ T1734] syz.9.427: attempt to access beyond end of device [ 85.697811][ T1734] loop9: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 85.711478][ T1734] Buffer I/O error on dev loop9, logical block 71, lost async page write [ 85.720159][ T1734] syz.9.427: attempt to access beyond end of device [ 85.720159][ T1734] loop9: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 85.738383][ T1734] Buffer I/O error on dev loop9, logical block 72, lost async page write [ 85.770666][ T1738] device syzkaller0 entered promiscuous mode [ 85.781468][ T1734] syz.9.427: attempt to access beyond end of device [ 85.781468][ T1734] loop9: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 85.810856][ T1732] device syzkaller0 entered promiscuous mode [ 85.817878][ T1739] syz.9.427: attempt to access beyond end of device [ 85.817878][ T1739] loop9: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 85.837887][ T1730] loop6: detected capacity change from 0 to 131072 [ 85.845935][ T1730] F2FS-fs (loop6): Test dummy encryption mode enabled [ 85.853249][ T1730] F2FS-fs (loop6): invalid crc value [ 85.854314][ T1739] Buffer I/O error on dev loop9, logical block 71, lost async page write [ 85.867591][ T1739] syz.9.427: attempt to access beyond end of device [ 85.867591][ T1739] loop9: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 85.874424][ T1730] F2FS-fs (loop6): Found nat_bits in checkpoint [ 85.881586][ T1739] Buffer I/O error on dev loop9, logical block 72, lost async page write [ 85.896681][ T1739] syz.9.427: attempt to access beyond end of device [ 85.896681][ T1739] loop9: rw=2049, sector=146, nr_sectors = 2 limit=128 [ 85.910348][ T1739] Buffer I/O error on dev loop9, logical block 73, lost async page write [ 85.913995][ T1730] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 86.091984][ T1761] loop0: detected capacity change from 0 to 1024 [ 86.105871][ T1761] EXT4-fs: dax option not supported [ 86.147010][ T523] usb 9-1: USB disconnect, device number 6 [ 86.151587][ T1763] netlink: 108 bytes leftover after parsing attributes in process `syz.8.436'. [ 86.174243][ T1763] tipc: Enabling of bearer rejected, failed to enable media [ 86.282791][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 86.282805][ T28] audit: type=1400 audit(1789524779.191:6142): avc: denied { read append } for pid=1769 comm="syz.9.439" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.313922][ T28] audit: type=1400 audit(1789524779.191:6143): avc: denied { open } for pid=1769 comm="syz.9.439" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.420652][ T1783] overlayfs: missing 'lowerdir' [ 86.488614][ T1778] device syzkaller0 entered promiscuous mode [ 86.751170][ T1797] netlink: 'syz.9.446': attribute type 8 has an invalid length. [ 86.773787][ T1799] loop9: detected capacity change from 0 to 256 [ 86.780470][ T1799] exfat: Deprecated parameter 'utf8' [ 86.786304][ T1799] exfat: Deprecated parameter 'namecase' [ 86.792292][ T1799] exfat: Deprecated parameter 'namecase' [ 86.800532][ T1799] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 87.819600][ T523] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 87.909328][ T28] audit: type=1400 audit(1789524780.695:6144): avc: denied { mounton } for pid=1819 comm="syz.9.456" path="/27/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 87.936124][ T1821] device syzkaller0 entered promiscuous mode [ 87.941557][ T1820] loop9: detected capacity change from 0 to 512 [ 87.982450][ T1820] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 87.992315][ T1820] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 88.043679][ T1818] loop3: detected capacity change from 0 to 40427 [ 88.060073][ T1818] F2FS-fs (loop3): invalid crc value [ 88.073578][ T1820] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 88.074904][ T1818] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.082340][ T1820] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 88.096227][ T1820] EXT4-fs (loop9): failed to initialize system zone (-117) [ 88.102860][ T523] usb 7-1: unable to get BOS descriptor or descriptor too short [ 88.103748][ T1820] EXT4-fs (loop9): mount failed [ 88.116694][ T523] usb 7-1: not running at top speed; connect to a high speed hub [ 88.132698][ T1818] F2FS-fs (loop3): Start checkpoint disabled! [ 88.133035][ T523] usb 7-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 88.139584][ T1818] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 88.147940][ T523] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.155305][ T1818] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 88.163179][ T523] usb 7-1: Product: syz [ 88.174803][ T523] usb 7-1: Manufacturer: syz [ 88.185131][ T523] usb 7-1: SerialNumber: syz [ 88.186022][ T1829] loop8: detected capacity change from 0 to 128 [ 88.199565][ T1829] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 88.214910][ T1829] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 88.223644][ T1829] ext2 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.335300][ T28] audit: type=1400 audit(1789524781.083:6145): avc: denied { accept } for pid=1833 comm="syz.9.459" path=2F32382FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 88.441167][ T519] kworker/u4:7: attempt to access beyond end of device [ 88.441167][ T519] loop3: rw=1, sector=53248, nr_sectors = 128 limit=40427 [ 88.450250][ T28] audit: type=1400 audit(1789524781.184:6146): avc: denied { getopt } for pid=1836 comm="syz.9.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.455464][ T519] kworker/u4:7: attempt to access beyond end of device [ 88.455464][ T519] loop3: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 88.519835][ T1842] loop9: detected capacity change from 0 to 512 [ 88.570435][ T28] audit: type=1400 audit(1789524781.304:6147): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 88.599654][ T1842] can0: slcan on ttyS3. [ 88.625816][ T28] audit: type=1400 audit(1789524781.323:6148): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.664891][ T28] audit: type=1400 audit(1789524781.323:6149): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=5106 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.695006][ T28] audit: type=1400 audit(1789524781.323:6150): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5106 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.719821][ T28] audit: type=1400 audit(1789524781.323:6151): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5106 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.994160][ T1859] loop0: detected capacity change from 0 to 40427 [ 89.003763][ T1859] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 89.010922][ T1859] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 89.023326][ T1859] F2FS-fs (loop0): invalid crc value [ 89.033201][ T1852] device syzkaller0 entered promiscuous mode [ 89.045170][ T1859] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.053171][ T1852] tipc: Started in network mode [ 89.065886][ T1852] tipc: Node identity 7610384b9a3e, cluster identity 4711 [ 89.076279][ T1852] tipc: Enabled bearer , priority 0 [ 89.084195][ T1842] can0 (unregistered): slcan off ttyS3. [ 89.086188][ T1859] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 89.104272][ T523] usb 7-1: MIDIStreaming interface descriptor not found [ 89.120370][ T1859] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.166963][ T1852] tipc: Resetting bearer [ 89.184804][ T1852] tipc: Disabling bearer [ 89.197727][ T10] tipc: Subscription rejected, illegal request [ 90.186456][ T1814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.243549][ T1814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.302542][ T6] usb 7-1: USB disconnect, device number 13 [ 90.333975][ T1247] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.417135][ T1912] loop0: detected capacity change from 0 to 40427 [ 90.437650][ T1912] binder: 1911:1912 ioctl c00c620f 0 returned -14 [ 90.539174][ T1932] loop3: detected capacity change from 0 to 2048 [ 90.564623][ T1932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 90.574250][ T1932] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.608283][ T288] EXT4-fs (loop3): unmounting filesystem. [ 90.611112][ T1934] device syzkaller0 entered promiscuous mode [ 90.761004][ T1937] xt_CT: No such helper "pptp" [ 91.124251][ T1945] loop6: detected capacity change from 0 to 131072 [ 91.130964][ T1912] syz.0.473 (1912) used greatest stack depth: 18504 bytes left [ 91.139509][ T1945] F2FS-fs (loop6): Zoned block device path is missing [ 91.146435][ T1945] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 91.157354][ T1945] F2FS-fs (loop6): invalid crc value [ 91.166195][ T1945] F2FS-fs (loop6): Found nat_bits in checkpoint [ 91.190065][ T1945] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 91.197250][ T1945] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 91.450182][ T523] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 91.467364][ T512] EXT4-fs (loop8): unmounting filesystem. [ 91.535238][ T1962] overlayfs: missing 'lowerdir' [ 91.568699][ T1968] netlink: 'syz.3.488': attribute type 3 has an invalid length. [ 91.588388][ T1970] loop3: detected capacity change from 0 to 512 [ 91.603973][ T1970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.613066][ T1970] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.650458][ T288] EXT4-fs (loop3): unmounting filesystem. [ 91.658228][ T523] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.669598][ T1975] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.676492][ T523] usb 1-1: not running at top speed; connect to a high speed hub [ 91.684956][ T1975] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 91.694573][ T1975] EXT4-fs (loop3): 1 truncate cleaned up [ 91.695081][ T523] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 91.701205][ T1975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.709381][ T523] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.726346][ T523] usb 1-1: Product: syz [ 91.730558][ T523] usb 1-1: Manufacturer: syz [ 91.735222][ T523] usb 1-1: SerialNumber: syz [ 91.989167][ T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 91.996789][ T1908] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 92.199648][ T1908] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.210853][ T6] usb 10-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 92.220040][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.228153][ T1908] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.238420][ T1908] usb 9-1: config 0 interface 0 has no altsetting 0 [ 92.245293][ T6] usb 10-1: config 0 descriptor?? [ 92.250439][ T1908] usb 9-1: New USB device found, idVendor=056a, idProduct=00d9, bcdDevice= 0.00 [ 92.259557][ T1908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.284438][ T1908] usb 9-1: config 0 descriptor?? [ 92.390117][ T1980] device syzkaller0 entered promiscuous mode [ 92.455609][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 92.455622][ T28] audit: type=1400 audit(1789524784.884:6163): avc: denied { setopt } for pid=1982 comm="syz.6.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.522984][ T28] audit: type=1400 audit(1789524784.940:6164): avc: denied { read write } for pid=1964 comm="syz.8.486" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 92.546397][ T28] audit: type=1400 audit(1789524784.940:6165): avc: denied { open } for pid=1964 comm="syz.8.486" path="/102/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 92.570266][ T28] audit: type=1400 audit(1789524784.940:6166): avc: denied { ioctl } for pid=1964 comm="syz.8.486" path="/102/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 92.620004][ T288] EXT4-fs (loop3): unmounting filesystem. [ 92.645575][ T1988] xt_bpf: check failed: parse error [ 92.651232][ T523] usb 1-1: MIDIStreaming interface descriptor not found [ 92.702918][ T6] smartjoyplus 0003:0925:8888.000E: unknown main item tag 0x0 [ 92.710575][ T6] smartjoyplus 0003:0925:8888.000E: unknown main item tag 0x0 [ 92.718123][ T6] smartjoyplus 0003:0925:8888.000E: item fetching failed at offset 2/8 [ 92.721622][ T1996] fuse: Bad value for 'group_id' [ 92.727263][ T6] smartjoyplus 0003:0925:8888.000E: parse failed [ 92.738626][ T6] smartjoyplus: probe of 0003:0925:8888.000E failed with error -22 [ 92.761567][ T315] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 92.900442][ T1947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.912234][ T1947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.923834][ T523] usb 1-1: USB disconnect, device number 9 [ 92.946103][ T2002] set_capacity_and_notify: 1 callbacks suppressed [ 92.946134][ T2002] loop3: detected capacity change from 0 to 1024 [ 93.051175][ T475] usb 10-1: USB disconnect, device number 4 [ 93.147692][ T2002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.759307][ T2012] overlayfs: missing 'lowerdir' [ 93.771164][ T2017] netlink: 'syz.0.502': attribute type 8 has an invalid length. [ 93.785077][ T2016] loop9: detected capacity change from 0 to 2048 [ 93.804203][ T2017] xt_hashlimit: size too large, truncated to 1048576 [ 93.816490][ T288] EXT4-fs (loop3): unmounting filesystem. [ 93.820409][ T1908] usbhid 9-1:0.0: can't add hid device: -71 [ 93.828203][ T1908] usbhid: probe of 9-1:0.0 failed with error -71 [ 93.835475][ T1908] usb 9-1: USB disconnect, device number 7 [ 93.847134][ T315] usb 7-1: config 127 has an invalid interface number: 57 but max is 0 [ 93.855469][ T315] usb 7-1: config 127 has no interface number 0 [ 93.867004][ T315] usb 7-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 255, setting to 64 [ 93.870030][ T2016] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 93.888711][ T315] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 93.897772][ T315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.909101][ T2021] loop3: detected capacity change from 0 to 512 [ 93.915552][ T315] usb 7-1: Product: syz [ 93.919762][ T315] usb 7-1: Manufacturer: syz [ 93.924460][ T379] udevd[379]: incorrect ext4 checksum on /dev/loop3 [ 93.924456][ T315] usb 7-1: SerialNumber: syz [ 93.936380][ T1984] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 93.937389][ T2021] EXT4-fs (loop3): bad block size 32768 [ 93.951582][ T2016] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.029597][ T2023] netlink: 'syz.0.502': attribute type 4 has an invalid length. [ 94.226541][ T2036] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 94.234843][ T2036] ±ÿ: renamed from team_slave_1 [ 94.387814][ T1908] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 94.433884][ T1984] loop6: detected capacity change from 0 to 8192 [ 94.464827][ T1984] loop6: p1 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 94.466223][ T1984] loop6: p4 start 16777216 is beyond EOD, truncated [ 94.594710][ T1908] usb 10-1: config 1 interface 0 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 94.607997][ T1908] usb 10-1: config 1 interface 0 has no altsetting 0 [ 94.616922][ T1908] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.626450][ T1908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.634675][ T1908] usb 10-1: Product: syz [ 94.639323][ T1908] usb 10-1: Manufacturer: syz [ 94.644149][ T1908] usb 10-1: SerialNumber: syz [ 94.652613][ T2016] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 94.660415][ T1983] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 94.725976][ T2043] loop8: detected capacity change from 0 to 512 [ 94.732977][ T2043] EXT4-fs (loop8): Test dummy encryption mode enabled [ 94.740047][ T28] audit: type=1400 audit(1789524786.979:6167): avc: denied { mounton } for pid=2041 comm="syz.8.511" path="/105/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 94.774104][ T2043] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 94.784093][ T2043] EXT4-fs (loop8): unmounting filesystem. [ 94.845397][ T320] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.895360][ T1908] cdc_ether: probe of 10-1:1.0 failed with error -71 [ 94.960825][ T1908] usb 10-1: USB disconnect, device number 5 [ 95.486312][ T315] asix 7-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 95.504832][ T1237] EXT4-fs (loop9): unmounting filesystem. [ 95.556607][ T315] asix 7-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 95.722798][ T315] asix: probe of 7-1:127.57 failed with error -71 [ 95.741264][ T315] usb 7-1: USB disconnect, device number 14 [ 95.785323][ T2011] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 95.923256][ T397] udevd[397]: inotify_add_watch(7, /dev/loop6p41, 10) failed: No such file or directory [ 95.933919][ T1170] udevd[1170]: inotify_add_watch(7, /dev/loop6p42, 10) failed: No such file or directory [ 95.933924][ T320] udevd[320]: inotify_add_watch(7, /dev/loop6p43, 10) failed: No such file or directory [ 95.935807][ T320] udevd[320]: inotify_add_watch(7, /dev/loop6p52, 10) failed: No such file or directory [ 95.955982][ T1170] udevd[1170]: inotify_add_watch(7, /dev/loop6p53, 10) failed: No such file or directory [ 95.964294][ T2051] udevd[2051]: inotify_add_watch(7, /dev/loop6p46, 10) failed: No such file or directory [ 95.974168][ T608] udevd[608]: inotify_add_watch(7, /dev/loop6p44, 10) failed: No such file or directory [ 95.985789][ T2050] udevd[2050]: inotify_add_watch(7, /dev/loop6p45, 10) failed: No such file or directory [ 95.995179][ T1169] udevd[1169]: inotify_add_watch(7, /dev/loop6p54, 10) failed: No such file or directory [ 96.046940][ T2011] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.065580][ T2011] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.068548][ T1908] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 96.087899][ T2011] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 96.107707][ T2011] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.123623][ T2011] usb 4-1: Product: syz [ 96.136800][ T2011] usb 4-1: Manufacturer: syz [ 96.145354][ T2011] usb 4-1: SerialNumber: syz [ 96.164592][ T315] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 96.287508][ T1908] usb 10-1: unable to get BOS descriptor or descriptor too short [ 96.298019][ T1908] usb 10-1: not running at top speed; connect to a high speed hub [ 96.332865][ T1908] usb 10-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 96.350462][ T1908] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.365133][ T1908] usb 10-1: Product: syz [ 96.371838][ T1908] usb 10-1: Manufacturer: syz [ 96.376668][ T2011] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.377392][ T1908] usb 10-1: SerialNumber: syz [ 96.388561][ T2011] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 96.388976][ T315] usb 7-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 96.396691][ T2011] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 96.407137][ T315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.415589][ T2011] usb 4-1: 2:1: cannot set freq 16122032 to ep 0x82 [ 96.422917][ T315] usb 7-1: config 0 descriptor?? [ 96.437273][ T2011] usb 4-1: USB disconnect, device number 14 [ 96.869848][ T315] smartjoyplus 0003:0925:8888.000F: unknown main item tag 0x0 [ 96.877400][ T315] smartjoyplus 0003:0925:8888.000F: unknown main item tag 0x0 [ 96.884952][ T315] smartjoyplus 0003:0925:8888.000F: item fetching failed at offset 2/8 [ 96.893343][ T315] smartjoyplus 0003:0925:8888.000F: parse failed [ 96.899799][ T315] smartjoyplus: probe of 0003:0925:8888.000F failed with error -22 [ 96.921131][ T2059] loop0: detected capacity change from 0 to 512 [ 96.927919][ T28] audit: type=1400 audit(1789524789.009:6168): avc: denied { mounton } for pid=2058 comm="syz.0.515" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 96.957921][ T2059] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e018, mo2=0002] [ 96.966283][ T2059] System zones: 1-3, 19-19, 35-38 [ 96.972461][ T2059] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.984749][ T2059] ext4 filesystem being mounted at /syzcgroup/unified/syz0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.023465][ T28] audit: type=1400 audit(1789524789.101:6169): avc: denied { bind } for pid=2058 comm="syz.0.515" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.052276][ T28] audit: type=1400 audit(1789524789.119:6170): avc: denied { name_bind } for pid=2058 comm="syz.0.515" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 97.073499][ T28] audit: type=1400 audit(1789524789.119:6171): avc: denied { node_bind } for pid=2058 comm="syz.0.515" saddr=ff05::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 97.108024][ T315] usb 7-1: USB disconnect, device number 15 [ 97.443532][ T2011] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 97.577031][ T2057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.593853][ T2057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.651277][ T2011] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.722687][ T2011] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.798650][ T2011] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.840977][ T2011] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 97.910118][ T1908] usb 10-1: MIDIStreaming interface descriptor not found [ 97.922088][ T2069] loop6: detected capacity change from 0 to 4096 [ 97.928775][ T2069] EXT4-fs: Ignoring removed nobh option [ 97.934496][ T2069] EXT4-fs: Ignoring removed bh option [ 97.940301][ T2069] EXT4-fs (loop6): Test dummy encryption mode enabled [ 97.956420][ T1908] usb 10-1: USB disconnect, device number 6 [ 97.976249][ T2069] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 98.000072][ T2011] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 98.013765][ T2011] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 98.025114][ T2011] usb 1-1: config 1 interface 1 has no altsetting 0 [ 98.038973][ T28] audit: type=1326 audit(1789524790.033:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.6.518" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038739e159 code=0x7ffc0000 [ 98.068048][ T2069] fuse: blksize only supported for fuseblk [ 98.074308][ T2011] usb 1-1: string descriptor 0 read error: -22 [ 98.078436][ T28] audit: type=1326 audit(1789524790.051:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.6.518" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038739e159 code=0x7ffc0000 [ 98.082415][ T2011] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 98.105633][ T28] audit: type=1400 audit(1789524790.051:6174): avc: denied { mounton } for pid=2080 comm="syz.8.521" path="/107/file0" dev="tmpfs" ino=613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 98.115451][ T2011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.156704][ T429] EXT4-fs (loop6): unmounting filesystem. [ 98.171861][ T28] audit: type=1326 audit(1789524790.061:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.6.518" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f038739e159 code=0x7ffc0000 [ 98.230148][ T2089] netlink: 272 bytes leftover after parsing attributes in process `syz.6.523'. [ 98.253507][ T2092] overlayfs: missing 'lowerdir' [ 98.264470][ T28] audit: type=1326 audit(1789524790.061:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.6.518" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038739e159 code=0x7ffc0000 [ 98.291810][ T28] audit: type=1326 audit(1789524790.061:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.6.518" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f038739e159 code=0x7ffc0000 [ 98.348393][ T28] audit: type=1326 audit(1789524790.061:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.6.518" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038739e159 code=0x7ffc0000 [ 98.361144][ T2105] loop8: detected capacity change from 0 to 256 [ 98.383683][ T28] audit: type=1326 audit(1789524790.061:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.6.518" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f038739e159 code=0x7ffc0000 [ 98.416130][ T28] audit: type=1326 audit(1789524790.061:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.6.518" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038739e159 code=0x7ffc0000 [ 98.425148][ T2105] exfat: Unknown parameter '' [ 98.441331][ T28] audit: type=1326 audit(1789524790.061:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2068 comm="syz.6.518" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f038739e159 code=0x7ffc0000 [ 98.792339][ T2121] netlink: 'syz.8.528': attribute type 2 has an invalid length. [ 98.922679][ T2123] netlink: 4 bytes leftover after parsing attributes in process `syz.9.533'. [ 99.059741][ T2059] incfs: ino conflict with backing FS 2 [ 99.155957][ T475] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 99.448606][ T24] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 99.458189][ T475] usb 9-1: config 0 has an invalid interface number: 238 but max is 0 [ 99.532393][ T475] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.543112][ T475] usb 9-1: config 0 has no interface number 0 [ 99.561027][ T2130] kvm [2129]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 99.565662][ T475] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 99.569532][ T2130] kvm [2129]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 99.582312][ T475] usb 9-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 99.595673][ T475] usb 9-1: Product: syz [ 99.600051][ T475] usb 9-1: Manufacturer: syz [ 99.604744][ T475] usb 9-1: SerialNumber: syz [ 99.614694][ T475] usb 9-1: config 0 descriptor?? [ 99.698853][ T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.709294][ T24] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 280 [ 99.719835][ T24] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.734680][ T24] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 99.744843][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.753257][ T24] usb 10-1: Product: syz [ 99.757769][ T24] usb 10-1: Manufacturer: syz [ 99.762502][ T24] usb 10-1: SerialNumber: syz [ 99.774254][ T2123] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 99.797837][ T2136] loop6: detected capacity change from 0 to 2048 [ 99.801402][ T2011] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 99.822633][ T2136] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 99.831783][ T6] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 99.839675][ T2011] usb 1-1: USB disconnect, device number 10 [ 99.850899][ T2136] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.902891][ T429] EXT4-fs (loop6): unmounting filesystem. [ 100.089417][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.097476][ T6] usb 4-1: not running at top speed; connect to a high speed hub [ 100.107283][ T6] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 100.116388][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.124438][ T6] usb 4-1: Product: syz [ 100.128626][ T6] usb 4-1: Manufacturer: syz [ 100.133248][ T6] usb 4-1: SerialNumber: syz [ 100.326294][ T2011] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 100.522434][ T2011] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.532702][ T2011] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 100.545130][ T2011] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 100.554249][ T2011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.562313][ T2011] usb 1-1: Product: syz [ 100.562905][ T1908] usb 10-1: USB disconnect, device number 7 [ 100.566615][ T2011] usb 1-1: Manufacturer: syz [ 100.566630][ T2011] usb 1-1: SerialNumber: syz [ 100.797508][ T2141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.539'. [ 101.054338][ T6] usb 4-1: MIDIStreaming interface descriptor not found [ 101.063494][ T2011] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.070429][ T2011] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 101.078668][ T2011] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 101.087166][ T2011] usb 1-1: 2:1: cannot set freq 16122032 to ep 0x82 [ 101.097120][ T2011] usb 1-1: USB disconnect, device number 11 [ 101.097142][ T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.273082][ T2128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.281599][ T2128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.290260][ T1908] usb 4-1: USB disconnect, device number 15 [ 101.323796][ T608] udevd[608]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 101.798225][ T1908] usb 9-1: USB disconnect, device number 8 [ 121.049116][ T2174] netlink: 'syz.8.541': attribute type 2 has an invalid length. [ 121.117197][ T2175] overlayfs: missing 'lowerdir' [ 121.232585][ T41] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 121.502013][ T2178] loop9: detected capacity change from 0 to 2048 [ 121.527356][ T41] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.587639][ T41] usb 1-1: not running at top speed; connect to a high speed hub [ 121.643486][ T41] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 121.656043][ T2178] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 121.665447][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.674808][ T2178] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.686286][ T41] usb 1-1: Product: syz [ 121.815514][ T1237] EXT4-fs (loop9): unmounting filesystem. [ 121.868676][ T41] usb 1-1: Manufacturer: syz [ 121.874783][ T41] usb 1-1: SerialNumber: syz [ 121.928715][ T2191] loop8: detected capacity change from 0 to 512 [ 121.954487][ T2191] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.983919][ T2196] loop6: detected capacity change from 0 to 256 [ 122.002344][ T2196] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.016223][ T2196] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 122.017082][ T2191] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 122.029331][ T2196] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 122.056497][ T2191] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.113162][ T2191] FAULT_INJECTION: forcing a failure. [ 122.113162][ T2191] name failslab, interval 1, probability 0, space 0, times 0 [ 122.125914][ T2191] CPU: 1 PID: 2191 Comm: syz.8.556 Tainted: G W syzkaller #0 [ 122.134686][ T2191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.144746][ T2191] Call Trace: [ 122.148026][ T2191] [ 122.150953][ T2191] __dump_stack+0x21/0x24 [ 122.155294][ T2191] dump_stack_lvl+0x110/0x170 [ 122.159978][ T2191] ? __cfi_dump_stack_lvl+0x8/0x8 [ 122.165012][ T2191] dump_stack+0x15/0x24 [ 122.169175][ T2191] should_fail_ex+0x3bf/0x510 [ 122.173853][ T2191] ? __es_insert_extent+0x70e/0x1790 [ 122.179144][ T2191] __should_failslab+0xac/0xf0 [ 122.183911][ T2191] should_failslab+0x9/0x20 [ 122.188423][ T2191] kmem_cache_alloc+0x3b/0x320 [ 122.193194][ T2191] __es_insert_extent+0x70e/0x1790 [ 122.198402][ T2191] ? ext4_es_insert_extent+0x2d10/0x2d10 [ 122.204045][ T2191] ? _raw_write_lock+0x94/0xf0 [ 122.208836][ T2191] ext4_es_insert_extent+0x53c/0x2d10 [ 122.209285][ T2200] loop3: detected capacity change from 0 to 1024 [ 122.214221][ T2191] ? __cfi_ext4_es_insert_extent+0x10/0x10 [ 122.214251][ T2191] ? ext4_es_lookup_extent+0x563/0x900 [ 122.231777][ T2191] ext4_map_blocks+0x55b/0x1a80 [ 122.236653][ T2191] ? __cfi_ext4_map_blocks+0x10/0x10 [ 122.241952][ T2191] ? is_bpf_text_address+0x177/0x190 [ 122.247250][ T2191] ? kernel_text_address+0xa0/0xd0 [ 122.252380][ T2191] ext4_getblk+0x1c5/0x700 [ 122.256823][ T2191] ? __cfi_ext4_getblk+0x10/0x10 [ 122.261768][ T2191] ? __stack_depot_save+0x36/0x490 [ 122.266884][ T2191] ? is_bpf_text_address+0x177/0x190 [ 122.272188][ T2191] ext4_bread_batch+0x66/0x490 [ 122.276968][ T2191] __ext4_find_entry+0xf73/0x1a10 [ 122.282020][ T2191] ? filename_create+0x23d/0x440 [ 122.286974][ T2191] ? kern_path_create+0x38/0x1b0 [ 122.291923][ T2191] ? unix_bind+0x2d1/0xe10 [ 122.296354][ T2191] ? x64_sys_call+0x70c/0x9a0 [ 122.301035][ T2191] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.307110][ T2191] ? ext4_ci_compare+0x3f0/0x3f0 [ 122.312069][ T2191] ? ext4_fname_prepare_lookup+0x2d5/0x3a0 [ 122.315981][ T2200] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.317884][ T2191] ? generic_set_encrypted_ci_d_ops+0xce/0x100 [ 122.317911][ T2191] ext4_lookup+0x181/0x710 [ 122.337275][ T2191] ? slab_post_alloc_hook+0x6d/0x2d0 [ 122.342569][ T2191] ? __slab_alloc+0x6b/0xa0 [ 122.347056][ T2191] ? __cfi_ext4_lookup+0x10/0x10 [ 122.351973][ T2191] ? d_alloc+0x1f4/0x260 [ 122.356201][ T2191] lookup_one_qstr_excl+0x125/0x270 [ 122.361379][ T2191] filename_create+0x23d/0x440 [ 122.366127][ T2191] ? kern_path_create+0x1b0/0x1b0 [ 122.371132][ T2191] ? memcpy+0x56/0x70 [ 122.375095][ T2191] ? getname_kernel+0x201/0x2e0 [ 122.379927][ T2191] kern_path_create+0x38/0x1b0 [ 122.384672][ T2191] unix_bind+0x2d1/0xe10 [ 122.388917][ T2191] ? __cfi_unix_bind+0x10/0x10 [ 122.393663][ T2191] ? security_socket_bind+0x93/0xb0 [ 122.398846][ T2191] __sys_bind+0x33b/0x460 [ 122.403161][ T2191] ? __cfi___sys_bind+0x10/0x10 [ 122.407993][ T2191] ? __kasan_check_write+0x14/0x20 [ 122.413087][ T2191] ? debug_smp_processor_id+0x17/0x20 [ 122.418441][ T2191] __x64_sys_bind+0x7a/0x90 [ 122.422927][ T2191] x64_sys_call+0x70c/0x9a0 [ 122.427415][ T2191] do_syscall_64+0x4c/0xa0 [ 122.431814][ T2191] ? clear_bhb_loop+0x30/0x80 [ 122.436472][ T2191] ? clear_bhb_loop+0x30/0x80 [ 122.441129][ T2191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.447000][ T2191] RIP: 0033:0x7f189959e159 [ 122.451396][ T2191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.470980][ T2191] RSP: 002b:00007f189a3a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 122.479373][ T2191] RAX: ffffffffffffffda RBX: 00007f1899825fa0 RCX: 00007f189959e159 [ 122.487325][ T2191] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000004 [ 122.495276][ T2191] RBP: 00007f189a3a1090 R08: 0000000000000000 R09: 0000000000000000 [ 122.503322][ T2191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.511273][ T2191] R13: 00007f1899826038 R14: 00007f1899825fa0 R15: 00007ffc1307f7d8 [ 122.519232][ T2191] [ 122.542038][ T2191] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.556: bg 0: block 217: padding at end of block bitmap is not set [ 122.569948][ T2191] EXT4-fs (loop8): Remounting filesystem read-only [ 122.584055][ T512] EXT4-fs (loop8): unmounting filesystem. [ 122.617755][ T2215] loop9: detected capacity change from 0 to 2048 [ 122.636112][ T2215] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 122.645282][ T2215] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.664477][ T2219] loop8: detected capacity change from 0 to 512 [ 122.682150][ T2219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.696913][ T1237] EXT4-fs (loop9): unmounting filesystem. [ 122.718837][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 122.718852][ T28] audit: type=1400 audit(1789524812.814:6200): avc: denied { view } for pid=2223 comm="syz.9.564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 122.746810][ T2219] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 122.757028][ T2219] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.788880][ T2219] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.563: bg 0: block 217: padding at end of block bitmap is not set [ 122.811873][ T2219] EXT4-fs (loop8): Remounting filesystem read-only [ 122.820138][ T2219] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.563: iget: bad i_size value: 2533274857506816 [ 122.834060][ T2219] EXT4-fs (loop8): Remounting filesystem read-only [ 122.841415][ T2219] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.563: iget: bad i_size value: 2533274857506816 [ 122.843471][ T288] EXT4-fs (loop3): unmounting filesystem. [ 122.854560][ T2219] EXT4-fs (loop8): Remounting filesystem read-only [ 122.869180][ T2219] EXT4-fs error (device loop8): ext4_lookup:1858: inode #12: comm syz.8.563: iget: bad i_size value: 2533274857506816 [ 122.901420][ T2219] EXT4-fs (loop8): Remounting filesystem read-only [ 122.968215][ T512] EXT4-fs (loop8): unmounting filesystem. [ 122.969415][ T2239] netlink: 52 bytes leftover after parsing attributes in process `syz.3.569'. [ 122.983132][ T41] usb 1-1: MIDIStreaming interface descriptor not found [ 122.997650][ T2239] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.004818][ T2239] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.031824][ T2240] overlayfs: missing 'lowerdir' [ 123.058942][ T2244] xt_hashlimit: size too large, truncated to 1048576 [ 123.102170][ T2248] loop3: detected capacity change from 0 to 512 [ 123.123639][ T2248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.165905][ T2256] loop6: detected capacity change from 0 to 2048 [ 123.190647][ T28] audit: type=1400 audit(1789524813.239:6201): avc: denied { block_suspend } for pid=2247 comm="syz.3.573" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.216850][ T2171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.245922][ T2256] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 123.256255][ T2256] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.257051][ T2171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.287435][ T41] usb 1-1: USB disconnect, device number 12 [ 123.290634][ T429] EXT4-fs (loop6): unmounting filesystem. [ 123.323719][ T2248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 123.348021][ T288] EXT4-fs (loop3): unmounting filesystem. [ 123.378974][ T2268] loop3: detected capacity change from 0 to 128 [ 123.387715][ T28] audit: type=1400 audit(1789524813.423:6202): avc: denied { mount } for pid=2267 comm="syz.3.577" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 123.556454][ T2274] loop8: detected capacity change from 0 to 1024 [ 123.584533][ T2276] netlink: 272 bytes leftover after parsing attributes in process `syz.6.580'. [ 123.643579][ T2274] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 123.699335][ T28] audit: type=1400 audit(1789524813.709:6203): avc: denied { mounton } for pid=2278 comm="syz.6.581" path="/111/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 123.744453][ T2281] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 123.761754][ T2283] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 123.914100][ T2294] exfat: Unknown parameter '' [ 124.009814][ T28] audit: type=1400 audit(1789524814.005:6204): avc: denied { connect } for pid=2297 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.073411][ T459] kernel write not supported for file /180/net/xfrm_stat (pid: 459 comm: kworker/1:4) [ 124.083718][ T1908] kernel write not supported for file /180/net/xfrm_stat (pid: 1908 comm: kworker/0:5) [ 124.131597][ T2305] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 124.140686][ T2305] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.166046][ T28] audit: type=1400 audit(1789524814.143:6205): avc: denied { read } for pid=2307 comm="syz.0.587" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 124.188855][ T28] audit: type=1400 audit(1789524814.143:6206): avc: denied { open } for pid=2307 comm="syz.0.587" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 124.237460][ T1237] EXT4-fs (loop9): unmounting filesystem. [ 124.238446][ T2060] ------------[ cut here ]------------ [ 124.248830][ T2060] kernel BUG at fs/buffer.c:2714! [ 124.285737][ T28] audit: type=1400 audit(1789524814.235:6207): avc: denied { execute } for pid=2307 comm="syz.0.587" name="file1" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.316690][ T2060] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 124.322799][ T2060] CPU: 0 PID: 2060 Comm: kmmpd-loop0 Tainted: G W syzkaller #0 [ 124.331735][ T2060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.338818][ T28] audit: type=1400 audit(1789524814.235:6208): avc: denied { execute_no_trans } for pid=2307 comm="syz.0.587" path="/100/file1" dev="tmpfs" ino=587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 124.341816][ T2060] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 124.341846][ T2060] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 b8 d6 e7 ff e9 b0 fe ff ff e8 9e 4b a2 ff 0f 0b e8 97 4b a2 ff <0f> 0b e8 90 4b a2 ff 0f 0b e8 89 4b a2 ff 0f 0b e8 82 4b a2 ff 0f [ 124.390003][ T2060] RSP: 0018:ffffc9000972fca0 EFLAGS: 00010293 [ 124.396085][ T2060] RAX: ffffffff81cf1e09 RBX: 0000000000000000 RCX: ffff88811e369440 [ 124.404044][ T2060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.412009][ T2060] RBP: ffffc9000972fcf0 R08: ffff888115c23bd7 R09: 1ffff11022b8477a [ 124.419966][ T2060] R10: dffffc0000000000 R11: ffffed1022b8477b R12: 0000000000000000 [ 124.427924][ T2060] R13: 1ffff11022b8477a R14: ffff888115c23bd0 R15: 0000000000003801 [ 124.435886][ T2060] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 124.444817][ T2060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.451394][ T2060] CR2: 0000001b31d23ffc CR3: 000000011f407000 CR4: 00000000003526b0 [ 124.459361][ T2060] Call Trace: [ 124.462628][ T2060] [ 124.465541][ T2060] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 124.471338][ T2060] submit_bh+0x1f/0x30 [ 124.475390][ T2060] write_mmp_block_thawed+0x397/0x510 [ 124.480746][ T2060] ? __cfi_schedule_timeout+0x10/0x10 [ 124.486104][ T2060] ? read_mmp_block+0x700/0x700 [ 124.490936][ T2060] ? __cfi_process_timeout+0x10/0x10 [ 124.496207][ T2060] write_mmp_block+0x138/0x2b0 [ 124.500985][ T2060] kmmpd+0x382/0x940 [ 124.504867][ T2060] kthread+0x281/0x320 [ 124.508916][ T2060] ? __cfi_kmmpd+0x10/0x10 [ 124.513316][ T2060] ? __cfi_kthread+0x10/0x10 [ 124.517887][ T2060] ret_from_fork+0x1f/0x30 [ 124.522286][ T2060] [ 124.525282][ T2060] Modules linked in: [ 124.529752][ T2060] ---[ end trace 0000000000000000 ]--- [ 124.541958][ T2060] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 124.547507][ T2060] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 b8 d6 e7 ff e9 b0 fe ff ff e8 9e 4b a2 ff 0f 0b e8 97 4b a2 ff <0f> 0b e8 90 4b a2 ff 0f 0b e8 89 4b a2 ff 0f 0b e8 82 4b a2 ff 0f [ 124.549140][ T512] EXT4-fs (loop8): unmounting filesystem. [ 124.567711][ T2060] RSP: 0018:ffffc9000972fca0 EFLAGS: 00010293 [ 124.604879][ T2060] RAX: ffffffff81cf1e09 RBX: 0000000000000000 RCX: ffff88811e369440 [ 124.613305][ T2060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.649359][ T2060] RBP: ffffc9000972fcf0 R08: ffff888115c23bd7 R09: 1ffff11022b8477a [ 124.649841][ T28] audit: type=1400 audit(1789524814.595:6209): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 124.657667][ T2060] R10: dffffc0000000000 R11: ffffed1022b8477b R12: 0000000000000000 [ 124.677410][ T288] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 124.688349][ T2060] R13: 1ffff11022b8477a R14: ffff888115c23bd0 R15: 0000000000003801 [ 124.702543][ T288] FAT-fs (loop3): Filesystem has been set read-only [ 124.709997][ T2060] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 124.710523][ T288] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 124.719097][ T2060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.735245][ T2060] CR2: 0000200000044000 CR3: 000000010f9ba000 CR4: 00000000003526a0 [ 124.744917][ T2060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 124.753198][ T2060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 124.761360][ T2060] Kernel panic - not syncing: Fatal exception [ 124.767557][ T2060] Kernel Offset: disabled [ 124.771875][ T2060] Rebooting in 86400 seconds..