last executing test programs: 8.993361145s ago: executing program 3 (id=88): unshare(0x400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[], 0x2370}}, 0x20004004) mprotect(&(0x7f000019c000/0x3000)=nil, 0x3000, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) madvise(&(0x7f00000d1000/0x4000)=nil, 0x4000, 0x15) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x1fe) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r4 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\rqk\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xb2\xdd\xae\xdb[\xce\xa1\x1e\xfb^\v\x98@\xda\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\xeb\x98\'\xfd|\x10\x99\xa2\x05\x00\x00\x00C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10\x06\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Sy\xe32\xf6\x16f\xfe&\xc5\x7f\xd8\xf9\xee\xcf\x11?\xf8\xa9s\xc4d\xd4\x04\x00\xb7xO\x99\x804mAi\x13\x02\xf0\x84c2s\xd5\x81{\xcc,y0h\xbaJ\xb7\x9e@1\xe32\x03\xec\n\acn58\xbb\xb6a-\x04\xe5lW', 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000004, 0x2012, r4, 0x1000) r5 = syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000003c0)=""/88, 0x328000, 0x1000, 0xfffffffe}, 0x20) process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="010000000a0000002f4900007f"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)="6bc03d8370b03e5cc502372271b7293e73ef37221ba307359e29d951d8e424f53121a2304e9f9aba701c1198fc19bb8921b4bcc052e64b8e5a895234ae404ae9bf2df916970fcc4ebd836fc8448493831c8ea6bc0d8f650d4a42c939b5c638ce3d4f2e10aae0ed90946f9cc0b9774f337972bbf9b297488c4f2c06d1ad040e2862a47f216cba553c8d373d768f4612b6fc1ebbe9c1b403660208d39d928c20ada9e0efad43", &(0x7f0000000140), 0xca, r7}, 0x38) unshare(0x22020600) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x200, r3}, 0x38) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0xa000, 0x1ffffff, 0x0, {{0x22, 0x4, 0x0, 0x3c, 0x88, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3, {[@ssrr={0x89, 0xf, 0xb6, [@loopback, @loopback, @remote]}, @end, @timestamp_prespec={0x44, 0x44, 0xd8, 0x3, 0x0, [{@broadcast, 0x9}, {@multicast2, 0x80000001}, {@loopback}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x10001}, {@local, 0x4}, {@local, 0xffffffff}, {@empty, 0x40}]}, @end, @rr={0x7, 0x1f, 0x23, [@empty, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @remote, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000140)={'ip_vti0\x00', r8, 0x7800, 0x20, 0xd, 0x6, {{0x5, 0x4, 0x1, 0x36, 0x14, 0x64, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}}}}}) syz_open_procfs(r5, &(0x7f0000000180)='smaps_rollup\x00') exit(0xffff) syz_open_procfs(r5, &(0x7f0000000580)='projid_map\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x103002, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) 6.917027818s ago: executing program 3 (id=100): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x63e6}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1f, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="8000e8bef79dbcf6", 0x8}], 0x1, &(0x7f0000000340)=ANY=[], 0x3}, 0x408c800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffff000}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fchmodat(r8, &(0x7f00000001c0)='./file0\x00', 0x9) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c01"]) getpid() 6.667981014s ago: executing program 0 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9974}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x162}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2ee013b8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa83}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x35}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x7f) close_range(r0, r0, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='pimreg\x00', 0x10) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0xb0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1}) r4 = syz_clone(0x20000, &(0x7f0000000340)="3cde29011ee229afe6c5ddbd39a8d0381329ef7e3e2ac22e09be90ba3a26b15c943e7baf8e48f1448449c602618d128365148a8cf405edeeb44ab5dc2afc2f98328bfd243a91f151a905b3ee1b1c7b5dc76fb7baf5ff3fb40b4889534ff0c010d04956fd4157caa2e4cb40d42c1e1f754a5c7440b38501ad8f27ee4d7dee9d5b5ed1c6bc60573c88b71889fe7baedf92e5fd56be05d160dfa90633788a601d5b6a001464c253f3b0", 0xa8, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="19010cb39bc4dbd466dc31191e618332851df5340b0c5d482e07ef6b0e6035ca299f6aede187af94155c0183685826522876b3f13dff9df551b04d9ded02d10883b4422d2d1c730e879412d917bf8df1457ddd82107b1bb743fe159efaf43ac071389275d9edc44868") ptrace$peekuser(0x3, r4, 0x3) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f0000000500)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000540)=0xfffff27f, 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7fff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x88}, 0x1, 0x0, 0x0, 0x41}, 0x40810) write$tun(r3, &(0x7f0000000740)={@void, @val={0x1, 0x3, 0x9, 0x0, 0x3ca7, 0xffff}, @llc={@llc={0x0, 0x80, 'N', "058cee29f11470d31460b4f977f842a613663c1fb6370126be660036a31c957943b0990f81d52a5f7762c84a49f6bd66c147b36f7a7223b8562d331a0338a9e1218853170b1957c4b62a59c24c47137ed6e1ef49c94e234c678882d6182578ef6ba851a28d6fa67a5f5e2a3addeb5da17fbf29dfd19069b6d0aadfc1111b82dd7e292ee451d648ec1801914711a770dac8520ca283b14aa2e84a27a61bf8b99764214e96b9daa6ccfa61386087abc579e320156c1050fac4f8f76becfc65112255bab4cdcc588849d27149eac2ee3234aa17fbd314b2d643a335fdf80e"}}}, 0xea) pwritev2(r0, &(0x7f0000000bc0)=[{&(0x7f0000000840)="5a3e95e79e89584fcedebb68aac68de449d113933ae5aa7c24b572ae41e82e58271c6d7b48b817c6fe27bc67ed5e975cc8832d15aefb1436434149049cb53768d87a7f7c660256cd53dee48b7953f43f46d3bffc82b5b859906007de54369c0b3eaf559881ac5908b976ce36f1d84fae836edc4374b5dd", 0x77}, {&(0x7f00000008c0)="7ab6f9615c20ee75a863606af9bfeeff1b9052c9c7fa19d806ff285b8debd80ef00781825f5eb9127d0487bf7bba0a4c0b7c5be748b61348693ed54c1523ff3e497251636e036d4ddf5758195eb45ecd7c2369bba037fdccf38545b962eec687b651d5482f7955016d2c541363ec8e9c785d11b8145d21991f14fe6cb7", 0x7d}, {&(0x7f0000000940)="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", 0xfe}, {&(0x7f0000000a40)="c14929b9a6a533418feec7bec3f0a2b089c79d6e3c32671d0b5ecf4b753fed5da0bb4b8016b1c35cd5d9ce769b3164bb38807ec4378aacfbd6f7ba7bca2720a0bbf8f5db4cfcee9873779aac861f8576f3bcffc2442d78a33cea0365e57e7ed47fba109618034609ca8e5cfc1b5e01f5065533", 0x73}, {&(0x7f0000000ac0)="539330", 0x3}, {&(0x7f0000000b00)="b8a66169d25d1e4d42d8d19647d18e4e376fee13779da2620187d410151afebe5f5ba11952301420a0d7d50ef94033716d71b3fa4d98e30a7263045f51791d4332a16231d44a5ce2ed42ce55ccd33fb10145a04d573b90c0941055a204329ae48c83e77f86ce1ad9da6682e8d3c24083afaf717c8fec65c332a377dae1abb5b0519abe9e99a26604ac22", 0x8a}], 0x6, 0xc0, 0x9, 0x14) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000f00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x1c4, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80a4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}]}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200000, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3ff, @loopback, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @remote, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9075}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x69}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000f40)) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f80)={0xffffffffffffffff, 0x101, 0x10}, 0xc) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000001040)={@private2, 0x0}, &(0x7f0000001080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xd, 0x2, &(0x7f0000000fc0)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r7}], &(0x7f0000001000)='syzkaller\x00', 0x173, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, @sock_ops, r3, 0x8, &(0x7f00000010c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001100)={0x4, 0x4, 0xf, 0x7287}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000001140)=[r3, r3, r3, r3], &(0x7f0000001180)=[{0x1, 0x3, 0x5, 0xc}, {0x5, 0x1, 0x7, 0x9}], 0x10, 0x6}, 0x94) r9 = dup(r3) sendmsg$netlink(r9, &(0x7f0000001800)={&(0x7f0000001280)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc, &(0x7f00000017c0)=[{&(0x7f00000012c0)={0x11c, 0x2e, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@generic="4296709194092a25641533603e82392f4d61d08d6dd0f1290184980a202e8090fb834a2ff952e08e9a8eae9f451248ba6dfd64aefeb3f56e24c26c426dca44f8b982d398487c348b8ebf19e2a66bde03f8f0c208debb215c100d7de438c4a263530d64c42186bf10480a190fb49f027e6ae5095b3e3ca87347ef1b21fe7c1cd244fc1cb98b50c941468dbe10cd0e95e289c58d14282093d00191fe9fe184bb55f4afcde7c2943a3b3894c73bf54a86451ce9abe9f72bab4f2e80830da70c432609caac2533e53a4c65af66d25eeb47433038c7cc46bcf35c7909ace3c39e3f5f671b01", @typed={0x8, 0x164, 0x0, 0x0, @pid=r2}, @typed={0xc, 0x21, 0x0, 0x0, @u64=0xffffffffffffffff}, @typed={0x14, 0x134, 0x0, 0x0, @ipv6=@mcast2}]}, 0x11c}, {&(0x7f0000001400)={0x24, 0x16, 0x300, 0x70bd26, 0x25dfdbfc, "", [@nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0x6a}]}, @typed={0xb, 0xe8, 0x0, 0x0, @str='@(%],-\x00'}]}, 0x24}, {&(0x7f0000001440)={0x318, 0x26, 0x101, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x4f, 0x0, 0x0, @fd=r7}, @nested={0xa2, 0xa, 0x0, 0x1, [@typed={0xc, 0xd5, 0x0, 0x0, @u64=0xc16d}, @generic="0f22dfd1b5161f3028a394519deb3369d4e8fa7a51c264a1f745d71406d37c98878219bb7ce86a00cb90969259d4f831104ec052f90757ff1d1342da9f58f2a355ae3408600b5e4e8543bc2fc13970d8e56434026e52436184934e975098ed1e5757b01941ee51a429f2d607d2bddb5b1905860ec98e336570cda18e9a34f20d5e1303ba3d05d64fb17aa71210a9", @nested={0x4, 0x2e}]}, @generic="46d4af36a849348066ddbc42834bba1fe03c05aa2a144eb8d09a715d8add50327d6f175ea325203c99dd7ed3cc25bb602e85d439d5193ced282dc5ef7da101d332f38de353b561178c604f814aed3fa74c84e2a51dac739b05de848a86c53862cad0b1fd9eee3c9166d86373ec25ea65fe76dfd963265e7427ec3ebd851e172bff5b8a67b9fb0b4f624525b39acbc4d4ba3e2cc2bd525044245f4b52d6b27c05bdef5cbc9eefd27d14fe0c61394ba44b7d26898ffb99b8c6debc3acc86ec678905b794d8c0ad0b1b360600c3f3b6", @nested={0xf8, 0xa8, 0x0, 0x1, [@nested={0x4, 0x143}, @generic="0c93f671ddd5f48007cead353600ddfab4a37ba59cb8d6270c6d54475bd6638d5556fc4636f2944b331848a318dc70c65e2695a5af458820f94e4447270225f5285286", @typed={0x8, 0xaf, 0x0, 0x0, @ipv4=@multicast1}, @generic="4d4d05f6e524dd6dd827bb493ffddd94794b7b5a69b27672d4933b111da54e539fb81f9e835a16215b6528ddc8fa1aaef4dc5494a9c63304b25b6e45ab45f4accfac7abb27bd04c06956366be6ce3766e7ce96482bfdc1532fbb53a433da402dbfe5dd54272fa04c912a3f477a29ac67a6a52f220d7a121a03091435ac636c19ed4f839090da8d486860b0afd7f60660cf1e24d89bf3d99f8f53127070bc2d4bd8", @nested={0x4, 0x8}]}, @typed={0x8, 0xd2, 0x0, 0x0, @pid=r4}, @generic="e534e55abf02ca2adf7405e945dd2c2dc00b66fca79a5ecaca402b9ccc0566fb708c8a074d773acea21b90f3b72aa0612d8934beb686ebeaf671e5d94d0e680edf7810455409f910e949605daf59a3f1b67b412bd4da8190cc2a7c084aa03d62ac1a1ec8bb78fa6291d7eb723e7ec060c04c6fb4e0ad626b7838d22d861219dd91a8d77cabde88c3c879f5"]}, 0x318}, {&(0x7f0000001780)={0x24, 0x39, 0x200, 0x70bd27, 0x25dfdbfe, "", [@nested={0x14, 0x127, 0x0, 0x1, [@typed={0x8, 0x10d, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x44, 0x0, 0x0, @pid=r4}]}]}, 0x24}], 0x4, 0x0, 0x0, 0x20004880}, 0x4000000) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x24) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000001880)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001840)=0x10001}) ptrace$ARCH_SHSTK_LOCK(0x1e, r2, 0x0, 0x5003) sendmsg$nl_route(r9, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd25, 0x25dfdbff, {0x2, 0xb0, 0x14, 0x2, 0x6, 0x0, 0x0, 0x4, 0x10016}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x5}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}, @FRA_SRC={0x8, 0x2, @loopback}, @FRA_DST={0x8, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4004010) 6.650287268s ago: executing program 1 (id=102): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000200)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="85", 0x1}, {&(0x7f0000000c80)="f2cc6f121ba466f83b377965226620aa", 0x10}], 0x2, 0x7a00, 0x0, 0x1f) 6.590997624s ago: executing program 3 (id=103): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 6.408467131s ago: executing program 4 (id=104): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.408081971s ago: executing program 0 (id=105): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) ioprio_set$pid(0x2, r0, 0x2007) chdir(&(0x7f0000000240)='./file0\x00') r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x3}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.243837875s ago: executing program 3 (id=106): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000b4d14c17968f4bcc4cb74ab13102410000", @ANYRES16=r5, @ANYBLOB="04002501840000dbdf251c00000008000300", @ANYRES32=r6, @ANYBLOB="250099000080000043000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x3}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000004300011028bd7020fddbdf25000000001200010029267d14285d26272e2d242b3a000000"], 0xfffffffffffffef3}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.155185228s ago: executing program 1 (id=116): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064000000000000002020207bd2000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x24, 0x2, 0x4, 0xc1, 0xc0, 0x9, 0x2, 0x8, 0x6c, 0xf7, 0x400, 0xfffffc00, 0x3, 0x0, 0x5, 0xfffffffa, [0xc35c, 0x2400]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000058"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) timer_create(0x9, 0x0, &(0x7f0000000080)=0x0) timer_delete(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711905000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r7 = syz_usb_connect(0x3, 0xc7, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c2405", @ANYRESDEC=0x0], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000200), &(0x7f0000000340)) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000001440)={{r6, &(0x7f0000000040)='syzkaller\x00', 0x101000, &(0x7f0000000140)={@_ha_fsid={[0x9, 0xd14c]}, {0xf, 0x4, 0x3, 0x8}}, 0x1d6b368f, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x8000}, {[0x7, 0x8, 0x0, 0xc4]}, 0x1, 0x1000, &(0x7f0000000440)=""/4096}) r9 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000300)='bpf_lsm_socket_getpeername\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xf, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r7, @ANYRESOCT=r8], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r5, 0x25, 0x0, @void}, 0xf) 5.637695773s ago: executing program 2 (id=107): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c56, &(0x7f0000000140)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d6d697865642c74696d655f6f66667365743d3078666666666666666666666666666137312c756e695f786c6174653d312c756e695f786c6174653d302c636865636b3d7374726963742c73686f72746e616d653d77696e39352c757466383d302c696f636861727365745a69736f3808000000392c696f636861727365743d6370313235312c73686f72746e616d653d6c6f7765722c696fd4f961727365743d69736f383835392d392c757466383d302c726f6469722c00"], 0x81, 0x29f, &(0x7f0000000640)="$eJzs3c9qY1UcB/DvTZM0VSFZuBLBC7pwVWbmCaZIhcGulCwUQQfbAWnKQAsB/2CdlXvBle/gO/gAbnwDFy4Fd85CvJLe3DZN09ZI7Ejn89nc3z3n/Hr+3NMWAvfk41cP9ncfHz168uUv6fWKtO7nfp4WGaSVxtcBAG6Tp1WV36vadW3b6Sap+tO71g0MDwD4Dyzz/x8AuB3ee/+Dd7Z2drbfLctecvDNeFikvtb1W4/yaUbZy53082dSnarjlx7sbKddls2HAeONDJODj36a3m/9lpzk300/g/n87rRVeSJvHByPh5OeJ9dOXiiSraqom9xLPy8nVSfTH1Jf3n6ws32vvJifYTdvvv79dPx/7WUz/fz8SR5nlN18uJec5X91tyzfqr7744t6BsOkOB4P17N7bqWqtZt4HgAAAAAAAAAAAAAAAAAAAAAAPB82y1OD2fNzmtMANzcX1196PtD0hJ/jmfN57pRl2RzjMx52Uue380o77Wc3cwAAAAAAAAAAAAAAAAAAAPj/OPrs8/2Ho9He4bngx2oSbFzZZj5oz5Q0r/Vfn7U42P8hWT7rnwRZmw5tVFzoomiqVtDX+jKNNxZ1mtZla9gepR78t8sP7LVVTfDKoNld+w+LXNO4t3iTzOy6ZhseHhVLbMhqwdKtXZrVXdHcuy/+2/SNhQs1mXHndDHPZ/UmT3KmpLPi35Q5xcr/9gAAAAAAAAAAAAAAAAAAAOedvfSbXy9UPnkmQwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAG3f2/f+nQQbzJfPB8TT5pKR1deP1w6MF3Q5ueJoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADccn8HAAD//67IVEg=") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000004000)=""/4086, 0xff6, 0x1, 0x0}, &(0x7f0000000480)=0x8a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) 5.582210858s ago: executing program 0 (id=108): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00562653ef2b152c7200"/19, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000003001800000018000000050000000100000001000013040000000200000088060000ff0f000000"], 0x0, 0x35}, 0x28) 5.496385161s ago: executing program 4 (id=109): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001900010929bd700080000000021810000000fd010004000008000100ac141400080005000a01010208200400ff49ee1a937b0aebb12a8ddf48bf035083ffe9c3dcb31c3d9c695aa7eab535266800afa49c2d15121f654f9df88f261b1c49f76a45614203ca28ba69f180043004b81d37028d3add", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.402498475s ago: executing program 0 (id=110): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000002c0)=r2}, 0x20) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x54, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040004}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x48, r7, 0x300, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0x0, 0x1) 5.365611295s ago: executing program 4 (id=111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) flistxattr(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[@ANYBLOB="7f454c460009020803000000000000000300060068000000e8010000000000000000000000060000000300380002000c00ce0001000300000006000000020000000000000007000000000000000200000000000000050000000000000004000000000000000100000000000000000000700400000092800000000000000000000000000000070000000000000004000000000000000001000000000000617bd0a0cdac27d927bf7a57b605000000000000008debeca4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009d1d00"/425], 0x1b4, &(0x7f0000001040)='debugfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000110001002bbd7000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0100020009b299ea"], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x384b, 0x0, 0x2, 0xeb}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe81, 0x20, 0x2, 0x178}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a87, 0x40, 0x10000, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49eb, 0x100, 0x0, 0x25c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x903c, 0x8, 0x0, 0x2f0, 0x0, r3}}], 0x4, &(0x7f0000002840)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0x93e, 0x0, &(0x7f0000001840)=@buf_4k="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"}}, &(0x7f00000028c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) unshare(0x6020400) fsopen(&(0x7f0000000040)='ncpfs\x00', 0x0) 5.361288286s ago: executing program 3 (id=112): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x11}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = dup(r1) shutdown(r1, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x40010050) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000140)={0x4}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="12000000030000000400000008"], 0x50) syz_usb_connect$uac2(0x0, 0xa4, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x7, 0x0, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xc, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x8, 0x1c, 0x7}, [@multiply_unit={0x7, 0x24, 0xc, 0x4, 0xd, 0x6, 0x2}, @output_terminal={0xc, 0x24, 0x3, 0x5, 0x1ff, 0x7, 0x2, 0x0, 0xec, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0x1, 0x3, 0x3, 0x3, 0x9, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x24, 0xff, 0xe, {0x8, 0x25, 0x1, 0x81, 0xc, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x10, 0xfc, {0x8, 0x25, 0x1, 0x82, 0xc, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') read$FUSE(r9, &(0x7f0000000780)={0x2020}, 0x2020) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r12, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r13, 0x4040ae9e, &(0x7f0000000200)={0xd200000000000000, 0x41000, 0x7}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in=@loopback, 0x4e23, 0x0, 0x4e24, 0xfffc, 0xa, 0x20, 0x80, 0x4, 0x0, r3}, {0x7c24, 0x6, 0xfffffffffffffe49, 0x9, 0xd338, 0x9, 0x7fff, 0x6}, {0x6, 0x1, 0x7, 0xffffffffffffff01}, 0xffffffff, 0x6e6bb4, 0x0, 0x4b60e1efc776518, 0x3, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x2, 0x0, 0x42, 0x0, 0xf6d}}, 0xe8) 4.864532446s ago: executing program 0 (id=113): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000140)={[{@barrier_val={'barrier', 0x3d, 0x8}}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@orlov}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@acl}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7ff}}]}, 0x1, 0xbea, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001f80)={0x1, 0x1, 0x1000, 0x14, 0x0, 0x0, 0x3f, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000002c0)=0x418a, 0x4) unshare(0x64020600) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35, [{{0x9, 0x2, 0x2d}}]}}, 0x0) unshare(0x28000600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r2, r2) setpgid(0x0, r2) wait4(r2, 0x0, 0x2, 0x0) setpgid(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x182) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r1, &(0x7f0000000300)="e800", 0x2) recvfrom(r1, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) 4.722098893s ago: executing program 2 (id=114): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="150000001000000000000000fcffffff06000100", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0033c19391c804dbc074d74d597364c35a00002000"/40, @ANYRES32=r0, @ANYBLOB], 0x50) setns(0xc9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0xc840) socket(0x2, 0x80805, 0x0) pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='1', 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000000)={0x37, {{0x2, 0x0, @broadcast}}}, 0x88) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) 3.814542541s ago: executing program 4 (id=115): r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/116, 0x74, 0x1, &(0x7f0000000280)}, &(0x7f0000000300)=0x40) sendto$inet6(r0, &(0x7f0000000100)="e26fa857a553a344a847a702747fce19eb78963efe2a370f1e7bc2a997f7157dc149fd1849e7b07d05cfec8d37dad5cbc6553659cb5f8ba3e0577f109abb13becb6a9b36d6ea2aecffb398e0c0e49b6ae19fd1dadad623b901d47b3b28c62833fc9899fa0df325a6e4d47676b471f1b0bb810936f1752420dba54e03545ab59bd4923201b0358f1ae8445b3169bb23cf18280632a3958bdc4be1be2ee236", 0x9e, 0x40000, &(0x7f00000001c0)={0xa, 0x4e22, 0xc, @empty, 0x8000}, 0x1c) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0xd5}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f00000003c0)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@noblock_validity}, {@minixdf}, {@sysvgroups}, {@errors_remount}, {@jqfmt_vfsv0}, {@acl}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000600)={0x7, 0x9, 0x7, 0xbb, "ecb5777e6d3549230c2eb9099f63a5a5a97c9416e134e83ca1c46e83253d2bbb"}) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x2}}, 0x10) rt_sigsuspend(0xfffffffffffffffc, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@user_xattr}, {}]}, 0x4, 0x500, &(0x7f0000000a40)="$eJzs3c9vVF0ZAOD3Tju0X7+BFmWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMX8+XeubSl7dAB2g50nie53HvOvfQ9Z4Zzzr2HzpwAetaZiFiLiGMRcTcihvP8JN/iemtLr3v54tH0+otH00k0m7f/lWTn07zY8ndSn+Y/czAifvT9iJ8mO+M2Vlbnp6rVymKeHl2qLYw2VlYvzhXynInJ8cmxq5euTHRYk/49rzhd+93z783d/PEffv+VZ39e+/bP02KVfnE8O7e1HvupVfVilLaV9OZBBOuS/vzfzzso7ndZeDtpa/tcRJzN2v9w9HXQjgCAj1uzORzN4a1pAOCoS5//S5EUyvlcQCkKhXK5NYd3KoYK1Xpj6cJwffn+TGRzWCNRLNybq1bG8rnCkSgmaXo8O95MT2xLX4qIkxHxy4FPsnR5ul6d6eaNDwD0sE+3jf//HWiN/wDAETfY7QIAAIfO+A8Avcf4DwC95y3Gf58OBIAjwvM/APQe4z8A9J49x//Hh1MOAOBQ/PDWrXRrrufffz3zYGX5O6UHF2cqjflybXm6PF1fXCjP1uuz1Up5utnc6+dV6/WF8csbycbK6p1affn+0p252tRs5U7FFz4DQPedPP30r0lErF37JNtiy1oOxmo42grdLgDQNX3dLgDQNT7PA72rg2d80wBwxO2yRO9r2v6K0JN3X/wV6K7zXzT/D73K/D/0rneb///uvpcDOHzm/6F3NZuJNf8BoMeY4wfe6///AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEeVsi0plLO1wNfSPwvlcsTxiBiJYnJvrloZi4gTEfGXgeJAmh7vdqEBgPdU+EeSr/91fvhcafvZY8n/BrJ9RPzs17d/9XBqaWlxPM3/90b+0pM8f+JYNyoAAGx1fWdWa5zO91se5F++eDT9ajvMIj6/0VpcNI27nm+tM/3Rn+0HoxgRQ/9J8nRLer/Stw/x1x5HxBc26/9wS4TSYMRIvvLp9vhp7OMHEH/z9U+yuZnN+IXX4heyc+m+mL0Wn9+HskCveXqj1U/mbS9tYnn7K8SZbL97+x/Meqj396r/W9/R/xU2+r++HfGTrM2f2Ui/uSTPL//xBzsym8Otc48jvtS/W/xkI37Spv8912Ed//blr55td675m4jzsXv8llrWzY4u1RZGGyurF+dqU7OV2cr9iYnJ8cmxq5euTIwORLUyNprNVP9ptxj/vHbhRLv4af2H2sQf3KP+3+iw/r/9/92ffO0N8b/19d3f/1NviJ+Oid/sMP7U0PU2y3e3Vv+faVP/vd7/Cx3Gf/b31ZkOLwUADkFjZXV+qlqtLO5xkN5r7nWNg4/zINYiPoBi9OhBeg/+ARRjx0G3eybgoG02+m6XBAAAAAAAAAAAAAAAaKexsjo/EAf7caJu1xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICj67MAAAD//y2oyxU=") 3.750755428s ago: executing program 2 (id=117): r0 = socket(0x18, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="15e1ff0065ffff097b00000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xb, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="646144eff04f01b7db87d3f8e0c4e86e6f3d0000", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) umount2(&(0x7f0000000480)='./file0\x00', 0xa) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x184c8, &(0x7f0000001300)=ANY=[], 0x1, 0x262, &(0x7f0000001400)="$eJzs3b9qk1EYB+DXNk1jFzuLwwcuTkGdXINUEANCJINORlqXRoSvS3Qxl+E1eEleRqc6HbGn1lg//9SmPWn6PBDOS34E3rPkkHDe5OWtN7vbb/dep88fo9OpohUxTSliM1ZiNbJrR+vKYd2OWdPvAQBwaQwGo17pHjhfdd0brUXE+i/J8FORhgAAAAAAAAAAADizpvv/cXDK+/9/8WruXQMAZ/F/9///5dRnUdR1b7TROKbp/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQzkFKN9IfHqX7AwDmr/n8vx7OfwBYXqf+/J8+FOkTAJgf3/8DwNXz7PmLJ71+f2tQVZ2I/elkOBnmNeePHve37laHNn+8an8yGa4e5/dyXv2cr8XGUX6/MW/Hnds5/5Y9fNo/ka/H9vlvHwAAAAAAAAAAAAAAAAAAABZCtzrWON/f7f4uz9XM7wOcmN9vxc3WhW0DAAAAAAAAAAAAAAAAAAAALrW9d+93R+PxTq1YmiIeLEQbF11ELEQby1KUfmcCAAAAAAAAAAAAAAAAAICrJ8/6fklZ6W4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoIz8///jnXq+RXv2mYiYpqz0dgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAl9jUAAP//eSSiAQ==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 3.574530254s ago: executing program 2 (id=118): r0 = syz_open_dev$evdev(0x0, 0x1e, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_usb_disconnect(r0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r1, 0x0, 0x0, 0x80, 0x9) syz_usb_connect$lan78xx(0x7, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x6, 0x8) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xfffffe07}}, 0x40440d0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r3, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0) ioctl$EVIOCRMFF(r0, 0x80085502, 0x0) unshare(0x2040600) socket$inet6(0xa, 0x2, 0x0) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_reuseport=0x28}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) 1.379952828s ago: executing program 1 (id=119): r0 = fsopen(&(0x7f0000000440)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000d80)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x100000000000000) 1.378149939s ago: executing program 4 (id=120): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x82, 0x57b3, 0x3, 0x9}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000600)=ANY=[@ANYBLOB='uni_xlate=1,shortname=win95,uni_xlate=0,uni_xlate=1,utf8=1,codepage=1250late=0,uni_xlate=1,utf8=1,nonumtail=0,iocharset=cp866,check=strict,iocharset=cp1251,\x00\x00\x00\x00\x00\x00\x00'], 0x81, 0x2ae, &(0x7f0000001980)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x201884e, &(0x7f0000000100)=ANY=[], 0x1, 0x27a, &(0x7f0000000a40)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x152e, &(0x7f0000002080)="$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") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = dup(r4) write$P9_RSTATFS(r5, 0x0, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r6, &(0x7f0000000640), 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x500d}}], 0x3467028987bc7b9, 0x9200000000000000) 1.254813421s ago: executing program 1 (id=121): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000002c0)=r2}, 0x20) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x54, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040004}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1, 0x0, 0x1) 1.100700521s ago: executing program 2 (id=122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000200)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="85", 0x1}, {&(0x7f0000000c80)="f2cc6f121ba466f8", 0x8}], 0x2, 0x7a00, 0x0, 0x1f) 507.698197ms ago: executing program 1 (id=123): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) 507.099617ms ago: executing program 3 (id=124): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000e00)='./file1\x00', 0x200012, &(0x7f0000000600)={[{@nodioread_nolock}, {@inlinecrypt}], [{@smackfstransmute={'smackfstransmute', 0x3d, '%.^(\',$-'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}, 0x4, 0x5a7, &(0x7f0000001d00)="$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") unlink(&(0x7f0000000240)='./file0/file0\x00') prlimit64(0x0, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) io_setup(0xa62e, &(0x7f0000000080)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000094c0)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}}], 0x1, 0x12001, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000005c0)={0x3, 'pimreg\x00', {0x5}, 0xa2f5}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = eventfd2(0x27, 0x80800) r5 = syz_open_dev$vcsn(&(0x7f0000000480), 0x3, 0x80000) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) io_submit(r1, 0x2, &(0x7f0000000580)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0xa1, r3, &(0x7f0000000380)="72ecaabe324ee724cb6aa0c15310d993a44c8ff6e97f4a4334f2a20844dfb3e2ffd6cf2a2d67d7d654365cda57e8ce9e9c6144a0fadcfc0738c9b061564baad36ad41d40885d69ed3de279522e57dadbb2a1abf090661540b2c7318da35d61cc8ddce9eec8d3f4955e17fe38d9ee4c40859f59451c95ec1482208458e406bd784039f342e4a58ec17e4395ef2bba70261409a5524b4202ddc29be559aed88f2299adc65c56a8b9cfd6cd8addb2af15748d9f787df896fb198f6da73d916c", 0xbe, 0x7, 0x0, 0x2, r4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, r5, &(0x7f00000004c0)="2aad24a99d372ce4eed15d24fba14fca81509cb4068197860f227e0739534ead596e4f90e189b3a9a64ce53600de25cd508764ac392050db2a34e09fd32747e8e7b897ad5743a49c121a97c462ff19e3ca351fe41378d3c2f606820a9f4a9558e7116f6b45fc", 0x66, 0xe9a2, 0x0, 0x3, r7}]) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000001b00000000000040000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) close(0x3) syz_usb_connect$cdc_ecm(0x6, 0x8a, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x40, 0x130, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0xa, {{0xa, 0x24, 0x6, 0x0, 0x0, "d3b3c72dca"}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x803d, 0x7, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x6, 0x800}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x4, 0x1, 0x5, 0x400, 0xc}, @mbim_extended={0x8, 0x24, 0x1c, 0xff, 0x4, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x6, 0x3, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @dmm={0x7, 0x24, 0x14, 0xc06, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0xfd, 0xd}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x59, 0x2, 0x9b}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x81, 0xf8, 0x4}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x300, 0xbf, 0x3, 0x8, 0x0, 0x61}, 0x1f, &(0x7f00000007c0)={0x5, 0xf, 0x1f, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x7, 0x3ff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x2, 0x6, 0x3}, @ptm_cap={0x3}]}, 0x4, [{0x87, &(0x7f0000000800)=@string={0x87, 0x3, "36f739e8697d13c476c3943642ed7bf908402404bb67e28b4b9eabd0c05a40bbe59e4a5fad6755c27853d4fe5c42367fa67d06a9c9909f93b5d84899ce66ff8dcdb1937a1b844d295290e7f292403ed80c7443f7b8cba1329254dde40f4dd5a6c36a7c570618ef2b9d77e657bf4f3e2065964b4b52a19ae51773497effa58079bd284c034e"}}, {0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="3303b308000008346a3621fd5b74e075225b1735c98ec20ab97873e21d1e41e39851fc93811ce0c12535c863d38205f455796ca0b7b9b6f139f2f2aae7dc0709f744"]}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xab4151e3de28bb02}}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 309.228819ms ago: executing program 2 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000580), 0x0, 0x0, 0x2) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x6, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0x7, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 659.989µs ago: executing program 1 (id=126): ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x5) r0 = open(&(0x7f00000002c0)='.\x00', 0x109000, 0x1) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000540)) r1 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xca, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0xbc, 0x800, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@lsrr={0x83, 0x3, 0x5d}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5bce23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @empty, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@loopback}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x4000}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x3, 0x0, 0x0, 0xab3]}]}}}}}}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='mnt/encrypted_dir\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000640)={{0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, {0xa, 0x4e23, 0x1, @private2, 0x3ff}, 0x0, {[0x0, 0x0, 0x7f, 0x3, 0x9, 0x542, 0x400, 0x5]}}, 0x5c) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000340)={[], [{@euid_lt={'euid<', r3}}, {@dont_appraise}, {@uid_gt={'uid>', r3}}, {@euid_eq={'euid', 0x3d, r3}}, {@flag='nomand'}, {@appraise}, {@pcr={'pcr', 0x3d, 0x2f}}]}, 0x0, 0x248, &(0x7f00000011c0)="$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") mkdirat(r0, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='mnt/encrypted_dir\x00', 0xc00, 0x0) setuid(0xee01) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x15, &(0x7f0000005c40)=0x80000000, 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) fstatfs(r2, &(0x7f0000000440)=""/234) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) syz_emit_ethernet(0xc0, &(0x7f0000000840)={@multicast, @broadcast, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x6}}, {@mpls_uc={0x8847, {[{0x1000}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x401}, {0x2}, {0x10}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xb, 0x0, 0x1}], @llc={@llc={0x4, 0xaa, "8a", "2db5941237db8dfe65476b84eba1d027154e574a0466ddf50ea63de753e966810dce5b35236e6c0c32297f6ada407fdced22314defcaca33b0804595dd297a939cb91aef6e981d6968504132f9c5286250aee6e1c02b9c8fe0f4813e5aff7fc7470441276a8316b58d36558a6b76df2764e5e75469912f5a1201b2c15c5491304d431f"}}}}}}, 0x0) fcntl$notify(r2, 0x402, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140000005e00250e000000000000000004000080"], 0x14}], 0x1}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000180)=0x4, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x140) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$eJzs08FLbGUUAPBzp4bp9d5zHvGgRe3e8CCwhCQSciCRYXCjYmUuWgsuaiG4cDEo46zN/oHCVDA30t6laSAKuhJpJfMPKG1mETdG7zgQtal8ovx+i/nuPZx7vvPxnQnutVwUn1w/pYWI+OPvcp5FROHm7afOQ+FxfLH1ZWWyPj408Xl8lMRXEVF597pcEt2qSff7tFNn5FEcrx4MX+bj8MXJfmktl8V3chGLEfH1+Xrx0T81nf9vZ+bh2C7vFZcas9Xl+XIhqrVm/3Rn8mIwiVicygZr52p9rf3zxv+7f3uir/afOa3WmqXjgY2jdOzi+6cf5PePWx/+epXVc/N/4GH5tD1Sje79//C8flZvjb7cnOvrfT12F1ayi/89Wz/5redO+wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6u7fJeKxqz1eX58sxptdbsn36/8s63lW+++/jHwYXJtwencu2s5Db3Ly418tlbrVkqDGwcpWMX8XS2HXizk9d7ey1wh957HLHUnr/O/T6vn9Vboy835/p63zrbXVjJ4ulfPyy+4kYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHujEotpOjSRi0jil6QbTwvXayf0c7aOZfGRwmfJ6sHw5dazwxcn+6W18Sy+8yRLPF8vdqv13PYx+Jf+DAAA//84pm1S") 438.16µs ago: executing program 0 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)={0x2f, 0x29, 0x1, {0x0, [{{0x80, 0x2, 0x2}, 0x2, 0x1, 0x18, './debug/split_huge_pages'}]}}, 0x3b) 0s ago: executing program 4 (id=128): r0 = socket(0x18, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="15e1ff0065ffff097b00000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xb, 0x0, {0x1}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="646144eff04f01b7db87d3f8e0c4e86e6f3d0000", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) umount2(&(0x7f0000000480)='./file0\x00', 0xa) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x184c8, &(0x7f0000001300)=ANY=[], 0x1, 0x262, &(0x7f0000001400)="$eJzs3b9qk1EYB+DXNk1jFzuLwwcuTkGdXINUEANCJINORlqXRoSvS3Qxl+E1eEleRqc6HbGn1lg//9SmPWn6PBDOS34E3rPkkHDe5OWtN7vbb/dep88fo9OpohUxTSliM1ZiNbJrR+vKYd2OWdPvAQBwaQwGo17pHjhfdd0brUXE+i/J8FORhgAAAAAAAAAAADizpvv/cXDK+/9/8WruXQMAZ/F/9///5dRnUdR1b7TROKbp/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQzkFKN9IfHqX7AwDmr/n8vx7OfwBYXqf+/J8+FOkTAJgf3/8DwNXz7PmLJ71+f2tQVZ2I/elkOBnmNeePHve37laHNn+8an8yGa4e5/dyXv2cr8XGUX6/MW/Hnds5/5Y9fNo/ka/H9vlvHwAAAAAAAAAAAAAAAAAAABZCtzrWON/f7f4uz9XM7wOcmN9vxc3WhW0DAAAAAAAAAAAAAAAAAAAALrW9d+93R+PxTq1YmiIeLEQbF11ELEQby1KUfmcCAAAAAAAAAAAAAAAAAICrJ8/6fklZ6W4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoIz8///jnXq+RXv2mYiYpqz0dgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAl9jUAAP//eSSiAQ==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. [ 22.544579][ T28] audit: type=1400 audit(1790365521.795:64): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.548214][ T280] cgroup: Unknown subsys name 'net' [ 22.567403][ T28] audit: type=1400 audit(1790365521.795:65): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.594739][ T28] audit: type=1400 audit(1790365521.835:66): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.595167][ T280] cgroup: Unknown subsys name 'devices' [ 22.711662][ T280] cgroup: Unknown subsys name 'hugetlb' [ 22.717320][ T280] cgroup: Unknown subsys name 'rlimit' [ 22.852956][ T28] audit: type=1400 audit(1790365522.105:67): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.876212][ T28] audit: type=1400 audit(1790365522.105:68): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.901182][ T28] audit: type=1400 audit(1790365522.105:69): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.913346][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.933325][ T28] audit: type=1400 audit(1790365522.195:70): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.958865][ T28] audit: type=1400 audit(1790365522.195:71): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.984833][ T28] audit: type=1400 audit(1790365522.235:72): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.985834][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.010919][ T28] audit: type=1400 audit(1790365522.235:73): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.903412][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.910613][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.918255][ T288] device bridge_slave_0 entered promiscuous mode [ 23.940495][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.947582][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.955146][ T288] device bridge_slave_1 entered promiscuous mode [ 23.986842][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.994014][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.001617][ T292] device bridge_slave_0 entered promiscuous mode [ 24.015586][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.022853][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.030498][ T291] device bridge_slave_0 entered promiscuous mode [ 24.038040][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.045293][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.052875][ T292] device bridge_slave_1 entered promiscuous mode [ 24.074138][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.081285][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.088697][ T291] device bridge_slave_1 entered promiscuous mode [ 24.152158][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.159252][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.166868][ T290] device bridge_slave_0 entered promiscuous mode [ 24.173722][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.180851][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.188317][ T289] device bridge_slave_0 entered promiscuous mode [ 24.209584][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.216679][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.224346][ T290] device bridge_slave_1 entered promiscuous mode [ 24.231051][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.238295][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.245904][ T289] device bridge_slave_1 entered promiscuous mode [ 24.418094][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.425215][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.439991][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.447079][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.454604][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.461694][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.513257][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.520378][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.527692][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.534844][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.550395][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.557484][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.564824][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.571902][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.581912][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.588992][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.596343][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.603409][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.624013][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.631373][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.638616][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.646144][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.653664][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.661113][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.668317][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.675773][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.683142][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.691789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.699266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.717521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.729934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.738390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.746863][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.753962][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.779547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.787387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.795021][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.803330][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.810470][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.818145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.826427][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.833486][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.840977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.849125][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.856216][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.902412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.912087][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.919179][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.926709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.935667][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.942772][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.950158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.958381][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.965483][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.973263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.981578][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.988610][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.996251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.004318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.012536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.020624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.028654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.036830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.045012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.053263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.061470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.069553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.077635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.095144][ T290] device veth0_vlan entered promiscuous mode [ 25.111742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.120326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.128436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.136307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.144184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.152805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.161284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.180374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.188175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.195923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.204559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.213041][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.220138][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.228295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.236894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.245337][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.252583][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.260595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.268949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.287482][ T288] device veth0_vlan entered promiscuous mode [ 25.301040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.309708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.318096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.326816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.335481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.343659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.351981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.360249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.368147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.376478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.384746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.392331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.399948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.408426][ T290] device veth1_macvtap entered promiscuous mode [ 25.417645][ T291] device veth0_vlan entered promiscuous mode [ 25.426216][ T292] device veth0_vlan entered promiscuous mode [ 25.433013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.441228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.449828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.459316][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.467077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.489981][ T288] device veth1_macvtap entered promiscuous mode [ 25.498404][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.507180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.515728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.524531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.533153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.541803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.554855][ T291] device veth1_macvtap entered promiscuous mode [ 25.573992][ T292] device veth1_macvtap entered promiscuous mode [ 25.581079][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 25.589065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.598521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.607781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.616465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.625007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.633563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.641953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.650324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.662168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.670626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.701262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.712476][ T312] loop1: detected capacity change from 0 to 512 [ 25.719887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.728431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.738684][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.747792][ T312] EXT4-fs (loop1): Test dummy encryption mode enabled [ 25.755367][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.764486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.768977][ T312] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #11: comm syz.1.2: casefold flag without casefold feature [ 25.777187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.787470][ T312] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2: couldn't read orphan inode 11 (err -117) [ 25.809718][ T312] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 25.824146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.836795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.853639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.870370][ T289] device veth0_vlan entered promiscuous mode [ 25.895427][ T312] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2'. [ 25.914237][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.923944][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.933542][ T323] loop2: detected capacity change from 0 to 256 [ 25.939650][ T289] device veth1_macvtap entered promiscuous mode [ 26.001076][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.060659][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.095035][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.103628][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.112133][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.041373][ T332] Invalid ELF header type: 3 != 1 [ 27.952338][ T316] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 28.015684][ T290] EXT4-fs (loop1): unmounting filesystem. [ 28.032564][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 28.032580][ T28] audit: type=1400 audit(1790365527.285:114): avc: denied { create } for pid=335 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.101984][ T28] audit: type=1400 audit(1790365527.315:115): avc: denied { shutdown } for pid=335 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.124536][ T28] audit: type=1400 audit(1790365527.315:116): avc: denied { write } for pid=335 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.145326][ T28] audit: type=1400 audit(1790365527.345:117): avc: denied { read } for pid=340 comm="syz.1.8" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.150162][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.170306][ T28] audit: type=1400 audit(1790365527.345:118): avc: denied { open } for pid=340 comm="syz.1.8" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.215530][ T28] audit: type=1400 audit(1790365527.345:119): avc: denied { ioctl } for pid=340 comm="syz.1.8" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.240111][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.247848][ T28] audit: type=1400 audit(1790365527.345:120): avc: denied { create } for pid=340 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.268713][ T28] audit: type=1400 audit(1790365527.345:121): avc: denied { write } for pid=340 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.289139][ T28] audit: type=1400 audit(1790365527.345:122): avc: denied { read } for pid=340 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.379551][ T329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.383503][ T19] usb 5-1: unable to get BOS descriptor or descriptor too short [ 28.395752][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.405989][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 28.415130][ T19] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 28.429460][ T19] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 28.438583][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 28.441688][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.447120][ T19] usb 5-1: Product: syz [ 28.458256][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 28.461104][ T19] usb 5-1: Manufacturer: syz [ 28.471941][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 28.484640][ T24] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 28.497530][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 28.507155][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.515449][ T24] usb 1-1: Product: syz [ 28.519989][ T24] usb 1-1: Manufacturer: syz [ 28.524694][ T24] usb 1-1: SerialNumber: syz [ 28.531172][ T334] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 28.571230][ T329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.580175][ T329] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 28.592814][ T329] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 28.602000][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.610117][ T329] usb 4-1: Product: syz [ 28.614319][ T329] usb 4-1: Manufacturer: syz [ 28.618945][ T329] usb 4-1: SerialNumber: syz [ 28.699503][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.750811][ T24] usb 1-1: USB disconnect, device number 2 [ 28.802810][ T19] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 28.810053][ T19] usb 5-1: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 28.819303][ T19] usb 5-1: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 28.828960][ T19] usb 5-1: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 28.840994][ T19] usb 5-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 28.842216][ T28] audit: type=1400 audit(1790365528.095:123): avc: denied { write } for pid=335 comm="syz.3.7" name="wireless" dev="proc" ino=4026532308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.850533][ T19] usb 5-1: No streaming interface found for terminal 2. [ 28.880543][ T336] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.884244][ T19] usb 5-1: USB disconnect, device number 2 [ 28.919452][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 28.926374][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.944918][ T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.957488][ T310] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.966829][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.975432][ T310] usb 3-1: Product: syz [ 28.980015][ T310] usb 3-1: Manufacturer: syz [ 28.984736][ T310] usb 3-1: SerialNumber: syz [ 29.120334][ T349] loop1: detected capacity change from 0 to 256 [ 29.127117][ T349] ======================================================= [ 29.127117][ T349] WARNING: The mand mount option has been deprecated and [ 29.127117][ T349] and is ignored by this kernel. Remove the mand [ 29.127117][ T349] option from the mount to silence this warning. [ 29.127117][ T349] ======================================================= [ 29.210277][ T310] usb 3-1: 0:2 : does not exist [ 29.226729][ T310] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 29.238819][ T329] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 29.248169][ T310] usb 3-1: USB disconnect, device number 2 [ 29.257770][ T329] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 29.267874][ T329] usb 4-1: unit 2 not found! [ 29.272562][ T329] usb 4-1: unit 0 not found! [ 29.305682][ T329] usb 4-1: USB disconnect, device number 2 [ 29.748838][ T358] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 31.253054][ T362] loop4: detected capacity change from 0 to 4096 [ 31.259993][ T362] EXT4-fs: Ignoring removed orlov option [ 31.277310][ T362] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.308279][ T362] EXT4-fs (loop4): Test dummy encryption mode enabled [ 31.343925][ T374] xt_hashlimit: size too large, truncated to 1048576 [ 31.390302][ T362] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.561571][ T384] Invalid ELF header type: 3 != 1 [ 31.605069][ T380] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 31.707647][ T380] : renamed from team_slave_1 [ 31.921587][ T359] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.949515][ T310] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 32.119907][ T359] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 32.129468][ T310] usb 3-1: Invalid ep0 maxpacket: 16 [ 32.141894][ T359] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 32.154163][ T359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.169802][ T359] usb 5-1: Product: syz [ 32.178210][ T359] usb 5-1: Manufacturer: syz [ 32.238701][ T359] usb 5-1: SerialNumber: syz [ 32.279521][ T310] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 32.366856][ T60] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.479163][ T394] Invalid ELF header type: 3 != 1 [ 32.799446][ T310] usb 3-1: Invalid ep0 maxpacket: 16 [ 32.804938][ T310] usb usb3-port1: attempt power cycle [ 32.829543][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.860901][ T60] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.874197][ T60] usb 2-1: config 1 interface 0 has no altsetting 0 [ 32.890990][ T60] usb 2-1: New USB device found, idVendor=05ac, idProduct=027e, bcdDevice= 0.40 [ 32.909450][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.917580][ T60] usb 2-1: Product: syz [ 32.927680][ T60] usb 2-1: Manufacturer: syz [ 32.932674][ T60] usb 2-1: SerialNumber: syz [ 32.954392][ T362] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 32.963137][ T362] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.12: bg 0: block 98: padding at end of block bitmap is not set [ 32.977733][ T362] EXT4-fs (loop4): Remounting filesystem read-only [ 33.030698][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.041128][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 33.050423][ T6] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 33.060577][ T6] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 33.073232][ T6] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 33.082773][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.091059][ T6] usb 4-1: Product: syz [ 33.095409][ T6] usb 4-1: Manufacturer: syz [ 33.100329][ T6] usb 4-1: SerialNumber: syz [ 33.110462][ T389] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 33.154938][ T387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.165288][ T387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.176089][ T387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.185663][ T387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.199444][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 33.199460][ T28] audit: type=1400 audit(1790365532.405:147): avc: denied { read } for pid=386 comm="syz.1.20" dev="nsfs" ino=4026532498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.207846][ T60] usb 2-1: USB disconnect, device number 2 [ 33.232643][ T310] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 33.259492][ T28] audit: type=1400 audit(1790365532.405:148): avc: denied { open } for pid=386 comm="syz.1.20" path="net:[4026532498]" dev="nsfs" ino=4026532498 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.283841][ T28] audit: type=1400 audit(1790365532.405:149): avc: denied { read write } for pid=386 comm="syz.1.20" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.291668][ T402] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 33.311904][ T28] audit: type=1400 audit(1790365532.405:150): avc: denied { open } for pid=386 comm="syz.1.20" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 33.312124][ T310] usb 3-1: Invalid ep0 maxpacket: 16 [ 33.348299][ T6] usb 4-1: USB disconnect, device number 3 [ 33.361404][ T28] audit: type=1400 audit(1790365532.445:151): avc: denied { setopt } for pid=386 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.381796][ T28] audit: type=1400 audit(1790365532.455:152): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 33.489490][ T310] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 33.514301][ T359] usb 5-1: USB disconnect, device number 3 [ 33.529785][ T310] usb 3-1: Invalid ep0 maxpacket: 16 [ 33.535361][ T310] usb usb3-port1: unable to enumerate USB device [ 33.583957][ T291] EXT4-fs (loop4): unmounting filesystem. [ 33.618412][ T28] audit: type=1400 audit(1790365532.865:153): avc: denied { create } for pid=406 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.652211][ T28] audit: type=1400 audit(1790365532.895:154): avc: denied { create } for pid=406 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.677974][ T405] device syzkaller0 entered promiscuous mode [ 33.684201][ T28] audit: type=1400 audit(1790365532.895:155): avc: denied { create } for pid=406 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.704774][ T28] audit: type=1400 audit(1790365532.895:156): avc: denied { mmap_zero } for pid=406 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 33.790908][ T411] overlayfs: failed to resolve './file0': -2 [ 33.841793][ T417] loop1: detected capacity change from 0 to 256 [ 33.884717][ T419] loop3: detected capacity change from 0 to 512 [ 33.930457][ T419] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.974175][ T419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.008056][ T419] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.27: invalid indirect mapped block 9 (level 0) [ 34.041835][ T419] EXT4-fs (loop3): 1 truncate cleaned up [ 34.047580][ T419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.115161][ T288] EXT4-fs (loop3): unmounting filesystem. [ 34.623004][ T430] loop2: detected capacity change from 0 to 256 [ 34.660439][ T430] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 34.906010][ T441] Invalid ELF header type: 3 != 1 [ 35.113680][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.130888][ T445] loop3: detected capacity change from 0 to 256 [ 35.206571][ T447] Invalid ELF header type: 3 != 1 [ 35.409049][ T310] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 35.418236][ T317] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.445190][ T445] loop3: detected capacity change from 0 to 512 [ 35.455497][ T445] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 35.509481][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 35.516016][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.558265][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.569078][ T6] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.582507][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.668809][ T6] usb 2-1: Product: syz [ 35.674545][ T6] usb 2-1: Manufacturer: syz [ 35.679452][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.699461][ T6] usb 2-1: SerialNumber: syz [ 35.704907][ T310] usb 1-1: not running at top speed; connect to a high speed hub [ 35.726169][ T310] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 35.735547][ T310] usb 1-1: config 0 has no interface number 0 [ 35.742123][ T310] usb 1-1: config 0 interface 125 altsetting 16 endpoint 0x8C has invalid maxpacket 52070, setting to 64 [ 35.753765][ T310] usb 1-1: config 0 interface 125 altsetting 16 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 35.767242][ T310] usb 1-1: config 0 interface 125 has no altsetting 0 [ 35.768414][ T452] loop2: detected capacity change from 0 to 4096 [ 35.776736][ T310] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=2f.b4 [ 35.792315][ T452] EXT4-fs: Ignoring removed orlov option [ 35.801029][ T452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.810141][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.818499][ T452] EXT4-fs (loop2): Test dummy encryption mode enabled [ 35.826080][ T310] usb 1-1: Product: syz [ 35.832207][ T310] usb 1-1: Manufacturer: syz [ 35.837128][ T310] usb 1-1: SerialNumber: syz [ 35.890216][ T310] usb 1-1: config 0 descriptor?? [ 35.893397][ T447] syz.4.33 (447) used greatest stack depth: 22472 bytes left [ 35.906185][ T437] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 35.949216][ T6] usb 2-1: 0:2 : does not exist [ 35.996921][ T452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.017415][ T6] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 36.043356][ T43] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 36.058511][ T6] usb 2-1: USB disconnect, device number 3 [ 36.133560][ T310] usb 1-1: USB disconnect, device number 3 [ 36.269804][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.369448][ T329] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 36.409450][ T222] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.547652][ T464] loop1: detected capacity change from 0 to 512 [ 36.560625][ T329] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 36.571612][ T464] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.573460][ T329] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.592139][ T222] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 36.602232][ T464] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.39: invalid indirect mapped block 9 (level 0) [ 36.616079][ T329] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 36.625928][ T464] EXT4-fs (loop1): 1 truncate cleaned up [ 36.631839][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.639692][ T464] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 36.642144][ T329] usb 4-1: Product: syz [ 36.652997][ T329] usb 4-1: Manufacturer: syz [ 36.657748][ T329] usb 4-1: SerialNumber: syz [ 36.672603][ T222] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 36.681920][ T222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.690203][ T222] usb 3-1: Product: syz [ 36.694578][ T222] usb 3-1: Manufacturer: syz [ 36.699265][ T222] usb 3-1: SerialNumber: syz [ 36.730761][ T290] EXT4-fs (loop1): unmounting filesystem. [ 36.788613][ T471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 36.956090][ T480] mmap: syz.1.45 (480) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.000015][ T485] netlink: 'syz.0.46': attribute type 12 has an invalid length. [ 37.019517][ T485] netlink: 'syz.0.46': attribute type 29 has an invalid length. [ 37.027296][ T485] netlink: 148 bytes leftover after parsing attributes in process `syz.0.46'. [ 37.049498][ T485] netlink: 'syz.0.46': attribute type 1 has an invalid length. [ 37.069472][ T485] netlink: 'syz.0.46': attribute type 2 has an invalid length. [ 37.167184][ T329] usb 4-1: 0:1 : does not exist [ 37.172360][ T329] usb 4-1: 0:2 : does not exist [ 37.198816][ T329] usb 4-1: USB disconnect, device number 4 [ 37.222638][ T498] loop4: detected capacity change from 0 to 256 [ 37.309742][ T501] Invalid ELF header type: 3 != 1 [ 37.637350][ T504] loop0: detected capacity change from 0 to 512 [ 37.654912][ T452] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.35: bg 0: block 98: padding at end of block bitmap is not set [ 37.673297][ T504] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.684691][ T504] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.51: invalid indirect mapped block 9 (level 0) [ 37.698658][ T504] EXT4-fs (loop0): 1 truncate cleaned up [ 37.705186][ T504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.714058][ T452] EXT4-fs (loop2): Remounting filesystem read-only [ 37.729967][ T289] EXT4-fs (loop0): unmounting filesystem. [ 37.779154][ T516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.54'. [ 37.789316][ T516] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.842818][ T521] loop3: detected capacity change from 0 to 512 [ 37.851568][ T521] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.873522][ T521] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.56: inode has both inline data and extents flags [ 37.894468][ T524] loop0: detected capacity change from 0 to 128 [ 37.901630][ T521] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.56: couldn't read orphan inode 15 (err -117) [ 37.964324][ T521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.997244][ T524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.012785][ T524] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.036393][ T289] EXT4-fs (loop0): unmounting filesystem. [ 38.127668][ T536] loop0: detected capacity change from 0 to 512 [ 38.218766][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 38.218784][ T28] audit: type=1400 audit(1790365537.465:193): avc: denied { setopt } for pid=535 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.265675][ T309] usb 3-1: USB disconnect, device number 7 [ 38.289570][ T329] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 38.325871][ T540] loop0: detected capacity change from 0 to 512 [ 38.340802][ T540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.356221][ T292] EXT4-fs (loop2): unmounting filesystem. [ 38.364560][ T540] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.62: invalid indirect mapped block 9 (level 0) [ 38.388902][ T540] EXT4-fs (loop0): 1 truncate cleaned up [ 38.396397][ T543] loop2: detected capacity change from 0 to 256 [ 38.402951][ T540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.412288][ T543] exfat: Deprecated parameter 'namecase' [ 38.421119][ T543] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 38.433822][ T543] exFAT-fs (loop2): IO charset macgre not found [ 38.479440][ T329] usb 5-1: Using ep0 maxpacket: 16 [ 38.485815][ T329] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.503182][ T289] EXT4-fs (loop0): unmounting filesystem. [ 38.535978][ T329] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.560823][ T329] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.570119][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.578231][ T329] usb 5-1: Product: syz [ 38.583173][ T329] usb 5-1: Manufacturer: syz [ 38.589082][ T329] usb 5-1: SerialNumber: syz [ 38.683726][ T288] EXT4-fs (loop3): unmounting filesystem. [ 38.726305][ T28] audit: type=1400 audit(1790365537.975:194): avc: denied { read write } for pid=550 comm="syz.0.67" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.770827][ T554] overlayfs: failed to verify origin (/syz0, ino=116, err=-116) [ 38.778565][ T554] overlayfs: failed to verify upper root origin [ 38.799646][ T28] audit: type=1400 audit(1790365538.015:195): avc: denied { open } for pid=550 comm="syz.0.67" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.825784][ T329] usb 5-1: 0:2 : does not exist [ 38.830406][ T545] loop2: detected capacity change from 0 to 40427 [ 38.839778][ T28] audit: type=1400 audit(1790365538.015:196): avc: denied { ioctl } for pid=550 comm="syz.0.67" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 38.839855][ T329] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 38.873153][ T28] audit: type=1400 audit(1790365538.015:197): avc: denied { read write } for pid=550 comm="syz.0.67" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.898451][ T28] audit: type=1400 audit(1790365538.015:198): avc: denied { open } for pid=550 comm="syz.0.67" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.928984][ T28] audit: type=1400 audit(1790365538.015:199): avc: denied { unlink } for pid=550 comm="syz.0.67" name="#1" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.930070][ T545] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.964543][ T329] usb 5-1: USB disconnect, device number 4 [ 39.026968][ T545] F2FS-fs (loop2): Start checkpoint disabled! [ 39.035329][ T28] audit: type=1400 audit(1790365538.295:200): avc: denied { write } for pid=551 comm="syz.3.66" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 39.041046][ T545] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 39.073713][ T545] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 39.105105][ T545] F2FS-fs (loop2): access invalid blkaddr:3 [ 39.111928][ T545] CPU: 1 PID: 545 Comm: syz.2.64 Not tainted syzkaller #0 [ 39.119095][ T545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.129203][ T545] Call Trace: [ 39.132599][ T545] [ 39.135754][ T545] __dump_stack+0x21/0x24 [ 39.140171][ T545] dump_stack_lvl+0x110/0x170 [ 39.144902][ T545] ? __cfi_dump_stack_lvl+0x8/0x8 [ 39.149993][ T545] dump_stack+0x15/0x24 [ 39.154192][ T545] __f2fs_is_valid_blkaddr+0xd2e/0x15a0 [ 39.159782][ T545] f2fs_is_valid_blkaddr+0x23/0x30 [ 39.164941][ T545] f2fs_map_blocks+0xcc1/0x4060 [ 39.169860][ T545] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 39.175197][ T545] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 39.180706][ T545] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 39.186666][ T545] ? clear_nonspinnable+0x60/0x60 [ 39.191753][ T545] f2fs_precache_extents+0x1ad/0x290 [ 39.197095][ T545] ? __cfi_f2fs_precache_extents+0x10/0x10 [ 39.202956][ T545] ? __this_cpu_preempt_check+0x13/0x20 [ 39.208563][ T545] f2fs_fiemap+0x159/0x1970 [ 39.213118][ T545] ? __cfi___switch_to+0x10/0x10 [ 39.218089][ T545] ? avc_has_extended_perms+0x869/0xed0 [ 39.223755][ T545] ? __cfi_f2fs_fiemap+0x10/0x10 [ 39.228731][ T545] ? avc_has_extended_perms+0x9d5/0xed0 [ 39.234305][ T545] ? __kasan_check_write+0x14/0x20 [ 39.239441][ T545] do_vfs_ioctl+0x13c7/0x1cd0 [ 39.244160][ T545] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 39.249933][ T545] ? futex_wait+0x5f1/0x900 [ 39.254540][ T545] ? __cfi_futex_wait+0x10/0x10 [ 39.259422][ T545] ? ioctl_has_perm+0x1b8/0x4f0 [ 39.264308][ T545] ? ioctl_has_perm+0x3a6/0x4f0 [ 39.269183][ T545] ? has_cap_mac_admin+0x370/0x370 [ 39.274328][ T545] ? __kasan_slab_free+0x11/0x20 [ 39.279296][ T545] ? do_futex+0x2e2/0x430 [ 39.283648][ T545] ? selinux_file_ioctl+0x3ad/0x4c0 [ 39.288891][ T545] ? __cfi_do_futex+0x10/0x10 [ 39.293594][ T545] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 39.299260][ T545] ? __fget_files+0x2d1/0x330 [ 39.303960][ T545] ? security_file_ioctl+0x95/0xc0 [ 39.309103][ T545] __se_sys_ioctl+0x9f/0x1b0 [ 39.313804][ T545] __x64_sys_ioctl+0x7b/0x90 [ 39.318423][ T545] x64_sys_call+0x58b/0x9a0 [ 39.323055][ T545] do_syscall_64+0x4c/0xa0 [ 39.327495][ T545] ? clear_bhb_loop+0x30/0x80 [ 39.332198][ T545] ? clear_bhb_loop+0x30/0x80 [ 39.336897][ T545] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 39.342807][ T545] RIP: 0033:0x7f0e58b9e159 [ 39.347251][ T545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.366965][ T545] RSP: 002b:00007f0e59ae1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.375399][ T545] RAX: ffffffffffffffda RBX: 00007f0e58e25fa0 RCX: 00007f0e58b9e159 [ 39.383386][ T545] RDX: 0000200000005880 RSI: 00000000c020660b RDI: 0000000000000004 [ 39.391378][ T545] RBP: 00007f0e58c3506b R08: 0000000000000000 R09: 0000000000000000 [ 39.399404][ T545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.407392][ T545] R13: 00007f0e58e26038 R14: 00007f0e58e25fa0 R15: 00007ffef2640eb8 [ 39.415392][ T545] [ 39.460887][ T10] kworker/u4:1: attempt to access beyond end of device [ 39.460887][ T10] loop2: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 39.536302][ T572] netlink: 'syz.3.72': attribute type 4 has an invalid length. [ 39.550704][ T572] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.72'. [ 39.665147][ T581] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.674530][ T581] F2FS-fs (loop0): Unable to read 1th superblock [ 39.681070][ T581] I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.690371][ T581] F2FS-fs (loop0): Unable to read 2th superblock [ 39.865045][ T582] loop3: detected capacity change from 0 to 256 [ 40.456655][ T582] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 40.467040][ T582] exFAT-fs (loop3): invalid boot region [ 40.472702][ T582] exFAT-fs (loop3): failed to recognize exfat type [ 41.366110][ T576] sched: RT throttling activated [ 41.382273][ T28] audit: type=1400 audit(1790365540.635:201): avc: denied { read } for pid=586 comm="syz.4.75" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 41.423035][ T584] Invalid ELF header type: 3 != 1 [ 41.464973][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.630952][ T589] serio: Serial port ptm0 [ 41.634868][ T28] audit: type=1400 audit(1790365540.635:202): avc: denied { open } for pid=586 comm="syz.4.75" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 41.662199][ T568] capability: warning: `syz.1.70' uses 32-bit capabilities (legacy support in use) [ 41.731287][ T593] loop1: detected capacity change from 0 to 512 [ 41.747380][ T593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.762846][ T589] serio: Serial port ptm0 [ 41.785517][ T595] loop2: detected capacity change from 0 to 128 [ 41.806777][ T593] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.76: invalid indirect mapped block 9 (level 0) [ 41.820144][ T317] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 41.823154][ T593] EXT4-fs (loop1): 1 truncate cleaned up [ 41.835605][ T593] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 41.844200][ T580] loop3: detected capacity change from 0 to 128 [ 41.845414][ T317] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.860899][ T317] Buffer I/O error on dev loop3, logical block 0, async page read [ 41.869186][ T580] FAT-fs (loop3): bread failed, FSINFO block (sector = 2049) [ 41.921360][ T290] EXT4-fs (loop1): unmounting filesystem. [ 42.000520][ T24] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.018819][ T24] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.045218][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.059213][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 42.078562][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.144282][ T24] usb 1-1: config 0 descriptor?? [ 42.213201][ T601] loop1: detected capacity change from 0 to 40427 [ 42.231392][ T601] F2FS-fs (loop1): invalid crc value [ 42.268192][ T601] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.369528][ T601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 42.440732][ T601] syz.1.80: attempt to access beyond end of device [ 42.440732][ T601] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 42.467240][ T601] Zero length message leads to an empty skb [ 42.696086][ T609] loop3: detected capacity change from 0 to 40427 [ 42.720869][ T609] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 42.749560][ T609] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 42.757945][ T609] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 42.812416][ T599] loop2: detected capacity change from 0 to 131072 [ 42.877916][ T599] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.940634][ T599] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.988926][ T574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.013521][ T574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.083543][ T24] sony 0003:054C:09CC.0001: Failed to get calibration data from Dualshock 4 [ 43.102240][ T24] sony 0003:054C:09CC.0001: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.0-1/input0 [ 43.113880][ T24] sony 0003:054C:09CC.0001: failed to claim input [ 43.123437][ T24] usb 1-1: USB disconnect, device number 4 [ 43.196791][ T628] fido_id[628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 43.282875][ T611] loop4: detected capacity change from 0 to 131072 [ 43.298950][ T611] F2FS-fs (loop4): invalid crc value [ 43.334340][ T611] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.357256][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 43.357271][ T28] audit: type=1400 audit(1790365542.605:219): avc: denied { execute } for pid=631 comm="syz.3.88" path=2F6D656D66643A1033717D329ACEAF0386E7C0148F5ED5FDA90DAC374194EBCD09202864656C6574656429 dev="tmpfs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.450801][ T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.462657][ T611] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.477528][ T611] syz.4.82 (pid 611) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 43.489345][ T28] audit: type=1400 audit(1790365542.735:220): avc: denied { create } for pid=610 comm="syz.4.82" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 43.629454][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 43.640944][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.663100][ T643] loop2: detected capacity change from 0 to 512 [ 43.665779][ T60] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 43.681638][ T60] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1577, setting to 1024 [ 43.691323][ T643] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.704430][ T60] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 43.716585][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.725630][ T60] usb 2-1: Product: syz [ 43.730133][ T60] usb 2-1: Manufacturer: syz [ 43.735500][ T643] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.90: invalid indirect mapped block 9 (level 0) [ 43.741950][ T60] usb 2-1: SerialNumber: syz [ 43.772103][ T646] loop0: detected capacity change from 0 to 512 [ 43.778615][ T643] EXT4-fs (loop2): 1 truncate cleaned up [ 43.794947][ T646] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.91: inode has both inline data and extents flags [ 43.811117][ T643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 43.820055][ T646] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.91: couldn't read orphan inode 15 (err -117) [ 43.845158][ T646] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.871333][ T292] EXT4-fs (loop2): unmounting filesystem. [ 43.898810][ T653] tipc: Started in network mode [ 43.904480][ T653] tipc: Node identity ac1414aa, cluster identity 4711 [ 43.911810][ T653] tipc: Enabling of bearer rejected, failed to enable media [ 43.923629][ T653] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 43.932607][ T653] tipc: Enabled bearer , priority 10 [ 43.968221][ T60] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 44.022062][ T289] EXT4-fs (loop0): unmounting filesystem. [ 44.041190][ T60] usb 2-1: USB disconnect, device number 4 [ 44.081443][ T634] syz.3.88 (634) used greatest stack depth: 22152 bytes left [ 44.128197][ T660] loop2: detected capacity change from 0 to 256 [ 44.178698][ T660] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x11190001, checksum : 0x1119abd0) [ 44.189171][ T660] exFAT-fs (loop2): invalid boot region [ 44.194887][ T660] exFAT-fs (loop2): failed to recognize exfat type [ 44.291456][ T660] FAT-fs (loop2): bread failed, FSINFO block (sector = 2049) [ 45.189577][ T669] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 45.210859][ T28] audit: type=1400 audit(1790365544.465:221): avc: denied { mount } for pid=667 comm="syz.0.98" name="/" dev="ramfs" ino=17541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 45.250616][ T669] 9pnet_fd: Insufficient options for proto=fd [ 45.270435][ T28] audit: type=1400 audit(1790365544.505:222): avc: denied { mounton } for pid=667 comm="syz.0.98" path="/" dev="ramfs" ino=17541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 45.312175][ T310] tipc: Node number set to 2886997162 [ 45.320813][ T669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3328 sclass=netlink_route_socket pid=669 comm=syz.0.98 [ 45.346674][ T657] F2FS-fs (loop4): invalid crc value [ 45.366238][ T673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 45.385268][ T657] F2FS-fs (loop4): Found nat_bits in checkpoint [ 45.409120][ T28] audit: type=1400 audit(1790365544.655:223): avc: denied { connect } for pid=677 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.420981][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.447932][ T673] FAT-fs (loop2): Filesystem has been set read-only [ 45.466920][ T657] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 45.476870][ T28] audit: type=1400 audit(1790365544.675:224): avc: denied { write } for pid=677 comm="syz.3.100" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.514115][ T678] 9pnet_fd: Insufficient options for proto=fd [ 45.523155][ T673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 45.531143][ T657] syz.4.94: attempt to access beyond end of device [ 45.531143][ T657] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.548401][ T673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 45.574086][ T673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 45.586054][ T28] audit: type=1400 audit(1790365544.835:225): avc: denied { ioctl } for pid=683 comm="syz.0.101" path="socket:[17566]" dev="sockfs" ino=17566 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.614062][ T673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 45.627628][ T673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 45.638329][ T673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 45.649060][ T673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 45.661274][ T689] FAULT_INJECTION: forcing a failure. [ 45.661274][ T689] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.670204][ T673] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 45.690095][ T686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.699727][ T679] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 45.708954][ T689] CPU: 0 PID: 689 Comm: syz.3.103 Not tainted syzkaller #0 [ 45.717344][ T689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.727517][ T689] Call Trace: [ 45.730824][ T689] [ 45.733781][ T689] __dump_stack+0x21/0x24 [ 45.738253][ T689] dump_stack_lvl+0x110/0x170 [ 45.742971][ T689] ? __cfi_dump_stack_lvl+0x8/0x8 [ 45.748076][ T689] dump_stack+0x15/0x24 [ 45.752270][ T689] should_fail_ex+0x3bf/0x510 [ 45.756991][ T689] should_fail+0xb/0x10 [ 45.761177][ T689] should_fail_usercopy+0x1a/0x20 [ 45.766249][ T689] _copy_from_user+0x1e/0xc0 [ 45.770916][ T689] __sys_bpf+0x2a0/0x850 [ 45.775193][ T689] ? bpf_link_show_fdinfo+0x330/0x330 [ 45.780595][ T689] ? __cfi_ksys_write+0x10/0x10 [ 45.785484][ T689] ? debug_smp_processor_id+0x17/0x20 [ 45.790901][ T689] __x64_sys_bpf+0x7c/0x90 [ 45.795368][ T689] x64_sys_call+0x488/0x9a0 [ 45.799947][ T689] do_syscall_64+0x4c/0xa0 [ 45.804412][ T689] ? clear_bhb_loop+0x30/0x80 [ 45.809210][ T689] ? clear_bhb_loop+0x30/0x80 [ 45.813930][ T689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.819864][ T689] RIP: 0033:0x7fca7c99e159 [ 45.824319][ T689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.843958][ T689] RSP: 002b:00007fca7d790028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.852423][ T689] RAX: ffffffffffffffda RBX: 00007fca7cc25fa0 RCX: 00007fca7c99e159 [ 45.860433][ T689] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 45.868429][ T689] RBP: 00007fca7d790090 R08: 0000000000000000 R09: 0000000000000000 [ 45.876435][ T689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.884438][ T689] R13: 00007fca7cc26038 R14: 00007fca7cc25fa0 R15: 00007fff5f842e78 [ 45.892452][ T689] [ 45.899360][ T686] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.102: invalid indirect mapped block 9 (level 0) [ 45.913807][ T686] EXT4-fs (loop1): 1 truncate cleaned up [ 45.919570][ T686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.975112][ T290] EXT4-fs (loop1): unmounting filesystem. [ 46.018138][ T692] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.460892][ T692] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.540515][ T28] audit: type=1400 audit(1790365545.795:226): avc: denied { write } for pid=691 comm="syz.0.105" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.565886][ T692] fs-verity: sha512 using implementation "sha512-avx2" [ 46.607127][ T692] syz.0.105 (692) used greatest stack depth: 20448 bytes left [ 46.637824][ T289] EXT4-fs (loop0): unmounting filesystem. [ 46.731687][ T713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 46.749918][ T317] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 46.779505][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 46.980965][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.999736][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.010204][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 47.019264][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 47.087581][ T721] Invalid ELF header type: 3 != 1 [ 47.116440][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 47.140500][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 47.183048][ T24] usb 2-1: Product: syz [ 47.205572][ T24] usb 2-1: Manufacturer: syz [ 47.413671][ T723] set_capacity_and_notify: 6 callbacks suppressed [ 47.413692][ T723] loop0: detected capacity change from 0 to 4096 [ 47.429597][ T329] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 47.430322][ T723] EXT4-fs: Ignoring removed orlov option [ 47.460035][ T723] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.468778][ T723] EXT4-fs (loop0): Test dummy encryption mode enabled [ 47.511615][ T723] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.646047][ T329] usb 4-1: unable to get BOS descriptor or descriptor too short [ 47.660131][ T329] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 36, changing to 7 [ 47.693208][ T329] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 47.860696][ T729] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 48.407414][ T28] audit: type=1400 audit(1790365547.655:227): avc: denied { ioctl } for pid=731 comm="syz.4.115" path="socket:[17670]" dev="sockfs" ino=17670 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.432413][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.454301][ T329] usb 4-1: Product: syz [ 48.470094][ T24] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 48.479809][ T732] loop4: detected capacity change from 0 to 4096 [ 48.489082][ T28] audit: type=1400 audit(1790365547.735:228): avc: denied { create } for pid=733 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.497135][ T329] usb 4-1: Manufacturer: syz [ 48.513525][ T24] usb 2-1: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 48.518926][ T732] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.532406][ T734] loop2: detected capacity change from 0 to 512 [ 48.538181][ T24] usb 2-1: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 48.540325][ T732] EXT4-fs (loop4): Test dummy encryption mode enabled [ 48.556986][ T732] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c0a8, mo2=0003] [ 48.565410][ T329] usb 4-1: SerialNumber: syz [ 48.571491][ T24] usb 2-1: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 48.584588][ T24] usb 2-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 48.594112][ T24] usb 2-1: No streaming interface found for terminal 2. [ 48.596357][ T732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.615508][ T24] usb 2-1: USB disconnect, device number 5 [ 48.769507][ T222] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.999609][ T28] audit: type=1400 audit(1790365548.235:229): avc: denied { create } for pid=736 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 49.020324][ T377] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 98: padding at end of block bitmap is not set [ 49.120389][ T222] usb 1-1: too many configurations: 53, using maximum allowed: 8 [ 49.170976][ T222] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 49.203973][ T377] EXT4-fs (loop0): Remounting filesystem read-only [ 50.754051][ T222] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.783624][ T222] usb 1-1: Product: syz [ 50.799418][ T222] usb 1-1: Manufacturer: syz [ 50.815253][ T222] usb 1-1: SerialNumber: syz [ 50.837713][ T291] EXT4-fs (loop4): unmounting filesystem. [ 50.845228][ T28] audit: type=1400 audit(1790365550.095:230): avc: denied { read } for pid=746 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 50.906203][ T751] loop4: detected capacity change from 0 to 256 [ 50.907046][ T329] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 50.925117][ T28] audit: type=1400 audit(1790365550.145:231): avc: denied { mount } for pid=746 comm="syz.1.119" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 50.930717][ T329] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 50.972656][ T751] loop4: detected capacity change from 0 to 512 [ 50.979678][ T329] usb 4-1: unit 2 not found! [ 50.987330][ T329] usb 4-1: unit 0 not found! [ 50.995694][ T751] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 51.016386][ T329] usb 4-1: USB disconnect, device number 5 [ 51.101129][ T393] usb 1-1: USB disconnect, device number 5 [ 51.129091][ T758] loop2: detected capacity change from 0 to 512 [ 51.136423][ T758] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.182401][ T758] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.122: invalid indirect mapped block 9 (level 0) [ 51.196940][ T758] EXT4-fs (loop2): 1 truncate cleaned up [ 51.333137][ T763] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 51.340861][ T763] FAT-fs (loop4): Filesystem has been set read-only [ 51.352745][ T763] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 51.469216][ T758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.890036][ T292] EXT4-fs (loop2): unmounting filesystem. [ 51.897536][ T767] loop3: detected capacity change from 0 to 1024 [ 51.934835][ T767] ext4: Unknown parameter 'smackfstransmute' [ 51.951208][ T28] audit: type=1326 audit(1790365551.205:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=768 comm="syz.1.126" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cffd9e159 code=0x7ffc0000 [ 51.979121][ T769] loop1: detected capacity change from 0 to 128 [ 52.006456][ T769] ext4: Unknown parameter 'euid<00000000000000000000' [ 52.019216][ T289] EXT4-fs (loop0): unmounting filesystem. [ 52.048736][ T28] audit: type=1326 audit(1790365551.225:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=768 comm="syz.1.126" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cffd9e159 code=0x7ffc0000 [ 52.077296][ T28] audit: type=1326 audit(1790365551.225:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=768 comm="syz.1.126" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cffd9e159 code=0x7ffc0000 [ 52.119349][ T28] audit: type=1326 audit(1790365551.225:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=768 comm="syz.1.126" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cffd9e159 code=0x7ffc0000 [ 52.154379][ T28] audit: type=1326 audit(1790365551.225:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=768 comm="syz.1.126" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f4cffd9e159 code=0x7ffc0000 [ 52.233595][ T773] loop4: detected capacity change from 0 to 512 [ 52.265338][ T776] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 52.277133][ T776] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 52.285577][ T776] CPU: 0 PID: 776 Comm: syz.0.127 Not tainted syzkaller #0 [ 52.292819][ T776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.303190][ T776] RIP: 0010:vsscanf+0x196/0x24b0 [ 52.308230][ T776] Code: 48 c7 c6 70 13 8e 87 e8 c8 23 7e fc 41 83 fe 25 74 4d 45 85 f6 0f 84 b6 21 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4f 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 52.328317][ T776] RSP: 0018:ffffc900123bf5e0 EFLAGS: 00010246 [ 52.334437][ T776] RAX: 0000000000000000 RBX: ffffffff85b0dd81 RCX: 0000000000000001 [ 52.342454][ T776] RDX: ffffffff84f34d48 RSI: ffffffff878e1370 RDI: 0000000000000030 [ 52.350464][ T776] RBP: ffffc900123bf710 R08: ffff888117d81440 R09: 0000000000000002 [ 52.358480][ T776] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff85b0dd80 [ 52.366489][ T776] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 52.374496][ T776] FS: 00007f48a7f996c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 52.383479][ T776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.390101][ T776] CR2: 000000110c25373f CR3: 0000000114bac000 CR4: 00000000003506b0 [ 52.398125][ T776] DR0: 000000000000000c DR1: 0000000000000000 DR2: 0000000000000000 [ 52.406130][ T776] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 52.414140][ T776] Call Trace: [ 52.417454][ T776] [ 52.420419][ T776] ? __cfi_vsscanf+0x10/0x10 [ 52.425063][ T776] ? __this_cpu_preempt_check+0x13/0x20 [ 52.430657][ T776] ? xfd_validate_state+0x70/0x150 [ 52.435814][ T776] sscanf+0xdf/0x130 [ 52.439746][ T776] ? __kasan_check_write+0x14/0x20 [ 52.444892][ T776] ? __cfi_sscanf+0x10/0x10 [ 52.449433][ T776] ? mutex_lock_interruptible+0x93/0x1b0 [ 52.455096][ T776] ? memcpy+0x56/0x70 [ 52.459099][ T776] split_huge_pages_write+0x37a/0x10d0 [ 52.464590][ T776] ? _raw_spin_unlock+0x4c/0x70 [ 52.469668][ T776] ? finish_task_switch+0x16b/0x7c0 [ 52.474902][ T776] ? __cfi_split_huge_pages_write+0x10/0x10 [ 52.480827][ T776] ? __schedule+0xcbb/0x1700 [ 52.485470][ T776] ? __kasan_check_read+0x11/0x20 [ 52.490524][ T776] ? preempt_schedule_common+0xbe/0xf0 [ 52.496014][ T776] ? preempt_schedule+0xbc/0xd0 [ 52.500911][ T776] ? ttwu_do_wakeup+0x468/0x490 [ 52.505795][ T776] ? __kasan_check_write+0x14/0x20 [ 52.510937][ T776] ? debugfs_file_get+0x362/0x450 [ 52.515997][ T776] ? avc_policy_seqno+0x1b/0x70 [ 52.520882][ T776] ? selinux_file_permission+0x2a5/0x510 [ 52.526559][ T776] full_proxy_write+0x121/0x1d0 [ 52.531449][ T776] ? __cfi_full_proxy_write+0x10/0x10 [ 52.536843][ T776] vfs_write+0x3fb/0xd00 [ 52.541112][ T776] ? __cfi_vfs_write+0x10/0x10 [ 52.545900][ T776] ? __kasan_check_write+0x14/0x20 [ 52.551036][ T776] ? mutex_lock+0x93/0x1b0 [ 52.555560][ T776] ? __cfi_mutex_lock+0x10/0x10 [ 52.560443][ T776] ? __fdget_pos+0x2cd/0x380 [ 52.565058][ T776] ? ksys_write+0x70/0x260 [ 52.569509][ T776] ksys_write+0x14a/0x260 [ 52.573883][ T776] ? __cfi_ksys_write+0x10/0x10 [ 52.578776][ T776] ? fpregs_restore_userregs+0x128/0x260 [ 52.584446][ T776] __x64_sys_write+0x7b/0x90 [ 52.589055][ T776] x64_sys_call+0x27b/0x9a0 [ 52.593587][ T776] do_syscall_64+0x4c/0xa0 [ 52.598029][ T776] ? clear_bhb_loop+0x30/0x80 [ 52.602753][ T776] ? clear_bhb_loop+0x30/0x80 [ 52.607455][ T776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.613448][ T776] RIP: 0033:0x7f48a719e159 [ 52.617880][ T776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.637544][ T776] RSP: 002b:00007f48a7f99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.646107][ T776] RAX: ffffffffffffffda RBX: 00007f48a7425fa0 RCX: 00007f48a719e159 [ 52.654181][ T776] RDX: 000000000000003b RSI: 0000200000000980 RDI: 0000000000000003 [ 52.662253][ T776] RBP: 00007f48a723506b R08: 0000000000000000 R09: 0000000000000000 [ 52.670243][ T776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.678316][ T776] R13: 00007f48a7426038 R14: 00007f48a7425fa0 R15: 00007fff5a117348 [ 52.686317][ T776] [ 52.689348][ T776] Modules linked in: [ 52.695003][ T776] ---[ end trace 0000000000000000 ]--- [ 52.701347][ T776] RIP: 0010:vsscanf+0x196/0x24b0 [ 52.706353][ T776] Code: 48 c7 c6 70 13 8e 87 e8 c8 23 7e fc 41 83 fe 25 74 4d 45 85 f6 0f 84 b6 21 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4f 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 52.726236][ T776] RSP: 0018:ffffc900123bf5e0 EFLAGS: 00010246 [ 52.733318][ T776] RAX: 0000000000000000 RBX: ffffffff85b0dd81 RCX: 0000000000000001 [ 52.741451][ T776] RDX: ffffffff84f34d48 RSI: ffffffff878e1370 RDI: 0000000000000030 [ 52.749512][ T776] RBP: ffffc900123bf710 R08: ffff888117d81440 R09: 0000000000000002 [ 52.757552][ T776] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff85b0dd80 [ 52.765759][ T776] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 52.773877][ T776] FS: 00007f48a7f996c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 52.782972][ T776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.789899][ T776] CR2: 000000110c25363b CR3: 0000000114bac000 CR4: 00000000003506a0 [ 52.798253][ T776] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.806440][ T776] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.814651][ T776] Kernel panic - not syncing: Fatal exception [ 52.821343][ T776] Kernel Offset: disabled [ 52.825783][ T776] Rebooting in 86400 seconds..