last executing test programs: 5.185111831s ago: executing program 1 (id=262): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f00000003c0)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r0, &(0x7f0000000300), &(0x7f0000001080)=""/255}, 0x20) syz_usb_connect$uac3(0x3, 0x92, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x8d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x40, 0x2, {0x8, 0xb, 0x2, 0x0, 0x1, 0x20}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0xd, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x6, 0x7, 0xc0}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x3, 0x10, {0xa, 0x25, 0x25, 0x8, 0x3, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xc, 0x5, 0x2, {0xa, 0x25, 0x25, 0x4, 0xd, 0x7}}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 4.59383598s ago: executing program 2 (id=266): prlimit64(0x0, 0x7, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsmount(0xffffffffffffffff, 0x0, 0x1) (async) r2 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000005c0), 0x9d, 0x4ed, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000000)={0xaa, 0x22}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000000)={0xaa, 0x22}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa1f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000031000000000000000100000000000000e8df757f6f", @ANYRES32=r5, @ANYBLOB="000000000300"/28]) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x62020600) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0xfffffffb, 0x4) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0xfffffffb, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000280)={'#! ', './file1'}, 0xb) 4.314485828s ago: executing program 2 (id=267): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) epoll_create1(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpid() r2 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2d, 0x4, 0x6, 0x100, 0x2, @mcast2, @remote, 0x80, 0x700, 0x200000, 0x1}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x6770c000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x29, 0x86, 0x0, 0x2, 0x2e, @remote, @mcast2, 0x7800, 0x7800, 0x9, 0x9}}) 4.313849498s ago: executing program 2 (id=268): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x92285000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000010429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e392040095210000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.278936539s ago: executing program 2 (id=269): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x14f) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c3264241b700", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x111091, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x140) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000040)={r3, 0x1000, {0x0, 0x0, 0x0, 0x3, 0x4000000000001001, 0x0, 0x0, 0x8, 0xc, "faf98317e5b2149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0098aebdc25f5ab60c9e6d6000000000ea3ad00", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c50997d3bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1c6aa54cc50a1fcaed33ba1fa79a", "67162e43bc050000009b2d910e00000001002500", [0xfffffffffffffce2, 0x200006]}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, 0x0, 0x0, 0x5) sendfile(r4, r2, 0x0, 0x210) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f00000002c0)="800034ca269bb73c693313a7ecd1f46e39a3ab78e1e0e141db4091272867def9744d52b726f54ac2dfbb80526ab030692f891415e34057ea9613d1b566a162747288", 0xfffffffffffffefb, 0x400c4c0, &(0x7f0000000000)={0xa, 0x7ffb, 0xc9, @loopback, 0x5}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x4, 0x4) 4.267178049s ago: executing program 2 (id=271): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) ppoll(&(0x7f0000000300)=[{r3, 0x3328}], 0x1, 0x0, 0x0, 0x0) close(r2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000000000000700000001440e05", @ANYRES16=r5], 0x20}}], 0x1, 0x400c4) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) unlink(&(0x7f0000000080)='./file0/file1\x00') setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f00000000c0)={0x5c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'none\x00', 0x1, 0xfffffbff, 0x11}, 0x2c) 4.158257932s ago: executing program 2 (id=272): syz_usb_connect$midi(0x0, 0x51, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x2305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x30, 0xcd, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0xe, [], [{{0x9, 0x5, 0x6, 0x92108c5533d703ca, 0x3ff, 0xf7, 0xf7, 0x9, {0x6, 0x25, 0x1, 0x2, "2d19"}}}, {{0x9, 0x5, 0xa, 0x3, 0x28, 0x4, 0x66, 0xfb, {0x5, 0x25, 0x1, 0x1, "b7"}}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0xf, 0x5, 0x3, {0x7, 0x25, 0x1, 0x3, "b8bae3"}}}]}}}}}]}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @ndisc_ra={0x88}}}}}}, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$notify(r2, 0x402, 0x20) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001e00431b000000eaa139474653c8f4df", @ANYRES32=0x0, @ANYBLOB="0000000060040000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x816) r3 = dup(r1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000040)="0022ac87d7e4c42231263963f1c69a5628b06aed71", 0x15, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@delchain={0x34, 0x65, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x3, 0x4}, {0xfff1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9a}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}}, 0x8000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cf766647c6f3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r0, 0x1d, 0x0, @void}, 0x10) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 4.157090042s ago: executing program 32 (id=272): syz_usb_connect$midi(0x0, 0x51, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x2305, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x1, 0x0, 0x30, 0xcd, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0xe, [], [{{0x9, 0x5, 0x6, 0x92108c5533d703ca, 0x3ff, 0xf7, 0xf7, 0x9, {0x6, 0x25, 0x1, 0x2, "2d19"}}}, {{0x9, 0x5, 0xa, 0x3, 0x28, 0x4, 0x66, 0xfb, {0x5, 0x25, 0x1, 0x1, "b7"}}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0xf, 0x5, 0x3, {0x7, 0x25, 0x1, 0x3, "b8bae3"}}}]}}}}}]}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], @ndisc_ra={0x88}}}}}}, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x17e) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) fcntl$notify(r2, 0x402, 0x20) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001e00431b000000eaa139474653c8f4df", @ANYRES32=0x0, @ANYBLOB="0000000060040000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x816) r3 = dup(r1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000040)="0022ac87d7e4c42231263963f1c69a5628b06aed71", 0x15, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@delchain={0x34, 0x65, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x3, 0x4}, {0xfff1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9a}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x34}}, 0x8000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cf766647c6f3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r0, 0x1d, 0x0, @void}, 0x10) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x5) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 2.92237281s ago: executing program 1 (id=283): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)="4973f13bff6cbfa892627b12574cfb89f5c732ce80a498a5ab843ed8c93c74f8951010a5ed0f5d3d4dc38348a48c3cfd1c55976dfaf6be1474750b02a3cce19207ca4183ebf62f6e68ea35a451b3f16289451e97f93f0a3c050211c5383cf6b9ed06a39cc0e92eb765ae12e65658532a0382bb893da6d3124a3cc6ac80260f45c3610d744f34880fd79a5a3c97c2bd4c4deb7b808b280d02b6ea65cb26b58a51a637e416f430d4614918c902443ae83629e9dcc6a55c45f7da414b76ff55a7fb1b7a318ebd044a4089", 0xc9, 0x2) 2.882284071s ago: executing program 1 (id=284): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x4004011) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x38}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = eventfd(0x993) read$eventfd(r3, &(0x7f0000000280), 0x8) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0), 0x80100, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0xfa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, 0x8, 0x80, 0x1ff, 0xffffffdc}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x8f76}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe492, 0x0, 0x0, 0x0, 0x9}, @exit, @call={0x85, 0x0, 0x0, 0x67}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x3, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1], 0x0, 0x10, 0x8}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000001900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f00000006c0)={0x11dc, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x144, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x65, 0x2, "fd81bae42dbccbe8d964f07c83b702f9167f6d0a81c361ac44edd4604019ca6b1862d4945146fd149ede6d8ae51778962c5e5a824fd201a078ae65dc878c136feaf40eb55c91e01f91b5e7b1b44a0917b2d8a7d5e834a42648fe6c3889bbeb00a2"}}, {0x50, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x4b, 0x1, "059719b59306bd87c8c9dcab28cd02d76a74ff801a88e6da92d0ff7a9386125785d291dab7ffe64be6101938c638e7c595953c5dce31a569f048ff26aeb460241d16f7c6a5be00"}}, {0x84, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x7d, 0x1, "431793cfa818f033d66c0919f9f919f2a70c5a5bb9b1c97981fd2b813b4570ff2ccfaccfcf4dd6de87edafd7f9c8ba4c9fd91fae917d3e6229c6d89bcee68e03ebbe8d453b3f513512eee8ceb0d1c6ed890d74c9239dd09120b00632a3a40c38873778e02c83e3553a7949853c88eb9b3b42adaf8d4211ee00"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1054, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "121c2bb1809d380a103a6e0a2f5818ea8d8e0645ba0885dd24ddeeab81e380aa9d70f458c83b96a521721d3508d7a2a20f21d7416a5b770e4b3cd78c6e07e397962f4170ad8635a17d99cf878301221706610d3ec637e430dd6ffdcca95ed7fb533580012b978e3ef6c7cba8dd98ef2f7483bd94857718a74cb16535bbf547d156026ae7561a162d7ae175cb50de0c19738c517a5701fb2f339e78b5729cbb7e7b3b89bc6133c034202e3bb9bd8eef183d5d13bc18954d1ce3d29efe4e0d4787b7c8de6681e91a312666677ce26f64966e9e870e1092302b2f03af849e6ae903048c5d6117571cbc1530b6b5cc16323a74af2ffd2cdf41f75d3bbcde11f336afe1734d9bb030a80a5d71ac6ac9fbf2dfe3b6a77b6de29abac5f4682bd617327cda0a11be47b41e044a2f5eb20d2d276e7ffdb00d223453f879b5c364321c7580109906efb90088d668cd8ba98e0e7f91fd73b6ce841c712aaf32f66168a292d7feb7165848ddeabdd8b2583171d0a7d5688bbf3ced2c39249784bfbfea563b36340c9c73288c359f6f168d115e88f81f3bca02eb02df01f1c04ae0f05ed7f0639f451e2b3256e7471544b7b17cab8380131077e78a92d82a25682d626871ef13365454d962d795da117a2a11eb4752c1cace5cad0e9ad94e0893708175db88563d7bf9e3c8c25ca9ac2d2f30bfe3dbe930d3382d31652dfb4403df8eaf95d17fd94ecede8faa1ea320241457adf782399a9f0093d6f082de1d4c5a7a1b9ac1e069f02b719f0bb32cda75fb9bce7b236a041282f2ebca98733ec479e4ee9518c3a9c2aa5f9b654541f867cf95d887e570dbbd9191401a708a68525f72e0850992ae2824376cbd2681651e3d26ba808d206604fcd160cdba0e9ac75ed915f27b44465ce4877784d15b96b5bac8968cf94b580c4d07cf9f9a80dc47a2fc18421f8e4e7d3baf7237807f8a8fd264f180eef6c5ad83e4631787c5b61211611053a6d6b69312a37e19d1cff1f0110afb57a16497f4e9da517b7fe28b76b0e5063218a9c435b6b3c825c854307d5fc15f82f5fce28ef550e4c4f18f4825e2a1cc7b615624ba909a60f1994d2980bc9c1d9eae0edcec0be773ddc60276be226365f57e39027906827cf122a94584c93cea7f31307ff1ff3c03cf36e32f89fa9905b87e28f6617399490787ada3f57a45fb21d08d72d9c0d73fdc5da37db546e0890e36c6e3295942c2e824cefb15bc286dd364ec4956a392190777ec76cd49133decfd682a78c244857fd2053ef97a6b073d60fa41f66a07bbca7c4a115a1aede40c0c09e55efc07085775034e68f1310a97d31c02054bbfcce36230b281f13a068458ecaedc05ccc24dd460770f448231b7290f6275cfffcfb83d6954b0affb61378ed57034671166861aeef819870f6eff525373c621b892ca16889e106dbd9850e5944101ba28a7cc0b07d3ffd65e4d50fb74679ca11b2d391bbeb657e2250e0cb2e46231c66dbf09b7d77ca1d00daab7b649085f27151d56402a3cb6053e1772d56eab78d4c8fe6079e3105ebab97ce1a1affc2f8ea4ff7603ccb1838429dacca1aadb41b750815e807dc7910df3d70c48d166e4bc303244c7421b568fd7c32fb3cedd74c7429ecd3351617168188f6157017aad6aad0e1df211cab7dd680020010abdec56056c010c75b2e0f0f274c97ce8c776f03c2179e1de55addad1b6142a8245273db77df265c74eefa7abba94a5bff1abad669a7d5c6f27d5e95a75acfb6f6b46fd4783a113d41e0e7845875b82e7e2be3c36b00107f7369b159f518e8da1d1af7693f01349a11871755f3e8746ab41c5e51d3f2e91c219e561e6b1f426b20879402034fe080cafc762de7daf7149d84b0b17e83eec434e2d86d640c2607a7fbe12f03ae5aa70a89c7765c10c6eb8fda1c8b88df0efc109f2008735de37c6698ccaef9698c42d4c6d20a1c788da7e97e6282b2d4760f63ceaf572e856454a4b6d67392155ed0dc7e4927956f55f32bfddb1cb12d5b062db5c0a6ed00e8a4d63ed47b4b596cb960744fcd88ad0ad73e47dc496e2c9a48a2bf9c07901ab905f1221b8b2254648ddf311d648a51a0173d8e9b956bef4dedb949803e597b8fcd037b3ef32e56c839b68a140f198d5a73d66d64db81100ec242e39fb5d5194656745dfc6448d2604565f27cc203725aa90a61c6f42775243fb2309ab7be39773f5874791a86b148f08d25e67929eda038928d8780fd871675cbd5ec2c4150b85e27e3f5d729e032de45dd53cf5d59316d441a077a4ba516e4980155a10b5a6a1b0b9b7c9708499f7c3c0df504dd731539e620aa7f728b2577a842f932fae7a6c3daf5d54e835e41fdd970cf89f2a9f9f4ea97382848f617f2ac3cc23aaec2c630aab93a5af2b8bb9c0c19616874f72bd867df292462ab8627c1a8b6dd7a52b7a89b49ccd45f462476b1c38ec9785497df744cf51ebf6ec88633383e99a7759e8dee8a02c5824f146404cfdb09247eeba767da260fe4fd77d4d52460a411199e0652abddcbab91e769e041e2c7027ce7d2cde351be7bd6f04590439f9823461a7f0b7e3d4ec35dc1992ebcbb5660f895764a035ad2b25c883b6debbb8dd3f9a4a6fd0251ffcb1ec46866b36a44a1f98f368a1ba750d73a5fa637f72758d836334e783b73367b704f386baf5759997fc52e3759fd5099f155b10a822c60241fee35b18a22adbf531bf0642e70d10de1fc44489bb753d2621286e0a1ee338618b191f0dbb64bd6a3ad127c63b32e4b75be460ac744c329f1b4cc2b3c11d4b658738261247e129dfefe5afea3a2d356080a91170ddc8fb8d5459845511aad5eecb94c964ab087340e4fa4f47c6fd408fd78ca8bb996c3e2dd454229d576b80a1d13c1d64c45616941b6e84924f1f9512bf0cc4e3ee54be845ea8a197c5982d1cb82e8f4e96e8402e064cf76bda829e9d35d480d9703a93e014b8ae2aefb04d1e0c598f188f679298a963ec581fac50b2e7d8b1451ede31fc9d1075c06794f6df84ff384767ff033378fc598b4c93acb32ef3da04f2faaabafbff1690657159310bf1da2a0747411e2e1e2e6e10b465dd45870b3490b2024d5d8d7d6504ab231c64024284e62e1341540685434714b9cb785f5abf84601e0ed883523d214be78b590c9e1876e4d0cb97df0da2040ff47cb8269b30ba3f0adb37696adf7d69dcb0cdbd596fc5c6fde0ad31f1904db0d5748e1a3e3ce63098d5c00fbd1c6b70ea6cf3e2373b614998c9e69515b8b3debbf25e57ba0ff60b81cef79788100027c4c18c48c160b1334821cbcac4d9845c1e7799af725e9f81df2db769807a5475faf78614bd2105c95e85275505acda81f83cd882d731798db76a16f6b5326260bee9934c026e21d89750733c1594ecd7bcc45cb1de6e624fbd7238d1009384cec70d5a1eaabed8df3087d48deae145cc81e28870920fd7336d09a1e4fde927edf4ff27b45730548d64ef94e4f9b4094fcabb0fcca3fdfaf4a1b93bb786f8b8d5971c005fe312f2ec1822015f3e48b2bae3e3dd3c813dee7f83e627a8872f690651f35f143e3e5b96343b9b3dab51ed8d48fc74124714e402ec1f081b3c10748612608ead27f9a0a39ad2a7e7d6f84e4f284551548eab8793e9b316a848d7d6fe44422b846a02f120eb70b4a681c33e3687446a9eb99f28acc19d7b501fd6845a4aea0b62141e6712c2c42707b146789505d1832ed0568d43f633d949f25c175a23c979f5e69b888f22d3d99b890552f8727df6582ff1c2e05cf6f914d4da2c19f374f2ebff7456a37dc3bf2f3ddb16236bfde2dbf71bf86cc0454083b7d99292ea8d3b178821776acb166c8e3c1d9677a0dbd8d8f9750e868a010009a46048ff2e4ebb48130afcfd2819b69542d28b6588c510da63d60d9da6132218efa3ba0bebeed5b76689842f9eb105551698e4cee3967a6b48cff15ee392c918a3b0fc10a9acfeb7962e43f84341268e5e83242d528abfe96cac5abfb27256f924f74436da8152ef6d048f585f8092234a4ce7cb7afc68c6b52441fbfc22da1e85fe2d1ae65402c40d7e65268c6ecf6ce16d8659cfd904499ffa4e00e882d3e5241cb76201f9b4bb6931a0250ddcc8ef02a53bd24d81213305dda70a5e196a61ab892c16b9ffc6b8b9e0250b0228c0bded59374b918d24644a9ef636d1352c3faa9250101bf1129ffcfde457f1e79a452f915b8acfc310124902af2fd5e10d22c09f7d54613428da471b4ea6d7fd3d159d913705c38bff99b67659b97060ebb629c7a15273e3e4bb983cb53d257aa00dfa35703cee735f67c73ebcf1384096023f3e86d8ce0a4ad29b9d5c554d7777c2ccac00c6ccb879a1b49022e5b27ff8ad861759bc4a52eaa3fc5e9872e2b4d19442d7b12719b8bed42c5b84133f86281a52b35338bed910a60410bb76379760866f738c75165a6649d9f281524694890c7c55f499b95e862b43409ee9d38f6aaade736bdfa8534d4266f1c589d9238511c7d8a37f1478068b36f7fe927b12c0ec24e9bfb35b249d7f58e28de6a87d78e09372b382359cef3883b1b1b9faf93cdd86222756e29f1fe2f68941db8acb318da246ec7f5348b9f7aed191d102ae7c96271297f0d1588c58cb09fcab9dd01112f0caab2b7ab676fe0e0d1ad77c309029913feb0c5055bedcd791a8758365fd57e78cc75aca298be8893ea98708a5ced320d5b626b4a6e34448aa24e7574d811c2215ac2f1587008dabb08e4bfe68153b7f117de1825a2d4d7909fc3f8504ccc138fde39d16ee70245db18a23c444db3fb3378236cf38455975f66f9f0900af03376b8335221512fd771cebc5936c22e88fa18247237947f2d79dff515c29888fa222a94661fa42ba47f64a240a6c46cf5eafa41e7b7d3fbcb077f2fab4553045ea5104a5085de8abfebe08195478e9594e1acb835b39e68f33d1b2993bcedf61fa3d84294f965a891397af4eb753bb3432dd193900757bbed556dbf0eb6c0f281f532950f098114539f015fed35d8dff6b28153cb89e1ac19d0544ec0ca9703abbe25006fe62f5badabce89a5d1dab2de94317971dda3cd4ea386d7e6815c78f739d2a185add812a5f9651fbe495631ead5a1b6fba1421b704056afeabea1e3e032164f0c46616c58a2f4721ba2612c6f6a839d1107656376319a3c3635b471b7e390f5141190be0f6d24bbc1780c37caf37324fee9cb6c68d9a019e448c19a800e95dcd9a0d1d43516f10e2052ebecb66544ac3fe1fce6f16cc0989aa33869983b1e762f88c2344cd6ced2a9114dca0b976c71b006ea6c19e7f114eadde8466af42b385e2e16429cfd1bb8528a678bdd4661d2d7c9dd9c07bd82088723c65830dd65d2eb20701b2b5d3e95602ab583412de0784758e176927c6d7bd7c4c3d21711faa4ad9a8d69d734fbe3ee54987f65de23832a51e45ec441b9773658faa4d74d5c26bdfd6d2eba67c0a702ce5acefa10a8efc70e7354c345c41eecbf6a753e858869525311330c51fdde62f3b13b07eee2db4468342ee5733a5ca87b77ef953be0304fb9c5edf750da1ab69312e67f03460c4f7245e538b1bb9a209989ce6925b6747d7ef2962771ce5000759c899ba7dcadf28c75b964d4dae96e7d2eff7c849f161b26f442b20a1efcece86723ad106e8b79b3de5993a3c0bf72a4118130c3cacea30126b1ede8944a5bbd0c61408318ad7fe29d43bc7cf2217afb1351ae07dac7f27be5821b7c6fd2bf4b90cc432b1f4d9abf1c3b229a8cd9eac33f1438616840fe15d391527"}}, {0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x41, 0x2, "a20683bf38096f25e9fa0cc4aa8133e20b88c8ffa85883f46a4fc721c3dd2b8d0ec3e05b95a741816cf5dd3c0dcb43cb5b7e94812c6f3d495a154b59f6"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf25}}]}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x400000c0}, 0x800) pwrite64(r6, &(0x7f0000001940)="f999e59f021b02d708a6a845c365522915a1f073e05729d0a61edc6b86f82277eebdc74b3e8c9b86e6d9f9b8df288831d479c6fd65fe24e51c6d25abd8b228456d7d9b6f2b40ab9ef52e6eedc14fa75e7b5390751a13ed65cf35901e17d25eb288d4aaba4d31847e881fd894397e8d0abacd54cef0c284e8e8e908db2aaa12a084827fe7510f8825a2c02331a47ddc8c2ca4d1b389bcc1cae10d4b7a2bd86fa035701faa4b4fd10caceb54351407d761897a683127476ee809de6600", 0xbc, 0x5) connect$inet6(r4, &(0x7f0000001a00)={0xa, 0x4e24, 0x5d3, @mcast2, 0x2}, 0x1c) sendmmsg(r4, &(0x7f0000001a40), 0x0, 0x44080) getpeername$inet6(r4, &(0x7f0000001a80)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001ac0)=0x1c) io_setup(0x0, &(0x7f0000001b00)=0x0) io_submit(r7, 0x2, &(0x7f0000001d80)=[&(0x7f0000001c00)={0x0, 0x0, 0x0, 0x2, 0x7, r6, &(0x7f0000001b40)="e02fe2fa6d3344c74526eb40b2bb735a6e99fa346446e5608cf31ae3214e10dd8f1e2dd1b624975dd1ae2a4b686fcd290efd9fcb9ce0e767376297eaa7fe62d9de3a5ed0ced58658c7c1aebd23b0d8fe4159c4d59f62fd94d036477ec378e92ed0719699f0d782a86268b28e9336f348c985a39179f7352e5b312e46c1138415403d3d0714b7a5d42dcb2d20134e8beaee54b6de98c9b5bd52c99af2b5ac", 0x9e, 0x0, 0x0, 0x0, r4}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000001c40)="7540183a8af13c9c3706753245205e77582f58e943cd68e4af14ebef50a5d724e86e482805a23057f9c4e54d0f7f01ff41f031ff44f983ad718f47c99eece3870ec2616f705e14fdefd3e15d31deb132302fcb557bc62852b1578b6578277850e2c32b93931a0448006264fbc18b67127530b934cfc22905ef87a2544828d4f5c64b85eb5d92e71e7402be4970e460dd8a62100ed797cb3b857cacdd1ce2cf888a2687c741710e8d3e406f2c75ecb13939d62eede92966f19596c837e71fb14ec6a67c0e773c344567b3d9ba4e", 0xcd, 0x5, 0x0, 0x1}]) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x3c, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20004000) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xaf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x40008d0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002100)={@fallback=r6, 0x31, 0x1, 0x8, &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002040)=[0x0], &(0x7f0000002080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000020c0)=[0x0], 0x0}, 0x40) r11 = accept4$unix(r4, &(0x7f0000002180), &(0x7f0000002200)=0x6e, 0x80000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002140)={@fallback=r11, r4, 0x12, 0x0, 0x0, @void, @value=r6, @void, @void, r10}, 0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000002280), r0) sendmsg$FOU_CMD_GET(r12, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x28, r13, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x10) getsockname$inet(r4, &(0x7f0000002380)={0x2, 0x0, @initdev}, &(0x7f00000023c0)=0x10) renameat2(r9, &(0x7f0000002400)='./file0\x00', r4, &(0x7f0000002440)='./file0\x00', 0x2) sendmmsg$unix(r11, &(0x7f00000025c0)=[{{&(0x7f0000002480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002500)="02e3e00c3aec5053ffe0fdc23f635f43a63bdc2293c2d505bd8815a2bac7e46a56857089ab35a3", 0x27}], 0x1, &(0x7f0000002580), 0x0, 0x40480d0}}], 0x1, 0x8000) setsockopt$inet_tcp_int(r4, 0x6, 0x24, &(0x7f0000002600)=0x7, 0x4) 2.669700398s ago: executing program 1 (id=286): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x11c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f0000001580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) gettid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.530451332s ago: executing program 5 (id=289): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x2000, 0x0, 0x157, 0x40000) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x404000, 0xa6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000040)={0x9, r1, 'id0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000157000/0x2000)=nil, 0x2000, 0x0, 0x157, 0x40000) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x404000, 0xa6) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) fchown(r1, 0x0, 0xee01) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000040)={0x9, r1, 'id0\x00'}) (async) 2.400154916s ago: executing program 3 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0xffffff06}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x4, 0xfe8}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000240)=[{0x1, 0x1, 0xe, 0x7}, {0x1, 0x1, 0x10, 0x5}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x2, 0x8, 0xc}, {0x4, 0x3, 0xc, 0x7}, {0x3, 0x3, 0xf, 0xb}, {0x2, 0x2, 0x9, 0xa}, {0x4, 0x3, 0xa, 0x8}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r0, 0x0, 0x97, 0xd2, &(0x7f0000000380)="1214ebcb15bef2c344f374b83620c4aeda47712e60be05a5ccfe2fb53f70f355571236fe08668d4c9dd680151c9f4e0605f5a19964e71b64bd8aacf35384d8e50255b46771f87bf63a9c1a96298191f25a77a8548b7fcb5aaee8f22dda4f47e99243d1dfe90641225696462b2ddeaa2dfcba4fe1b30ddb7c328d2c657bd0580c00b602825f39feb2b227ea25541f3f384e8c670127be64", &(0x7f0000000440)=""/210, 0x2, 0x0, 0x1000, 0x80, &(0x7f0000000540)="219cfe8edd6e1d861f2b1bb52e70169fa5713279c74f422622c2b9014b845289d6995e701318536bdba8e749725d5bb91cded0396270dfe03ef8b005c6c396cc73413c3124f17a1eafd9c9e44675430340fdd66deacb6f353204b31b59735fdfa3deecd05b33773fdeef14b27d1a988ccd2e4a24dc830905d7ebb5bc2bb2552982af5eb797c04e7b16586d7de69d79a34a4a5a265c21ce1bf77960933a4bc31d58ef16ff7c6df08d8fdd9bd6afedf6e65eab5fed4b21c6bd6812ecafdf65d1821a24443c0be358e0d39cd0d210441df6886849ccaf87eef116c73648a90c42c8331f36d8721d17b00c43f06a0aa063146d314563c067586e8bb8586d5d7adea6db7dc7f87a1e464608de1e87c81fa333da54328ed66c98576d2fe66fc5fb7f7487e8a6394e88006570664ba169dd1513bc5d6bd9be2f69cbbc0f7ec36991943258f0b4d73756094b7de10ef511921df9e95b4470b34a7199d10dc5fe99199f01175c0616527991997045ce7faa8ec7b662f6c2c2bb142fc689762e71d2bb78d921ebe6d5921d85bbd7582daa2342e7f67371cf1f5c8e1b7cf9f868db0597779e6f5f360745063b49146213d094c3801a1503def229cd0fbb9aceef3de646000ad129c01ee00f65ba3221490d748e3f19f348840241b1b0560f89db41c6659b302c8771b059fb25c4722be3d696b012386acd831df4d7daa15cff967442efa2b9c8d4a23ddfb7a1f48922e2dafe50d5564e300847c3d5cd2e3835b96dceb2b2e605ba3d38d0f8c22e9d995cc419f3f839c3699bb315cbba8e92d5e21cfa75decb153fbca5d871e291b5e2649e02a1e0219a5917733c4df8dcd97afc90be047c3f96e7e921ded0d191c4edc3f36eb0b944734ad6cd66959fb45b2a471904fd179e4fc066d5db0f800a6e70bfa1cf2e7595b8f225494572fdc4b3875ef46eb90f5a37afa2f310d7adca55c2ddaf50499ab89c45cd21d3b43c6d4dc77e6d44f3a223f801d33a25a10dedaaae806d587fd2ce391b4e9da1e9143ca5e7dd75bfc9b8c2c852001cc2902dc6af7d07c1de3f09e57b87adcdd228161d3ed2be1d215ace6a2880cc008be4656a7ff8d5456139d5016427c2ee5fa6740a0775d1c23fd0d2ef7a936c142a1bb5a1ca0908c9b2eca83b4f4f86edc0bfead9f5d4e106d15cbc2c59fa420ed12d7bc6d18240ecbc5e8a4bfc5ba27d0c30df6e490e4fc218e147bb9e61519291839300baf801c4b061385793c876c08e77283fc0aa5c88efee25412d1a84245667fa0f1ba7ccb0f71910d4fbbb9a250545db3c1aed3429326461cd856cca5ca04fbd7aa5c27c6f868bb3f8b57c20563e81707ed81bc077c9f04ab214a25c209a644dadb21c4629fb0baa0519bac48f4e55679664d9205328d058f4b920f0e1ba27a5ec95d39101b7a6c02b3397715caadd0c26be17580d5956de7845b18ef2d40d712b8052a352e0a275e36d0773f6cd9aa0ff386e35bb8c6144a72b2446a3fdc460a62b518245507fe9c638fe95adc6db72c42aa64ace2f4d1dd5c2c0ffe0e8e6845c04d9aa78b6e39426f9dc1736e6abced7c668f783db5f1752209f998234ae2568902ce84d12ed3796eca7a815685fb1cb367365d07762473e12d10147b951a6c5d81c6f767be828e9aac9cd99ef10f58de5fdc4c725d6e42613b8607396e8d6911f7e8b37ca1385fb269ddf07aa982c97f5a2523b7403ca49e09f9dff271012346b9c0f2f288234befdea70c3b53a19a9d8f9364a2613a9f9c58090a09fce60d606247af0819e6510e6de693653b8eb5973f3c700bbc701f8dbd68b823358a861e99cc6a956f40e7abe13d261a7107abff2febfe74683c56ee541419997da874baeb8db8d3b5e307dc279c2e78c1201068e09c6420f0841b118381b583df4a121423268290e3833985d6f8ed109ff03c22fc3f7cbd2854dbca7c6dda21b4c154ecf9bad59bcb1617b7ae28df828a9b82dde62ee271ee5ddb22958bcd3311d007cd53e3d18bd1f9d968d99bec106a32a9c9ab92341d2371481e3ecd89ec66bd7c61025e98025af21e181b6356da47556209f6f41a41812cf245c782f718a3d98e68ff766029cac5b5e1157602c764f4fd3dec825fe1d4dc362d8810ec62ab0493451a4a92d6437e7a4b560a596e57a0b7bc43b4dac54e26bea7db13b09861132911bf0624d8b6fc0b674fb2cc904a3d6817da9149099a1a7221c1b346dc6f5bd2cdb3928bbf2f088df28a9d18feeff70ec24cf0c045d9452e99db35b7c0e32fe96d9200a7ee9d03475498a95c6364a1a60399a3fc17fecb0794aeb6262de7a2a8314d216d86d4768bbc41abdaa3dbb4c4ebc05573abb01598ca0c0858abc8850e37f60a83fa707ab15b1bf0683aea3e22b231f0d6c65daf560568d79a7a88a002e764531d924675e0e5efb23be4a95439e2e08a9c5e03c0242801a386a1bc9dee74c88bd539250a9bbcc058e98d03c09ce5af5c7dd65e3eb6d2f139e197d1d1527ef4e3ea1e745366e2ba61bfed7203e2e31156ccf03485dfb5c15d33b7ebb0b2bf9507218c0d9de92875db8e5a1b2a928336d2bd75156b8a15612fa54d916d8421d8cd93c12ce5fa40c8cdeeaa7df9f952611844ece9cea4e60b94a705e4ed677109ebf8da2c2a539c806eaae35fa8b7289a020c646eac80f4cd40dc91edeac04fd004496b68d666e8d1d4c0a72593a1d82d4b95c5b33b54dfd05b35485c506fb0698929298eb7e1b0562a8129cbd8edfed46a3b847e8b8c44ecc17447750c5245d8b491ba5997352d0e55f82a7ac4d2ff26d10045f722405d43b9d3e0b60e41339dc61657741b77d240e136014d3f7bc493ab0db387002d21388d9bfb5d1b9de0d980d85fd037a7906eed4a5bda7baafe1138f10d9fbc7195a0344e269afe74f541a96917f252adfb1928278b1d5dcab9a3bf58a2a8ffe3a0bb7cf43233a99391f9a70c884acb4caf8b63e71a328eab70a428bf689d63038261b52099af113f03ad03fe886b6419faf05502fea6ac99ab25d4b14700ead22ea031070c0678ba662eceeac3506a13d0a789e116df46029ae1190de375db0838ac18a120030851556aa8fac4de413def7ce95a154f6b12acb139df027ebd51ccf60dfb6449b5467fff7c48c887c5e024fe3924d8e92b1ffbf9d4dc9075613bd3e32473efdd22f610108457e4bc72ee81f91e6dbf957aea11890171c66d0cd573daa98cfe865b7761df27a57e2e485b3921a0c876298fcdcfe1a04735ff363d10680957d30bdd630f413ecb478370925157dc28f77ac4d1557fde076cd8267abfae9fd9d418fbd2833578e87dad34aca40994f9f7f2c09f32fe778d5ac6f1ae3dd97d0bb8fb950da0549e3723cc0445cde411a2929d9204406a69f4231e3b19db58341cfebf595c3eb25760bee4fa03480a2e8b2226a90bf148ec43f02eda7f74f05cd782845377db6874da3ac9601bd0f68ab32f29fc5ab27daf95e4838337398413ef3f02a6dc1c98aa13fb2cc249d23b90f14b0d00dde0720be0b76518baad75cadb02c3a96aeff043303566dc4a0db8a3dba9737efb236bb65a1b201152bedd3e66ba0ff53b539aa23b008e5ecd3bae5bd358d7644a4bcc0aac2409ba9d47fa95e83d828bd5a684835aa0dd24633b666023d297dedc89d05174b279c3cde61b2bbcdef5bbf86f2b96357b785ff8cb90d4a1271394c0763e432c7f8dda65e5319580571380b168c3d6c75d826e821d2b23c8d63496831ed955abc6e03da9f5f222384d91028745f9c371f685bc3633037fbf3a5c8a12ffee0afa09aec89abec4fe50becbca3af59845648ecb6b8a0ad8e7670a012fc42c0417ed679ddcf27d8627146230590007b66c27f1489d7e279e871295eb9c5201f149f114d5fee0fa0332ad07c3c7670cbf6ccf312188e9623756d1aa58c6444bf90e26a6107f14e61669d3dea1c4c465cc668b286c6df0cfa82753a61512a1ec8d69a4a9bdd01bb34999c02d0e1de449c814d333e9e9df8b812f7ed1589277df7b5113c0020908465fea4ff0f59dfeed0e384631356845c70478eb5259efcd8170ad6ca2785dd3d3752dd337728b069f9dd3b14ac7e9038785fa1bb9e6d140a3090b0cc693bf8efa167306d4b39795d44da49d2f47829ef1d22b29b3126268072401205a2d007bd4d2ed53d8262f0d4878d688a74e5b6ca443bef6538f5b0d297d15a03b8079a96387e490529f0ec028ba4b4ba96be3aad69f38c9a1f444a96a61ba9f363c6278c65bbb75d1ff47db04595208d60ee946fb289e54d3a0cfb8bfe8f36cfe1ba0fde9bf0ed955fdd0a1acc0c338f0162c400b70d988fdcb0c874205624b1eab939784e39766565cf13f3a969164d16c07a247544ad4cd2dec0e6655a8dc484c948755465c32328ac3727812bb968aac5c06b0ea3b83b36fe0b15aa358537642881712f56b32eb5795336833bbadeaf14599722f4886aaabbcc6c2aa49f7caf555210e2d6e279e35bc77d52663bbe9faf6fae55a4a559ea380117635b26716e31568ba2d9efa2f6f0ac1939d597ca8aa15cc0cb97404776cf6954b9b95560681b430ae39d41609e440b3c0f03473329a0286c49750cad4f9222d997e66122be705d99d08c7765ab48b8aa32de3b114f262958c461ae5c25c0237b90f536ba79ea9a80bf9895d109ddbb540f55d723859a5abd6d12618ea75c1fcb5c4ae3ad6dd08a9d632953bc956db044dbe3d5393bc29cb360c062d41f2af03208487b64ad05d01b589f152989494e8bdc314d9fdc135f6beac17f68b08cf1f7b764961a6f9b1422d1ace0a258834568dc13e80cfd44357cf4a5911480df971c0d1e8556bbb1cf8d30bef6584c880068ee77d7de1a4d4d0a22dac3f8030bd9bf3263a33bde2f33d5adf9a4b4b3c927d2fbe7bf39c7f38dc7d2308e1540f3c9c4230fa0bf5067de9313a8cab86f26386332f5cd01def854bb698458dfceb34e3ccdc0cfb16f2290cad479e257e6c8f066b3e1b8559ae85f7bbb8227a88bd1c82bea45e3dde256e476879a9e30bf1695aa09f880aba030b5debcaefdcec7b9b053266a588f2a2030923bb7188b7f945fab6f10057a6ba77df390efc37300e003576084d738ff634f026e181e81c99cda36c828d5dc52427482a53dec4f3684d44c1a13002e59ebf1fb5bd857df46baa7bd04ebf3977d339ccb2f6a3cbd5321f865bf00c4d2c637bc84b56a0af7e493d34086236b9c1636d644d2de0bc9360c6e65c27b3c5ca762c2a270e6feeba43a325aebeccb4e009f9b42786535dbb3bfdfd108801f24624865bd1e855e438e942a4cffdded50d3a9fe01889b1374743c936307d2717d56300937924cfe3c3b9630a1a2087e6e60ded1e56e79d3cc8fe8df53c2d9522786f1730254ab241e9938ea010182106d7f3e17af0dc8e21500296b4e645e58e8c6e33a987cfe0f9b12d3f5c0566e9d8230528c7a074764671ea16df691d032c4ebc9404e8007556fbcb98a36359c96265f29bb14631c754442ec186b2cfee34fc7ecc3331a3b0ff52df1d9e4a2f23686c8b4a95e0dbc66ff3b65860308e798606808d0fff48227d22a0366d349943aff9562ea1d45173f2921d5c6db89018818a2e6512ee3e707941285974b97101b186f07cead64ef4eae789632eabe81073ae914c16def58088d5ef828bbe5f18d1c6898c55962af9ade2325b0376a8533a901a3372fc07ef360fc74a582dbdfb08bcba43b2c11564401481456630445435d9e94b37edf122d8796b7bbda3b8213191a14b84632e2c1651262fd0e11a14160d55dd22a", &(0x7f0000001540)="513c398c9e43325f36e11b9fa31dd5ddde4e610fc280261f0ca4c01d61f4ea9f4a2f0e0821d84926cdad4b44fcd0a7b0e04084e4747b1979787c439f43ae024d345bd7972163aca9837f7ccb7fe21709d6aede44ff4efb8260a6f946e5152648e6939a10f5130e620407e6fc60efb8f627b22d5ac65820cd3a62e46459356499", 0x2}, 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef]}}, 0x0, 0x26}, 0x28) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'veth1_to_batadv\x00', {0x6}, 0xe}) 2.2695924s ago: executing program 3 (id=291): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="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"/2542], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r3, 0x4, 0x42000) close(0x3) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='\x00\x00\x00@\x00\x00\x01') r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x3a}, @in=@local, 0x3c, 0x1, 0x0, 0x0, 0xa, 0x2}, {@in6=@private1, @in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x2b, 0x4, 0x0, 0x3507, 0x2, 0xa}]}]}, 0xec}}, 0x4012) syz_usb_connect(0x5, 0x1b, &(0x7f0000000c00)={{0x12, 0x1, 0x201, 0x13, 0xe7, 0x6, 0x8, 0xa5c, 0x2033, 0xafa7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x6a, 0x9, 0x80, 0x6}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x38, &(0x7f0000000100)={0x5, 0xf, 0x38, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xfc, "d6da507a46913385310193da3b95fd73"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x5, 0xf00, 0x339d, [0xc0, 0x0, 0x0, 0x3f0f]}]}}) 2.26820724s ago: executing program 1 (id=292): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000700)) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20e035000020000f22e0b9e00100000f32b805000000b9ec310000b9800000c00f3235001000000f30b8010000000f01591ab92103000000322626430f3566b80d010f00d0440f20c0350a000000440f22c03e0f01c5470f0de2", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000040)={0x70000, 0x41000, 0x8, 0x10, 0xe1}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r6, 0x8, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffff24e}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r7, 0x0, r2, 0x0, 0x100, 0x5) sendfile(r8, r2, 0x0, 0x210) 2.254152011s ago: executing program 5 (id=293): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000e80)=ANY=[@ANYBLOB="12010002000000208205b200400001020301090275000301098007080b0101010620ca0904000000010120000924010900001500fe0c2403050603070490f64aff0904010000010220000904010101010220000905010940000108f008250185272d0180090402f2ffffff200009040201"], 0x0) (async) syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000000e80)=ANY=[@ANYBLOB="12010002000000208205b200400001020301090275000301098007080b0101010620ca0904000000010120000924010900001500fe0c2403050603070490f64aff0904010000010220000904010101010220000905010940000108f008250185272d0180090402f2ffffff200009040201"], 0x0) 1.29682284s ago: executing program 1 (id=297): syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000052fcce72a2c8f33957083c410640d822010209020400090901c00303d4920509050f08100051020309050ed473bb8e56d783c10502bdec46df417c05"], &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 849.543044ms ago: executing program 0 (id=301): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000005000200000000008505000000000000a7000000000000000500feff0000000095000000000000003994113f88acf2d44f920e6be2acde136d2b929c9f1d48a8a20be4941ee384eaca2c45bb74a5af834e9992ed6c3553f72723788ddf83378ac8ce649cf3f5d84fd5043f426aceecd7cd692c314c86cad8e2691636d8246f46b558337d188dac07ffda807f347f563e1a19bdcc746f985ab835ceefcdf076613ff3d813b566bcaeeb539b085c674bb9df7bed7da91acb6e4d42af5e1c6e93cdc2a6f5143641a528a88c69345b586618809e79c839d619c2e6f5c52737f0e6742a63f84029"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xff9, &(0x7f0000001a80)=""/4103, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x72) socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x40c}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000005000200000000008505000000000000a7000000000000000500feff0000000095000000000000003994113f88acf2d44f920e6be2acde136d2b929c9f1d48a8a20be4941ee384eaca2c45bb74a5af834e9992ed6c3553f72723788ddf83378ac8ce649cf3f5d84fd5043f426aceecd7cd692c314c86cad8e2691636d8246f46b558337d188dac07ffda807f347f563e1a19bdcc746f985ab835ceefcdf076613ff3d813b566bcaeeb539b085c674bb9df7bed7da91acb6e4d42af5e1c6e93cdc2a6f5143641a528a88c69345b586618809e79c839d619c2e6f5c52737f0e6742a63f84029"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xff9, &(0x7f0000001a80)=""/4103, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x72) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) syz_emit_ethernet(0x66, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x40c}}, 0x0) (async) 848.363194ms ago: executing program 0 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 775.713896ms ago: executing program 0 (id=303): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (async, rerun: 32) unshare(0x6020400) (rerun: 32) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x4b35, 0x3c7) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x288400, 0x0) fgetxattr(r1, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) listen(0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/rpc\x00') (rerun: 32) stat(&(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000300)={[], [{@appraise}, {@fowner_eq={'fowner', 0x3d, r3}}, {@smackfsdef={'smackfsdef', 0x3d, '@&]'}}, {@fowner_gt={'fowner>', r3}}]}, 0x1, 0x603, &(0x7f0000000700)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) rename(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r4, 0x0, 0x100, 0x5) sendfile(r6, r4, 0x0, 0x210) (async) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x14a) (async) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) lseek(r2, 0x3, 0x0) 741.759187ms ago: executing program 0 (id=304): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000500)={0x2, 0x0, [{0x80000008, 0xfffffff8, 0x1, 0x3, 0xfffffff7, 0x43ae, 0x6}, {0xa, 0x7, 0x4, 0x1, 0x5, 0x8000}]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x358, 0x448, 0xa8, 0xffffffff, 0xa8, 0x0, 0x638, 0x638, 0xffffffff, 0x638, 0x638, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x22e}}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x4f00, {0x5, @multicast1, @remote, @icmp_id, @gre_key=0x5}}}}, {{@ip={@empty, @empty, 0xff, 0x0, 'caif0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x5e, 0x1, 0x30}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xc, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xa}, @gre_key=0x10, @gre_key=0x6}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x2f}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="0700000054030000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="02edff3f010000000300006013000000bcbb8c6c9edbd1f05bda8248759c798c29b1bf2aab5cb37a10a13aa8b755a6af2d3832d0dc36ff5baee3c8564294e1ce9a5468535f3d35cccdaa7d2e26e3f19a"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r5 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/dev_snmp6\x00') lseek(r5, 0x7, 0x0) getdents(r5, 0x0, 0x48) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x54, r8, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xf}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x8}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x80000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x200440a4}, 0xf623bd38c2d3882c) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) fchdir(r7) r10 = inotify_init() inotify_add_watch(r10, &(0x7f0000000000)='.\x00', 0x400017e) open(&(0x7f00000000c0)='.\x00', 0x100, 0x50) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000010c0)='./file1\x00', 0xa18c56, &(0x7f0000000b40)=ANY=[@ANYBLOB="757466383d312c896f636861727365743d63703836322c756e695f786c6174653d302c636f6465706167653d3837342c726f6469722c696f636861727365743d6d0f31fa24676af05190dd02616363656c7469632c6e6f6e756d7461696c3d302c757466383d302c646d61736b3d30313737373737373737373737373737373737373737352c757466383d302c63058426f3023aa66865636b3d7374726963742c73686f72746e61dc2dcab76208a07ffc6d653d77696e39352c75c9d134d1f1ce308fd113f5d37466383d302c006a0c572fe2a6d1f7e5ed081104803ab9ea9fc0a8aa4825e9a9f2516424"], 0x7d, 0x29b, &(0x7f0000000280)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==") r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) sendmsg$nl_route(r11, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="500000001d0000032cbd7000fcdbdf251c000000", @ANYRES32=r4, @ANYBLOB="0800800008000700350b000000000020000a000300000008000a00020000000200286ba3c8e8030001d4edab1a6dd6bb53122e9a2153d2b8"], 0x50}, 0x1, 0x0, 0x0, 0xa207558013a290db}, 0x4000) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab05040000000000000048a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x10, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 622.23943ms ago: executing program 4 (id=305): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, 0x0, 0x800) syz_genetlink_get_family_id$ieee802154(&(0x7f0000003300), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r4) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x3, 0x8, 0x57b1, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r9}, 0x38) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000880)={0x3c, r11, 0x105, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x80) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r5, 0x52a, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x68}, 0x1, 0x0, 0x0, 0x8844}, 0x4000000) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r13}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r14, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}]}, 0x1, 0x4fd, &(0x7f0000000a40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44040) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./file0\x00') 588.057911ms ago: executing program 4 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)=""/153, 0x99}, 0x3}, {{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, &(0x7f0000000380)=""/154, 0x9a}, 0x2}, {{&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/169, 0xa9}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000940)=""/192, 0xc0}, {&(0x7f0000000a00)=""/87, 0x57}], 0x4, &(0x7f0000000ac0)=""/233, 0xe9}, 0xa}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000bc0)=""/102, 0x66}, {&(0x7f0000000c40)=""/13, 0xd}, {&(0x7f0000000c80)=""/62, 0x3e}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x4}, 0x80000001}], 0x4, 0x60, &(0x7f0000001e00)={0x0, 0x3938700}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 572.992082ms ago: executing program 4 (id=307): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) recvfrom(r2, 0x0, 0x0, 0x734, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x9, &(0x7f0000000200)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b700000000000000181100007d739c3a5ee969e750f61789931adb260a1a123f0566b5f4f3a5bd413ba9f53976f417ea1fff4f1df626a02ce09855f72e79bea8ca7d613b1ec0681621b81c9a05c1ca166080bfcdfc0867ba0437b83c6e64d9821f4d721932e77a4317509baa274f3ef1201cbc4dc079b3cb70944a3a2e26ff3e4acaf98737499f263ce7cd080eff28ce1fba5655050bde8e6480da1e3c6bdc0ea64714b469f7a81c39524d7a9f265abc4f1f54f43bc4d4c16376788fc3dc2c544f5f8f4399ffb6aca948ff88dcff65461d97f310d131901964c0a9702f95d904", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f000000cf3d)=""/192, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) 571.529362ms ago: executing program 0 (id=308): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xd7, 0x7, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x20, 0x8000, 0x2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r7, 0x25, 0x8, @void}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'veth1_vlan\x00', {0x2, 0x4e25, @remote}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="00000000d3ec66ecc053c543da2e5f"], 0x48) 518.154384ms ago: executing program 4 (id=309): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) (async) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e904a200", @link_local, @val={@void, {0x8100, 0x7, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @private=0xa010102, @empty}, {0x6e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x7, 0x0, @void}}}}}}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvSJZjJ951sizLJuyyhj0ksMSxsmGz7aVJemgOgQaaQyk9xMR2aqL8IHagdgNxoIcWWiil11Jy6T/Qe8m9t1Joe+u5kJaS0pa2RGWkkSPLki1sS0o8nw/ImvfeWO99NX6aNzN+mgByayL9UYg4GPHoYhIx3lQ2FvXCiWy9hz/cvpQ+kqhWX/o+iSTLa6yfZM/7ssRIRHx+JuIvxfX1LiwtX5muVOvuRBxbvHrj2MLS8tH5q9OXZy/PXisf//+Jk1PPlE+UdyTOfdnz2XMv/uPdN1/739wXlaNJnIoLpTdmoiWOnTIRE/EoC7E5fygiTqYLbd6Xp80uCCHXitnfYyki/hbjUayl6sZj/p2BNg7oqWoxogrkVKL/Q041xgGNY/vujoMv9HhU0j8PTtcPgNbHP1Q/NxIjtWOjvQ+TpiOjodq5jf07UH9ax++3D32YPmLNeYifV7fO0A7U08nK3Yj4e7v4k1rb9tciTeMvrGlHEhFTETGcte/5bbQhaVruxXmYjWw1/kJEnMqe0/wzW6x/oiXd7/gByKf7p7Md+Uqaerz/S8cejfFPrBv/1K8Nte67tmLQ+7/O47/G/n6kdo680DIOS8cs59u/ZKk145u3z77fqf7m8V/6SOtvjAX74cHdiEMt8b+VBpuNf9L4kzbbP13l4qnu6njhy+/OdiobdPzVexGH2x7/PB6Vpkut1ydHs7LyifKxufnK7FT9Z9s6Pv3s1Y871T/o+NPtv7dD/E3bv9D6e+l7cqPLOj45f+9qp7KxTeMvfDuc1I83h7Oc16cXF2+WI4aTc9kq9QtZtfzjG7elsU7jNdL4j/y7ff9f8/d/d+3rjDY+Mrtw4+UrDzuVbWX7N11MflTtsg2dpPHPbL791/X/NO+91dSdDev46ZVb/+xUtlH8o9uMDQAAAAAAAPKmULsGmxQmV5cLhcnJ+nzZv8beQuX6wuJ/5q7fujYTcaT2/5ClQuNK93g9naTpcvb/sI308Zb0fyPiQER8UBytpScvXa/MDDp4AAAAAAAAAAAAAAAAAAAAeELsy+b/N+5T/WOxPv8fyIle3mAOeLLp/5Bftf6/7hZPQB7Y/0N+6f+QX/o/5Jf+D/ml/0N+6f+QX/o/5Jf+DwAAAAC70oF/3f86iYiVZ0drj9RwVmZGEOxupUE3ABiY4qAbAAzM6qV/g33Ina7G/79mXw7Y++YAA5C0y6wNDqobd/77bX8TAAAAAAAAAAAAAOiBwwfbz/9PzA2GXc+0P8ivbcz/99UB8JTz1f+QX47xgc1m8Y90KjD/HwAAAAAAAAAAAAD6Zqz2SAqT2VzgsSgUJicj/hQR+6OUzM1XZqci4s8R8VWxtCdNlwfdaAAAAAAAAAAAAAAAAAAAANhlFpaWr0xXKrM3mxd+W5ezuxcad0HtQ13PRdcrN2651v+3ZTSttZFTiui+zb1e2JO9J9t5naGFpeXkl2pNErEST06AbeKKkQG1Z9OPjuGefSgBAAAAAAAAAAAAAAAAAEBONc09bu/QR31uEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03+P7//duYdAxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPpz8CAAD//6kMOeE=") (async) keyctl$session_to_parent(0x12) r3 = socket(0x2, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0xb, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x8, 0x0, 0x42, 0x5, 0x75, 0x81, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0x9000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0x1, 0x19, 0x6, 0x5, 0x42, 0x0, 0xff, 0x0, 0x7, 0x6}, {0xf000, 0x1dddd5000, 0xf, 0x3, 0x16, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x9, 0x7}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x60000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0x40000, 0x122024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) (async) r7 = socket(0xa, 0x3, 0xff) (async) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_GET_MSRS_cpu(r11, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000073, 0x0, 0x80}]}) (async) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) 517.193454ms ago: executing program 4 (id=310): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001581c2908570b28851a6d0102030109021b21010001000b0904c8020903010203090504"], 0x0) (async, rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) fallocate(r1, 0x10, 0x9, 0x7fff) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b93}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) syz_usb_connect$cdc_ecm(0x1, 0x7f, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0xd, 0x40, 0x50, "", [{{0x9, 0x4, 0x0, 0x52, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "5cdf6b4422"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x442, 0x6, 0x5}, [@acm={0x4, 0x24, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0xc, 0x6f, 0x3, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf3, 0x80, 0x12}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x20, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x7, 0xfa}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0xff, 0x57}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x180a}}, {0x73, &(0x7f0000000800)=ANY=[@ANYBLOB="73039abbfbc64c8acf2bdc6c39a568618bcc79effa2b0061ee1dec339b9f75d4a1c6bb3e629da48f12adcb31aab289dd15ce11c99e498ba71dd7922172cc315544e70b5a66f9667528d59cac1b58376dae95d40900dde725fc8d274ad777ae948d417393ba191b8e4e3cb60411ca12b5f2c751d1ca2879d4ecf500000000000000000000000000b23a45bcd9949646d86387616741febfa37cca59d1add4afa84db7e9b1c55c28f45d245dea1a3534ebcffa51d01ad4d735e8027acc521eb099bc71ae7b2f70977e54a82acc6a0ce2f8bc00a47d75cee0ff685204d6575f6df49af5147582cc"]}]}) r3 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x9e8, 0x62, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x6, 0x90, 0x87, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x8, 0x40, 0x0, {0x4}}}]}}}}}]}}, 0x0) syz_usb_ep_read(r3, 0x8, 0xa8, &(0x7f0000001700)=""/168) (async) syz_usb_control_io$uac2(r3, &(0x7f00000004c0)={0x14, &(0x7f0000000000)={0x20, 0x7, 0x4f, {0x4f, 0x8, "9aeeb2940a3619c2717d19b09752c7943273815255e28506861e825528b56e6b9a66892d2d8d527d7d3319031ab1a62cd82f7d7a82b2db40d543ec8cf5d5338732a6e838f53d22f8b773270052"}}, &(0x7f0000000280)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "f8a95d2a9cba565c391eced3dc8f57b025c797cf4ed4d0ca0a0bc4d36d8e57754d86f33c806b17c4aae136a6cafa97074650594b38a33ca6873aa7f94db187c8c248111d136b2c60c0"}}}, &(0x7f0000000780)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x7e, "dc32c27fb3a7dccf114a7de845e68dc5a5ddf998c477860b028780e4c50c7b0d94b37fc5498674afd48097cf84a8e24b2c2f8bfd29c7b17b76e2e37ccb2ce42178e223fd486989a126da79adc22406d5e2e822da9c1432a0e02214b0f4202d4269055c50d9cbed38ffadff270d0a453863992358007fcecc01329c12a183"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000640)={0x20, 0x81, 0x3, "1dbfc2"}, &(0x7f0000000680)={0x20, 0x82, 0x1, 'W'}, &(0x7f00000006c0)={0x20, 0x83, 0x3, "d88942"}, &(0x7f0000000700)={0x20, 0x84, 0x4, "b997fd80"}, &(0x7f0000000740)={0x20, 0x85, 0x3, "187c42"}}) 494.438605ms ago: executing program 0 (id=311): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xfc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r1, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xfc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) r3 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0xa00008, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x82, &(0x7f0000000400)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRES64, @ANYRES64=r3], 0x1, 0x105ac, &(0x7f00000066c0)="$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") r4 = fsmount(0xffffffffffffffff, 0x0, 0x71) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0xf, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0xf, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x107) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000140)={0x15, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000000), 0x1000000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') 414.010727ms ago: executing program 5 (id=312): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000880)={[{@dots}, {@fat=@check_strict}, {@fat=@tz_utc}, {@fat=@nocase}, {@fat=@tz_utc}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@dots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@fat=@umask={'umask', 0x3d, 0x91}}, {@nodots}, {@fat=@check_strict}]}, 0x1, 0x249, &(0x7f0000000c80)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @local}, 0x10) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x300) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0xffffffd1, 0x1002, 0x3, 0x831a, 0x3, "040000000000000000c83cfdffff000800", 0x8, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0xc4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @private2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x21}}}}]}]}, 0xc4}}, 0x44800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfd) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000880)={[{@dots}, {@fat=@check_strict}, {@fat=@tz_utc}, {@fat=@nocase}, {@fat=@tz_utc}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@sys_immutable}, {@dots}, {@dots}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@fat=@umask={'umask', 0x3d, 0x91}}, {@nodots}, {@fat=@check_strict}]}, 0x1, 0x249, &(0x7f0000000c80)="$eJzs3bFu00AYB/Cvrdu6XeiMGCyxMFXAG0QoSAhLSEEeYMJSYWkRUroYpjwGz8DrsPEGrJ26GVFbTXFphyqN2/j3k6L7lL9O+W7JZbiLPzz6fHjw5fhT/et7pGkWScQsTiP2Yj02orHWjutn9VZcNAsA4L6ZTMpR3z2wQGuX3tmJiHIzIrYvRcWPJXUFAAAAAAAAAADAgjn/DwDD4/z/6ptOR+Vu+/vtX87/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP05resH9TWvvvsDABbP/g8Aw2P/B4Dhsf8DwPC8fff+9SjPx5MsSyNOZlVRFc3Y5C9f5eOn2Zm9+ayTqio22zofP2vyrJvvtvOf/zffiiePm/xv9uJN3sm34+C2Fw8AAAAAAAAAAAAAAAAAAAB3xH52rnO/f6PJ96/Km+rC/wN07u8n8TBZ2jIAAAAAAAAAAAAAAAAAAADgXjv++u2wPDr6OFUozouduMGsNO5G84pO8fvnTWb1/c0EAAAAAAAAAAAAAAAAAADDM7/023cnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCf+fP/b6+46rOT5S4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHF/AgAA///qwZF3") (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @local}, 0x10) (async) sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x300) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0xffffffd1, 0x1002, 0x3, 0x831a, 0x3, "040000000000000000c83cfdffff000800", 0x8, 0x1}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0xc4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x14, 0x4, @private2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x21}}}}]}]}, 0xc4}}, 0x44800) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfd) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) (async) 314.22912ms ago: executing program 3 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) (async, rerun: 32) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r4, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r5, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@ipv4_newrule={0x58, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x20, 0x14, 0x5, 0x8, 0x0, 0x0, 0x2, 0x10012}, [@FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8}, @FRA_SRC={0x8, 0x2, @private=0xa010100}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r4, r6}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) (async) setuid(0xee01) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) prctl$PR_SET_SECUREBITS(0x1c, 0x8) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ptrace(0x11, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r9, 0x2, 0xc2, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) (async) close(r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, 0x0, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 310.09773ms ago: executing program 5 (id=314): socket$nl_netfilter(0x10, 0x3, 0xc) chdir(&(0x7f0000000140)='./file0\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESDEC], 0x25, 0x34f, &(0x7f0000000840)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x90002, 0x151) socket$netlink(0x10, 0x3, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sched_setaffinity(0x0, 0x0, 0x0) lseek(r0, 0x10001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2b}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, 0x54}}, 0x20048004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) 309.16465ms ago: executing program 3 (id=315): r0 = inotify_init() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) r4 = inotify_init() r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @empty, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r6, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f00000007c0)="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", 0x1b5}, {&(0x7f0000000380)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000440)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f00000024c0)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea2d11397d2b33ad100d3753d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d590da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0acd3b4fbe21997754874d1c0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb06b5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa8", 0xbd5}, {&(0x7f0000000500)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b805b34d0056282b7ed43e9c6efe6245152417b356ca23162493370e9055e9320279b93aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a000000809658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f01587e997359498ac5b57e8b86fbf5327519ebc68cb81762ebdada6dca6eaee8ac113c10eead6548244be72d5e261f0084329890a01da108431ece9146f6a5f6214c44e05a9750f872bb69b2ac0386c26b78819c32bec4043042e0c8cfc589a077c5e3b062fd0f5a277056779ea21", 0x12a}, {&(0x7f00000030c0)="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", 0x1000}], 0x6}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @empty, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r3, &(0x7f0000003740)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20120, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x48, &(0x7f0000000000)=0x7ffc, 0x4) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x90, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x404c051}, 0x20000040) close_range(r0, 0xffffffffffffffff, 0x0) 203.510533ms ago: executing program 3 (id=316): syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xffff}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711821000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 151.166505ms ago: executing program 3 (id=317): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) (async) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) (async) io_submit(r3, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) write$vga_arbiter(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='lock io'], 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock io'], 0xe) (async) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='unlock io'], 0xe) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)}, {&(0x7f00000000c0)="c3c9bdd49b70970e2a7fe9037284ec7212f60aeb12038379ff6b467b80938ea26d4074270de50c12f0b671d56f227e9882e433a0fe95b62f2177750ee99b101b7b1dde1854cd7c001e0a718fd50dce7f84291b", 0x53}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0xfffffe6d}], 0x5}}], 0x2, 0x4000000) (async) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)}, {&(0x7f00000000c0)="c3c9bdd49b70970e2a7fe9037284ec7212f60aeb12038379ff6b467b80938ea26d4074270de50c12f0b671d56f227e9882e433a0fe95b62f2177750ee99b101b7b1dde1854cd7c001e0a718fd50dce7f84291b", 0x53}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0xfffffe6d}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 78.301867ms ago: executing program 5 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000302, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000c000000000000"], 0x0, 0x44}, 0x28) (async) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) fchdir(0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000011c0)={r4, r6, 0x16, 0x0, @void}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r10 = fsmount(r9, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r8, r10, 0x16, 0x0, @void}, 0x10) (async) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001180)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r11, 0x4) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESDEC=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r12}, 0xc) 32.478568ms ago: executing program 5 (id=319): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000402609333340000102030109022d000101ff90090904000d020301010509210500770122b10f09058103200003086409050203"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "9b356cd8c5ef0248"}}}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 0s ago: executing program 4 (id=320): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000380)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./bus\x00', 0x2298042, &(0x7f0000000a80)=ANY=[@ANYBLOB='uni_xlate=1,shortname=mixed,iocharset=cp936,shortname=win95,nonumZail=0,utf8=1,nonumtail=0,shortname=win95,shortname=lrtname=mixed,uni_xlate=0,umask=00000000000017777777777,fmask=00020000000000000200000,utf8=1,utf8=0,shortname=winnt,shortname=win95,iocharset=cp874,euid<\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',obj_user=,\x00'], 0x1, 0x381, &(0x7f0000000fc0)="$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") openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@private=0xa010102, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYBLOB="b5a666aef5701652ca0d6c53d628079d77e7adf06d84a7077b6b183e0bd930e33d111a58ed2445d1e711583255", @ANYRES32=r0], 0x54}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @multicast2}, 0x4, 0x3, 0x3, 0x4}}, 0x2e) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ad000000000085100000020000008500c2000500000095000000000000009500a50500000040"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$usbfs(&(0x7f0000000100), 0x100076, 0x101b01) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0x118, 0x138, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@limit={{0x48}, {0x3, 0x80000000, 0x8, 0x5, 0x3, 0x3a, 0x4}}, @common=@unspec=@state={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x8000, 0xfffffffe, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c757365725f78617474617474722c63616368655f73747261746567793d7265616461686561642c00bd1d96a5347f399f74bcbb9e380101b3d3f4fedd195ec6906af97754ff5abcc17b94fbdabb04c8f456b93bdbc6ab4c320672d08970e123ec7d2fadf997912d145c38f64fa0483af1c4f6d8b2019a94ab494721bd7b039527c5c98eca423671ba"], 0x1, 0x177, &(0x7f0000000680)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. [ 21.019720][ T24] audit: type=1400 audit(1782079603.410:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.020624][ T271] cgroup: Unknown subsys name 'net' [ 21.042485][ T24] audit: type=1400 audit(1782079603.410:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.070132][ T24] audit: type=1400 audit(1782079603.440:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.070346][ T271] cgroup: Unknown subsys name 'devices' [ 21.187866][ T271] cgroup: Unknown subsys name 'hugetlb' [ 21.193624][ T271] cgroup: Unknown subsys name 'rlimit' [ 21.300613][ T24] audit: type=1400 audit(1782079603.690:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.323835][ T24] audit: type=1400 audit(1782079603.690:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.329375][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.348792][ T24] audit: type=1400 audit(1782079603.690:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.380534][ T24] audit: type=1400 audit(1782079603.750:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.405978][ T24] audit: type=1400 audit(1782079603.750:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.434848][ T24] audit: type=1400 audit(1782079603.820:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.460513][ T24] audit: type=1400 audit(1782079603.820:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.486946][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.369238][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.376354][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.383955][ T279] device bridge_slave_0 entered promiscuous mode [ 22.392078][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.399281][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.406762][ T279] device bridge_slave_1 entered promiscuous mode [ 22.516889][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.523976][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.531462][ T280] device bridge_slave_0 entered promiscuous mode [ 22.539547][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.546809][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.554092][ T280] device bridge_slave_1 entered promiscuous mode [ 22.586101][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.593176][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.600499][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.607532][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.643462][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.651009][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.658428][ T283] device bridge_slave_0 entered promiscuous mode [ 22.667427][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.674494][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.681985][ T281] device bridge_slave_0 entered promiscuous mode [ 22.689299][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.696419][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.703983][ T281] device bridge_slave_1 entered promiscuous mode [ 22.713288][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.720411][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.727864][ T283] device bridge_slave_1 entered promiscuous mode [ 22.734739][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.741845][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.749365][ T282] device bridge_slave_0 entered promiscuous mode [ 22.756445][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.763481][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.770954][ T282] device bridge_slave_1 entered promiscuous mode [ 22.864404][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.871824][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.879895][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.887466][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.931597][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.939862][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.947011][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.967424][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.975582][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.982688][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.023896][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.034523][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.042555][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.070384][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.078959][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.086089][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.093801][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.102430][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.109482][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.116948][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.125081][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.132141][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.139652][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.147952][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.155147][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.162513][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.170599][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.178568][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.201214][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.209199][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.217184][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.225172][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.233248][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.242280][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.249369][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.256815][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.264919][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.271963][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.279360][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.291278][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.299593][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.306716][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.314081][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.333214][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.341013][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.349431][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.356978][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.364596][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.373583][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.380759][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.388780][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.396942][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.404892][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.413773][ T281] device veth0_vlan entered promiscuous mode [ 23.422582][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.431038][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.444932][ T281] device veth1_macvtap entered promiscuous mode [ 23.452143][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.460581][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.469128][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.477335][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.485438][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.496443][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.504531][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.517619][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.525698][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.542536][ T283] device veth0_vlan entered promiscuous mode [ 23.551469][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.560351][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.569031][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.577548][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.585691][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.594242][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.602743][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.610751][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.619035][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.626646][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.634293][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.641884][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.653802][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.662285][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.678231][ T279] device veth0_vlan entered promiscuous mode [ 23.686624][ T282] device veth0_vlan entered promiscuous mode [ 23.693069][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.701462][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.710410][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.718698][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.726994][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.735199][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.743951][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.751989][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.760413][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.768169][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.783820][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.792449][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.802697][ T283] device veth1_macvtap entered promiscuous mode [ 23.813604][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.822005][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.830446][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.841854][ T279] device veth1_macvtap entered promiscuous mode [ 23.851849][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.859931][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.860063][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 23.868008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.882569][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.891128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.900911][ T282] device veth1_macvtap entered promiscuous mode [ 23.907893][ T280] device veth0_vlan entered promiscuous mode [ 23.917336][ T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.917929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.935731][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.944483][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.970891][ T280] device veth1_macvtap entered promiscuous mode [ 23.973822][ T306] ====================================================== [ 23.973822][ T306] WARNING: the mand mount option is being deprecated and [ 23.973822][ T306] will be removed in v5.15! [ 23.973822][ T306] ====================================================== [ 24.009657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.019695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.028915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.037519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.045874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.054316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.063045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.071373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.079725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.088363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.097053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.105349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.113863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.154917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.164854][ T310] SELinux: Context ض is not valid (left unmapped). [ 24.168328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.184670][ T319] fuse: Bad value for 'user_id' [ 24.184815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.198410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.280799][ T327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 24.308613][ T321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.341483][ T329] FAT-fs (loop4): Directory bread(block 64) failed [ 24.356307][ T329] FAT-fs (loop4): Directory bread(block 65) failed [ 24.362986][ T329] FAT-fs (loop4): Directory bread(block 66) failed [ 24.386465][ T329] FAT-fs (loop4): Directory bread(block 67) failed [ 24.393055][ T329] FAT-fs (loop4): Directory bread(block 68) failed [ 24.399857][ T329] FAT-fs (loop4): Directory bread(block 69) failed [ 24.406548][ T329] FAT-fs (loop4): Directory bread(block 70) failed [ 24.413126][ T329] FAT-fs (loop4): Directory bread(block 71) failed [ 24.419748][ T329] FAT-fs (loop4): Directory bread(block 72) failed [ 24.426359][ T329] FAT-fs (loop4): Directory bread(block 73) failed [ 24.458084][ T329] attempt to access beyond end of device [ 24.458084][ T329] loop4: rw=0, want=1196, limit=256 [ 24.642457][ T352] xt_hashlimit: size too large, truncated to 1048576 [ 24.777399][ T355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16'. [ 24.787454][ T355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16'. [ 24.890551][ T358] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 24.898297][ T358] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 24.906730][ T358] F2FS-fs (loop1): Unrecognized mount option "trusted.overlay.nlink" or missing value [ 25.149744][ T381] exfat: Bad value for 'uid' [ 25.161509][ T386] fuse: Bad value for 'fd' [ 25.370050][ T391] netlink: 9 bytes leftover after parsing attributes in process `syz.1.26'. [ 25.379511][ T391] device gretap0 entered promiscuous mode [ 25.391861][ T391] netlink: 5 bytes leftover after parsing attributes in process `syz.1.26'. [ 25.401419][ T381] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 25.429061][ T391] 0{X: renamed from gretap0 [ 25.435483][ T391] device 30{X left promiscuous mode [ 25.448222][ T391] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 25.507728][ T406] cgroup: syz.1.29 (406) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 25.524666][ T406] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 25.542962][ T399] loop4: p1 p2 < > p3 < p5 p6 > p4 [ 25.548276][ T399] loop4: partition table partially beyond EOD, truncated [ 25.555456][ T399] loop4: p1 size 196608 extends beyond EOD, truncated [ 25.563618][ T399] loop4: p2 start 4278190080 is beyond EOD, truncated [ 25.572209][ T399] loop4: p4 size 8192 extends beyond EOD, truncated [ 25.579414][ T399] loop4: p5 size 196608 extends beyond EOD, truncated [ 25.586849][ T399] loop4: p6 size 8192 extends beyond EOD, truncated [ 25.693229][ T304] udevd[304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 25.693234][ T402] udevd[402]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 25.694438][ T379] udevd[379]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 25.704373][ T401] udevd[401]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 25.736644][ T338] udevd[338]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 25.766983][ T421] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 25.796343][ T421] EXT4-fs (loop2): Ignoring removed nobh option [ 25.802871][ T421] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 25.815435][ T423] 9pnet: Insufficient options for proto=fd [ 25.857893][ T421] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,nodelalloc,minixdf,init_itable,resuid=0x0000000000000000,nomblk_io_submit,nobh,,errors=continue [ 25.876975][ T421] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 25.896307][ T322] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.166298][ T322] usb 2-1: Using ep0 maxpacket: 8 [ 26.186864][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.230205][ T24] kauditd_printk_skb: 86 callbacks suppressed [ 26.230217][ T24] audit: type=1400 audit(1782079864.618:160): avc: denied { ioctl } for pid=428 comm="syz.0.34" path="socket:[15787]" dev="sockfs" ino=15787 ioctlcmd=0x941c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.267261][ T24] audit: type=1400 audit(1782079864.658:161): avc: denied { getopt } for pid=428 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.290609][ T24] audit: type=1400 audit(1782079864.678:162): avc: denied { create } for pid=428 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.310360][ T24] audit: type=1400 audit(1782079864.678:163): avc: denied { write } for pid=428 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 26.329597][ T24] audit: type=1400 audit(1782079864.678:164): avc: denied { read write } for pid=428 comm="syz.0.34" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 26.354798][ T24] audit: type=1400 audit(1782079864.678:165): avc: denied { open } for pid=428 comm="syz.0.34" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 26.378254][ T322] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 26.385920][ T24] audit: type=1400 audit(1782079864.678:166): avc: denied { ioctl } for pid=428 comm="syz.0.34" path="socket:[15791]" dev="sockfs" ino=15791 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.411521][ T322] usb 2-1: can't read configurations, error -61 [ 26.436277][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 26.554409][ T24] audit: type=1400 audit(1782079864.938:167): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 26.574739][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.587490][ T322] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.595055][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.605251][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.618489][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.627688][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.636496][ T25] usb 3-1: config 0 descriptor?? [ 26.652663][ T24] audit: type=1400 audit(1782079865.038:168): avc: denied { write } for pid=444 comm="syz.4.39" name="anycast6" dev="proc" ino=4026532328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 26.727018][ T450] EXT4-fs (loop4): #clusters per group too big: 98304 [ 26.828084][ T456] netlink: 23 bytes leftover after parsing attributes in process `syz.0.42'. [ 26.856339][ T322] usb 2-1: Using ep0 maxpacket: 8 [ 26.906399][ T426] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.928867][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.016398][ T322] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 27.024301][ T322] usb 2-1: can't read configurations, error -61 [ 27.030897][ T322] usb usb2-port1: attempt power cycle [ 27.046405][ T378] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.057325][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.110776][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.119189][ T454] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.137960][ T25] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 27.146121][ T25] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 27.158020][ T25] microsoft 0003:045E:07DA.0001: no inputs found [ 27.164344][ T25] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 27.176350][ T426] usb 4-1: device descriptor read/64, error -71 [ 27.277712][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.306294][ T378] usb 5-1: Using ep0 maxpacket: 8 [ 27.333791][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.343528][ T5] usb 3-1: USB disconnect, device number 2 [ 27.391368][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.426385][ T378] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.446348][ T322] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.474733][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.496420][ T454] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 27.504439][ T454] usb 1-1: config 1 has no interface number 0 [ 27.512554][ T454] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 27.522494][ T454] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 64 [ 27.532428][ T454] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 27.546459][ T322] usb 2-1: Using ep0 maxpacket: 8 [ 27.566734][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.576294][ T426] usb 4-1: device descriptor read/64, error -71 [ 27.596445][ T378] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 27.606196][ T378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.614753][ T378] usb 5-1: Product: syz [ 27.619283][ T378] usb 5-1: Manufacturer: syz [ 27.623925][ T378] usb 5-1: SerialNumber: syz [ 27.624409][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.632983][ T378] usb 5-1: config 0 descriptor?? [ 27.676758][ T378] usb 5-1: bad CDC descriptors [ 27.681685][ T378] usb 5-1: unsupported MDLM descriptors [ 27.690818][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.699304][ T454] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 27.708723][ T454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.717629][ T454] usb 1-1: Product: syz [ 27.722090][ T454] usb 1-1: Manufacturer: syz [ 27.726806][ T454] usb 1-1: SerialNumber: syz [ 27.736386][ T322] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 27.744163][ T322] usb 2-1: can't read configurations, error -61 [ 27.746352][ T459] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 27.757611][ T459] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 27.836819][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.856333][ T426] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.878321][ T25] usb 5-1: USB disconnect, device number 2 [ 27.896396][ T322] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 27.927906][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 27.966699][ T459] udc-core: couldn't find an available UDC or it's busy [ 27.973764][ T459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.981537][ T459] udc-core: couldn't find an available UDC or it's busy [ 27.988858][ T459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.988877][ T322] usb 2-1: Using ep0 maxpacket: 8 [ 27.996657][ T459] udc-core: couldn't find an available UDC or it's busy [ 28.008783][ T459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.016670][ T459] udc-core: couldn't find an available UDC or it's busy [ 28.023639][ T459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.031371][ T459] udc-core: couldn't find an available UDC or it's busy [ 28.038551][ T459] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.049856][ T24] audit: type=1400 audit(1782079866.438:169): avc: denied { sys_module } for pid=457 comm="syz.0.43" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 28.098287][ T460] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 28.117727][ T25] usb 1-1: USB disconnect, device number 2 [ 28.119192][ T482] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 28.132731][ T482] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.136346][ T426] usb 4-1: device descriptor read/64, error -71 [ 28.166376][ T322] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 28.174049][ T322] usb 2-1: can't read configurations, error -61 [ 28.180851][ T322] usb usb2-port1: unable to enumerate USB device [ 28.213834][ T482] EXT4-fs error (device loop2): ext4_lookup:1830: inode #12: comm syz.2.45: iget: bad i_size value: 2533274857506816 [ 28.227449][ T482] EXT4-fs error (device loop2): ext4_lookup:1830: inode #12: comm syz.2.45: iget: bad i_size value: 2533274857506816 [ 28.536287][ T426] usb 4-1: device descriptor read/64, error -71 [ 28.626921][ T509] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 28.657273][ T426] usb usb4-port1: attempt power cycle [ 28.663259][ T507] exfat: Deprecated parameter 'utf8' [ 28.671537][ T507] exfat: Bad value for 'time_offset' [ 28.772909][ T512] udc-core: couldn't find an available UDC or it's busy [ 28.782178][ T512] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 29.046280][ T322] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.103803][ T519] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 29.116496][ T426] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 29.286328][ T426] usb 4-1: device descriptor read/8, error -71 [ 29.293121][ T322] usb 5-1: Using ep0 maxpacket: 16 [ 29.416389][ T322] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 29.424933][ T322] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 29.433373][ T322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.443752][ T322] usb 5-1: config 0 has no interface number 0 [ 29.466406][ T454] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.476404][ T301] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.566440][ T426] usb 4-1: device descriptor read/8, error -71 [ 29.606359][ T322] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 29.615528][ T322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.623876][ T322] usb 5-1: Product: syz [ 29.628339][ T322] usb 5-1: Manufacturer: syz [ 29.632957][ T322] usb 5-1: SerialNumber: syz [ 29.638390][ T322] usb 5-1: config 0 descriptor?? [ 29.711516][ T547] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.726006][ T547] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.65: iget: bad extra_isize 90 (inode size 256) [ 29.739249][ T454] usb 1-1: Using ep0 maxpacket: 16 [ 29.739658][ T547] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.65: error while reading EA inode 11 err=-117 [ 29.757118][ T547] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.770408][ T547] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.65: iget: bad extra_isize 90 (inode size 256) [ 29.784440][ T547] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.65: error while reading EA inode 11 err=-117 [ 29.797041][ T301] usb 3-1: device descriptor read/64, error -71 [ 29.797917][ T547] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.65: iget: bad extra_isize 90 (inode size 256) [ 29.820506][ T547] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.65: error while reading EA inode 18 err=-117 [ 29.833227][ T547] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #18: comm syz.3.65: iget: bad extra_isize 90 (inode size 256) [ 29.847501][ T547] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.65: error while reading EA inode 18 err=-117 [ 29.860895][ T547] EXT4-fs (loop3): 1 orphan inode deleted [ 29.866766][ T547] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,dioread_nolock,debug_want_extra_isize=0x000000000000005a,grpid,dioread_nolock,bsdgroups,min_batch_time=0x0000000000000003,,errors=continue [ 29.888464][ T547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 29.996390][ T322] uvcvideo: Found UVC 0.00 device syz (046c:14e0) [ 30.002882][ T322] uvcvideo: No valid video chain found. [ 30.010075][ T322] usb 5-1: USB disconnect, device number 3 [ 30.056354][ T454] usb 1-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 30.059911][ T562] Zero length message leads to an empty skb [ 30.073078][ T454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.081728][ T454] usb 1-1: Product: syz [ 30.085968][ T454] usb 1-1: Manufacturer: syz [ 30.090928][ T454] usb 1-1: SerialNumber: syz [ 30.109716][ T565] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840e018, mo2=0003] [ 30.118288][ T565] System zones: 0-5 [ 30.122898][ T565] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nobarrier,nodiscard,delalloc,,errors=continue [ 30.216323][ T301] usb 3-1: device descriptor read/64, error -71 [ 30.342678][ T524] udc-core: couldn't find an available UDC or it's busy [ 30.350039][ T524] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.476525][ T454] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.486410][ T301] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.503613][ T454] usb 1-1: USB disconnect, device number 3 [ 30.606333][ T426] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.716867][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.756365][ T301] usb 3-1: device descriptor read/64, error -71 [ 30.806359][ T426] usb 4-1: device descriptor read/8, error -71 [ 30.812601][ T395] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 31.106403][ T426] usb 4-1: device descriptor read/8, error -71 [ 31.156324][ T301] usb 3-1: device descriptor read/64, error -71 [ 31.196337][ T395] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.226367][ T426] usb usb4-port1: unable to enumerate USB device [ 31.236300][ T5] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.286445][ T395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.286452][ T301] usb usb3-port1: attempt power cycle [ 31.301051][ T395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.309090][ T395] usb 5-1: SerialNumber: syz [ 31.656360][ T5] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.706340][ T301] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.736396][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 109, changing to 10 [ 31.876377][ T301] usb 3-1: device descriptor read/8, error -71 [ 31.906410][ T5] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 31.915504][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.923799][ T5] usb 1-1: Product: syz [ 31.928007][ T5] usb 1-1: Manufacturer: syz [ 31.932584][ T5] usb 1-1: SerialNumber: syz [ 32.006462][ T395] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 32.146335][ T301] usb 3-1: device descriptor read/8, error -71 [ 32.249748][ T24] kauditd_printk_skb: 32 callbacks suppressed [ 32.249770][ T24] audit: type=1400 audit(1782079870.638:202): avc: denied { create } for pid=596 comm="syz.2.78" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 32.291944][ T25] usb 5-1: USB disconnect, device number 4 [ 32.296286][ T24] audit: type=1400 audit(1782079870.668:203): avc: denied { bind } for pid=596 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.320216][ T24] audit: type=1400 audit(1782079870.668:204): avc: denied { name_bind } for pid=596 comm="syz.2.78" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.341610][ T598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.78'. [ 32.341643][ T598] device bridge_slave_1 left promiscuous mode [ 32.341721][ T598] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.364425][ T598] device bridge_slave_0 left promiscuous mode [ 32.364580][ T24] audit: type=1400 audit(1782079870.668:205): avc: denied { node_bind } for pid=596 comm="syz.2.78" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 32.372154][ T598] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.400340][ T5] usb 1-1: USB disconnect, device number 4 [ 32.616920][ T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.797546][ T24] audit: type=1400 audit(1782079871.188:206): avc: denied { append } for pid=600 comm="syz.0.80" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.856929][ T606] FAT-fs (loop0): Directory bread(block 64) failed [ 32.863691][ T606] FAT-fs (loop0): Directory bread(block 65) failed [ 32.870739][ T606] FAT-fs (loop0): Directory bread(block 66) failed [ 32.877526][ T606] FAT-fs (loop0): Directory bread(block 67) failed [ 32.884624][ T606] FAT-fs (loop0): Directory bread(block 68) failed [ 32.891730][ T606] FAT-fs (loop0): Directory bread(block 69) failed [ 32.898533][ T606] FAT-fs (loop0): Directory bread(block 70) failed [ 32.898801][ T609] erofs: (device loop4): mounted with root inode @ nid 36. [ 32.905178][ T606] FAT-fs (loop0): Directory bread(block 71) failed [ 32.919265][ T606] FAT-fs (loop0): Directory bread(block 72) failed [ 32.925809][ T606] FAT-fs (loop0): Directory bread(block 73) failed [ 33.107205][ T619] attempt to access beyond end of device [ 33.107205][ T619] loop0: rw=524288, want=1164, limit=256 [ 33.118814][ T619] attempt to access beyond end of device [ 33.118814][ T619] loop0: rw=0, want=1164, limit=256 [ 33.145700][ T24] audit: type=1400 audit(1782079871.498:207): avc: denied { module_load } for pid=605 comm="syz.0.81" path="/17/file0/file0" dev="loop0" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 33.293657][ T613] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,journal_dev=0x0000000000000cd2,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,dioread_nolock,noinit_itable,dioread_lock,noauto_da_alloc,bsddf,,errors=continue [ 33.298311][ T24] audit: type=1400 audit(1782079871.518:208): avc: denied { create } for pid=605 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.340538][ T24] audit: type=1400 audit(1782079871.718:209): avc: denied { setcheckreqprot } for pid=621 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 33.363071][ T24] audit: type=1400 audit(1782079871.748:210): avc: denied { write } for pid=612 comm="syz.4.82" laddr=fe80::16 lport=60 faddr=fe80::bb fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.516282][ T25] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 33.654293][ T24] audit: type=1400 audit(1782079872.038:211): avc: denied { mount } for pid=631 comm="syz.4.86" name="/" dev="ramfs" ino=18841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.731638][ T630] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.747169][ T630] EXT4-fs (loop1): bad geometry: block count 4294967294 exceeds size of device (256 blocks) [ 33.796481][ T25] usb 4-1: device descriptor read/64, error -71 [ 34.056137][ T645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=645 comm=syz.1.90 [ 34.108895][ T649] EXT4-fs (loop4): can't mount with commit=2, fs mounted w/o journal [ 34.234251][ T25] usb 4-1: device descriptor read/64, error -71 [ 34.282775][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 34.294291][ T658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=658 comm=syz.2.95 [ 34.298000][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 34.329753][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 34.344573][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 34.358422][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.372090][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 34.388062][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.404160][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 34.506323][ T25] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 34.566367][ T20] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 34.586284][ T301] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 34.759524][ T647] F2FS-fs (loop0): Test dummy encryption mode enabled [ 34.767687][ T647] F2FS-fs (loop0): invalid crc value [ 34.775233][ T647] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.781684][ T25] usb 4-1: device descriptor read/64, error -71 [ 34.802543][ T647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.806276][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 34.828154][ T647] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 34.844593][ T647] overlayfs: './file0' not a directory [ 34.926344][ T20] usb 5-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config [ 34.937043][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.006366][ T301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.017624][ T301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.027634][ T301] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 35.036854][ T301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.045667][ T301] usb 3-1: config 0 descriptor?? [ 35.082659][ T672] ip6t_rpfilter: unknown options [ 35.097013][ T20] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.107409][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.125680][ T20] usb 5-1: Product: syz [ 35.130001][ T20] usb 5-1: Manufacturer: syz [ 35.134706][ T20] usb 5-1: SerialNumber: syz [ 35.153426][ T676] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 35.169182][ T676] EXT4-fs error (device loop1): ext4_get_first_dir_block:3728: inode #12: block 80: comm syz.1.99: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 35.189700][ T25] usb 4-1: device descriptor read/64, error -71 [ 35.196087][ T676] EXT4-fs error (device loop1): ext4_get_first_dir_block:3730: inode #12: comm syz.1.99: directory missing '..' [ 35.214193][ T674] FAT-fs (loop0): Unrecognized mount option "0x000000000000ee00" or missing value [ 35.262353][ T674] netlink: 48 bytes leftover after parsing attributes in process `syz.0.98'. [ 35.273478][ T674] netlink: 'syz.0.98': attribute type 1 has an invalid length. [ 35.306908][ T25] usb usb4-port1: attempt power cycle [ 35.430830][ T681] F2FS-fs (loop1): invalid crc value [ 35.437462][ T681] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.460636][ T681] F2FS-fs (loop1): Start checkpoint disabled! [ 35.467429][ T681] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 35.478330][ T20] usb 5-1: 0:2 : does not exist [ 35.484234][ T681] netlink: 32 bytes leftover after parsing attributes in process `syz.1.100'. [ 35.513257][ T9] attempt to access beyond end of device [ 35.513257][ T9] loop1: rw=2049, want=40976, limit=40427 [ 35.570662][ T20] usb 5-1: USB disconnect, device number 5 [ 35.649169][ T301] usb 3-1: language id specifier not provided by device, defaulting to English [ 35.716298][ T25] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 35.772375][ T692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.102'. [ 36.286687][ T25] usb 4-1: device descriptor read/8, error -71 [ 36.533764][ T700] xt_hashlimit: size too large, truncated to 1048576 [ 36.566401][ T25] usb 4-1: device descriptor read/8, error -71 [ 36.573071][ T698] exfat: Deprecated parameter 'utf8' [ 36.578579][ T698] exfat: Deprecated parameter 'utf8' [ 36.594072][ T698] exfat: Deprecated parameter 'namecase' [ 36.634591][ T698] exfat: Deprecated parameter 'utf8' [ 36.654706][ T698] exfat: Deprecated parameter 'namecase' [ 36.717000][ T698] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 36.736340][ T301] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 36.745897][ T301] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 36.749507][ T699] veth0_to_bridge: mtu less than device minimum [ 36.776393][ T301] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 36.784523][ T301] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 36.826373][ T301] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 36.846156][ T301] usb 3-1: USB disconnect, device number 7 [ 36.973566][ T717] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 36.982938][ T717] Module has invalid ELF structures [ 37.282988][ T716] FAT-fs (loop4): Directory bread(block 64) failed [ 37.292489][ T716] FAT-fs (loop4): Directory bread(block 65) failed [ 37.314784][ T716] FAT-fs (loop4): Directory bread(block 66) failed [ 37.330230][ T716] FAT-fs (loop4): Directory bread(block 67) failed [ 37.337159][ T716] FAT-fs (loop4): Directory bread(block 68) failed [ 37.343719][ T716] FAT-fs (loop4): Directory bread(block 69) failed [ 37.350729][ T716] FAT-fs (loop4): Directory bread(block 70) failed [ 37.357599][ T716] FAT-fs (loop4): Directory bread(block 71) failed [ 37.364252][ T716] FAT-fs (loop4): Directory bread(block 72) failed [ 37.371001][ T712] EXT4-fs error (device loop1): ext4_ext_check_inode:500: inode #4: comm syz.1.108: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 37.371019][ T716] FAT-fs (loop4): Directory bread(block 73) failed [ 37.406490][ T712] EXT4-fs error (device loop1): ext4_quota_enable:6454: comm syz.1.108: Bad quota inode: 4, type: 1 [ 37.424063][ T712] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.456954][ T712] EXT4-fs (loop1): mount failed [ 37.481796][ T711] EXT4-fs (loop2): Mount option "nodioread_nolock" incompatible with ext2 [ 37.706998][ T730] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 37.722167][ T730] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.741545][ T730] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,quota,,errors=continue [ 37.756461][ T730] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.848657][ T24] kauditd_printk_skb: 137 callbacks suppressed [ 37.848668][ T24] audit: type=1400 audit(1782079876.238:349): avc: denied { read write } for pid=729 comm="syz.0.111" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.852138][ T737] : renamed from bond_slave_0 [ 37.855116][ T24] audit: type=1400 audit(1782079876.238:350): avc: denied { open } for pid=729 comm="syz.0.111" path="/25/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.911009][ T737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 37.912265][ T738] EXT4-fs error (device loop0): ext4_lookup:1830: inode #12: comm syz.0.111: iget: bad i_size value: 2533274857506816 [ 37.941782][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.949165][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.966714][ T730] EXT4-fs error (device loop0): ext4_lookup:1830: inode #12: comm syz.0.111: iget: bad i_size value: 2533274857506816 [ 37.982237][ T741] device bridge_slave_1 left promiscuous mode [ 37.989637][ T741] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.997901][ T741] device bridge_slave_0 left promiscuous mode [ 38.004041][ T741] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.046266][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 38.123545][ T753] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=753 comm=syz.4.118 [ 38.123868][ T24] audit: type=1400 audit(1782079876.508:351): avc: denied { write } for pid=752 comm="syz.4.118" name="001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.156533][ T753] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=753 comm=syz.4.118 [ 38.258053][ T24] audit: type=1400 audit(1782079876.648:352): avc: denied { setattr } for pid=729 comm="syz.0.111" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.297426][ T24] audit: type=1400 audit(1782079876.648:353): avc: granted { setsecparam } for pid=764 comm="syz.4.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 38.326265][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 38.336133][ T730] capability: warning: `syz.0.111' uses deprecated v2 capabilities in a way that may be insecure [ 38.446394][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.457871][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.472264][ T24] audit: type=1400 audit(1782079876.858:354): avc: denied { map } for pid=769 comm="syz.0.125" path="socket:[19054]" dev="sockfs" ino=19054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 38.496340][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 38.505518][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.514619][ T25] usb 4-1: config 0 descriptor?? [ 38.526376][ T301] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.537312][ T770] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.551472][ T770] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.125: invalid indirect mapped block 256 (level 2) [ 38.557002][ T25] hub 4-1:0.0: USB hub found [ 38.569962][ T770] EXT4-fs (loop0): 2 truncates cleaned up [ 38.575851][ T770] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue [ 38.680554][ T754] F2FS-fs (loop2): Test dummy encryption mode enabled [ 38.698953][ T754] F2FS-fs (loop2): invalid crc value [ 38.723142][ T754] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.760497][ T754] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.796264][ T301] usb 2-1: Using ep0 maxpacket: 32 [ 38.916445][ T301] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 38.928167][ T301] usb 2-1: config 0 has no interface number 0 [ 38.940512][ T301] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 38.960008][ T301] usb 2-1: config 0 interface 196 has no altsetting 0 [ 39.041932][ T24] audit: type=1400 audit(1782079877.428:355): avc: denied { create } for pid=751 comm="syz.2.119" name=0C scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.063646][ T754] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 39.073277][ T24] audit: type=1400 audit(1782079877.468:356): avc: denied { remount } for pid=751 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.146713][ T301] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 39.176851][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.188203][ T301] usb 2-1: Product: syz [ 39.192485][ T301] usb 2-1: Manufacturer: syz [ 39.199740][ T301] usb 2-1: SerialNumber: syz [ 39.205972][ T301] usb 2-1: config 0 descriptor?? [ 39.226356][ T767] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 39.286609][ T48] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:2: bg 0: block 5: invalid block bitmap [ 39.299403][ T48] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 39.312576][ T48] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.312576][ T48] [ 39.316341][ T25] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 39.322880][ T48] EXT4-fs (loop0): Total free blocks count 0 [ 39.337069][ T48] EXT4-fs (loop0): Free/Dirty block details [ 39.342979][ T48] EXT4-fs (loop0): free_blocks=0 [ 39.348137][ T48] EXT4-fs (loop0): dirty_blocks=1 [ 39.353668][ T48] EXT4-fs (loop0): Block reservation details [ 39.359819][ T48] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 39.411199][ T795] netlink: 104 bytes leftover after parsing attributes in process `syz.0.130'. [ 39.413798][ T24] audit: type=1400 audit(1782079877.798:357): avc: denied { nlmsg_read } for pid=794 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.441514][ T24] audit: type=1400 audit(1782079877.818:358): avc: denied { mount } for pid=794 comm="syz.0.130" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 39.464114][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 39.470624][ T25] usbhid: probe of 4-1:0.0 failed with error -71 [ 39.476350][ T454] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 39.542673][ T800] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.558215][ T800] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 39.569442][ T800] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 39.706477][ T25] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 39.806955][ T25] usb 4-1: device reset changed ep0 maxpacket size! [ 39.814540][ T25] usb 4-1: USB disconnect, device number 10 [ 40.170738][ T454] usb 5-1: Using ep0 maxpacket: 16 [ 40.179387][ T301] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 40.238098][ T814] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.248951][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 40.306390][ T454] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.317614][ T454] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 40.329074][ T454] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 40.343937][ T818] loop2: p1 p3 < > p4 < p5 > [ 40.349509][ T818] loop2: p1 size 16776960 extends beyond EOD, truncated [ 40.384117][ T818] loop2: p5 size 16776960 extends beyond EOD, truncated [ 40.416460][ T454] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.425881][ T454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 40.435351][ T454] usb 5-1: SerialNumber: syz [ 40.468048][ T338] udevd[338]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 40.481087][ T379] udevd[379]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 40.489032][ T401] udevd[401]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 40.557746][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 40.564204][ T402] udevd[402]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 40.951203][ T789] EXT4-fs (loop4): 1 truncate cleaned up [ 40.956941][ T789] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,,errors=continue [ 40.970416][ T789] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 40.978409][ T789] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.016731][ T454] cdc_acm 5-1:1.0: skipping garbage [ 41.022220][ T454] cdc_acm 5-1:1.0: skipping garbage [ 41.042380][ T454] usb 5-1: USB disconnect, device number 6 [ 41.226335][ T25] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.239481][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 41.246112][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 41.255208][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.276536][ T25] usb 4-1: config 0 descriptor?? [ 41.390385][ T835] F2FS-fs (loop0): Test dummy encryption mode enabled [ 41.445920][ T835] F2FS-fs (loop0): invalid crc value [ 41.468420][ T835] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.505454][ T55] usb 2-1: USB disconnect, device number 6 [ 41.546583][ T835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 41.556529][ T55] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 41.636798][ T864] EXT4-fs (loop2): Ignoring removed orlov option [ 41.646752][ T864] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.676300][ T864] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.702843][ T864] EXT4-fs error (device loop2): ext4_ext_check_inode:500: inode #16: comm syz.2.139: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 41.720380][ T864] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.139: couldn't read orphan inode 16 (err -117) [ 41.733495][ T864] EXT4-fs (loop2): 1 orphan inode deleted [ 41.739470][ T864] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,noload,,errors=continue [ 41.796464][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 41.802467][ T25] usbhid: probe of 4-1:0.0 failed with error -71 [ 41.809869][ T25] usb 4-1: USB disconnect, device number 11 [ 41.828069][ T876] netlink: 100 bytes leftover after parsing attributes in process `syz.2.139'. [ 41.837413][ T876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.139'. [ 41.849615][ T876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.139'. [ 41.858849][ T876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.139'. [ 41.927382][ T878] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 41.937060][ T878] EXT4-fs (loop0): Test dummy encryption mode enabled [ 41.945242][ T878] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 41.954493][ T878] System zones: 0-5 [ 41.959087][ T878] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf, [ 42.085285][ T883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=883 comm=syz.1.143 [ 42.309686][ T885] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 42.309697][ T885] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 42.311229][ T885] F2FS-fs (loop0): invalid crc value [ 42.331425][ T885] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 42.364212][ T885] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 42.373671][ T885] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 42.388573][ T885] attempt to access beyond end of device [ 42.388573][ T885] loop0: rw=2049, want=53256, limit=40427 [ 42.403682][ T281] attempt to access beyond end of device [ 42.403682][ T281] loop0: rw=2049, want=45104, limit=40427 [ 42.536333][ T55] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 42.594824][ T919] process 'syz.2.153' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 42.607046][ T923] netlink: 64 bytes leftover after parsing attributes in process `syz.0.155'. [ 42.703468][ T301] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 42.729611][ T919] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 42.767572][ T917] F2FS-fs (loop4): fault_injection options not supported [ 42.776744][ T917] F2FS-fs (loop4): invalid crc value [ 42.784025][ T917] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.823371][ T917] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.868245][ T279] attempt to access beyond end of device [ 42.868245][ T279] loop4: rw=2049, want=45112, limit=40427 [ 42.879661][ T55] usb 4-1: not running at top speed; connect to a high speed hub [ 42.946272][ T301] usb 2-1: Using ep0 maxpacket: 16 [ 42.957326][ T24] kauditd_printk_skb: 37 callbacks suppressed [ 42.957338][ T24] audit: type=1400 audit(1782079881.348:396): avc: denied { create } for pid=935 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 42.983041][ T55] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.993259][ T55] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.006261][ T55] usb 4-1: config 1 has no interface number 0 [ 43.029434][ T946] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 43.096353][ T301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.107413][ T454] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.123588][ T301] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.136292][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 43.143011][ T301] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 43.152509][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.164492][ T301] usb 2-1: config 0 descriptor?? [ 43.187621][ T24] audit: type=1400 audit(1782079881.568:397): avc: denied { mounton } for pid=945 comm="syz.4.160" path="/40/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.206368][ T55] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 43.222045][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.226473][ T24] audit: type=1400 audit(1782079881.568:398): avc: denied { setattr } for pid=945 comm="syz.4.160" name="work" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.230134][ T55] usb 4-1: Product: syz [ 43.253241][ T24] audit: type=1400 audit(1782079881.578:399): avc: denied { write } for pid=945 comm="syz.4.160" name="work" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.261045][ T55] usb 4-1: Manufacturer: syz [ 43.277888][ T24] audit: type=1400 audit(1782079881.578:400): avc: denied { add_name } for pid=945 comm="syz.4.160" name="#6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.294422][ T55] usb 4-1: SerialNumber: syz [ 43.303608][ T24] audit: type=1400 audit(1782079881.578:401): avc: denied { remove_name } for pid=945 comm="syz.4.160" name="#6" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 43.329597][ T24] audit: type=1400 audit(1782079881.578:402): avc: denied { rename } for pid=945 comm="syz.4.160" name="#6" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.351673][ T24] audit: type=1400 audit(1782079881.578:403): avc: denied { unlink } for pid=945 comm="syz.4.160" name="#6" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.375082][ T24] audit: type=1400 audit(1782079881.578:404): avc: denied { unlink } for pid=945 comm="syz.4.160" name="#7" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.396977][ T454] usb 1-1: Using ep0 maxpacket: 32 [ 43.516324][ T454] usb 1-1: config 0 interface 0 has no altsetting 0 [ 43.523686][ T454] usb 1-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 43.532808][ T454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.546658][ T454] usb 1-1: config 0 descriptor?? [ 43.587012][ T454] usbhid 1-1:0.0: can't add hid device: -22 [ 43.593021][ T454] usbhid: probe of 1-1:0.0 failed with error -22 [ 43.608969][ T55] usb 4-1: USB disconnect, device number 12 [ 43.656683][ T907] udc-core: couldn't find an available UDC or it's busy [ 43.663968][ T907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.736409][ T301] usbhid 2-1:0.0: can't add hid device: -71 [ 43.742393][ T301] usbhid: probe of 2-1:0.0 failed with error -71 [ 43.750177][ T301] usb 2-1: USB disconnect, device number 7 [ 43.756741][ T954] EXT4-fs (loop2): Ignoring removed oldalloc option [ 43.763515][ T954] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 43.772428][ T954] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 43.780403][ T954] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 43.788620][ T24] audit: type=1400 audit(1782079882.178:405): avc: denied { append } for pid=940 comm="syz.0.159" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 43.788965][ T954] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.817804][ T954] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 43.832402][ T954] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 43.840230][ T954] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.161: bg 0: block 40: padding at end of block bitmap is not set [ 43.854758][ T954] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 43.864496][ T954] EXT4-fs (loop2): 1 truncate cleaned up [ 43.870449][ T954] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000001,noload,noblock_validity,oldalloc,nouid32,nomblk_io_submit,,errors=continue [ 43.894039][ T454] usb 1-1: USB disconnect, device number 5 [ 43.919752][ T965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 44.018935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 44.027545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.035852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 44.044205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.052537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.060917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.069303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.077622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.146208][ T973] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 2: comm syz.3.165: lblock 2 mapped to illegal pblock 2 (length 1) [ 44.165992][ T973] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 48: comm syz.3.165: lblock 0 mapped to illegal pblock 48 (length 1) [ 44.181020][ T973] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.165: Failed to acquire dquot type 0 [ 44.192888][ T973] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 44.203061][ T973] EXT4-fs error (device loop3): ext4_evict_inode:285: inode #11: comm syz.3.165: mark_inode_dirty error [ 44.214825][ T973] EXT4-fs warning (device loop3): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 44.225358][ T973] EXT4-fs (loop3): 1 orphan inode deleted [ 44.231266][ T973] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue [ 44.236912][ T979] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.254474][ T9] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.276298][ T979] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.294664][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6266: comm kworker/u4:1: Failed to release dquot type 0 [ 44.295129][ T979] EXT4-fs (loop0): first meta block group too large: 2 (group descriptor block count 1) [ 44.455729][ T991] binder: BINDER_SET_CONTEXT_MGR already set [ 44.462134][ T991] binder: 990:991 ioctl 4018620d 200000004a80 returned -16 [ 44.500111][ T988] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 44.516411][ T988] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 44.527595][ T988] F2FS-fs (loop1): invalid crc value [ 44.536454][ T55] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 44.549202][ T988] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 44.639116][ T988] F2FS-fs (loop1): Start checkpoint disabled! [ 44.656497][ T988] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 44.656510][ T988] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 44.696772][ T9] attempt to access beyond end of device [ 44.696772][ T9] loop1: rw=2049, want=45104, limit=40427 [ 44.698122][ T999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.172'. [ 44.786283][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 44.906374][ T55] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 44.921210][ T55] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 44.932814][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.954004][ T1023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 44.964726][ T1024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.177'. [ 44.974719][ T1015] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 44.993285][ T55] usb 5-1: config 0 descriptor?? [ 45.006395][ T1015] fuse: Bad value for 'user_id' [ 45.058282][ T1026] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,discard,auto_da_alloc,nodioread_nolock,,errors=continue [ 45.087546][ T1026] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.149716][ T1026] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: comm syz.2.179: lblock 0 mapped to illegal pblock 0 (length 6) [ 45.170524][ T1026] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 45.183308][ T1026] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.183308][ T1026] [ 45.197031][ T1026] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #15: block 2: comm syz.2.179: lblock 2 mapped to illegal pblock 2 (length 4) [ 45.284407][ T1032] tipc: Started in network mode [ 45.292584][ T1032] tipc: Own node identity _, cluster identity 4711 [ 45.299565][ T1032] tipc: Enabling of bearer rejected, failed to enable media [ 45.316462][ T7] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 45.336026][ T7] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 45.348394][ T7] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.348394][ T7] [ 45.401294][ T1037] netlink: 180 bytes leftover after parsing attributes in process `syz.0.181'. [ 45.511089][ T55] kone 0003:1E7D:2CED.0003: unknown main item tag 0x2 [ 45.540309][ T55] kone 0003:1E7D:2CED.0003: unknown main item tag 0xd [ 45.576795][ T55] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 45.701556][ T55] kone 0003:1E7D:2CED.0003: unknown main item tag 0x1 [ 45.750307][ T55] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 45.786591][ T55] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 45.823312][ T55] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 45.938778][ T55] kone 0003:1E7D:2CED.0003: unknown main item tag 0x0 [ 46.005895][ T55] kone 0003:1E7D:2CED.0003: item fetching failed at offset 40/44 [ 46.126440][ T55] kone 0003:1E7D:2CED.0003: parse failed [ 46.132300][ T55] kone: probe of 0003:1E7D:2CED.0003 failed with error -22 [ 46.152956][ T55] usb 5-1: USB disconnect, device number 7 [ 46.198849][ T7] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.213395][ T7] EXT4-fs error (device loop3): ext4_release_dquot:6266: comm kworker/u4:0: Failed to release dquot type 0 [ 46.256926][ T1046] nicvf0: tun_chr_ioctl cmd 2147767506 [ 46.262741][ T283] EXT4-fs error (device loop3): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 46.281336][ T283] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 46.291396][ T283] EXT4-fs error (device loop3): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error [ 46.376367][ T1053] exfat: Deprecated parameter 'utf8' [ 46.381981][ T1053] exfat: Deprecated parameter 'utf8' [ 46.387705][ T1053] exfat: Deprecated parameter 'utf8' [ 46.395463][ T1053] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 46.456331][ T720] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 46.463957][ T426] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.636293][ T454] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 46.709102][ T1052] F2FS-fs (loop4): Unrecognized mount option "]ŢO+~a!:M#qiz" or missing value [ 46.719819][ T720] usb 3-1: Using ep0 maxpacket: 16 [ 46.836350][ T426] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.846651][ T720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.857818][ T426] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 46.867000][ T426] usb 2-1: too many endpoints for config 1 interface 1 altsetting 85: 31, using maximum allowed: 30 [ 46.878934][ T426] usb 2-1: config 1 interface 1 altsetting 85 has 0 endpoint descriptors, different from the interface descriptor's value: 31 [ 46.892129][ T426] usb 2-1: config 1 interface 1 has no altsetting 1 [ 47.026358][ T720] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.035857][ T720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.044187][ T720] usb 3-1: Product: syz [ 47.048544][ T720] usb 3-1: Manufacturer: syz [ 47.053191][ T720] usb 3-1: SerialNumber: syz [ 47.057994][ T426] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 47.067938][ T426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.076138][ T426] usb 2-1: Product: syz [ 47.076422][ T454] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.080469][ T426] usb 2-1: Manufacturer: syz [ 47.092841][ T426] usb 2-1: SerialNumber: syz [ 47.164373][ T1074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 47.176487][ T454] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.187183][ T454] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.329338][ T1044] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 47.343904][ T1044] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 47.354440][ T1044] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 47.354440][ T1044] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 47.354440][ T1044] [ 47.373127][ T1044] EXT4-fs (loop2): Test dummy encryption mode enabled [ 47.381186][ T1044] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 47.456340][ T454] usb 1-1: string descriptor 0 read error: -22 [ 47.462953][ T454] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 47.472515][ T454] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.517409][ T454] usb 1-1: selecting invalid altsetting 1 [ 47.556665][ T426] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 47.564025][ T454] usb 1-1: unit 6 not found! [ 47.609372][ T426] usb 2-1: USB disconnect, device number 8 [ 48.054924][ T1092] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.184: inode has both inline data and extents flags [ 48.068696][ T1092] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.184: couldn't read orphan inode 15 (err -117) [ 48.081349][ T1092] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 48.123020][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 48.123043][ T24] audit: type=1400 audit(1782079886.508:432): avc: denied { setattr } for pid=1043 comm="syz.2.184" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.414045][ T1102] udc-core: couldn't find an available UDC or it's busy [ 48.483447][ T1102] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.666303][ T426] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 48.786216][ C0] sched: RT throttling activated [ 48.786319][ T454] usb 1-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 48.816306][ T454] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 48.935648][ T454] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 48.953470][ T454] usb 1-1: USB disconnect, device number 6 [ 49.036577][ T1090] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 49.043401][ T1090] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 49.052930][ T1090] F2FS-fs (loop3): invalid crc value [ 49.063822][ T1090] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 49.075530][ T426] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 49.085217][ T426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.101587][ T426] usb 5-1: config 0 descriptor?? [ 49.124357][ T1090] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 49.131490][ T1090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 49.456625][ T426] usb 5-1: Cannot read MAC address [ 49.462046][ T426] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 49.481715][ T426] usb 5-1: USB disconnect, device number 8 [ 49.503217][ T1131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'. [ 49.534284][ T1131] device syzkaller0 entered promiscuous mode [ 49.552280][ T24] audit: type=1400 audit(1782079887.938:433): avc: denied { ioctl } for pid=1130 comm="syz.3.205" path="socket:[20235]" dev="sockfs" ino=20235 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.697512][ T1126] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 49.756487][ T1126] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 49.766933][ T1126] F2FS-fs (loop0): invalid crc value [ 49.772607][ T1126] F2FS-fs (loop0): invalid crc value [ 49.778646][ T1126] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 49.921327][ T1154] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.936839][ T1145] EXT4-fs (loop0): Test dummy encryption mode enabled [ 49.968742][ T1145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.208: inode #1: comm syz.0.208: iget: illegal inode # [ 49.987674][ T1145] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.208: error while reading EA inode 1 err=-117 [ 50.000422][ T1145] EXT4-fs (loop0): 1 orphan inode deleted [ 50.022785][ T1145] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000002000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,noquota,,errors=continue [ 50.030259][ T1154] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noinit_itable,inlinecrypt,resgid=0x000000000000ee00,norecovery,resuid=0x0000000000000000,noblock_validity,dioread_nolock,,errors=continue [ 50.055008][ T720] cdc_ncm 3-1:1.0: bind() failure [ 50.092010][ T720] cdc_ncm 3-1:1.1: bind() failure [ 50.098650][ T720] usb 3-1: USB disconnect, device number 8 [ 50.167946][ T1172] FAT-fs (loop3): Directory bread(block 64) failed [ 50.187927][ T1172] FAT-fs (loop3): Directory bread(block 65) failed [ 50.207832][ T1172] FAT-fs (loop3): Directory bread(block 66) failed [ 50.214385][ T1172] FAT-fs (loop3): Directory bread(block 67) failed [ 50.253744][ T1172] FAT-fs (loop3): Directory bread(block 68) failed [ 50.291187][ T1172] FAT-fs (loop3): Directory bread(block 69) failed [ 50.301338][ T1172] FAT-fs (loop3): Directory bread(block 70) failed [ 50.307990][ T1172] FAT-fs (loop3): Directory bread(block 71) failed [ 50.314820][ T1172] FAT-fs (loop3): Directory bread(block 72) failed [ 50.321759][ T1172] FAT-fs (loop3): Directory bread(block 73) failed [ 50.329421][ T1178] fuseblk: Bad value for 'fd' [ 50.339601][ T1175] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 50.347635][ T1175] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 50.360832][ T1175] F2FS-fs (loop2): invalid crc value [ 50.407738][ T1175] F2FS-fs (loop2): Found nat_bits in checkpoint [ 50.451797][ T1175] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 50.460363][ T1175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 50.476896][ T24] audit: type=1400 audit(1782079888.868:434): avc: denied { mounton } for pid=1174 comm="syz.2.214" path="/35/bus/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 50.513891][ T24] audit: type=1400 audit(1782079888.898:435): avc: denied { link } for pid=1174 comm="syz.2.214" name="file1" dev="overlay" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.538378][ T282] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.538391][ T282] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.549625][ T282] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.562610][ T282] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.579604][ T1200] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 50.580260][ T24] audit: type=1400 audit(1782079888.968:436): avc: denied { shutdown } for pid=1203 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.608267][ T282] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.619907][ T282] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.621354][ T1200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8803e02c, mo2=0002] [ 50.627609][ T282] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.644078][ T1200] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.716866][ T24] audit: type=1400 audit(1782079889.108:437): avc: denied { remount } for pid=1214 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.742893][ T1200] EXT4-fs error (device loop0): ext4_clear_blocks:880: inode #11: comm syz.0.219: attempt to clear invalid blocks 1024 len 1 [ 50.758914][ T1200] EXT4-fs (loop0): Remounting filesystem read-only [ 50.765815][ T1200] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.219: bg 0: block 361: padding at end of block bitmap is not set [ 50.785851][ T1200] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 50.795257][ T1200] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.219: invalid indirect mapped block 1811939328 (level 0) [ 50.819628][ T1200] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.219: invalid indirect mapped block 2185560079 (level 1) [ 50.862517][ T1222] erofs: (device loop3): mounted with root inode @ nid 36. [ 50.870101][ T1200] EXT4-fs (loop0): 1 truncate cleaned up [ 50.876454][ T1200] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,nodiscard,errors=remount-ro,nolazytime [ 50.930575][ T1224] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 50.948618][ T1222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 50.976966][ T24] audit: type=1326 audit(1782079889.358:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.2.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2a626e59 code=0x7ffc0000 [ 51.062403][ T24] audit: type=1326 audit(1782079889.358:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.2.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec2a626e59 code=0x7ffc0000 [ 51.087688][ T24] audit: type=1326 audit(1782079889.358:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.2.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fec2a5e32ac code=0x7ffc0000 [ 51.112441][ T24] audit: type=1326 audit(1782079889.358:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1234 comm="syz.2.229" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fec2a5e330e code=0x7ffc0000 [ 51.227874][ T1233] exfat: Unknown parameter '' [ 51.244166][ T1240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.230'. [ 51.316729][ T1244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=1244 comm=syz.3.230 [ 51.367503][ T1212] F2FS-fs (loop1): Invalid log sectorsize (0) [ 51.388666][ T1212] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 51.405258][ T1212] F2FS-fs (loop1): invalid crc value [ 51.429534][ T1212] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.463661][ T1212] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 51.470934][ T1212] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.545502][ T1271] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8ec7c4ad, utbl_chksum : 0xe619d30d) [ 51.676270][ T454] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 51.754179][ T1283] netlink: 'syz.0.242': attribute type 27 has an invalid length. [ 51.763648][ T1283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'. [ 51.858289][ T1291] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.245: iget: bad i_size value: 38620345925642 [ 51.882021][ T1291] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.245: couldn't read orphan inode 15 (err -117) [ 51.894442][ T1291] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 51.916311][ T454] usb 3-1: Using ep0 maxpacket: 32 [ 51.973529][ T1296] EXT4-fs (loop0): shut down requested (1) [ 52.013716][ T1303] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 52.036349][ T454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.048735][ T454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.058781][ T1303] overlayfs: missing 'lowerdir' [ 52.063688][ T454] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.072974][ T454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.081884][ T454] usb 3-1: config 0 descriptor?? [ 52.126898][ T454] hub 3-1:0.0: USB hub found [ 52.346395][ T454] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 52.360352][ T1313] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 52.367826][ T1313] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 52.376414][ T20] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 52.384489][ T1313] F2FS-fs (loop3): invalid crc value [ 52.391365][ T1313] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 52.421668][ T1313] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 52.428915][ T1313] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.550480][ T1332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 52.697057][ T1252] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 52.788778][ T1252] udc-core: couldn't find an available UDC or it's busy [ 52.799683][ T1252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 52.910922][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 53.096433][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 53.112109][ T1357] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 53.138926][ T1346] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 53.149307][ T1346] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 53.158238][ T1346] F2FS-fs (loop1): Invalid segment/section count (31, 65560 x 1) [ 53.169773][ T1346] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 53.179358][ T24] kauditd_printk_skb: 140 callbacks suppressed [ 53.179370][ T24] audit: type=1400 audit(1782079891.568:582): avc: denied { map } for pid=1356 comm="syz.3.260" path="/46/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.208551][ T454] usbhid 3-1:0.0: can't add hid device: -71 [ 53.208632][ T454] usbhid: probe of 3-1:0.0 failed with error -71 [ 53.209617][ T24] audit: type=1400 audit(1782079891.568:583): avc: denied { execute } for pid=1356 comm="syz.3.260" path="/46/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.236594][ T454] usb 3-1: USB disconnect, device number 9 [ 53.366857][ T20] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 53.378761][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.444475][ T20] usb 5-1: Product: syz [ 53.449049][ T20] usb 5-1: Manufacturer: syz [ 53.454032][ T20] usb 5-1: SerialNumber: syz [ 53.467966][ T24] audit: type=1400 audit(1782079891.858:584): avc: denied { mount } for pid=1366 comm="syz.1.262" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.773566][ T24] audit: type=1400 audit(1782079892.158:585): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.842193][ T1315] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.853396][ T1315] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.251: corrupted in-inode xattr [ 53.867457][ T1315] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.251: couldn't read orphan inode 15 (err -117) [ 53.880227][ T1315] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 53.916318][ T720] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 53.947495][ T1383] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.956768][ T322] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 53.967397][ T1383] EXT4-fs (loop2): failed to initialize system zone (-117) [ 53.975065][ T1383] EXT4-fs (loop2): mount failed [ 54.115182][ T1392] device batadv_slave_1 entered promiscuous mode [ 54.135257][ T24] audit: type=1400 audit(1782079892.518:586): avc: denied { connect } for pid=1393 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.161900][ T24] audit: type=1400 audit(1782079892.548:587): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.189903][ T720] usb 2-1: Using ep0 maxpacket: 8 [ 54.190917][ T1396] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.206344][ T20] usb 5-1: unit 0 not found! [ 54.211939][ T1396] EXT4-fs (loop3): 1 truncate cleaned up [ 54.219186][ T1396] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 54.257338][ T322] usb 1-1: device descriptor read/64, error -71 [ 54.304703][ T20] usb 5-1: USB disconnect, device number 9 [ 54.314983][ T1405] overlayfs: workdir and upperdir must reside under the same mount [ 54.325753][ T24] audit: type=1400 audit(1782079892.718:588): avc: denied { remount } for pid=1404 comm="syz.3.274" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 54.351127][ T24] audit: type=1400 audit(1782079892.718:589): avc: denied { mounton } for pid=1406 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.366359][ T720] usb 2-1: unable to get BOS descriptor or descriptor too short [ 54.388029][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.395213][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.402837][ T1406] device bridge_slave_0 entered promiscuous mode [ 54.409971][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.417833][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.425424][ T1406] device bridge_slave_1 entered promiscuous mode [ 54.467764][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.474841][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.482167][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.489214][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.508370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.516109][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.523716][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.533505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.541810][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.548855][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.559797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.568129][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.575247][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.589859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.599078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.607608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.626482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.634820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.636399][ T720] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 54.645149][ T1406] device veth0_vlan entered promiscuous mode [ 54.658762][ T720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.667009][ T322] usb 1-1: device descriptor read/64, error -71 [ 54.667038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.673408][ T720] usb 2-1: Product: syz [ 54.681622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.693723][ T720] usb 2-1: Manufacturer: syz [ 54.699572][ T720] usb 2-1: SerialNumber: syz [ 54.700665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.712493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.720335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.728712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.743312][ T1406] device veth1_macvtap entered promiscuous mode [ 54.756966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.764694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.773154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.783675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.793074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.808680][ T24] audit: type=1400 audit(1782079893.198:590): avc: denied { mount } for pid=1406 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.838558][ T24] audit: type=1400 audit(1782079893.218:591): avc: denied { mounton } for pid=1406 comm="syz-executor" path="/root/syzkaller.3mSrfo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.946274][ T322] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 55.026302][ T720] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 55.044711][ T720] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 55.066317][ T720] usb 2-1: USB disconnect, device number 9 [ 55.126130][ T1426] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 55.158594][ T1426] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 55.168364][ T1426] F2FS-fs (loop4): invalid crc value [ 55.188907][ T1426] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 55.222753][ T1426] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 55.226298][ T322] usb 1-1: device descriptor read/64, error -71 [ 55.230052][ T1426] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.246416][ T1434] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.275440][ T1434] EXT4-fs (loop3): 1 truncate cleaned up [ 55.292179][ T1434] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,sb=0x0000000000000000,barrier,nodelalloc,usrjquota=,,errors=continue [ 55.295682][ T1425] attempt to access beyond end of device [ 55.295682][ T1425] loop4: rw=34817, want=81672, limit=40427 [ 55.347620][ T1361] device batadv_slave_1 left promiscuous mode [ 55.356296][ T1361] device veth1_macvtap left promiscuous mode [ 55.362425][ T1361] device veth0_vlan left promiscuous mode [ 55.397608][ T279] attempt to access beyond end of device [ 55.397608][ T279] loop4: rw=2049, want=45104, limit=40427 [ 55.636356][ T322] usb 1-1: device descriptor read/64, error -71 [ 55.688629][ T1446] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.282: inode has both inline data and extents flags [ 55.690147][ T1453] netlink: 44 bytes leftover after parsing attributes in process `syz.3.285'. [ 55.711153][ T1446] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.282: couldn't read orphan inode 15 (err -117) [ 55.724560][ T1446] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 55.738927][ T1423] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 55.747923][ T1423] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 55.756546][ T322] usb usb1-port1: attempt power cycle [ 55.762779][ T1423] F2FS-fs (loop5): invalid crc value [ 55.772624][ T1423] F2FS-fs (loop5): Found nat_bits in checkpoint [ 55.834409][ T1423] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 55.841784][ T1423] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 55.846884][ T1462] kvm [1461]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0x0 [ 55.876007][ T1423] F2FS-fs (loop5): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 55.905198][ T1468] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.933324][ T1468] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,barrier=0x0000000000000009,,errors=continue [ 55.949850][ T1468] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.167373][ T1483] mmap: syz.5.289 (1483) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 56.186364][ T322] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 56.200405][ T1490] udc-core: couldn't find an available UDC or it's busy [ 56.210148][ T1490] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 56.366358][ T322] usb 1-1: device descriptor read/8, error -71 [ 56.416355][ T15] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 56.466291][ T1365] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.589043][ T1494] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 56.656377][ T15] usb 4-1: Using ep0 maxpacket: 8 [ 56.656646][ T322] usb 1-1: device descriptor read/8, error -71 [ 56.706269][ T1365] usb 6-1: Using ep0 maxpacket: 32 [ 56.799495][ T1498] EXT4-fs (loop0): Ignoring removed orlov option [ 56.859889][ T1504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 56.991110][ T1504] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 56.999969][ T1504] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.006267][ T1365] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.021183][ T1365] usb 6-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 57.032311][ T1365] usb 6-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 57.045752][ T1365] usb 6-1: config 1 interface 2 has no altsetting 0 [ 57.052723][ T1504] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.060674][ T1504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01c, mo2=0002] [ 57.066289][ T15] usb 4-1: config 106 has no interfaces? [ 57.068997][ T1504] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 57.083808][ T1504] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 57.086924][ T1498] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 57.092632][ T1504] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000006,abort,nomblk_io_submit,noblock_validity,nolazytime,grpid,i_version,nobarrier,auto_da_alloc=0x0000000000000003,,errors=continue [ 57.236369][ T1365] usb 6-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 57.245611][ T1365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.258109][ T1365] usb 6-1: Product: syz [ 57.262351][ T1365] usb 6-1: Manufacturer: syz [ 57.267131][ T1365] usb 6-1: SerialNumber: syz [ 57.286370][ T15] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=af.a7 [ 57.295629][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.304037][ T15] usb 4-1: Product: syz [ 57.308420][ T15] usb 4-1: Manufacturer: syz [ 57.313066][ T15] usb 4-1: SerialNumber: syz [ 57.352852][ T1511] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.362467][ T1511] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.404952][ T1513] kvm [1512]: vcpu1, guest rIP: 0x9132 disabled perfctr wrmsr: 0xc1 data 0x60000000 [ 57.414757][ T1513] kvm [1512]: vcpu1, guest rIP: 0x9132 disabled perfctr wrmsr: 0xc2 data 0x60000000 [ 57.426502][ T1513] kvm [1512]: vcpu1, guest rIP: 0x9132 ignored wrmsr: 0x11e data 0x60000000 [ 57.437984][ T1513] kvm [1512]: vcpu1, guest rIP: 0x9132 disabled perfctr wrmsr: 0x186 data 0x60000000 [ 57.447738][ T1513] kvm [1512]: vcpu1, guest rIP: 0x9132 disabled perfctr wrmsr: 0x187 data 0x60000000 [ 57.466326][ T454] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 57.619899][ T15] usb 4-1: USB disconnect, device number 13 [ 57.636343][ T1365] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 57.656335][ T1365] usb 6-1: unit 4 not found! [ 57.661078][ T1365] usb 6-1: unit 144 not found! [ 57.716155][ T1365] usb 6-1: USB disconnect, device number 2 [ 57.746270][ T454] usb 2-1: device descriptor read/64, error -71 [ 57.764278][ T1516] SELinux: Context system_u:object_r:pam_var_run_t:s0 is not valid (left unmapped). [ 57.817383][ T1532] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 57.826602][ T1532] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.919102][ T1547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.308'. [ 57.936899][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.987092][ T1574] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 57.994790][ T1574] EXT4-fs (loop0): Test dummy encryption mode enabled [ 58.004066][ T1574] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 58.048554][ T1579] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 58.064425][ T1579] incfs: Can't find or create .index dir in ./file0 [ 58.079805][ T1579] incfs: mount failed -22 [ 58.104513][ T7] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 58.136752][ T454] usb 2-1: device descriptor read/64, error -71 [ 58.210992][ T1592] FAT-fs (loop5): Directory bread(block 64) failed [ 58.217747][ T1592] FAT-fs (loop5): Directory bread(block 65) failed [ 58.236284][ T1592] FAT-fs (loop5): Directory bread(block 66) failed [ 58.242899][ T1592] FAT-fs (loop5): Directory bread(block 67) failed [ 58.249509][ T1592] FAT-fs (loop5): Directory bread(block 68) failed [ 58.256035][ T1592] FAT-fs (loop5): Directory bread(block 69) failed [ 58.263969][ T1592] FAT-fs (loop5): Directory bread(block 70) failed [ 58.271228][ T1592] FAT-fs (loop5): Directory bread(block 71) failed [ 58.278147][ T1592] FAT-fs (loop5): Directory bread(block 72) failed [ 58.289377][ T1592] FAT-fs (loop5): Directory bread(block 73) failed [ 58.333201][ T1598] 9pnet: Insufficient options for proto=fd [ 58.406312][ T454] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 59.129009][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 158.636169][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 158.643158][ C1] rcu: 0-...!: (1 GPs behind) idle=56e/1/0x4000000000000000 softirq=8029/8030 fqs=2 last_accelerate: a155/c876 dyntick_enabled: 1 [ 158.656605][ C1] (detected by 1, t=10005 jiffies, g=7353, q=557) [ 158.663102][ C1] Sending NMI from CPU 1 to CPUs 0: [ 158.669387][ C1] NMI backtrace for cpu 0 [ 158.669392][ C1] CPU: 0 PID: 1600 Comm: syz.3.317 Not tainted syzkaller #0 [ 158.669398][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.669402][ C1] RIP: 0010:__kasan_check_write+0x0/0x20 [ 158.669412][ C1] Code: 9e d9 02 45 31 ff eb d1 00 00 55 48 89 e5 89 f6 48 8b 4d 08 31 d2 e8 af ed ff ff 5d c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <55> 48 89 e5 89 f6 48 8b 4d 08 ba 01 00 00 00 e8 8c ed ff ff 5d c3 [ 158.669416][ C1] RSP: 0018:ffffc90000b17b78 EFLAGS: 00000097 [ 158.669425][ C1] RAX: 0000000000000001 RBX: ffffffff86f10000 RCX: ffffffff848174e5 [ 158.669430][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000b17ba0 [ 158.669435][ C1] RBP: ffffc90000b17c38 R08: 0000000000000003 R09: 0000000000000004 [ 158.669439][ C1] R10: dffffc0000000000 R11: fffffbfff0de2000 R12: 1ffff92000162f70 [ 158.669444][ C1] R13: dffffc0000000000 R14: 0000000000000802 R15: ffffc90000b17ba0 [ 158.669449][ C1] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 158.669453][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.669458][ C1] CR2: 00007fb87b44e540 CR3: 000000000640f000 CR4: 00000000003506b0 [ 158.669463][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.669468][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.669470][ C1] Call Trace: [ 158.669474][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 158.669478][ C1] ? _raw_spin_lock+0xf0/0xf0 [ 158.669481][ C1] ? __fsnotify_parent+0x6d2/0x7c0 [ 158.669485][ C1] ? debug_smp_processor_id+0x17/0x20 [ 158.669488][ C1] vga_arb_release+0x20e/0x920 [ 158.669491][ C1] ? __kasan_slab_free+0x11/0x20 [ 158.669494][ C1] ? vga_arb_open+0x220/0x220 [ 158.669497][ C1] __fput+0x2dc/0x730 [ 158.669500][ C1] ____fput+0x15/0x20 [ 158.669503][ C1] task_work_run+0x127/0x190 [ 158.669506][ C1] do_exit+0xa7c/0x24e0 [ 158.669510][ C1] ? __kasan_check_write+0x14/0x20 [ 158.669513][ C1] ? switch_fpu_return+0x19c/0x330 [ 158.669516][ C1] ? put_task_struct+0x90/0x90 [ 158.669520][ C1] ? fpu__clear_all+0x20/0x20 [ 158.669523][ C1] ? __kasan_check_read+0x11/0x20 [ 158.669526][ C1] __x64_sys_exit+0x40/0x40 [ 158.669529][ C1] do_syscall_64+0x31/0x40 [ 158.669533][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 158.669536][ C1] RIP: 0033:0x7f7ac601fe59 [ 158.669540][ C1] Code: Unable to access opcode bytes at RIP 0x7f7ac601fe2f. [ 158.669544][ C1] RSP: 002b:00007f7ac4a79ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 158.669553][ C1] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7ac601fe59 [ 158.669558][ C1] RDX: 00007f7ac4a7a9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.669563][ C1] RBP: 00007f7ac60b5e6f R08: 0000000000000000 R09: 0000000000000058 [ 158.669568][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.669572][ C1] R13: 00007f7ac6299038 R14: 00007f7ac6298fa0 R15: 00007ffc08f38b38 [ 158.669586][ C1] rcu: rcu_preempt kthread starved for 9955 jiffies! g7353 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 158.970750][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 158.980845][ C1] rcu: RCU grace-period kthread stack dump: [ 158.986758][ C1] task:rcu_preempt state:R running task stack: 0 pid: 13 ppid: 2 flags:0x00004000 [ 158.997786][ C1] Call Trace: [ 159.001084][ C1] __schedule+0xc03/0x13e0 [ 159.005631][ C1] ? enqueue_timer+0x415/0x480 [ 159.010482][ C1] ? __sched_text_start+0x8/0x8 [ 159.015437][ C1] ? __mod_timer+0x7c0/0xb40 [ 159.020023][ C1] schedule+0x13c/0x1d0 [ 159.024180][ C1] schedule_timeout+0x159/0x330 [ 159.029029][ C1] ? console_conditional_schedule+0x10/0x10 [ 159.034919][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 159.040546][ C1] ? run_local_timers+0x160/0x160 [ 159.045658][ C1] ? prepare_to_swait_event+0x34d/0x360 [ 159.051197][ C1] rcu_gp_kthread+0x109a/0x2810 [ 159.056049][ C1] ? finish_task_switch+0x12e/0x5a0 [ 159.061415][ C1] ? dyntick_save_progress_counter+0x1b0/0x1b0 [ 159.067564][ C1] ? rcu_barrier_callback+0x50/0x50 [ 159.072756][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 159.078227][ C1] ? __kasan_check_read+0x11/0x20 [ 159.083249][ C1] ? __kthread_parkme+0xb3/0x1b0 [ 159.088273][ C1] kthread+0x324/0x3b0 [ 159.092348][ C1] ? rcu_barrier_callback+0x50/0x50 [ 159.097550][ C1] ? kthread_blkcg+0xd0/0xd0 [ 159.102139][ C1] ret_from_fork+0x1f/0x30 [ 308.984291][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [kworker/u4:0:7] [ 308.992493][ C1] Modules linked in: [ 308.996413][ C1] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 309.003792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.013880][ C1] Workqueue: events_unbound toggle_allocation_gate [ 309.020390][ C1] RIP: 0010:smp_call_function_single+0x211/0x490 [ 309.026713][ C1] Code: ff e8 03 85 0a 00 41 83 e6 01 49 bc 00 00 00 00 00 fc ff df 75 0a e8 3e 81 0a 00 e9 a4 00 00 00 f3 90 f7 44 24 48 01 00 00 00 <0f> 84 8f 00 00 00 e8 24 81 0a 00 eb e9 e8 dd 2b 22 03 89 c3 41 89 [ 309.046315][ C1] RSP: 0018:ffffc90000077700 EFLAGS: 00000202 [ 309.052383][ C1] RAX: ffffffff815a20dc RBX: 0000000000000000 RCX: ffff88810024e2c0 [ 309.060352][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 309.068499][ C1] RBP: ffffc900000777f0 R08: ffff8881f7057647 R09: 1ffff1103ee0aec8 [ 309.076480][ C1] R10: dffffc0000000000 R11: ffffed103ee0aec9 R12: dffffc0000000000 [ 309.084449][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff9200000eee4 [ 309.092421][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 309.101474][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.108054][ C1] CR2: 0000200001000000 CR3: 000000000640f000 CR4: 00000000003506a0 [ 309.116034][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.124006][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.132059][ C1] Call Trace: [ 309.135377][ C1] ? text_poke_sync+0x20/0x20 [ 309.140053][ C1] ? flush_smp_call_function_from_idle+0x190/0x190 [ 309.146550][ C1] ? text_poke_sync+0x20/0x20 [ 309.151230][ C1] ? find_next_and_bit+0x16d/0x1b0 [ 309.156339][ C1] smp_call_function_many_cond+0x8f5/0x9d0 [ 309.162143][ C1] ? cpumask_any_but+0xa4/0xc0 [ 309.166906][ C1] ? text_poke_sync+0x20/0x20 [ 309.171586][ C1] ? flush_tlb_mm_range+0x220/0x2c0 [ 309.176956][ C1] ? smp_call_function_many+0x40/0x40 [ 309.182349][ C1] ? __kmalloc_track_caller+0xdd/0x310 [ 309.187813][ C1] ? __text_poke+0x5a4/0x640 [ 309.192399][ C1] ? text_poke_sync+0x20/0x20 [ 309.197072][ C1] on_each_cpu+0xab/0x180 [ 309.201577][ C1] ? text_poke+0x20/0x20 [ 309.205816][ C1] ? text_poke_loc_init+0x105/0x590 [ 309.211007][ C1] ? smp_call_function+0x90/0x90 [ 309.215938][ C1] ? text_poke_finish+0x30/0x30 [ 309.220893][ C1] text_poke_bp_batch+0x1cb/0x5f0 [ 309.226002][ C1] ? text_poke_loc_init+0x590/0x590 [ 309.231214][ C1] ? __kasan_check_write+0x14/0x20 [ 309.236324][ C1] ? mutex_lock+0x92/0xf0 [ 309.240652][ C1] ? mutex_trylock+0xb0/0xb0 [ 309.245244][ C1] ? __kmalloc_track_caller+0xdd/0x310 [ 309.250699][ C1] ? __kasan_check_write+0x14/0x20 [ 309.255893][ C1] ? mutex_unlock+0x1c/0x40 [ 309.260396][ C1] text_poke_finish+0x1a/0x30 [ 309.265069][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 309.271226][ C1] __jump_label_update+0x38f/0x3b0 [ 309.276337][ C1] jump_label_update+0x34c/0x3e0 [ 309.281272][ C1] static_key_enable_cpuslocked+0x126/0x240 [ 309.287180][ C1] static_key_enable+0x1a/0x30 [ 309.291944][ C1] toggle_allocation_gate+0xba/0x440 [ 309.297230][ C1] ? kfence_protect+0x1b0/0x1b0 [ 309.302093][ C1] ? ttwu_do_wakeup+0x3a2/0x3d0 [ 309.306949][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 309.312748][ C1] ? try_to_wake_up+0x64e/0xdf0 [ 309.317595][ C1] process_one_work+0x6fd/0xbc0 [ 309.322441][ C1] worker_thread+0xa8e/0x13c0 [ 309.327205][ C1] kthread+0x324/0x3b0 [ 309.331268][ C1] ? worker_clr_flags+0x190/0x190 [ 309.336356][ C1] ? kthread_blkcg+0xd0/0xd0 [ 309.340940][ C1] ret_from_fork+0x1f/0x30 [ 309.345358][ C1] Sending NMI from CPU 1 to CPUs 0: [ 309.351559][ C1] NMI backtrace for cpu 0 [ 309.351565][ C1] CPU: 0 PID: 1600 Comm: syz.3.317 Not tainted syzkaller #0 [ 309.351571][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.351575][ C1] RIP: 0010:vga_arb_release+0x389/0x920 [ 309.351586][ C1] Code: fe 43 0f b6 44 3d 00 84 c0 4c 8b 75 d0 0f 85 48 01 00 00 41 80 24 24 fd 43 0f b6 44 3d 00 84 c0 0f 85 d9 00 00 00 41 8b 1c 24 <44> 8b 65 c0 44 89 e7 89 de e8 39 89 b6 fe 41 39 dc 4c 8b 6d a8 75 [ 309.351590][ C1] RSP: 0018:ffffc90000b17c48 EFLAGS: 00000046 [ 309.351599][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88811dea8000 [ 309.351604][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.351608][ C1] RBP: ffffc90000b17cd0 R08: 0000000000000003 R09: 0000000000000004 [ 309.351613][ C1] R10: dffffc0000000000 R11: fffff52000162f74 R12: ffff888105bfc820 [ 309.351618][ C1] R13: 1ffff11020b7f904 R14: ffff888106b82424 R15: dffffc0000000000 [ 309.351623][ C1] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 309.351627][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.351632][ C1] CR2: 00007fb87b44e540 CR3: 000000000640f000 CR4: 00000000003506b0 [ 309.351637][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.351641][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.351644][ C1] Call Trace: [ 309.351647][ C1] ? __kasan_slab_free+0x11/0x20 [ 309.351650][ C1] ? vga_arb_open+0x220/0x220 [ 309.351653][ C1] __fput+0x2dc/0x730 [ 309.351656][ C1] ____fput+0x15/0x20 [ 309.351659][ C1] task_work_run+0x127/0x190 [ 309.351662][ C1] do_exit+0xa7c/0x24e0 [ 309.351666][ C1] ? __kasan_check_write+0x14/0x20 [ 309.351669][ C1] ? switch_fpu_return+0x19c/0x330 [ 309.351672][ C1] ? put_task_struct+0x90/0x90 [ 309.351675][ C1] ? fpu__clear_all+0x20/0x20 [ 309.351679][ C1] ? __kasan_check_read+0x11/0x20 [ 309.351682][ C1] __x64_sys_exit+0x40/0x40 [ 309.351685][ C1] do_syscall_64+0x31/0x40 [ 309.351689][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 309.351692][ C1] RIP: 0033:0x7f7ac601fe59 [ 309.351696][ C1] Code: Unable to access opcode bytes at RIP 0x7f7ac601fe2f. [ 309.351700][ C1] RSP: 002b:00007f7ac4a79ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 309.351708][ C1] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f7ac601fe59 [ 309.351713][ C1] RDX: 00007f7ac4a7a9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 309.351718][ C1] RBP: 00007f7ac60b5e6f R08: 0000000000000000 R09: 0000000000000058 [ 309.351723][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.351727][ C1] R13: 00007f7ac6299038 R14: 00007f7ac6298fa0 R15: 00007ffc08f38b38 [ 309.351734][ C1] Kernel panic - not syncing: softlockup: hung tasks [ 309.620127][ C1] CPU: 1 PID: 7 Comm: kworker/u4:0 Tainted: G L syzkaller #0 [ 309.628788][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.638853][ C1] Workqueue: events_unbound toggle_allocation_gate [ 309.645352][ C1] Call Trace: [ 309.648632][ C1] [ 309.651488][ C1] __dump_stack+0x21/0x24 [ 309.655833][ C1] dump_stack_lvl+0x1a7/0x208 [ 309.660516][ C1] ? show_regs_print_info+0x18/0x18 [ 309.665711][ C1] dump_stack+0x15/0x1c [ 309.669952][ C1] panic+0x2d5/0x800 [ 309.673848][ C1] ? find_next_bit+0xc9/0x100 [ 309.678535][ C1] ? bpf_jit_dump+0xe0/0xe0 [ 309.683037][ C1] watchdog_timer_fn+0x591/0x5a0 [ 309.688146][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 309.693430][ C1] __hrtimer_run_queues+0x33a/0x7d0 [ 309.698631][ C1] ? hrtimer_interrupt+0xc80/0xc80 [ 309.703742][ C1] ? ktime_get_update_offsets_now+0x293/0x2b0 [ 309.709803][ C1] hrtimer_interrupt+0x313/0xc80 [ 309.714998][ C1] ? __do_softirq+0x4c9/0x563 [ 309.719672][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3f0 [ 309.725560][ C1] asm_call_irq_on_stack+0xf/0x20 [ 309.730575][ C1] [ 309.733515][ C1] sysvec_apic_timer_interrupt+0x85/0xe0 [ 309.739143][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 309.745221][ C1] RIP: 0010:smp_call_function_single+0x211/0x490 [ 309.751633][ C1] Code: ff e8 03 85 0a 00 41 83 e6 01 49 bc 00 00 00 00 00 fc ff df 75 0a e8 3e 81 0a 00 e9 a4 00 00 00 f3 90 f7 44 24 48 01 00 00 00 <0f> 84 8f 00 00 00 e8 24 81 0a 00 eb e9 e8 dd 2b 22 03 89 c3 41 89 [ 309.771426][ C1] RSP: 0018:ffffc90000077700 EFLAGS: 00000202 [ 309.777492][ C1] RAX: ffffffff815a20dc RBX: 0000000000000000 RCX: ffff88810024e2c0 [ 309.785465][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 309.793521][ C1] RBP: ffffc900000777f0 R08: ffff8881f7057647 R09: 1ffff1103ee0aec8 [ 309.801500][ C1] R10: dffffc0000000000 R11: ffffed103ee0aec9 R12: dffffc0000000000 [ 309.809671][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff9200000eee4 [ 309.817735][ C1] ? smp_call_function_single+0x21c/0x490 [ 309.823456][ C1] ? text_poke_sync+0x20/0x20 [ 309.828135][ C1] ? flush_smp_call_function_from_idle+0x190/0x190 [ 309.834632][ C1] ? text_poke_sync+0x20/0x20 [ 309.839313][ C1] ? find_next_and_bit+0x16d/0x1b0 [ 309.844424][ C1] smp_call_function_many_cond+0x8f5/0x9d0 [ 309.850320][ C1] ? cpumask_any_but+0xa4/0xc0 [ 309.855104][ C1] ? text_poke_sync+0x20/0x20 [ 309.859797][ C1] ? flush_tlb_mm_range+0x220/0x2c0 [ 309.865011][ C1] ? smp_call_function_many+0x40/0x40 [ 309.870409][ C1] ? __kmalloc_track_caller+0xdd/0x310 [ 309.875873][ C1] ? __text_poke+0x5a4/0x640 [ 309.880461][ C1] ? text_poke_sync+0x20/0x20 [ 309.885140][ C1] on_each_cpu+0xab/0x180 [ 309.889489][ C1] ? text_poke+0x20/0x20 [ 309.893748][ C1] ? text_poke_loc_init+0x105/0x590 [ 309.898974][ C1] ? smp_call_function+0x90/0x90 [ 309.903915][ C1] ? text_poke_finish+0x30/0x30 [ 309.908772][ C1] text_poke_bp_batch+0x1cb/0x5f0 [ 309.913803][ C1] ? text_poke_loc_init+0x590/0x590 [ 309.919004][ C1] ? __kasan_check_write+0x14/0x20 [ 309.924115][ C1] ? mutex_lock+0x92/0xf0 [ 309.928442][ C1] ? mutex_trylock+0xb0/0xb0 [ 309.933030][ C1] ? __kmalloc_track_caller+0xdd/0x310 [ 309.938484][ C1] ? __kasan_check_write+0x14/0x20 [ 309.943592][ C1] ? mutex_unlock+0x1c/0x40 [ 309.948095][ C1] text_poke_finish+0x1a/0x30 [ 309.952773][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 309.958748][ C1] __jump_label_update+0x38f/0x3b0 [ 309.963900][ C1] jump_label_update+0x34c/0x3e0 [ 309.968921][ C1] static_key_enable_cpuslocked+0x126/0x240 [ 309.974808][ C1] static_key_enable+0x1a/0x30 [ 309.979572][ C1] toggle_allocation_gate+0xba/0x440 [ 309.984858][ C1] ? kfence_protect+0x1b0/0x1b0 [ 309.989734][ C1] ? ttwu_do_wakeup+0x3a2/0x3d0 [ 309.994584][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 310.000390][ C1] ? try_to_wake_up+0x64e/0xdf0 [ 310.005239][ C1] process_one_work+0x6fd/0xbc0 [ 310.010084][ C1] worker_thread+0xa8e/0x13c0 [ 310.014760][ C1] kthread+0x324/0x3b0 [ 310.018843][ C1] ? worker_clr_flags+0x190/0x190 [ 310.023895][ C1] ? kthread_blkcg+0xd0/0xd0 [ 310.028577][ C1] ret_from_fork+0x1f/0x30 [ 311.197987][ C1] Shutting down cpus with NMI [ 311.202784][ C1] Kernel Offset: disabled [ 311.207126][ C1] Rebooting in 86400 seconds..