last executing test programs: 9.472574791s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x411}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000400)=""/152}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) readv(r4, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000640)=ANY=[]) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x0) keyctl$chown(0x4, r5, 0x0, 0x0) 7.954989737s ago: executing program 0 (id=6): r0 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f00000000c0)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002540)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002580)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f0000002600)={0x2020, 0x0, 0x0}, 0x2020) open(0x0, 0x4c27e, 0x10) write$FUSE_INTERRUPT(r1, &(0x7f0000004640)={0x10, 0xffffffffffffffda, r3}, 0x10) dup3(0xffffffffffffffff, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000046c0)='./file1\x00', 0x103042, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 7.030477219s ago: executing program 3 (id=11): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0xffffffffffff2a09, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) syz_open_procfs(0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000004c0)=0xfffffffe, 0x4) keyctl$setperm(0x5, r1, 0x80432) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='27', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb}, [@alu={0x7, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) 6.6122571s ago: executing program 3 (id=15): openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000040), 0x4003) gettid() timer_create(0x0, 0x0, 0x0) r3 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0xfffffc79}, 0x58) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 5.675911292s ago: executing program 3 (id=19): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000014c0)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f7ac9b36096eff7fc6e5539b9b18098b9b4a1b2538181b080d29308f0e1ac6e7149b3468959b189a242a9b3f6d988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f7227b7ba67e0e78657c2f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00300300000000000000b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850ab8afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a7315c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c0c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe8a3c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f198a037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e251f2409f610b2db8d1f48c13b65df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df34959eaef6572e1e007fa55a2999f596d0673f586749b25f5a448427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e10d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b70894902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50a0000fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426dd6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd66555347015daa85f25057f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971f41488b8658a20878b7c1dd7ba021943939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3ef4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a06f8c04ef23d537639a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f7953c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c069595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb92c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939b6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a10010549820a73c8839475f732ae00398e4bd1f4908b7807fb33b72685ec37a2d3f766b0500000000000000a1d998a2017aef0948a68cb0b3e35cb80dd349e891ae04000000080e8ac32a308e15fc37d06aeac289c0523f487e1ff7408c60edddab652f2ef91d4f2b01987b0f46e4034e5c3f745a7ee81087dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a63c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5347d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4fcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe520629b40d7ceee5802cb5e930ed624806c4380b6dc9336d07c2b8081c188d26558f48261f7897084c2a1a9a6613bc18f5a38ff42768af38041efe03d152ef95ff569e76db2391f4509d7f30ad92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f7150b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b35e52600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000204b0a0780d821a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff9576abc9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf6c9c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0xfffffffffffffdad, 0x240240c0, &(0x7f0000000280)={0xa, 0x4e22, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}}, 0x24}}, 0xc840) 4.783109034s ago: executing program 3 (id=24): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000040)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_clone3(&(0x7f0000000c00)={0x240000500, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000040)) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) syz_clone3(&(0x7f0000000c00)={0x240000500, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) (async) 4.770714164s ago: executing program 0 (id=25): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x873}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@max_batch_time}, {@norecovery}, {@acl}]}, 0xfe, 0x495, &(0x7f0000000280)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a40)={0x1, &(0x7f0000000a80)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000b00)='system.posix_acl_default\x00', &(0x7f0000000b40)={{}, {0x1, 0x7}, [], {0x4, 0x3}, [], {0x10, 0x7}}, 0x24, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x10c062) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/sync_on_suspend', 0x28681, 0xd0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000780)={r2, 0x0, {0x0, 0x0, 0x0, 0x400, 0x6010000000001001, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc9634464c516bddc70f35000000000000000000000000000000000000000000000000000000e0ff00", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce5, 0xfd]}}) sendfile(r1, r1, 0x0, 0x2000000000409) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d00)=0x14) sendmsg$nl_route(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newlink={0x48, 0x10, 0x503, 0xfefffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000001}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) r6 = open(&(0x7f0000011a40)='.\x00', 0x8000, 0x50) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000008c0)={0x8607}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000081}, 0x40820) sendmsg$nl_generic(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="180000001600810a2cbd7000000000000a000000532d0000"], 0x18}, 0x1, 0x0, 0x0, 0x2008051}, 0xd0) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CAP_X2APIC_API(r10, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000a00)={0x555555555555607, 0x0, [{0x1, 0x2, 0x1, 0x0, @adapter={0x7, 0x3, 0xfffffffffffdffff, 0x80000000}}]}) execveat(r6, 0x0, 0x0, 0x0, 0x400) getdents(r6, &(0x7f0000011a80)=""/184, 0xb8) 4.685654286s ago: executing program 3 (id=26): unshare(0x60000600) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x195d, 0xec4d2770249a3ef5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x82803, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x12, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)={0x9}) syz_clone3(0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000b40)={0xd, 0xfff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="300000001800ef01fc000000fddbdf250a10940900000000000100000c00090008000000", @ANYRES32=0x0, @ANYBLOB="08000613f927442f1323ae0007000000"], 0x30}, 0x1, 0x11}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) mlockall(0x7) write(r5, &(0x7f0000000280)='0', 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac2(0x5, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340), 0x1, 0x4bc, &(0x7f0000000440)="$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") r6 = creat(&(0x7f0000000900)='./bus\x00', 0x182) fallocate(r6, 0x40, 0xbf5, 0x2000402) 4.12098931s ago: executing program 0 (id=27): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000600)={0x1, 0x0, 0x1000, 0xa5, &(0x7f0000000300)="6124da5fd2cb5e88bfebbc2a698b8525acce67688439811e87503a335e4e99c16b65dd59035323aa6b358a4be19408e6d142f19ecf0f97bf89f361773ba0064b3018e7d8348ffa08d9eae7232b9a3b3c34367b7c9530f722ac7e486dd4009aa14c174bedcb64ab07133a454bb4b3b037f7c7c26eebeb051e5ce8720e59162fd33a1912a0606913c073684a2fffc6c9f1287ed3c4db9f64db2a5fc770c447ec15f463e2e719", 0xd7, 0x0, &(0x7f0000000500)="b0e542db1f7ab426b3f517476782aab86bc664fd65cc250959bbeb511e3002b78ab6896df74d760429bb8d3759d0a44cf843d990cd5b5cb240cf0797e4f57030bdc7650fa320230e555248fdef859a1bc3d71900dfd1b2d9959118772db1880fa7d96899b8f2267079d589e4b6b63c5390e5b08f7223186a5bfe6d341dd9959c147acb90ec53ad9aba431598e0a27569fc299325d1d67ab319e288b1700b908e7a365e465f9e206db0ab150093b0840c8bd045395dd22466ba9789abec5d37d1a5657e4bf0c1ca1fb5b2439581de594bbcef834c14abe0"}) write(r1, &(0x7f00000002c0)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200002, &(0x7f0000000440)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0x1, 0x572, &(0x7f00000006c0)="$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") open(&(0x7f00000002c0)='./file1\x00', 0x4827e, 0x1bb) 3.891311875s ago: executing program 1 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200"], 0xa0}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200"], 0xa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_PORT_SELF={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x54) 3.882793886s ago: executing program 1 (id=30): r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) 3.873057306s ago: executing program 1 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f00000005c0)) 3.821348797s ago: executing program 1 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x15, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001ab40)=0x410000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}}, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000500), 0x205, 0x8401) r6 = add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f00000002c0), 0x0, &(0x7f0000000680)=ANY=[], 0x29, r6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) fcntl$dupfd(r5, 0x0, r5) 3.640180192s ago: executing program 4 (id=34): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x3, {0xa, 0x4e21, 0x0, @loopback, 0x7f}}}, 0x3a) (async) socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x82011, r1, 0x0) r2 = userfaultfd(0x801) syz_clone(0x104000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000005c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/fscaps', 0x280, 0x20) (async) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000640)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) inotify_init() (async) lsetxattr$security_selinux(&(0x7f0000000500)='.\x00', &(0x7f0000000540), 0x0, 0x0, 0x1) (async) mmap(&(0x7f000095d000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000400)="7c05801a2d734e3fb9f9b68ff5183496", 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) set_robust_list(&(0x7f00000004c0)={0x0, 0x2}, 0x18) setsockopt$inet6_tcp_int(r5, 0x6, 0x25, &(0x7f0000000280)=0x100000001, 0x4) (async) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000002c0)={'mangle\x00', 0x0, [0x7, 0x8, 0x88b8, 0x5, 0xd]}, &(0x7f0000000340)=0x54) (async) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000040)=""/192, &(0x7f0000000180)=0xc0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x7, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) (async) ftruncate(r3, 0x400) 3.638348712s ago: executing program 1 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000080000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x3e, 0x0, &(0x7f0000000340)="00000000d4070000000000000000622b951b5ecd6ea23e7f71914844c93adf72bfeebf356d50c7f706cf4a1b0ba200"/62, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffb}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x2b, 0x0, @void}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff406d04000900000102030109021b0001010080fa0904"], 0x0) 2.48424126s ago: executing program 4 (id=37): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[{@errors_remount}, {@norecovery}, {@inlinecrypt}, {@test_dummy_encryption}]}, 0xa, 0x621, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./bus\x00', 0x0, 0x400) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r3, 0x0, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000a80)='reno\x00', 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x17, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000f300000000000000549600000100000000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r4, &(0x7f0000000c80)='reno\x00', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./proc\x00', &(0x7f00000009c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./proc/mtrr\x00', 0x2, 0x0) write(r7, &(0x7f0000000d00)='disable=00', 0xa) 2.433697261s ago: executing program 2 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='8\n', 0x2) write(0xffffffffffffffff, &(0x7f00000003c0)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100c0", 0x3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00', 0x0) 2.376938642s ago: executing program 0 (id=39): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xa04080, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f0000002dc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000008300)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000008340)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000008380)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000083c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000008400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000008440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000084c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000008500), 0x4000087, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQES(0x0, 0x81, 0x0, 0x10010, 0xffffffffffffffff, 0x10000000) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000200000000002400000024000000020000000000000001000004080000000000000002000000100000000000000000000004000000000000df78"], 0x0, 0x3e}, 0x28) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x5818458, &(0x7f00000003c0)=ANY=[], 0x1, 0x153d, &(0x7f0000001880)="$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") r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x28, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44021}, 0x20004010) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xf, @none, 0x10, 0x2}, 0xe) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1ff) 2.257730605s ago: executing program 2 (id=40): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000004700)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x3, 0x56a, 0x42, 0xffffffff}}, 0x118) write$UHID_DESTROY(r0, &(0x7f0000004840), 0x4) 2.05971407s ago: executing program 2 (id=41): r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) 1.864324784s ago: executing program 2 (id=42): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f00000005c0)) 1.6215687s ago: executing program 2 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) geteuid() (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x12) (async, rerun: 64) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f00000000c0)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r3, 0x1, &(0x7f0000000140)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xd, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b700000002000000bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a0025000000170000003e040000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050ec6850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf8707f0d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e9978931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5fea5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87dd4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075fdd88d22230592a790000000000000000000000003527dfd01b47000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7c54d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df96d49f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696ebc2ab3f4b642f36c9006c0067e24a64aa8c53df824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b"], 0x0, 0x842, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0xf87e2adba54e2bbd}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r1) syz_mount_image$ext4(&(0x7f0000000ec0)='ext2\x00', &(0x7f0000000000)='./bus/file0/file0\x00', 0x2038013, &(0x7f0000000280)={[{@i_version}, {@noinit_itable}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f00000019c0)="$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") syz_mount_image$vfat(&(0x7f0000001380), &(0x7f00000013c0)='./bus/file0\x00', 0x812448, 0x0, 0xff, 0x0, &(0x7f0000001400)) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x80) rename(0x0, &(0x7f0000001480)='./bus/file0/file0\x00') (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000014c0)={'xfrm0\x00', &(0x7f0000001500)=@ethtool_cmd={0x23, 0x8, 0xb, 0xffff, 0x17, 0x6, 0x8, 0xb, 0x0, 0x5, 0xffffffff, 0x82, 0x4, 0x7, 0x6, 0x400, [0xb, 0x7]}}) syz_mount_image$fuse(0x0, &(0x7f0000001540)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001580), r5) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="3800f6ff", @ANYRES16=r6, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007800800050011000000"], 0x38}, 0x1, 0x0, 0x0, 0x4044885}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001680)={0x0, &(0x7f0000000180)}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001700)={'ip6tnl0\x00', &(0x7f0000001740)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x2, 0xff, 0x0, @mcast1, @mcast1, 0x1, 0x7, 0x7, 0x24}}) (async) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 1.511768503s ago: executing program 2 (id=44): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x87, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x59, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x7d, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "b716411e7d"}, {0x5, 0x24, 0x0, 0x8b4}, {0xd, 0x24, 0xf, 0x1, 0x157, 0x2, 0x77, 0x2b}, [@network_terminal={0x7, 0x24, 0xa, 0xff, 0x1, 0x3, 0x17}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0xae, 0x7, 0x4}, @country_functional={0x8, 0x24, 0x7, 0x40, 0x57af, [0x5]}, @mdlm={0x15, 0x24, 0x12, 0x270}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x1, 0x7e}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x3, 0x48}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x97, 0x8, 0x5f, 0xff, 0xc}, 0x128, &(0x7f0000000180)={0x5, 0xf, 0x128, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xfd, 0x1, 0x621, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x4, 0x7fff}, @generic={0x7c, 0x10, 0xb, "e09e3fb6f28cc6aa0e506576fc4062f9957859169fdd00abe2c714c603dee401da26e73bd8d00b4e9fde8931267b087d7d65b60098d6b7e4833667165e84962c29d8a92fce6c2b24378cad69d688208ad7798e22bbc685c70e42d71c6850593aa4f21bb6d6d55505dbf04e0d8128fd324af6697f3b359f8499"}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x857b, 0xf00, 0x2, [0xc0c0, 0x11, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3, 0xae, 0xf7, 0x8000, 0x5b}, @generic={0x72, 0x10, 0x4, "79a9e90b8ca0e6a89b6f1880be2dff4e2c62b7effc8e9f2dfb47d09601a3593dd63b5408ab3a71f2dd01533d4239dc6be952e517689f159ece0a109c466d6fca9237677033c8524e9b9a788693ec49024e475eee6cb92e54a0f4a3cc36a472413fe2c1d5347bfa22031a6d120b1804"}]}, 0x4, [{0x82, &(0x7f00000002c0)=@string={0x82, 0x3, "d3193ec3e615223d85e27bd5185c943d17572700fc946c3f368f5c79ff5f98c86b6957ab0ef8fdad047b118d0875cfcc779c8888aa00f8727bda6f5a01e53731cf9454994423c8ff02778e3085900924cf2bec266a25e5dc8a809c6f34bf14a46c0cfac0b9499a5e52334a208f1c009a2816b6aaee075a9cc60441c99314a089"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], 0x0) (async) syz_usb_connect$cdc_ecm(0x6, 0x87, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x59, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x7d, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "b716411e7d"}, {0x5, 0x24, 0x0, 0x8b4}, {0xd, 0x24, 0xf, 0x1, 0x157, 0x2, 0x77, 0x2b}, [@network_terminal={0x7, 0x24, 0xa, 0xff, 0x1, 0x3, 0x17}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0xae, 0x7, 0x4}, @country_functional={0x8, 0x24, 0x7, 0x40, 0x57af, [0x5]}, @mdlm={0x15, 0x24, 0x12, 0x270}, @acm={0x4, 0x24, 0x2, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x1, 0x7e}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x3, 0x48}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x97, 0x8, 0x5f, 0xff, 0xc}, 0x128, &(0x7f0000000180)={0x5, 0xf, 0x128, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xfd, 0x1, 0x621, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x4, 0x7fff}, @generic={0x7c, 0x10, 0xb, "e09e3fb6f28cc6aa0e506576fc4062f9957859169fdd00abe2c714c603dee401da26e73bd8d00b4e9fde8931267b087d7d65b60098d6b7e4833667165e84962c29d8a92fce6c2b24378cad69d688208ad7798e22bbc685c70e42d71c6850593aa4f21bb6d6d55505dbf04e0d8128fd324af6697f3b359f8499"}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x857b, 0xf00, 0x2, [0xc0c0, 0x11, 0x0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3, 0xae, 0xf7, 0x8000, 0x5b}, @generic={0x72, 0x10, 0x4, "79a9e90b8ca0e6a89b6f1880be2dff4e2c62b7effc8e9f2dfb47d09601a3593dd63b5408ab3a71f2dd01533d4239dc6be952e517689f159ece0a109c466d6fca9237677033c8524e9b9a788693ec49024e475eee6cb92e54a0f4a3cc36a472413fe2c1d5347bfa22031a6d120b1804"}]}, 0x4, [{0x82, &(0x7f00000002c0)=@string={0x82, 0x3, "d3193ec3e615223d85e27bd5185c943d17572700fc946c3f368f5c79ff5f98c86b6957ab0ef8fdad047b118d0875cfcc779c8888aa00f8727bda6f5a01e53731cf9454994423c8ff02778e3085900924cf2bec266a25e5dc8a809c6f34bf14a46c0cfac0b9499a5e52334a208f1c009a2816b6aaee075a9cc60441c99314a089"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x807}}]}) (async) 1.442926925s ago: executing program 4 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x15, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r1, @ANYRESHEX, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b40)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f000001ab40)=0x410000002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}}, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000500), 0x205, 0x8401) r6 = add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f00000002c0), 0x0, &(0x7f0000000680)=ANY=[], 0x29, r6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) fcntl$dupfd(r5, 0x0, r5) 940.459057ms ago: executing program 4 (id=46): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x20402, 0x0) r1 = userfaultfd(0x80800) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000000c0)={0x0, 0x1bb9, 0x1, [0x3, 0x3, 0x100000000, 0x91e2, 0x7a5868d6], [0x200, 0x10000, 0x400000000000, 0x7ff, 0xfffffffffffffffb, 0x4, 0x5, 0x800, 0x2, 0x3ff, 0x0, 0x1ff, 0x7, 0x7ff, 0x8, 0x0, 0x1000, 0x7, 0x8, 0x8, 0x6, 0x0, 0x8, 0x4, 0x80, 0x8, 0x8, 0x2, 0x3, 0xb, 0x699a, 0x1, 0x3, 0x5, 0x5, 0x9, 0x1, 0x153, 0x7, 0x2, 0xc, 0x10, 0xe, 0x44, 0x8000000000000000, 0x0, 0x3, 0x3, 0x3, 0x8, 0x9, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x9d7b, 0x4d8, 0x7, 0x8001, 0x9, 0xfffffffffffffff3, 0x0, 0x7, 0x3ab3, 0x3, 0xfffffffffffffff2, 0x9, 0x4, 0x5, 0x4, 0x8, 0x3, 0xf3e4, 0x101, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x3, 0xbfff, 0x50f1, 0xfffffffffffff5c0, 0x3, 0xe9, 0x0, 0x10001, 0x5, 0x4, 0x4, 0xc, 0x8, 0x10, 0x10000, 0xd5, 0x400, 0xffffffffef85a7d0, 0xf, 0x2, 0x81, 0xffffffffffffff4e, 0xfffffffffffffffd, 0x5, 0x6, 0x5, 0x2, 0x5, 0x9, 0x1, 0x10000, 0x8, 0x8, 0xffffffffffffffe4, 0xfa, 0x1b, 0x6, 0x3, 0xd3e, 0x4, 0x7f]}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000500)={{r1}, {@val={r2}, @max}}) 921.325937ms ago: executing program 4 (id=47): unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="91a00873e6301704b45adbde08004500001400007f000001907800000000e00000012200907800000007"], 0x0) fsmount(r0, 0x0, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10, &(0x7f0000000240), 0x1, 0x793, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./file0\x00', 0x10008, &(0x7f0000000c40)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000c80)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000001140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001180)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000011c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000001200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, 0x0) connect$unix(r2, &(0x7f0000001280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001300), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001340), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000001380)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f00000013c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001400)='./proc\x00', &(0x7f0000001440)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./proc/mtrr\x00', 0x2, 0x0) write(r4, &(0x7f00000014c0)='base=0x100000 size=0x100000 type=write-combining\n', 0x31) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(0x0, 0x108843, 0x55) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000001500), 0x0) mkdir(&(0x7f0000001540)='./bus\x00', 0x63) 919.765358ms ago: executing program 3 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x161200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x10, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4045}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'lo\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r5}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0xe, 0x4000ff, 0x1ff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x4070bd26, 0x25dfdbff, {0xa, 0x8, 0x0, 0xfd, r8}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044040}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) close(r9) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000980)=0x9, 0x4) bind$inet6(r10, &(0x7f00000009c0)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x46, &(0x7f0000000a00)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081a20", 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) writev(r11, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffddffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./dev\x00', 0xf4) mount(0x0, &(0x7f0000000b80)='./dev\x00', &(0x7f0000000bc0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000c00)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./dev/ttyUSB0\x00', 0x12df00, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x3) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 645.970564ms ago: executing program 0 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x3, 0x1) unshare(0x22020600) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)={0x34, r4, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}}, 0x34}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[], 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x20ec, 0x0, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(0x0, r5) 621.533564ms ago: executing program 1 (id=50): socket$netlink(0x10, 0x3, 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x200000, &(0x7f0000000140)={[{@grpquota}]}, 0x1, 0xbc3, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000040)='./file2\x00', 0x8, 0x0, 0x2, 0x0, &(0x7f0000001280)) prlimit64(0x0, 0xe, &(0x7f00000012c0)={0xa, 0xef0b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001300)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89a2, &(0x7f0000000000)="943a") r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001400)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001480), 0x651, 0x0) recvmmsg(r4, &(0x7f00000014c0), 0x4000087, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) syz_clone3(&(0x7f0000001500)={0x20901400, &(0x7f0000001580), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 4 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfa0c, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6a, 0x3, 0xffffffffffffffff, 0x3ff, 0x7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): rocess permissive=1 [ 12.189446][ T24] audit: type=1400 audit(1792584871.260:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 18.650153][ T24] audit: type=1400 audit(1792584877.750:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.651277][ T271] cgroup: Unknown subsys name 'net' [ 18.672802][ T24] audit: type=1400 audit(1792584877.750:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.700050][ T24] audit: type=1400 audit(1792584877.770:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.700180][ T271] cgroup: Unknown subsys name 'devices' [ 18.870478][ T271] cgroup: Unknown subsys name 'hugetlb' [ 18.876074][ T271] cgroup: Unknown subsys name 'rlimit' [ 18.983298][ T24] audit: type=1400 audit(1792584878.080:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.006495][ T24] audit: type=1400 audit(1792584878.080:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.011818][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.031347][ T24] audit: type=1400 audit(1792584878.080:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.062831][ T24] audit: type=1400 audit(1792584878.140:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.088235][ T24] audit: type=1400 audit(1792584878.140:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.116755][ T24] audit: type=1400 audit(1792584878.210:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.142388][ T24] audit: type=1400 audit(1792584878.210:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.168417][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.661401][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.668441][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.675958][ T279] device bridge_slave_0 entered promiscuous mode [ 19.682969][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.690183][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.697519][ T279] device bridge_slave_1 entered promiscuous mode [ 19.746559][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.753621][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.761278][ T281] device bridge_slave_0 entered promiscuous mode [ 19.769093][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.776108][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.783418][ T281] device bridge_slave_1 entered promiscuous mode [ 19.872702][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.879844][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.887111][ T283] device bridge_slave_0 entered promiscuous mode [ 19.896247][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.903303][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.910746][ T283] device bridge_slave_1 entered promiscuous mode [ 19.926057][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.933112][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.940429][ T280] device bridge_slave_0 entered promiscuous mode [ 19.968876][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.975939][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.983302][ T280] device bridge_slave_1 entered promiscuous mode [ 20.023715][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.030768][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.038109][ T282] device bridge_slave_0 entered promiscuous mode [ 20.045035][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.052188][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.059533][ T282] device bridge_slave_1 entered promiscuous mode [ 20.070983][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.078010][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.085325][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.092347][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.153993][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.161035][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.168235][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.175253][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.205790][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.212856][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.220115][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.227121][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.244590][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.251641][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.258879][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.265919][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.277921][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.285289][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.292629][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.299961][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.307311][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.314502][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.321668][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.328750][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.336363][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.343785][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.353598][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.362340][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.370542][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.377551][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.403657][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.412225][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.419272][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.426690][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.435350][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.442452][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.449987][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.458086][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.465139][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.472465][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.480445][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.488296][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.496262][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.525653][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.537602][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.545320][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.553743][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.560791][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.575840][ T281] device veth0_vlan entered promiscuous mode [ 20.588784][ T279] device veth0_vlan entered promiscuous mode [ 20.595750][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.604890][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.612641][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.620308][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.628601][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.636601][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.644468][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.652202][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.660436][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.667438][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.674861][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.682773][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.691127][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.699376][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.706386][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.713796][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.721963][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.729083][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.736891][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.755615][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.763160][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.771251][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.779840][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.787910][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.795879][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.804221][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.812795][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.820946][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.828033][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.835464][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.843750][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.862539][ T281] device veth1_macvtap entered promiscuous mode [ 20.871369][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.880126][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.888353][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.896925][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.905390][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.913561][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.921661][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.929829][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.937833][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.945752][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.953894][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.962530][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.970721][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.980198][ T283] device veth0_vlan entered promiscuous mode [ 20.989763][ T279] device veth1_macvtap entered promiscuous mode [ 21.002895][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.010614][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.018413][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.026807][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.035526][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.043929][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.052353][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.060664][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.068793][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.077196][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.085441][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.093705][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.102031][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.110384][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.117855][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.134296][ T280] device veth0_vlan entered promiscuous mode [ 21.143331][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.151524][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.159657][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.167453][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.175520][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.183846][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.192012][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.199536][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.212437][ T283] device veth1_macvtap entered promiscuous mode [ 21.225432][ T280] device veth1_macvtap entered promiscuous mode [ 21.233324][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 21.246637][ T282] device veth0_vlan entered promiscuous mode [ 21.256408][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.264699][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.273439][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.281636][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.289440][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.297636][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.305956][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.314191][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.322726][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.330992][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.339420][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.347210][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.355437][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.363045][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.372770][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.381117][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.391686][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.412106][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.421048][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.436620][ T282] device veth1_macvtap entered promiscuous mode [ 21.446664][ T304] EXT4-fs (loop1): can't mount with commit=1048582, fs mounted w/o journal [ 21.466436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.485601][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.541620][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.575822][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.584101][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.604855][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.613902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.982893][ T322] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 23.015682][ T322] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,barrier=0x0000000000000002,usrjquota=./file1,,errors=continue [ 23.030493][ T322] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 23.047258][ T326] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 23.101553][ T304] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 23.110116][ T304] EXT4-fs error (device loop1): ext4_dirty_inode:6191: inode #2: comm syz.1.2: mark_inode_dirty error [ 23.125427][ T334] EXT4-fs warning (device loop4): ext4_fill_super:4104: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 23.126881][ T318] udevd[318]: incorrect ext4 checksum on /dev/loop4 [ 23.139005][ T304] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 23.148373][ T318] udevd[318]: incorrect ext4 checksum on /dev/loop4 [ 23.165438][ T318] udevd[318]: incorrect ext4 checksum on /dev/loop4 [ 23.172201][ T334] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 23.181927][ T304] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.2: mark_inode_dirty error [ 23.741600][ T347] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 23.750322][ T347] FAT-fs (loop2): Filesystem has been set read-only [ 23.788805][ T24] kauditd_printk_skb: 64 callbacks suppressed [ 23.788814][ T24] audit: type=1400 audit(1792584882.880:138): avc: denied { mount } for pid=348 comm="syz.3.10" name="/" dev="configfs" ino=12831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 23.793527][ T349] Config c/1 of g1 needs at least one function. [ 23.795934][ T24] audit: type=1400 audit(1792584882.880:139): avc: denied { search } for pid=348 comm="syz.3.10" name="/" dev="configfs" ino=12831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 23.819875][ T349] udc dummy_udc.0: failed to start g1: -22 [ 23.824203][ T24] audit: type=1400 audit(1792584882.880:140): avc: denied { write } for pid=348 comm="syz.3.10" name="usb_gadget" dev="configfs" ino=12832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 23.874914][ T24] audit: type=1400 audit(1792584882.880:141): avc: denied { add_name } for pid=348 comm="syz.3.10" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 23.895751][ T24] audit: type=1400 audit(1792584882.880:142): avc: denied { create } for pid=348 comm="syz.3.10" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 23.915488][ T24] audit: type=1400 audit(1792584882.880:143): avc: denied { read write } for pid=348 comm="syz.3.10" name="serialnumber" dev="configfs" ino=15832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 23.916153][ T351] FAULT_INJECTION: forcing a failure. [ 23.916153][ T351] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 23.939647][ T24] audit: type=1400 audit(1792584882.880:144): avc: denied { open } for pid=348 comm="syz.3.10" path="/1/config/usb_gadget/g1/strings/0x409/serialnumber" dev="configfs" ino=15832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 23.952820][ T351] CPU: 0 PID: 351 Comm: syz.3.11 Not tainted syzkaller #0 [ 23.979216][ T24] audit: type=1400 audit(1792584882.950:145): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 23.985669][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 23.985687][ T351] Call Trace: [ 24.005934][ T24] audit: type=1400 audit(1792584883.010:146): avc: denied { ioctl } for pid=350 comm="syz.3.11" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 24.015669][ T351] __dump_stack+0x21/0x24 [ 24.015678][ T351] dump_stack_lvl+0x1a7/0x208 [ 24.015692][ T351] ? show_regs_print_info+0x18/0x18 [ 24.057205][ T351] dump_stack+0x15/0x1c [ 24.061338][ T351] should_fail+0x3ab/0x500 [ 24.065750][ T351] should_fail_alloc_page+0x4f/0x60 [ 24.070926][ T351] __alloc_pages_nodemask+0x11a/0x640 [ 24.076270][ T351] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 24.081797][ T351] ? __kmalloc+0x19f/0x330 [ 24.086196][ T351] ? __vmalloc_node_range+0x294/0x7a0 [ 24.091545][ T351] __vmalloc_node_range+0x388/0x7a0 [ 24.096723][ T351] ? kvm_dev_ioctl+0x158/0x15e0 [ 24.101569][ T351] __vmalloc+0x79/0x90 [ 24.105616][ T351] ? kvm_dev_ioctl+0x158/0x15e0 [ 24.110451][ T351] kvm_dev_ioctl+0x158/0x15e0 [ 24.115107][ T351] ? __fget_files+0x2e1/0x340 [ 24.119766][ T351] ? hardware_enable_nolock+0xe0/0xe0 [ 24.125114][ T351] ? security_file_ioctl+0x84/0xa0 [ 24.130287][ T351] ? hardware_enable_nolock+0xe0/0xe0 [ 24.135634][ T351] __se_sys_ioctl+0x121/0x1a0 [ 24.140300][ T351] __x64_sys_ioctl+0x7b/0x90 [ 24.144864][ T351] do_syscall_64+0x31/0x40 [ 24.149255][ T351] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.155160][ T351] RIP: 0033:0x7faf8b3cc559 [ 24.159560][ T351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.179147][ T351] RSP: 002b:00007faf89e24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 24.187540][ T351] RAX: ffffffffffffffda RBX: 00007faf8b652fa0 RCX: 00007faf8b3cc559 [ 24.195577][ T351] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 24.203528][ T351] RBP: 00007faf8b463b20 R08: 0000000000000000 R09: 0000000000000000 [ 24.211475][ T351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.219443][ T351] R13: 00007faf8b653038 R14: 00007faf8b652fa0 R15: 00007ffe95fff168 [ 24.269899][ T24] audit: type=1400 audit(1792584883.340:147): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 25.232550][ T373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.266222][ T376] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 25.421295][ T301] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.589693][ T386] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 25.596931][ T386] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 25.606536][ T386] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 25.620532][ T386] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3357: comm syz.1.22: Allocating blocks 41-42 which overlap fs metadata [ 25.634416][ T386] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3357: comm syz.1.22: Allocating blocks 41-42 which overlap fs metadata [ 25.648138][ T386] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.22: Failed to acquire dquot type 1 [ 25.659397][ T386] EXT4-fs error (device loop1): mb_free_blocks:1540: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 25.669016][ T301] usb 3-1: Using ep0 maxpacket: 32 [ 25.673969][ T386] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 25.687210][ T15] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.687403][ T386] EXT4-fs error (device loop1): ext4_dirty_inode:6191: inode #12: comm syz.1.22: mark_inode_dirty error [ 25.706076][ T386] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 25.714449][ T386] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #12: comm syz.1.22: mark_inode_dirty error [ 25.725732][ T386] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 25.734112][ T386] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 25.742106][ T386] EXT4-fs error (device loop1) in ext4_do_update_inode:5362: error 27 [ 25.750481][ T386] EXT4-fs error (device loop1): ext4_truncate:4403: inode #12: comm syz.1.22: mark_inode_dirty error [ 25.761626][ T386] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3106: error 27 [ 25.770933][ T386] EXT4-fs (loop1): 1 truncate cleaned up [ 25.776627][ T386] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,mblk_io_submit,noinit_itable,noinit_itable,grpjquota=,jqfmt=vfsv1,max_dir_size_kb=0x0000000000000006,barrier=0x00000000000007ff2,errors=continue [ 25.809065][ T301] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 25.820329][ T301] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.833262][ T301] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.839931][ T301] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 25.849022][ T301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.857483][ T301] usb 3-1: config 0 descriptor?? [ 25.911318][ T392] netlink: 'syz.1.23': attribute type 15 has an invalid length. [ 25.919155][ T392] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 26.009391][ T391] loop1: p1 p3 < > [ 26.089043][ T15] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.108728][ T15] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 26.241647][ T403] EXT4-fs (loop0): Ignoring removed bh option [ 26.251200][ T403] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 26.261663][ T403] EXT4-fs error (device loop0): ext4_iget_extra_inode:4692: inode #15: comm syz.0.25: corrupted in-inode xattr [ 26.273860][ T403] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.25: couldn't read orphan inode 15 (err -117) [ 26.285899][ T403] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000873,init_itable=0x0000000000000009,init_itable,usrjquota=,max_batch_time=0x0000000000000000,norecovery,acl,,errors=continue [ 26.313351][ T306] udevd[306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 26.313396][ T407] udevd[407]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 26.326432][ T391] loop1: p1 p3 < > [ 26.336656][ T15] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 26.345805][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.346814][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.361899][ T15] usb 5-1: Product: syz [ 26.366120][ T15] usb 5-1: Manufacturer: syz [ 26.370890][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.375141][ T15] usb 5-1: SerialNumber: syz [ 26.378118][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.390385][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.397546][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.404946][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.412238][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.419658][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.426788][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.429361][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 26.434202][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.444761][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 26.448727][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 26.452233][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.459701][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 26.460263][ T15] usb-storage 5-1:1.0: USB Mass Storage device detected [ 26.489670][ T411] loop7: unable to read partition table [ 26.498969][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 26.499184][ T411] loop_reread_partitions: partition scan of loop7 (Cj̖4FLQk5) failed (rc=-5) [ 26.520543][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.527742][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.528100][ T15] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 26.535306][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.557116][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.559009][ T15] scsi host1: usb-storage 5-1:1.0 [ 26.564618][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.577029][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.584278][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.591650][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.598874][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.606145][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.613316][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.620724][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.627922][ T301] konepure 0003:1E7D:2DB4.0001: unknown main item tag 0x0 [ 26.636422][ T301] konepure 0003:1E7D:2DB4.0001: hidraw0: USB HID v0.96 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 26.648401][ T95] loop1: p1 p3 < > [ 26.659987][ T301] usb 3-1: USB disconnect, device number 2 [ 26.701122][ T407] udevd[407]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 26.703390][ T25] usb 5-1: USB disconnect, device number 2 [ 26.714757][ T306] udevd[306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 26.726528][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 26.737408][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 26.745762][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 26.756654][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 26.764940][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 26.775839][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 26.784019][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 26.794949][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 26.803752][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 26.814677][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 26.834472][ T423] fido_id[423]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 26.910245][ T421] udevd[421]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 26.922111][ T318] udevd[318]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 26.939021][ T429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 26.942604][ T421] udevd[421]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 26.982989][ T434] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.996969][ T434] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 27.131879][ T442] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.155591][ T442] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue [ 27.267648][ T448] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 27.297192][ T457] EXT4-fs (loop2): Ignoring removed bh option [ 27.310775][ T457] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,sysvgroups,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc, [ 27.404444][ T454] TCP: TCP_TX_DELAY enabled [ 28.445342][ T282] EXT4-fs error (device loop2): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /4/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.467752][ T282] EXT4-fs (loop2): Remounting filesystem read-only [ 28.474667][ T282] EXT4-fs error (device loop2): ext4_read_inline_dir:1622: inode #12: block 7: comm syz-executor: path /4/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 28.496566][ T15] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.505491][ T470] EXT4-fs (loop4): Mount option "norecovery" incompatible with ext2 [ 28.585971][ T473] Config c/1 of g1 needs at least one function. [ 28.592312][ T473] udc dummy_udc.0: failed to start g1: -22 [ 29.330148][ T24] kauditd_printk_skb: 69 callbacks suppressed [ 29.330157][ T24] audit: type=1400 audit(1792584888.430:213): avc: denied { create } for pid=484 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 29.490670][ T478] F2FS-fs (loop0): invalid crc value [ 29.500218][ T478] F2FS-fs (loop0): Found nat_bits in checkpoint [ 29.560245][ T478] F2FS-fs (loop0): Start checkpoint disabled! [ 29.568836][ T478] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 29.699385][ T15] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.709056][ T300] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.007476][ T24] audit: type=1400 audit(1792584889.100:214): avc: denied { mount } for pid=504 comm="syz.3.48" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.050619][ T506] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 30.170477][ T300] usb 3-1: device descriptor read/64, error -71 [ 30.224038][ T511] Zero length message leads to an empty skb [ 30.264584][ T427] attempt to access beyond end of device [ 30.264584][ T427] loop0: rw=2049, want=40976, limit=40427 [ 30.286895][ T24] audit: type=1400 audit(1792584889.380:215): avc: denied { create } for pid=512 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 30.329037][ T468] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.385711][ T513] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 30.479049][ T15] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 30.488174][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.567808][ T521] tipc: Started in network mode [ 30.572857][ T521] tipc: Own node identity aaaaaaaaaaaa, cluster identity 4711 [ 30.580755][ T521] tipc: Enabled bearer , priority 1 [ 30.609047][ T300] usb 3-1: device descriptor read/64, error -71 [ 30.707354][ T15] usb 2-1: can't set config #1, error -71 [ 30.749339][ T468] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 30.752909][ T15] usb 2-1: USB disconnect, device number 2 [ 30.772158][ T468] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 30.782136][ T468] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 30.793226][ T468] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 30.802514][ T468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.859557][ T505] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 30.867009][ T505] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 30.878999][ T300] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.889530][ T468] pl2303 4-1:1.0: pl2303 converter detected [ 30.910101][ T525] ================================================================== [ 30.918220][ T525] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3160 [ 30.926362][ T525] Read of size 8 at addr ffff8881135476d8 by task syz.4.51/525 [ 30.933890][ T525] [ 30.936229][ T525] CPU: 1 PID: 525 Comm: syz.4.51 Not tainted syzkaller #0 [ 30.943323][ T525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.953369][ T525] Call Trace: [ 30.956662][ T525] __dump_stack+0x21/0x24 [ 30.960997][ T525] dump_stack_lvl+0x1a7/0x208 [ 30.965676][ T525] ? show_regs_print_info+0x18/0x18 [ 30.970869][ T525] ? thaw_kernel_threads+0x220/0x220 [ 30.976145][ T525] print_address_description+0x7f/0x2c0 [ 30.981689][ T525] ? tc_setup_flow_action+0x88e/0x3160 [ 30.987143][ T525] kasan_report+0x100/0x140 [ 30.991645][ T525] ? flow_action_cookie_create+0x28/0x90 [ 30.997270][ T525] ? tc_setup_flow_action+0x88e/0x3160 [ 31.002724][ T525] __asan_report_load8_noabort+0x14/0x20 [ 31.008355][ T525] tc_setup_flow_action+0x88e/0x3160 [ 31.013643][ T525] mall_replace_hw_filter+0x2db/0x8c0 [ 31.019019][ T525] ? pcpu_block_update_hint_alloc+0x8b7/0xc50 [ 31.025085][ T525] ? mall_set_parms+0x450/0x450 [ 31.029929][ T525] ? tcf_exts_destroy+0xb0/0xb0 [ 31.034772][ T525] ? pcpu_alloc+0xf8d/0x16c0 [ 31.039354][ T525] ? mall_set_parms+0x1a0/0x450 [ 31.044213][ T525] mall_change+0x546/0x770 [ 31.048625][ T525] ? __kasan_check_write+0x14/0x20 [ 31.053732][ T525] ? mall_get+0xa0/0xa0 [ 31.057880][ T525] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 31.063769][ T525] tc_new_tfilter+0x1487/0x1ab0 [ 31.068611][ T525] ? mall_get+0xa0/0xa0 [ 31.072762][ T525] ? tcf_gate_entry_destructor+0x20/0x20 [ 31.078391][ T525] ? security_capable+0x87/0xb0 [ 31.083235][ T525] ? ns_capable+0x8c/0xf0 [ 31.087559][ T525] ? netlink_net_capable+0x125/0x160 [ 31.092835][ T525] ? tcf_gate_entry_destructor+0x20/0x20 [ 31.098460][ T525] rtnetlink_rcv_msg+0x811/0xca0 [ 31.103390][ T525] ? unwind_get_return_address+0x4d/0x90 [ 31.109012][ T525] ? rtnetlink_bind+0x80/0x80 [ 31.113686][ T525] ? stack_trace_save+0xa6/0xf0 [ 31.118529][ T525] ? stack_trace_snprint+0xe0/0xe0 [ 31.123640][ T525] ? avc_has_perm+0x168/0x3d0 [ 31.128310][ T525] ? memcpy+0x56/0x70 [ 31.132286][ T525] ? avc_has_perm+0x27f/0x3d0 [ 31.136958][ T525] ? __kasan_slab_alloc+0xc9/0xe0 [ 31.141975][ T525] ? avc_has_perm_noaudit+0x260/0x260 [ 31.147341][ T525] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.153401][ T525] ? selinux_nlmsg_lookup+0x398/0x430 [ 31.158767][ T525] netlink_rcv_skb+0x1e9/0x430 [ 31.163525][ T525] ? rtnetlink_bind+0x80/0x80 [ 31.168189][ T525] ? netlink_ack+0xb30/0xb30 [ 31.172767][ T525] ? __netlink_lookup+0x387/0x3b0 [ 31.177786][ T525] rtnetlink_rcv+0x1c/0x20 [ 31.182198][ T525] netlink_unicast+0x86c/0xa30 [ 31.186956][ T525] netlink_sendmsg+0x949/0xb70 [ 31.191713][ T525] ? netlink_getsockopt+0x530/0x530 [ 31.196903][ T525] ? security_socket_sendmsg+0x82/0xa0 [ 31.202352][ T525] ? netlink_getsockopt+0x530/0x530 [ 31.207541][ T525] ____sys_sendmsg+0x5be/0x8f0 [ 31.212296][ T525] ? __sys_sendmsg_sock+0x40/0x40 [ 31.217313][ T525] ? import_iovec+0x7c/0xb0 [ 31.221810][ T525] ___sys_sendmsg+0x236/0x2e0 [ 31.226481][ T525] ? __sys_sendmsg+0x280/0x280 [ 31.231250][ T525] ? __fdget+0x1a1/0x230 [ 31.235484][ T525] __x64_sys_sendmsg+0x201/0x2d0 [ 31.240421][ T525] ? __kasan_check_write+0x14/0x20 [ 31.245526][ T525] ? ___sys_sendmsg+0x2e0/0x2e0 [ 31.250375][ T525] ? __kasan_check_read+0x11/0x20 [ 31.255405][ T525] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 31.261047][ T525] do_syscall_64+0x31/0x40 [ 31.265465][ T525] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.271351][ T525] RIP: 0033:0x7f18771a9559 [ 31.275760][ T525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.295360][ T525] RSP: 002b:00007f1875c01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 31.303772][ T525] RAX: ffffffffffffffda RBX: 00007f187742ffa0 RCX: 00007f18771a9559 [ 31.311747][ T525] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 31.319723][ T525] RBP: 00007f1877240b20 R08: 0000000000000000 R09: 0000000000000000 [ 31.327689][ T525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.335669][ T525] R13: 00007f1877430038 R14: 00007f187742ffa0 R15: 00007ffda6aa5c78 [ 31.343769][ T525] [ 31.346098][ T525] Allocated by task 525: [ 31.350341][ T525] __kasan_kmalloc+0xd4/0x100 [ 31.355009][ T525] __kmalloc+0x19f/0x330 [ 31.359261][ T525] tcf_idr_create+0x5f/0x790 [ 31.363840][ T525] tcf_idr_create_from_flags+0x61/0x70 [ 31.369292][ T525] tcf_gact_init+0x2e6/0x560 [ 31.373870][ T525] tcf_action_init_1+0x443/0x6d0 [ 31.378827][ T525] tcf_action_init+0x227/0x780 [ 31.383794][ T525] tcf_exts_validate+0x23c/0x540 [ 31.388728][ T525] mall_set_parms+0x4a/0x450 [ 31.393322][ T525] mall_change+0x47a/0x770 [ 31.397738][ T525] tc_new_tfilter+0x1487/0x1ab0 [ 31.402586][ T525] rtnetlink_rcv_msg+0x811/0xca0 [ 31.407529][ T525] netlink_rcv_skb+0x1e9/0x430 [ 31.412286][ T525] rtnetlink_rcv+0x1c/0x20 [ 31.416695][ T525] netlink_unicast+0x86c/0xa30 [ 31.421453][ T525] netlink_sendmsg+0x949/0xb70 [ 31.426210][ T525] ____sys_sendmsg+0x5be/0x8f0 [ 31.430961][ T525] ___sys_sendmsg+0x236/0x2e0 [ 31.435635][ T525] __x64_sys_sendmsg+0x201/0x2d0 [ 31.440562][ T525] do_syscall_64+0x31/0x40 [ 31.444972][ T525] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.450846][ T525] [ 31.453177][ T525] The buggy address belongs to the object at ffff888113547600 [ 31.453177][ T525] which belongs to the cache kmalloc-256 of size 256 [ 31.467218][ T525] The buggy address is located 216 bytes inside of [ 31.467218][ T525] 256-byte region [ffff888113547600, ffff888113547700) [ 31.480489][ T525] The buggy address belongs to the page: [ 31.486122][ T525] page:ffffea00044d5180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113546 [ 31.496331][ T525] head:ffffea00044d5180 order:1 compound_mapcount:0 [ 31.502899][ T525] flags: 0x4000000000010200(slab|head) [ 31.508335][ T525] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043200 [ 31.516894][ T525] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 31.525448][ T525] page dumped because: kasan: bad access detected [ 31.531853][ T525] page_owner tracks the page as allocated [ 31.537582][ T525] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 468, ts 30895563210, free_ts 30887420850 [ 31.557957][ T525] prep_new_page+0x176/0x190 [ 31.562523][ T525] get_page_from_freelist+0x225f/0x23f0 [ 31.568041][ T525] __alloc_pages_nodemask+0x29a/0x640 [ 31.573386][ T525] new_slab+0x84/0x3f0 [ 31.577429][ T525] ___slab_alloc+0x2f8/0x4c0 [ 31.581993][ T525] __slab_alloc+0x63/0xa0 [ 31.586297][ T525] __kmalloc+0x1f9/0x330 [ 31.590516][ T525] usb_serial_probe+0x15c6/0x31e0 [ 31.595514][ T525] usb_probe_interface+0x60f/0xb20 [ 31.600604][ T525] really_probe+0x3bf/0xa60 [ 31.605082][ T525] driver_probe_device+0xe1/0x190 [ 31.610080][ T525] __device_attach_driver+0x282/0x3f0 [ 31.615427][ T525] bus_for_each_drv+0x184/0x210 [ 31.620250][ T525] __device_attach+0x2a8/0x410 [ 31.624993][ T525] device_initial_probe+0x1a/0x20 [ 31.629993][ T525] bus_probe_device+0xc0/0x1e0 [ 31.634731][ T525] page last free stack trace: [ 31.639385][ T525] free_unref_page_prepare+0x2b7/0x2d0 [ 31.644819][ T525] free_unref_page_list+0x129/0x9c0 [ 31.649991][ T525] release_pages+0xe41/0xe90 [ 31.654557][ T525] free_pages_and_swap_cache+0x86/0xa0 [ 31.659987][ T525] tlb_finish_mmu+0x17e/0x310 [ 31.664640][ T525] exit_mmap+0x329/0x590 [ 31.668858][ T525] __mmput+0x92/0x2d0 [ 31.672811][ T525] mmput+0x4e/0x150 [ 31.676596][ T525] do_exit+0x9d8/0x24e0 [ 31.680725][ T525] __ia32_sys_exit+0x0/0x40 [ 31.685201][ T525] do_syscall_64+0x31/0x40 [ 31.689596][ T525] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.695459][ T525] [ 31.697763][ T525] Memory state around the buggy address: [ 31.703369][ T525] ffff888113547580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.711404][ T525] ffff888113547600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 31.719442][ T525] >ffff888113547680: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 31.727478][ T525] ^ [ 31.734386][ T525] ffff888113547700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.742420][ T525] ffff888113547780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.750452][ T525] ================================================================== [ 31.758485][ T525] Disabling lock debugging due to kernel taint [ 31.795113][ T24] audit: type=1400 audit(1792584890.890:216): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.803486][ T290] tipc: 32-bit node address hash set to aaaa0000 [ 31.824317][ T468] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 31.834736][ T468] usb 4-1: USB disconnect, device number 2 [ 31.841679][ T468] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 31.848794][ T24] audit: type=1400 audit(1792584890.890:217): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.850260][ T468] pl2303 4-1:1.0: device disconnected [ 31.881731][ T24] audit: type=1400 audit(1792584890.890:218): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.903190][ T24] audit: type=1400 audit(1792584890.890:219): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.924074][ T24] audit: type=1400 audit(1792584890.890:220): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.945238][ T24] audit: type=1400 audit(1792584890.890:221): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.968247][ T24] audit: type=1400 audit(1792584890.890:222): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.068989][ T300] usb 3-1: device descriptor read/64, error -71 [ 32.469009][ T300] usb 3-1: device descriptor read/64, error -71 [ 32.589059][ T300] usb usb3-port1: attempt power cycle