last executing test programs: 1m11.425790685s ago: executing program 4 (id=35): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 1m10.850613498s ago: executing program 0 (id=41): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_trace', 0x482, 0x101) timer_create(0x2, 0x0, &(0x7f0000000540)=0x0) timer_gettime(r1, &(0x7f0000000780)) clock_gettime(0x0, &(0x7f0000000000)) (async) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000040)={{r2, r3+10000000}, {0x77359400}}, &(0x7f0000000080)) write$tcp_mem(r0, &(0x7f0000000140)={0xe, 0x20, 0x9, 0x20, 0x8000}, 0x48) 1m10.850336388s ago: executing program 0 (id=42): socket$netlink(0x10, 0x3, 0xd8e6bc4c30ce9d36) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], &(0x7f0000002f40)=""/4086, 0x33, 0xff6}, 0x28) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)={0x80000000}) close(0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000027c000/0x18000)=nil, 0x0, 0x0, 0x79, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f0000000e80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@orlov}, {@usrquota}, {@data_err_ignore}, {@data_writeback}, {@journal_checksum}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'min_batch_time'}}]}, 0x4, 0x501, &(0x7f0000000f40)="$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") lsetxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) socket(0x9, 0x2, 0xfffffff7) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') preadv(r5, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 1m10.179371487s ago: executing program 4 (id=45): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0xc96b, 0x0, 0x1}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000002180)=ANY=[], 0x0) syz_emit_ethernet(0x19, &(0x7f0000000000)=ANY=[], 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000040), &(0x7f0000000a80)=@tcp=r5}, 0x20) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000e40)={{r6}, "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"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x210006, &(0x7f0000000000), 0x1, 0x564, &(0x7f00000008c0)="$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") 1m9.61819515s ago: executing program 4 (id=47): close(0xffffffffffffffff) (async) r0 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) (async) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000000)) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x100, 0x4) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) (async) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x404040, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r1) (async) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a6ca55ec79705b3692b89011a1376b99c6afbfa4b77148ee66823aca0e412af8c520245d2ea595f412cde22f4e8e0e0036041deb1281f74125d0dade914411247d4a0faafc0de937c1372ecbbbd4b7681fb25df43805780d70edfc8feb4c64248ce800c84e028ea65eba506ac51eefb8b2a9f667a4153a5ded436e1fb88d212da6543ff68676eeb8a34e36428ff16dfb08ecd4ebd8b94cc453f78cc19a2ca4d228339e4e8c6a0ef8d0637de701346471182644939bd1da5235df8d78f9e4ddc9e0c722eeba3cc64afb484bf4df104f23a007ec1155f2ad7001db379cf0a733fe", 0xe0}], 0x1, 0x9, 0xb097) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r3, &(0x7f0000000200)={{0x10b, 0x8, 0xf9, 0x23e, 0xdf, 0x2, 0x2ba, 0x9}, "3ca2e64a97b173ed8a3818581f91dfd9b659a537afb8309eccd83dd1f767f9d50d51e631aaa3c2fb038911b4e386b86da2970062bb0a7e6ad81e44659ba25e5d6291b214b6b42c5d74f786292c7e11ee1a3254340a7527e23d016a4d444fd67c0f5294e1c881fdc9b3cd280a0880c7e298bf914e2c0cf63f4b946fb824de5179b9e3046f0682c79a2db2e63dbb73c074b238832988c1cb72a72b004fd634d5888260d318b59b684dbc83f835e3e43b56c7ca465fdc32b5b09a6c4085565d24af66a7ee9b2cd03c8a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xae8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000d40), 0xffffffffffffffff) (async) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d80), 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x42045) write$binfmt_aout(r3, &(0x7f0000000e80)={{0xcc, 0x2, 0x8, 0x111, 0xeb, 0x4, 0x358, 0xb}, "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", ['\x00', '\x00', '\x00', '\x00']}, 0x51b) (async) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000013c0), 0x4) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000001400)=0x8000) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000014c0)={'ip6gre0\x00', &(0x7f0000001440)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x8, 0x5, 0x27, @dev={0xfe, 0x80, '\x00', 0x23}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7f00, 0x10001, 0x950}}) bind$xdp(r6, &(0x7f0000001500)={0x2c, 0xc, r7, 0x2f}, 0x10) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000001540)=""/9) (async) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000001580)={'\x00', 0x9, 0x1, 0x7, 0x1, 0x4, 0xffffffffffffffff}) sched_setaffinity(r8, 0x8, &(0x7f0000001600)=0x2) (async) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r1) (async) socket$inet_udplite(0x2, 0x2, 0x88) r10 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r10, &(0x7f0000001680)={{0x107, 0x2, 0x7, 0x220, 0x346, 0xb4, 0x1ee, 0xfffffffb}, "c0b008c9cc97df026f8fa44618a575ca405e6a1fc5239e71bb4d5331846f6b703502ffd9a2", ['\x00', '\x00', '\x00']}, 0x345) 1m9.558641053s ago: executing program 4 (id=48): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@nodiscard}, {@whint_mode_user}, {@discard_unit_section}, {@noheap}, {@checkpoint_diasble}, {@background_gc_on}, {@background_gc_on}, {@fsync_mode_posix}, {@jqfmt_vfsold}, {@block_mode}, {@data_flush}, {@heap}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x550f, &(0x7f000000cf00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000280)=0xe, 0x800) listen(r3, 0x4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m9.520735486s ago: executing program 0 (id=49): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001300e9990200000000000000fe80000000000000000000000000003bfe8000000000000000000000000000aa0003000000000c9b0a00103000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000004000000007f00000000000000070000000001000003000000000000000000000000000000fdffffffffff00000000ffffffff0000000000000000000000000000000000000000050000000000000000000000020000000101020000000000840005"], 0x13c}, 0x1, 0x0, 0x0, 0x84811}, 0x0) 1m9.250544462s ago: executing program 0 (id=50): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000440)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c646973636172642c756e695f786c6174653d312c756e695f786c615a45814e5a67829b2c6e66733d7374616c655f72672c74696d655f6f2f8166665665743d3078303030303030303030303030303538342c73686f72746e616d653d6d697865642c757466383d302c757466383d302c757466383d312c00"/178], 0x0, 0x2aa, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x6, 0x4) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 1m9.154464497s ago: executing program 0 (id=51): ioprio_set$pid(0x3, 0x0, 0x6000) 1m9.062487082s ago: executing program 0 (id=53): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x4f2, &(0x7f0000000a40)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x4f2, &(0x7f0000000a40)="$eJzs3c9vVF0ZAOD3Tjttv34DBWWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMXY+6dSzu0HVqk7dDO8yR37j3nXuY9Z4ZzztzDDCeAnnUuItYiYiAi7kfESJ6f5FvcbG3pda9fPZlef/VkOolm8+4/kux8mhdtfyb1af6cQxHxg+9G/DjZHrexsjo/Va1WFvP06FJtYbSxsnp5rpDnTEyOT45dv3JtYt/qerb2m5ffmbv9w9/99ksv/rj2zZ+mxSr97ER2rr0e+6lV9WKU2vL6I+L2QQTrkv787w9HT9raPhMR57P2PxJ92bsJABxnzeZINEfa0wDAcZfe/5ciKZTzuYBSFArlcmsO70wMF6r1xtKlkfryw5nI5rBORbHwYK5aGcvnCk9FMUnT49nxZnpiS/pKRJyOiJ8PfpKly9P16kw3P/gAQA/7dMv4/+/B1vgPABxzQ+95va8IAMDR977jPwBw9Bn/AaD3vMf4b+ofAI4J9/8A0HuM/wDQe3Yd/58eTjkAgEPx/Tt30q25nv//1zOPVpa/VXp0eabSmC/XlqfL0/XFhfJsvT5brZSnm83dnq9ary+MX91INlZW79Xqyw+X7s3VpmYr9yrFA64PALC702ef/zmJiLUbn2RbtK3lYKyG463Q7QIAXdPX7QIAXeP3PNC79nCPbxoAjrkdluh9S8evCD2z+CscVRc/b/4fepX5f+hd/9/8/7f3vRzA4TP/D72r2Uys+Q8APcYcP/BB//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaqUbUmhnK0FvpY+FsrliBMRcSqKyYO5amUsIk5GxJ8Gi4NperzbhQYAPlDhb0m+/tfFkQulrWcHkv8MZvuI+Mkv7/7i8dTS0uJ4mv/PjfylZ3n+xEA3KgAAtLu5Pas1Tuf7thv516+eTL/ZDrOIL2+1FhdN467nW+tMf/Rn+6EoRsTwv5I83ZJ+Xunbh/hrTyPic5v1f9wWoZTNgbRWPt0aP4194gDib77+W+MX3opfyM6l+2L2Wnx2H8oCveb5rVY/mbe9tInl7a8Q57L9zu1/KOuhPtyb/m99W/9X2Oj/+rbFT7I2f24j/e6SvLz6++9ty2yOtM49jfhC/07xk434SYf+98Ie6/iXL375fKdzzV9FXIyd47fUsm52dKm2MNpYWb08V5uarcxWHk5MTI5Pjl2/cm1iNJujbj3+YacYf79x6WSn+Gn9hzvEH9ql/l/bY/1//d/7P/rKO+J/46s7v/9n3hE/HRO/vsf4U8M3Oy7fncaf6VD/3d7/S3uM/+KvqzN7vBQAOASNldX5qWq1srjLQfpZc7drHBzNg1iL+AiKkR8MxEdRjJ4/6HbPBBy0zUbf7ZIAAAAAAAAAAAAAAACdNFZW5wfjYH9O1O06AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHz9LwAA//9Jt84K") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0) 1m9.018765965s ago: executing program 32 (id=53): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x4f2, &(0x7f0000000a40)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x4f2, &(0x7f0000000a40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0) 1m8.836962706s ago: executing program 4 (id=55): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x88, 0x1, &(0x7f0000000140), 0x4) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x12, 0x0, 0xffffffffffffffff) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='1-6:5'], 0x31) r3 = socket(0x840000000002, 0x3, 0xff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, r9, 0x16, 0x0, @void}, 0x10) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000780)="66b9800000c00f326635004000000f30baa100b8b956ef66b9210800000f32baf80c66b887083c8166efbafc0cb004ee0f0936660f388153000f20e06635000001000f22e0baf80c66b880006d8266efbafc0cb80000ef660f38818690672e260fc75bbd"}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f00000003c0)=0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="22052cbd7000fcdbdf254900000008000300f6a78d1fafabb7018859a0a9291ebff695f89ccbde8a0f1ef3e0d7b5fae94bd4cf26063e1399f41d1e0fcde099c41314a9111ef75b60763b30aa35d84bc8c40b7c6b902717768e960215a20efd7b8273a575328f2a7568c239bbf0ff688dcc81c74021ac26043506d4b3e31f3318b69ad18a4034be050236ca1539dd0daefd3b99489e31b42215a8f448aef407802f59591cb7790067c9e21ed0a1031af745caaf0f33ec81b12029112c4bc4ec67bbe41baabd8bc8f1d876835e5e087ec68151e4ed8994a4739839d2c272e94bd9e3018b5beabbd049194fb7580b0bf02d8eb397871694e3a92254155731f227af2bd841b70ccaad2783642bd0cea974b2b78d1d7b8a5d443f0bbe37da8a56ab865a1acab122f876076d3a3dba3a36ee2255f7660153261f3aaf1dabe6a43f30a4727f2fbd6724", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000280)={0x3c, 0x6, 0x1, 0x99, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}, 0x38) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$sock(r3, &(0x7f0000000480)={&(0x7f0000000900)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="d17a2b67d956ee7b91d75a5783bfd6544546e73a18ca12dfee5b6caf16f40a61bdd38d526742f6d7f3dfcb559408dfb586a85489d1c8797abdf2ba730bef3a3a7f008a435c6648670f46c09d74fca5aeb8bd74378bd23c11", 0x58}], 0x1}, 0x4000001) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="3dfdffff", @ANYRES16=r11, @ANYBLOB="04002abd7000fcdbdf25150000005c00018038000400200001000a0057940000000000000000000000090000101400020002004e24ffffffff0000000000000000080003000396000008000300a30500000000010069623a76657468315f746f5f62617461647600000800030005000000329b936f2f258a7fc6db4b10abddfab32a5233b05686d2ab002289b03650168db8d559be474e4c69c8bc2012a8b805a92deec347eb850f483013b58f38e91a05ebeda5ff3ebdb12743729da36a61ec06acb83c4d88e9139cf3733be504bac11150a92b785c85b1cba5a76859cec2c50bef4c8b4a5ba55f6a91bb0ce56e8294910d46f7352c44"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m8.366329333s ago: executing program 4 (id=59): r0 = getpid() syz_pidfd_open(r0, 0x0) waitid(0x1, r0, &(0x7f0000000100), 0x4, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x3d}, [@ldst={0x6, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 1m8.350380554s ago: executing program 33 (id=59): r0 = getpid() syz_pidfd_open(r0, 0x0) waitid(0x1, r0, &(0x7f0000000100), 0x4, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x3d}, [@ldst={0x6, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 1m7.39288076s ago: executing program 6 (id=60): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001300e9990200000000000000fe80000000000000000000000000003bfe8000000000000000000000000000aa0003000000000c9b0a00103000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000004000000007f00000000000000070000000001000003000000000000000000000000000000fdffffffffff00000000ffffffff0000000000000000000000000000000000000000050000000000000000000000030000000101020000000000840005"], 0x13c}, 0x1, 0x0, 0x0, 0x84811}, 0x0) 1m7.254484858s ago: executing program 6 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x82, &(0x7f0000000240)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/warn_count', 0x40901, 0x82) fcntl$dupfd(r3, 0x0, r0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1000, r2, &(0x7f0000000040)="e02792f8bbf1f9f753e40e48ae5ec4a431b856f07f507d4e395a20742a4e9a2b9e5efa9b356c4a92931a4ffea754ecf22a8b89cb5669a3cf03b446407735bd364ebdfd388905fe40dc8f12d3f2172590e4a622e3a6b17b50e529c6b5d8c47f71fe527aacc055bb72e0a8097d9af14155d5037e0653f7692683c628ccf29bb5d893755e1d505c25fab396019dd7842ef7cf980084fcce", 0x96, 0x6, 0x0, 0x0, r2}]) sendmsg$nl_route_sched(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000004700)=@newtaction={0x44, 0x58, 0x284f, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x44}}, 0x0) 1m7.153382734s ago: executing program 6 (id=67): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="94010000100013070000000000000000ffffffff0000fcaa000000fb0000003442bd6e000000000000c0400000000001000000004e230080000000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000ff0100000000000000000000000000010000000000000000000000000000000094080000000000000000000000000000000000000000000000000080eb04000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c001400636d6163286165732900"], 0x194}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1m6.145039463s ago: executing program 6 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000300)="0f06e800000f01c50f01c50f01d16436363e362e0f78230fc72c66b9800000c0e232262664640f1c6b92f30f1ecb66b8a8325f8f66ef0c00ca0cc830e4", 0x3d}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_delroute={0x20, 0x19, 0x1, 0x70bd2e, 0x25dfdbfb, {0x2, 0x80, 0x80, 0x4, 0xfd, 0x4, 0xfd, 0x9}, [@RTA_METRICS={0x4, 0x12}]}, 0x20}}, 0x24058044) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0x439, 0x70bd22, 0xffffffea, {0x0, 0x0, 0xe403, r7, 0x10c27, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x18}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1m6.110082745s ago: executing program 34 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000300)="0f06e800000f01c50f01c50f01d16436363e362e0f78230fc72c66b9800000c0e232262664640f1c6b92f30f1ecb66b8a8325f8f66ef0c00ca0cc830e4", 0x3d}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv4_delroute={0x20, 0x19, 0x1, 0x70bd2e, 0x25dfdbfb, {0x2, 0x80, 0x80, 0x4, 0xfd, 0x4, 0xfd, 0x9}, [@RTA_METRICS={0x4, 0x12}]}, 0x20}}, 0x24058044) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x48, 0x10, 0x439, 0x70bd22, 0xffffffea, {0x0, 0x0, 0xe403, r7, 0x10c27, 0x610c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x18}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 5.172304848s ago: executing program 2 (id=555): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000680)={0x42, 0xfffffffa, 0x1}, 0x10) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4a106200, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000000c0)={0x14, 0x0, 0x0}, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044) 4.550181624s ago: executing program 3 (id=564): pwrite64(0xffffffffffffffff, &(0x7f0000000100)="e67ab166972ce298f4681ef5c755f60473b17b78", 0x14, 0x3) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008800) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) r2 = socket$inet6(0xa, 0x3, 0x100) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@grpid}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000d0000000400000003"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f00000000c0)}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r6, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f00000004c0)={{0x87, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1, 'lblc\x00', 0x30, 0xd20, 0x3e}, {@remote, 0x4e20, 0x3, 0x79a, 0x6, 0x3}}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.121986009s ago: executing program 5 (id=565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01f9e78200000000403c020e00"], 0x14}}, 0x0) 3.485350786s ago: executing program 2 (id=568): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'veth0_to_bridge\x00', 0x0}) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x50}}, 0x0) setns(r2, 0x24020000) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2000ca6, 0x0) r5 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) unshare(0x480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fadvise64(r6, 0x36a9, 0x9, 0x4) 3.394878041s ago: executing program 2 (id=569): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfe, 0x27ffdf7ff}, 0xee47af8b233f46d6) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ppoll(&(0x7f0000000080)=[{r5, 0x422}, {r5, 0x105}], 0x2, 0x0, 0x0, 0x0) signalfd4(r5, &(0x7f0000000000), 0x8, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r8, 0xd13, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4049005}, 0x40040c0) 3.221441352s ago: executing program 5 (id=570): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@acl}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@noquota}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x55d, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) 3.205553502s ago: executing program 5 (id=571): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='freezer.self_freezing\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utime(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) 2.773639018s ago: executing program 7 (id=572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.772439728s ago: executing program 7 (id=573): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@jqfmt_vfsv0}]}, 0x4, 0x52c, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 2.702093372s ago: executing program 1 (id=574): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) ppoll(&(0x7f0000000080)=[{r3, 0x422}], 0x1, 0x0, 0x0, 0x0) signalfd4(r3, &(0x7f0000000000), 0x8, 0x800) 2.605318828s ago: executing program 7 (id=575): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfe, 0x27ffdf7ff}, 0xee47af8b233f46d6) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ppoll(&(0x7f0000000080)=[{r5, 0x422}, {r5, 0x105}], 0x2, 0x0, 0x0, 0x0) signalfd4(r5, &(0x7f0000000000), 0x8, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000002a40)={0x13e4, 0x14, 0x10, 0x70bd2d, 0x25dfdc03, {0x8, 0xa}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "92d3a6c29244beb91e39dbc871381ff0cb5a33f85164596fb61dd7b8262be40ab7eeafb9fd23b8528b"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "3d896aee8c8371e6c469bd812c9893708713e0ff3e5dacc7afa77470dfcbb6dbb774959db6ca2d6b47611bf2b3c8716e351d705ed33badc1e1a2e842da8ff11d41a744c6c6fcc59c4d27c2a103ceaed9a936290ea0642fca43a72f0176b53ca6ea08cad04d015ec3f68a4a1ff0089ce0657bb6722c6d4062ca52b9105e395717a13c863c48e8fb20dbfc47ba54ca"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "e25443a2bed827b09f0a5ff36f59738f8558bb262252e43f9308acd3e95c9a6df258f6b175e85f6bd5810adb4420ea7afdf6176c2e9b02c397d1eec76c2b"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "1141293b6ca59d3131841c6b0cacfa3e167e508967a5aaef0ac7115f6116c227c2f39fcecab78ee135a40f713b9aadc0011d611296d4fa623730134e4e3389a1aea33d5ed46afe151cc5946dae445c0deaaa9712940d5d240b4c896c3db1279c61595d2f3952e15897c1c07825e42e2ee4c47bb8d21910872457b9d619be57aea4ce5a95645da63100d3b515503b16f2fecc9f69ea8a83a797b369eb051d94bd84366c8d1b39012dc664b2b8726812c98858a23ea8fb63992a6b8a1e75337771dab050b4bd449ce44066af408668675fab2010d4faa6a0f23a1c3e402f9aaeb7"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "7bd2d21368afae14bbbdf6693e7a4a241a51c3f17c4746c57f59a7c69d3c097a6d301fd07fa74e0d424924f01fa2fdb5aebdcb978584a747ec5d329630151f228b0e5676119b93da280824a9e8f7b0d321aa5ff989ed809af05649fce5aaa80d5c03b1960f1d92590d03c4a1e8359239fa1c134bada553abd27b7939783ac510a778676757f82ca1ade05640c6d7f6b7d0cffc5e38f0550671ae7504348ce04695646dc3945598f9ef39d2e3450734f05552cdd937c0fbe3c7d9a987294f93b12b1859dc7148433775c36af959c48c1dd38eba3ec999e190ebf193ca4de95389a1e8a6e4a7383e2ab16277f811a28e56110c"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "4099bd5cf1d53664e249aff96ad4d71cc72993166d756a507bb7ee7d0fbecfb50e821f036411c54060bbc0f795d95631d28d7600358812dffd339a7694c6fb1aed8d575862856a62ea9145846b411fe0e7a336fe41045c9e52467797ef093c142c4f13a41b598045e13bb2068ab4d9d31db4d6cd2e023a80b082bfd99545d1a2e808e547"}, @INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "c7254ffeb85930429c7a5430d4e804537739922d72737d88976432746f99d756fdd54837fc14ca8d0334a4cf476fc0e84ad0d7bf5d0f6490da0b89ee35c325b45e003eab1c802adfe2026b7e562851155a9337f7ed19bbeebf"}]}, 0x13e4}, 0x1, 0x0, 0x0, 0xc4845}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r7, 0xd13, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4049005}, 0x40040c0) 2.493923944s ago: executing program 2 (id=576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r2, 0x0, 0x8e14, 0x8ffff) copy_file_range(r2, 0x0, r2, &(0x7f0000000500)=0xffff, 0x9, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) r5 = signalfd(r0, &(0x7f0000000040)={[0x5]}, 0x8) rename(&(0x7f0000000600)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8000, 0x1, 0xc5, 0xda, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x67, 0x0, 0xd, 0x4, 0x0, @loopback, @private=0xa010101, {[@generic={0x180, 0x2}, @end, @lsrr={0x83, 0x1b, 0xa3, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @local, @private=0xa010102]}, @lsrr={0x83, 0xf, 0xa, [@private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x3c}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xd8, 0x3, 0x8, [{@multicast2, 0x4}, {@remote, 0x9}]}, @timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x4, [{@local, 0x3}]}, @lsrr={0x83, 0x1f, 0x6f, [@local, @loopback, @rand_addr=0x64010100, @remote, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b40)=@polexpire={0x364, 0x1b, 0x2, 0x70bd27, 0x25dfdbfe, {{{@in6=@private2, @in6=@private0, 0x4e23, 0x9, 0x4e20, 0x89a, 0x2, 0x20, 0xc0, 0x2c, r6, r7}, {0x5, 0x7, 0x6800, 0x0, 0xf18, 0x1, 0x97, 0x8000000000000001}, {0x401, 0x1, 0x6, 0x401}, 0x800, 0x0, 0x1, 0x0, 0x2, 0x1}, 0xd}, [@mark={0xc, 0x15, {0x35075c, 0xffffffff}}, @sa={0xe4, 0x6, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x4e20, 0x5, 0x4e24, 0x0, 0xa, 0xc0, 0x0, 0x88, r8, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0xff}, @in=@loopback, {0x8000000000000000, 0x1, 0x0, 0xffffffffffffff01, 0x10000, 0x65617f29, 0x3, 0x8}, {0x6, 0xfffffffffffffff7, 0x4, 0x100}, {0x9, 0x4df, 0x200}, 0x70bd2d, 0x3502, 0x2, 0x3, 0x80, 0x22}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @replay_thresh={0x8, 0xb, 0x4}, @address_filter={0x28, 0x1a, {@in6=@private2, @in=@empty, 0x2, 0x0, 0x3}}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xa}}, @lastused={0xc, 0xf, 0x9}, @tmpl={0x144, 0x5, [{{@in6=@loopback, 0x4d2, 0xff}, 0xa, @in6=@mcast1, 0x3502, 0x1, 0x2, 0x9, 0x3, 0x7, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3505, 0x2, 0x0, 0x8, 0x1, 0xfffffffa, 0x7}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in=@multicast2, 0x34ff, 0x3, 0x40f3ba2bff24fb94, 0x8, 0x0, 0x3, 0xb}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x6c}, 0xa, @in6=@loopback, 0x34ff, 0x1, 0x3, 0x8, 0x7, 0x6}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x32}, 0x0, @in=@local, 0x3501, 0x3, 0x0, 0x0, 0x51, 0x3, 0xffff00}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x44000}, 0x40) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.447521707s ago: executing program 3 (id=577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00000000000000000000000000000000000000000020000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 2.354031372s ago: executing program 3 (id=578): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a300000000038000400140001000a0000007f000001ffffffffffff0000200002000a"], 0x60}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r4, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88a820008100000086dd605f106000442f00fc00000000000000000000000000008000000000000000000000ffffe0000002242065580000000000000800000086dd88a888be86ddffff1000000001000000ffffffff080022eaffffffe82000e0000200000000000000000800000800655800000002"], 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x1, {{0xa, 0x4e25, 0x9, @private1}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0xc}, 0xfffffffd}}}, 0x108) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000180)={0x2c, 0x0, r4, 0x31, r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESDEC, @ANYBLOB="43da6e"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x1060d, &(0x7f0000031240)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) 2.317114054s ago: executing program 5 (id=579): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',iocharset=cp949,errors=remount-ro,utf8,errors=remount-ro,dmask=00000000000000000000003,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="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"/308], 0x1, 0x152b, &(0x7f0000002f80)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ppoll(&(0x7f00000000c0)=[{r5, 0x8000}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r6 = syz_open_pts(r5, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', r4, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x800003, 0xfffffff9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x49, 0x4, 0x1, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x6, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0xa, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0xffffffff, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dc, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x6, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x0, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x7, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x100, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x400000, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x5, 0x5d41, 0x1, 0x4, 0x0, 0xb, 0x7, 0x200, 0x12001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0x8, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0x6, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x2, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x1, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x492, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x480}, 0x1, 0x0, 0x0, 0xc0c3}, 0x800) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x3}, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.020520622s ago: executing program 3 (id=580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, 0x0) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 1.810454534s ago: executing program 1 (id=581): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@acl}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}, {@grpjquota}, {@quota}, {@noquota}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x55d, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) 1.647890213s ago: executing program 7 (id=582): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000006900000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcf2adbbf07cff336, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@jqfmt_vfsv0}]}, 0x4, 0x52c, &(0x7f0000000580)="$eJzs3c9vG1kdAPDvOHHzY9NNF/YACNiyLBRU1Unc3Wi1F7oXEFqthFhx4pANiTeKYtdR7Iom9JAeua9EJU7Af8CNA1JPHLhxgxuXckAqUIEaJA5GM56kbmIn3taJ2/jzkSYzb2bs73t233szr/K8AEbW5YjYjYgLEfFxRMzm+5N8iRvtJT3v8aM7K3uP7qwk0Wp99M8kO57ui47XpF7J33MyIn74vYifJEfjNrZ3Npar1cpWnp5r1jbnGts719YL+Z7y4sLi/LvX3ykPrKxv1H778LvrH/zo97/7yoM/7X77Z2m2Zn5+MTvWWY5Bahe9GDMd+8Yj4oPTCDYk4/m/H14+aW37XES8mdX/2RjLvk0A4DxrtWajNduZBgDOu/T+fyaSQikfC5iJQqFUao/hvR7ThWq90bw6W791czWyMaxLUSx8sl6tzOdjhZeimKTphWz7Sbr8VPrTyvWIeC0iPp2Yyo6XVurV1WFe+ADACHvlUP//n4l2/9+pOKzMAQCnZ3LYGQAAzpz+HwBGj/4fAEbPZ+j//ToQAM4J9/8AMHr0/wAwek7s/++eTT4AgDPxgw8/TJfWXvv51/tP6r62WmlslGq3Vkor9a3N0lq9vlatlFZarZOeBVCt1zcX3j5INrZ3lmr1WzebS+u15bXKUsWzBABg+F574/5f0k5/972pbImOuRz01XC+FYadAWBoxoadAWBo/J4HRlcf9/iGAeCc6zJFb1s+QJD0OuGeyV/hZXXli32N/7sGgHPoecb/jR3Ay+3Zxv+/M/B8AGdPHw6jq9VKzPkPACPGwD7Q8///cz0fEXLvWSMuTT3rKwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBFMZMtSaGUzQW+m/4tlEoRFyPiUhSTT9arlfmIeDUi/jxRnEjTC8PONADwnAp/T/L5v67MvjVz+OiF5L8T2ToifvrL6Y79/zrY37z30S9uL081t8oXzjbrAMBRN47uur3cbG6V83XHjfzjR3dW9pezzOLD99uTi6Zx9/KlfWQ8xrP1ZBQjYvrfSZ5uS69XxgYQf/duRHxhv/yTcbsjwkw2BtKe+fRw/DT2xYHH7/z8D8cvPFXeQnYsXRezz+LzcShzwInuv99uJ/O6l1bxvP4V4nK27l7/J7MW6vml7V9aXfeOtH+Fg/Zv7Ej8JKvzlw/Sx+fk4dt/+P6Rna3Z9rG7EV8a7xY/OYifdG9/i2/1Wca/fvmrb/Y61vpVxJWu5d+fkbqWNbNzzdrmXGN759p6bXmtsla5WS4vLizOv3v9nfJcNkbd/vvHbjH+8d7VV3vFT8s/3SP+5PHlj2/0Wf5f/+/jH3/tmPjf+nr37//1Y+KnfeI3+4y/PH2j5/TdafzVHuU/4fuPq33Gf/C3ndU+TwUAzkBje2djuVqtbJ2wkV5rnnSOjf430nv7FyAb2UbsRgzqDbNBiYjoek56Rf1iFPm0NpKhRf/NoN9w2C0TcNqeVPph5wQAAAAAAAAAAAAAAOilsb2zMdH911oD2xh2GQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi//h8AAP//e3TBZA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 1.646743534s ago: executing program 2 (id=583): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utime(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140), 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) 1.485448833s ago: executing program 1 (id=584): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000005c0)=""/218) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@generic={0x0, 0x4, 0x5107}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) fchown(r0, 0x0, 0xee01) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x5f}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x23) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r4, 0x0, 0x0) fchown(r0, 0x0, 0x0) 1.443270116s ago: executing program 5 (id=585): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='freezer.self_freezing\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utime(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) 1.316931183s ago: executing program 7 (id=586): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='freezer.self_freezing\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utime(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) 1.20449852s ago: executing program 1 (id=587): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@jqfmt_vfsv0}]}, 0x4, 0x52c, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) 834.267241ms ago: executing program 3 (id=588): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 755.359625ms ago: executing program 3 (id=589): pwrite64(0xffffffffffffffff, &(0x7f0000000100)="e67ab166972ce298f4681ef5c755f60473b17b78", 0x14, 0x3) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008800) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) r2 = socket$inet6(0xa, 0x3, 0x100) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@grpid}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000d0000000400000003"], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f00000000c0)}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3d, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r6, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f00000004c0)={{0x87, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x1, 'lblc\x00', 0x30, 0xd20, 0x3e}, {@remote, 0x4e20, 0x3, 0x79a, 0x6, 0x3}}, 0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 622.497844ms ago: executing program 1 (id=590): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000006900000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xcf2adbbf07cff336, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@jqfmt_vfsv0}]}, 0x4, 0x52c, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 576.958686ms ago: executing program 2 (id=591): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utime(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000140), 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) 216.616957ms ago: executing program 7 (id=592): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbfe, 0x27ffdf7ff}, 0xee47af8b233f46d6) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) ppoll(&(0x7f0000000080)=[{r5, 0x422}, {r5, 0x105}], 0x2, 0x0, 0x0, 0x0) signalfd4(r5, &(0x7f0000000000), 0x8, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000002a40)={0x13e4, 0x14, 0x10, 0x70bd2d, 0x25dfdc03, {0x8, 0xa}, [@INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "92d3a6c29244beb91e39dbc871381ff0cb5a33f85164596fb61dd7b8262be40ab7eeafb9fd23b8528b"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "3d896aee8c8371e6c469bd812c9893708713e0ff3e5dacc7afa77470dfcbb6dbb774959db6ca2d6b47611bf2b3c8716e351d705ed33badc1e1a2e842da8ff11d41a744c6c6fcc59c4d27c2a103ceaed9a936290ea0642fca43a72f0176b53ca6ea08cad04d015ec3f68a4a1ff0089ce0657bb6722c6d4062ca52b9105e395717a13c863c48e8fb20dbfc47ba54ca"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "e25443a2bed827b09f0a5ff36f59738f8558bb262252e43f9308acd3e95c9a6df258f6b175e85f6bd5810adb4420ea7afdf6176c2e9b02c397d1eec76c2b"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "1141293b6ca59d3131841c6b0cacfa3e167e508967a5aaef0ac7115f6116c227c2f39fcecab78ee135a40f713b9aadc0011d611296d4fa623730134e4e3389a1aea33d5ed46afe151cc5946dae445c0deaaa9712940d5d240b4c896c3db1279c61595d2f3952e15897c1c07825e42e2ee4c47bb8d21910872457b9d619be57aea4ce5a95645da63100d3b515503b16f2fecc9f69ea8a83a797b369eb051d94bd84366c8d1b39012dc664b2b8726812c98858a23ea8fb63992a6b8a1e75337771dab050b4bd449ce44066af408668675fab2010d4faa6a0f23a1c3e402f9aaeb7"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "7bd2d21368afae14bbbdf6693e7a4a241a51c3f17c4746c57f59a7c69d3c097a6d301fd07fa74e0d424924f01fa2fdb5aebdcb978584a747ec5d329630151f228b0e5676119b93da280824a9e8f7b0d321aa5ff989ed809af05649fce5aaa80d5c03b1960f1d92590d03c4a1e8359239fa1c134bada553abd27b7939783ac510a778676757f82ca1ade05640c6d7f6b7d0cffc5e38f0550671ae7504348ce04695646dc3945598f9ef39d2e3450734f05552cdd937c0fbe3c7d9a987294f93b12b1859dc7148433775c36af959c48c1dd38eba3ec999e190ebf193ca4de95389a1e8a6e4a7383e2ab16277f811a28e56110c"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "4099bd5cf1d53664e249aff96ad4d71cc72993166d756a507bb7ee7d0fbecfb50e821f036411c54060bbc0f795d95631d28d7600358812dffd339a7694c6fb1aed8d575862856a62ea9145846b411fe0e7a336fe41045c9e52467797ef093c142c4f13a41b598045e13bb2068ab4d9d31db4d6cd2e023a80b082bfd99545d1a2e808e547"}, @INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "c7254ffeb85930429c7a5430d4e804537739922d72737d88976432746f99d756fdd54837fc14ca8d0334a4cf476fc0e84ad0d7bf5d0f6490da0b89ee35c325b45e003eab1c802adfe2026b7e562851155a9337f7ed19bbeebf"}]}, 0x13e4}, 0x1, 0x0, 0x0, 0xc4845}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r7, 0xd13, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4049005}, 0x40040c0) 107.778384ms ago: executing program 5 (id=593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) getpid() mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x103041, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 0s ago: executing program 1 (id=594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r2, 0x0, 0x8e14, 0x8ffff) copy_file_range(r2, 0x0, r2, &(0x7f0000000500)=0xffff, 0x9, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) r5 = signalfd(r0, &(0x7f0000000040)={[0x5]}, 0x8) rename(&(0x7f0000000600)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x8000, 0x1, 0xc5, 0xda, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x67, 0x0, 0xd, 0x4, 0x0, @loopback, @private=0xa010101, {[@generic={0x180, 0x2}, @end, @lsrr={0x83, 0x1b, 0xa3, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @local, @private=0xa010102]}, @lsrr={0x83, 0xf, 0xa, [@private=0xa010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x3c}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xd8, 0x3, 0x8, [{@multicast2, 0x4}, {@remote, 0x9}]}, @timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x4, [{@local, 0x3}]}, @lsrr={0x83, 0x1f, 0x6f, [@local, @loopback, @rand_addr=0x64010100, @remote, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b40)=@polexpire={0x364, 0x1b, 0x2, 0x70bd27, 0x25dfdbfe, {{{@in6=@private2, @in6=@private0, 0x4e23, 0x9, 0x4e20, 0x89a, 0x2, 0x20, 0xc0, 0x2c, r6, r7}, {0x5, 0x7, 0x6800, 0x0, 0xf18, 0x1, 0x97, 0x8000000000000001}, {0x401, 0x1, 0x6, 0x401}, 0x800, 0x0, 0x1, 0x0, 0x2, 0x1}, 0xd}, [@mark={0xc, 0x15, {0x35075c, 0xffffffff}}, @sa={0xe4, 0x6, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x4e20, 0x5, 0x4e24, 0x0, 0xa, 0xc0, 0x0, 0x88, r8, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0xff}, @in=@loopback, {0x8000000000000000, 0x1, 0x0, 0xffffffffffffff01, 0x10000, 0x65617f29, 0x3, 0x8}, {0x6, 0xfffffffffffffff7, 0x4, 0x100}, {0x9, 0x4df, 0x200}, 0x70bd2d, 0x3502, 0x2, 0x3, 0x80, 0x22}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @replay_thresh={0x8, 0xb, 0x4}, @address_filter={0x28, 0x1a, {@in6=@private2, @in=@empty, 0x2, 0x0, 0x3}}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xa}}, @lastused={0xc, 0xf, 0x9}, @tmpl={0x144, 0x5, [{{@in6=@loopback, 0x4d2, 0xff}, 0xa, @in6=@mcast1, 0x3502, 0x1, 0x2, 0x9, 0x3, 0x7, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xff}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3505, 0x2, 0x0, 0x8, 0x1, 0xfffffffa, 0x7}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in=@multicast2, 0x34ff, 0x3, 0x40f3ba2bff24fb94, 0x8, 0x0, 0x3, 0xb}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x6c}, 0xa, @in6=@loopback, 0x34ff, 0x1, 0x3, 0x8, 0x7, 0x6}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x32}, 0x0, @in=@local, 0x3501, 0x3, 0x0, 0x0, 0x51, 0x3, 0xffff00}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x44000}, 0x40) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): veth0: link becomes ready [ 41.018215][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.025559][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.040035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.048211][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.055250][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.070035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.089759][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.096783][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.109171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.118056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.149763][ T307] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 41.149814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.158888][ T307] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input4 [ 41.185528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.196887][ T307] usb 2-1: USB disconnect, device number 2 [ 41.204262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.219918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.244401][ T506] device veth0_vlan entered promiscuous mode [ 41.268293][ T506] device veth1_macvtap entered promiscuous mode [ 41.281866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.318408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.330584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.343824][ T49] device bridge_slave_1 left promiscuous mode [ 41.350324][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.358313][ T49] device bridge_slave_0 left promiscuous mode [ 41.365074][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.373486][ T49] device veth1_macvtap left promiscuous mode [ 41.379526][ T49] device veth0_vlan left promiscuous mode [ 41.439709][ T280] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 41.453101][ T511] F2FS-fs (loop2): invalid crc value [ 41.470042][ T511] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 41.496164][ T526] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 41.511604][ T511] F2FS-fs (loop2): recover fsync data on readonly fs [ 41.519085][ T511] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 41.526491][ T511] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 41.545160][ T522] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.552301][ T522] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.560355][ T522] device bridge_slave_0 entered promiscuous mode [ 41.568106][ T522] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.575220][ T522] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.583702][ T522] device bridge_slave_1 entered promiscuous mode [ 41.654081][ T522] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.661141][ T522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.668381][ T522] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.675420][ T522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.699722][ T280] usb 4-1: Using ep0 maxpacket: 8 [ 41.716670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.728989][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.736574][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.761241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.769523][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.776570][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.784066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.792867][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.799921][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.807465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.816003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.840624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.860029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.868097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.879791][ T280] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.884430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.897353][ T280] usb 4-1: config 0 has no interfaces? [ 41.904924][ T522] device veth0_vlan entered promiscuous mode [ 41.994922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.011192][ T522] device veth1_macvtap entered promiscuous mode [ 42.021423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.038440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.136518][ T543] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 42.219994][ T280] usb 4-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 42.261262][ T543] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 42.272426][ T552] netlink: 132 bytes leftover after parsing attributes in process `syz.6.60'. [ 42.272810][ T543] F2FS-fs (loop1): invalid crc value [ 42.282363][ T280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.305611][ T543] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.310063][ T280] usb 4-1: Product: syz [ 42.314988][ T557] incfs_lookup_dentry err:-40 [ 42.323178][ T280] usb 4-1: Manufacturer: syz [ 42.330901][ T557] netlink: 'syz.6.66': attribute type 1 has an invalid length. [ 42.333971][ T280] usb 4-1: SerialNumber: syz [ 42.356274][ T280] usb 4-1: config 0 descriptor?? [ 42.364552][ T543] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 42.372163][ T543] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 42.434351][ T522] ------------[ cut here ]------------ [ 42.440602][ T522] WARNING: CPU: 0 PID: 522 at fs/overlayfs/util.c:455 ovl_dir_modified+0x2e8/0x3e0 [ 42.451638][ T522] Modules linked in: [ 42.455659][ T522] CPU: 1 PID: 522 Comm: syz-executor Not tainted syzkaller #0 [ 42.463515][ T522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.477498][ T541] F2FS-fs (loop5): invalid crc value [ 42.479721][ T522] RIP: 0010:ovl_dir_modified+0x2e8/0x3e0 [ 42.488195][ T543] attempt to access beyond end of device [ 42.488195][ T543] loop1: rw=2049, want=81920, limit=40427 [ 42.488764][ T522] Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 30 0f a9 ff 49 ff 04 24 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 08 8e 6e ff <0f> 0b e9 2a ff ff ff e8 fc 8d 6e ff 0f 0b 43 80 7c 35 00 00 0f 85 [ 42.519838][ T522] RSP: 0018:ffffc90000bc7bc8 EFLAGS: 00010293 [ 42.521897][ T541] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 42.526182][ T522] RAX: ffffffff81f627e8 RBX: 0000000000000000 RCX: ffff8881251493c0 [ 42.538991][ T543] attempt to access beyond end of device [ 42.538991][ T543] loop1: rw=2049, want=53248, limit=40427 [ 42.556617][ T522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.566812][ T522] RBP: ffffc90000bc7c10 R08: ffff88812822afe7 R09: 1ffff110250455fc [ 42.582285][ T522] R10: dffffc0000000000 R11: ffffed10250455fd R12: ffff88812822af40 [ 42.587748][ T543] attempt to access beyond end of device [ 42.587748][ T543] loop1: rw=2049, want=61192, limit=40427 [ 42.590396][ T522] R13: 1ffff1102206466c R14: dffffc0000000000 R15: ffff888110323360 [ 42.607927][ T519] udc-core: couldn't find an available UDC or it's busy [ 42.609754][ T522] FS: 0000555591e3b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 42.627047][ T519] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 42.628072][ T522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.641289][ T522] CR2: 00007f407644d000 CR3: 000000012d89f000 CR4: 00000000003506a0 [ 42.642585][ T541] F2FS-fs (loop5): recover fsync data on readonly fs [ 42.649279][ T522] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.660373][ T519] netlink: 'syz.3.58': attribute type 12 has an invalid length. [ 42.664189][ T522] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.673804][ T519] netlink: 'syz.3.58': attribute type 29 has an invalid length. [ 42.679591][ T522] Call Trace: [ 42.679609][ T522] ovl_do_remove+0x6f2/0xc80 [ 42.679619][ T522] ? ovl_set_redirect+0x620/0x620 [ 42.679628][ T522] ? down_write+0xb2/0x120 [ 42.679639][ T522] ? selinux_inode_rmdir+0x22/0x30 [ 42.679646][ T522] ovl_rmdir+0x1a/0x20 [ 42.679660][ T522] vfs_rmdir+0x1b3/0x3e0 [ 42.679688][ T522] incfs_kill_sb+0xfe/0x210 [ 42.679699][ T522] deactivate_locked_super+0xa0/0x100 [ 42.679707][ T522] deactivate_super+0xaf/0xe0 [ 42.679716][ T522] cleanup_mnt+0x45b/0x510 [ 42.679733][ T522] __cleanup_mnt+0x19/0x20 [ 42.688378][ T541] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 42.690742][ T522] task_work_run+0x127/0x190 [ 42.690753][ T522] exit_to_user_mode_loop+0xcb/0xe0 [ 42.690762][ T522] exit_to_user_mode_prepare+0x76/0xa0 [ 42.690774][ T522] syscall_exit_to_user_mode+0x1d/0x40 [ 42.690783][ T522] do_syscall_64+0x3d/0x40 [ 42.690794][ T522] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.690802][ T522] RIP: 0033:0x7f277ed851d7 [ 42.690817][ T522] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 42.696964][ T519] netlink: 148 bytes leftover after parsing attributes in process `syz.3.58'. [ 42.701698][ T522] RSP: 002b:00007fff8cf86bf8 EFLAGS: 00000246 [ 42.705031][ T541] F2FS-fs (loop5): checkpoint=disable on readonly fs [ 42.709968][ T522] ORIG_RAX: 00000000000000a6 [ 42.714485][ T519] netlink: 59 bytes leftover after parsing attributes in process `syz.3.58'. [ 42.718452][ T522] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f277ed851d7 [ 42.755318][ T422] usb 4-1: USB disconnect, device number 2 [ 42.763766][ T522] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8cf86cb0 [ 42.895879][ T522] RBP: 00007fff8cf86cb0 R08: 00007fff8cf87cb0 R09: 00000000ffffffff [ 42.903917][ T522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8cf87d40 [ 42.912090][ T522] R13: 00007f277ee19c3b R14: 000000000000a563 R15: 00007fff8cf87d80 [ 42.920397][ T522] ---[ end trace e29c1dbf57b02694 ]--- [ 42.920411][ T49] device bridge_slave_1 left promiscuous mode [ 42.926014][ T522] ------------[ cut here ]------------ [ 42.932913][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.942551][ T522] WARNING: CPU: 1 PID: 522 at fs/overlayfs/util.c:455 ovl_dir_modified+0x2e8/0x3e0 [ 42.953705][ T522] Modules linked in: [ 42.954058][ T49] device bridge_slave_0 left promiscuous mode [ 42.957592][ T522] CPU: 1 PID: 522 Comm: syz-executor Tainted: G W syzkaller #0 [ 42.957598][ T522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.957618][ T522] RIP: 0010:ovl_dir_modified+0x2e8/0x3e0 [ 42.964123][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.972578][ T522] Code: c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 30 0f a9 ff 49 ff 04 24 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 08 8e 6e ff <0f> 0b e9 2a ff ff ff e8 fc 8d 6e ff 0f 0b 43 80 7c 35 00 00 0f 85 [ 43.017506][ T522] RSP: 0018:ffffc90000bc7bc8 EFLAGS: 00010293 [ 43.023785][ T522] RAX: ffffffff81f627e8 RBX: 0000000000000000 RCX: ffff8881251493c0 [ 43.031873][ T522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.032088][ T49] device veth1_macvtap left promiscuous mode [ 43.040001][ T522] RBP: ffffc90000bc7c10 R08: ffff88812822afe7 R09: 1ffff110250455fc [ 43.054223][ T522] R10: dffffc0000000000 R11: ffffed10250455fd R12: ffff88812822af40 [ 43.054374][ T564] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 43.062393][ T49] device veth0_vlan left promiscuous mode [ 43.072099][ T522] R13: 1ffff1102206466c R14: dffffc0000000000 R15: ffff888110323360 [ 43.108274][ T564] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 43.115994][ T522] FS: 0000555591e3b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 43.116810][ T564] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.131830][ T564] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.69: Inode bitmap for bg 0 marked uninitialized [ 43.145228][ T564] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 43.151524][ T522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.164766][ T522] CR2: 00007f4076442000 CR3: 000000012d89f000 CR4: 00000000003506b0 [ 43.172912][ T564] EXT4-fs (loop2): shut down requested (0) [ 43.178879][ T570] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 43.191584][ T522] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.199566][ T522] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.207591][ T522] Call Trace: [ 43.211403][ T522] ovl_do_remove+0x6f2/0xc80 [ 43.216067][ T522] ? ovl_set_redirect+0x620/0x620 [ 43.221224][ T522] ? down_write+0xb2/0x120 [ 43.227573][ T522] ? selinux_inode_rmdir+0x22/0x30 [ 43.233010][ T522] ovl_rmdir+0x1a/0x20 [ 43.239698][ T522] vfs_rmdir+0x1b3/0x3e0 [ 43.243959][ T522] incfs_kill_sb+0x18a/0x210 [ 43.248538][ T522] deactivate_locked_super+0xa0/0x100 [ 43.255637][ T522] deactivate_super+0xaf/0xe0 [ 43.260353][ T522] cleanup_mnt+0x45b/0x510 [ 43.264882][ T522] __cleanup_mnt+0x19/0x20 [ 43.270369][ T522] task_work_run+0x127/0x190 [ 43.274959][ T522] exit_to_user_mode_loop+0xcb/0xe0 [ 43.280454][ T522] exit_to_user_mode_prepare+0x76/0xa0 [ 43.285909][ T522] syscall_exit_to_user_mode+0x1d/0x40 [ 43.291487][ T522] do_syscall_64+0x3d/0x40 [ 43.295964][ T522] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.302866][ T522] RIP: 0033:0x7f277ed851d7 [ 43.307326][ T522] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 43.326966][ T522] RSP: 002b:00007fff8cf86bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 43.335492][ T522] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f277ed851d7 [ 43.343564][ T522] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8cf86cb0 [ 43.351761][ T522] RBP: 00007fff8cf86cb0 R08: 00007fff8cf87cb0 R09: 00000000ffffffff [ 43.366908][ T522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8cf87d40 [ 43.375723][ T522] R13: 00007f277ee19c3b R14: 000000000000a563 R15: 00007fff8cf87d80 [ 43.383995][ T522] ---[ end trace e29c1dbf57b02695 ]--- [ 43.420483][ T541] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 43.433538][ T541] EXT4-fs (loop5): can't mount with commit=184467440737095512, fs mounted w/o journal [ 43.453993][ T581] overlayfs: unrecognized mount option "uuid=on" or missing value [ 43.535389][ T586] capability: warning: `syz.3.75' uses 32-bit capabilities (legacy support in use) [ 43.586037][ T592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.77'. [ 43.600350][ T584] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.607387][ T584] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.872290][ T584] device bridge_slave_0 entered promiscuous mode [ 43.879395][ T584] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.886754][ T584] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.894647][ T584] device bridge_slave_1 entered promiscuous mode [ 43.906326][ T597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 43.915229][ T598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 43.984041][ T606] EXT4-fs warning (device loop1): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 44.024859][ T584] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.031911][ T584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.039123][ T584] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.046140][ T584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.235228][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.274295][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.324012][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.338368][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.353777][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.360838][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.384465][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.396411][ T520] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.403501][ T520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.433903][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.447230][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.475771][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.488552][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.496998][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.504499][ T629] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 44.504561][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.505042][ T584] device veth0_vlan entered promiscuous mode [ 44.528296][ T629] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 44.534960][ T584] device veth1_macvtap entered promiscuous mode [ 44.545120][ T629] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.551787][ T629] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.88: Inode bitmap for bg 0 marked uninitialized [ 44.564339][ T629] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue [ 44.574224][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.582801][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.591039][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.607819][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.616431][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.625234][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.633809][ T520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.680674][ T49] device bridge_slave_1 left promiscuous mode [ 44.686823][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.704088][ T49] device bridge_slave_0 left promiscuous mode [ 44.717350][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.732721][ T49] device veth1_macvtap left promiscuous mode [ 44.745560][ T49] device veth0_vlan left promiscuous mode [ 44.889304][ T643] device macsec1 entered promiscuous mode [ 44.895282][ T643] device vlan0 entered promiscuous mode [ 44.899734][ T54] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 44.908753][ T643] device vlan0 left promiscuous mode [ 44.968823][ T622] F2FS-fs (loop2): invalid crc value [ 44.995275][ T622] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 45.078647][ T622] F2FS-fs (loop2): recover fsync data on readonly fs [ 45.085710][ T622] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 45.093144][ T622] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 45.149705][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 45.206286][ T653] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.269743][ T54] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 45.277827][ T54] usb 2-1: config 0 has no interface number 0 [ 45.287224][ T653] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.330060][ T307] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 45.356835][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 45.356844][ T24] audit: type=1400 audit(1770790928.420:213): avc: denied { nlmsg_tty_audit } for pid=652 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 45.398635][ T622] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.413209][ T622] EXT4-fs (loop2): can't mount with commit=184467440737095512, fs mounted w/o journal [ 45.449771][ T54] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 45.458806][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.467093][ T54] usb 2-1: Product: syz [ 45.471368][ T54] usb 2-1: Manufacturer: syz [ 45.476104][ T54] usb 2-1: SerialNumber: syz [ 45.484494][ T54] usb 2-1: config 0 descriptor?? [ 45.673331][ T677] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 45.682313][ T677] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.699770][ T307] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.711404][ T681] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.720571][ T307] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.730825][ T307] usb 8-1: config 0 interface 0 has no altsetting 0 [ 45.731186][ T681] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 45.737716][ T629] EXT4-fs (loop1): shut down requested (0) [ 45.749924][ T681] EXT4-fs error (device loop2): ext4_orphan_get:1395: inode #15: comm syz.2.99: iget: bad i_size value: 360287970189639680 [ 45.753184][ T307] usb 8-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 45.765970][ T681] EXT4-fs (loop2): Remounting filesystem read-only [ 45.775423][ T307] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.794935][ T677] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 45.799893][ T307] usb 8-1: config 0 descriptor?? [ 45.813524][ T681] EXT4-fs error (device loop2): ext4_orphan_get:1400: comm syz.2.99: couldn't read orphan inode 15 (err -117) [ 45.814558][ T24] audit: type=1400 audit(1770790928.880:214): avc: denied { remount } for pid=628 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.828710][ T681] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noblock_validity,noquota,errors=remount-ro,dioread_nolock, [ 45.844342][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 45.852697][ T24] audit: type=1400 audit(1770790928.920:215): avc: denied { unlink } for pid=276 comm="syz-executor" name="file3" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.858500][ T629] EXT4-fs (loop1): Ignoring removed orlov option [ 45.872491][ T24] audit: type=1400 audit(1770790928.920:216): avc: denied { unlink } for pid=276 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 45.897622][ T629] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option [ 45.918660][ T24] audit: type=1400 audit(1770790928.920:217): avc: denied { rmdir } for pid=276 comm="syz-executor" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.928357][ T629] EXT4-fs (loop1): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,abort,usrjquota=,orlov,grpquota,barrier,data=journal, [ 45.952947][ T280] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.969748][ T5] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 45.971800][ T280] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.979054][ T24] audit: type=1400 audit(1770790929.020:218): avc: denied { read write } for pid=680 comm="syz.2.99" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.011015][ T24] audit: type=1400 audit(1770790929.020:219): avc: denied { open } for pid=680 comm="syz.2.99" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 46.013077][ T24] audit: type=1400 audit(1770790929.080:220): avc: denied { rmdir } for pid=276 comm="syz-executor" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.065697][ T685] fido_id[685]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 46.111245][ T688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 46.120622][ T688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 46.409217][ T24] audit: type=1400 audit(1770790929.470:221): avc: denied { mount } for pid=656 comm="syz.7.94" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 46.445801][ T696] EXT4-fs error (device loop2): ext4_fill_super:4954: comm syz.2.102: inode #2: comm syz.2.102: iget: illegal inode # [ 46.458553][ T696] EXT4-fs (loop2): get root inode failed [ 46.460016][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.464622][ T696] EXT4-fs (loop2): mount failed [ 46.471469][ T5] usb 6-1: Using ep0 maxpacket: 8 [ 46.481238][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.488268][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.495316][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.502414][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.509418][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.516453][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.523586][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.530825][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.537855][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.544974][ T307] uclogic 0003:2179:0053.0002: unknown main item tag 0x0 [ 46.552262][ T307] uclogic 0003:2179:0053.0002: No inputs registered, leaving [ 46.560359][ T307] uclogic 0003:2179:0053.0002: hidraw0: USB HID v0.00 Device [HID 2179:0053] on usb-dummy_hcd.7-1/input0 [ 46.599827][ T5] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 46.608121][ T5] usb 6-1: config 179 has no interface number 0 [ 46.614630][ T5] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 46.619744][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 46.626032][ T5] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 46.650572][ T5] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 46.667938][ T5] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 46.681585][ T54] usb 2-1: USB disconnect, device number 3 [ 46.694779][ T5] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 46.695147][ T411] usb 8-1: USB disconnect, device number 2 [ 46.711588][ T5] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 46.726385][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.749776][ T674] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 47.186272][ T54] usb 6-1: USB disconnect, device number 2 [ 47.192162][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 47.192184][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 47.290265][ T711] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 47.290265][ T711] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 47.290265][ T711] [ 47.309208][ T711] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 47.320736][ T711] EXT4-fs (loop7): 1 truncate cleaned up [ 47.326430][ T711] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,stripe=0x0000000000004000,nouser_xattr,grpid,,errors=continue [ 47.361770][ T709] F2FS-fs (loop3): Test dummy encryption mode enabled [ 47.388119][ T709] F2FS-fs (loop3): invalid crc value [ 47.421004][ T709] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.459732][ T709] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.514113][ T24] audit: type=1400 audit(1770790930.580:222): avc: denied { read } for pid=708 comm="syz.3.106" path="/20/file0/blkio.bfq.sectors" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.741386][ T723] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 47.757593][ T723] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.109: Allocating blocks 449-513 which overlap fs metadata [ 48.082821][ T741] EXT4-fs (loop7): Test dummy encryption mode enabled [ 48.094838][ T741] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 48.103281][ T741] System zones: 0-5 [ 48.108912][ T741] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 48.155198][ T745] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 48.165606][ T745] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.330374][ T753] Zero length message leads to an empty skb [ 48.804887][ T759] 9pnet_virtio: no channels available for device 127.0.0.1 [ 49.210220][ T768] exfat: Deprecated parameter 'utf8' [ 49.230435][ T768] exfat: Deprecated parameter 'utf8' [ 49.261913][ T768] exfat: Deprecated parameter 'utf8' [ 49.326730][ T768] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 49.341648][ T774] EXT4-fs (loop2): Ignoring removed orlov option [ 49.357444][ T774] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 49.550622][ T784] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 49.550622][ T784] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 49.550622][ T784] [ 49.569020][ T784] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.585541][ T784] EXT4-fs (loop2): 1 truncate cleaned up [ 49.592431][ T784] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,stripe=0x0000000000004000,nouser_xattr,grpid,,errors=continue [ 49.750893][ T788] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 49.761251][ T788] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.874279][ T798] netlink: 20 bytes leftover after parsing attributes in process `syz.5.128'. [ 49.980194][ T791] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 50.052152][ T791] 9p: Unknown access argument _ [ 50.116932][ T805] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 50.127932][ T805] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3358: comm syz.1.130: Allocating blocks 449-513 which overlap fs metadata [ 50.190263][ T808] EXT4-fs (loop3): Test dummy encryption mode enabled [ 50.205110][ T808] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 50.213296][ T808] System zones: 0-5 [ 50.217801][ T808] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 50.565741][ T819] 9pnet_virtio: no channels available for device 127.0.0.1 [ 51.171257][ T838] EXT4-fs error (device loop2): ext4_quota_enable:6446: comm syz.2.139: inode #50331648: comm syz.2.139: iget: illegal inode # [ 51.184609][ T838] EXT4-fs (loop2): Remounting filesystem read-only [ 51.191289][ T838] EXT4-fs error (device loop2): ext4_quota_enable:6449: comm syz.2.139: Bad quota inode: 50331648, type: 2 [ 51.203043][ T838] EXT4-fs warning (device loop2): ext4_enable_quotas:6490: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix. [ 51.218550][ T838] EXT4-fs (loop2): mount failed [ 51.620687][ T849] netlink: 132 bytes leftover after parsing attributes in process `syz.5.140'. [ 51.791100][ T852] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 51.801408][ T852] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.898649][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 51.898666][ T24] audit: type=1400 audit(1770790934.960:242): avc: denied { setattr } for pid=862 comm="syz.5.146" name="/" dev="configfs" ino=14020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.085811][ T867] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 52.126305][ T867] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3358: comm syz.1.147: Allocating blocks 449-513 which overlap fs metadata [ 52.738233][ T888] 9pnet_virtio: no channels available for device 127.0.0.1 [ 53.060900][ T895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.153'. [ 53.162996][ T906] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 53.164306][ T904] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 53.191163][ T904] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsv0,,errors=continue [ 53.202797][ T904] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.225501][ T904] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.151: corrupted xattr block 33 [ 53.237515][ T904] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 53.247175][ T904] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.151: corrupted xattr block 33 [ 55.239774][ T904] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 55.265905][ T927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 55.275363][ T24] audit: type=1400 audit(1770790938.350:243): avc: denied { read write } for pid=903 comm="syz.1.151" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.291343][ T904] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.151: corrupted xattr block 33 [ 55.310500][ T904] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 55.323596][ T24] audit: type=1400 audit(1770790938.380:244): avc: denied { open } for pid=903 comm="syz.1.151" path="/29/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.496538][ T940] 9pnet_virtio: no channels available for device 127.0.0.1 [ 55.762208][ T943] netlink: 24 bytes leftover after parsing attributes in process `syz.7.167'. [ 56.057968][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 56.191327][ T956] tipc: Started in network mode [ 56.196283][ T956] tipc: Own node identity ffffffffffff, cluster identity 4711 [ 56.204325][ T956] tipc: Enabling of bearer rejected, failed to enable media [ 56.216726][ T24] audit: type=1400 audit(1770790939.280:245): avc: denied { create } for pid=955 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.249763][ T24] audit: type=1400 audit(1770790939.300:246): avc: denied { bind } for pid=955 comm="syz.2.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.280733][ T958] xt_hashlimit: size too large, truncated to 1048576 [ 56.296412][ T24] audit: type=1400 audit(1770790939.300:247): avc: denied { append } for pid=955 comm="syz.2.172" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.319204][ T54] usb 4-1: Using ep0 maxpacket: 16 [ 56.439778][ T54] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 56.461768][ T54] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 56.486915][ T54] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 56.507746][ T54] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 56.609807][ T54] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.634712][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.644781][ T54] usb 4-1: SerialNumber: syz [ 56.656921][ T460] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 56.679790][ T937] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 56.697464][ T937] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 56.720150][ T54] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 56.729710][ T54] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 56.736157][ T54] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 56.822878][ T956] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 56.920497][ T280] usb 4-1: USB disconnect, device number 3 [ 57.039786][ T460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.050550][ T460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.119705][ T411] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 57.140247][ T460] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 57.149984][ T460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 57.158022][ T460] usb 2-1: SerialNumber: syz [ 57.503712][ T411] usb 3-1: config 0 has no interfaces? [ 57.579780][ T411] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 57.589008][ T411] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 57.616834][ T411] usb 3-1: Manufacturer: syz [ 57.652615][ T978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 57.706059][ T411] usb 3-1: config 0 descriptor?? [ 57.742539][ T958] EXT4-fs (loop1): Test dummy encryption mode enabled [ 57.828243][ T958] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 57.849889][ T24] audit: type=1400 audit(1770790940.910:248): avc: denied { mount } for pid=980 comm="syz.7.178" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 57.856082][ T958] System zones: 0-5 [ 57.888357][ T958] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 57.897177][ T987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.181'. [ 57.962357][ T970] udc-core: couldn't find an available UDC or it's busy [ 57.969331][ T970] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 57.979824][ T411] usb 3-1: USB disconnect, device number 2 [ 58.001930][ T460] usb 2-1: 0:2 : does not exist [ 58.084943][ T460] usb 2-1: USB disconnect, device number 4 [ 58.153286][ T24] audit: type=1400 audit(1770790941.220:249): avc: denied { mounton } for pid=994 comm="syz.2.183" path="/37/file0" dev="tmpfs" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.360086][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.715071][ T1004] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.746530][ T1012] netlink: 4 bytes leftover after parsing attributes in process `syz.7.187'. [ 58.766501][ T1004] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.790477][ T275] attempt to access beyond end of device [ 58.790477][ T275] loop1: rw=2049, want=45104, limit=40427 [ 58.802149][ T1019] netlink: 132 bytes leftover after parsing attributes in process `syz.5.189'. [ 58.843542][ T1023] xt_hashlimit: size too large, truncated to 1048576 [ 58.933545][ T1028] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 58.975615][ T24] audit: type=1400 audit(1770790942.040:250): avc: denied { accept } for pid=1024 comm="syz.7.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.299714][ T306] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.539690][ T306] usb 8-1: Using ep0 maxpacket: 16 [ 59.601475][ T1049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.635331][ T1053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.199'. [ 59.645621][ T24] audit: type=1400 audit(1770790942.710:251): avc: denied { listen } for pid=1052 comm="syz.5.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 59.679740][ T306] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 59.690646][ T306] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.780236][ T1060] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 59.811065][ T1060] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue [ 59.825263][ T1060] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.835993][ T1059] device batadv_slave_0 entered promiscuous mode [ 59.889758][ T306] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.903343][ T306] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.911837][ T306] usb 8-1: Product: syz [ 59.912025][ T1070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.205'. [ 59.916021][ T306] usb 8-1: Manufacturer: syz [ 59.929577][ T306] usb 8-1: SerialNumber: syz [ 60.005389][ T1076] xt_hashlimit: size too large, truncated to 1048576 [ 60.249777][ T306] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 60.269731][ T306] usb 8-1: unit 4 not found! [ 60.279188][ T306] usb 8-1: USB disconnect, device number 3 [ 60.319756][ T582] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 60.553883][ T1079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.576852][ T24] audit: type=1400 audit(1770790943.640:252): avc: denied { write } for pid=1080 comm="syz.5.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.679039][ T24] audit: type=1400 audit(1770790943.740:253): avc: denied { ioctl } for pid=1080 comm="syz.5.209" path="socket:[17855]" dev="sockfs" ino=17855 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.712303][ T1085] FAULT_INJECTION: forcing a failure. [ 60.712303][ T1085] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.725512][ T1085] CPU: 1 PID: 1085 Comm: syz.7.210 Tainted: G W syzkaller #0 [ 60.725520][ T582] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.725545][ T582] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.734180][ T1085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.734189][ T1085] Call Trace: [ 60.734219][ T1085] __dump_stack+0x21/0x24 [ 60.734228][ T1085] dump_stack_lvl+0x1a7/0x208 [ 60.734238][ T1085] ? show_regs_print_info+0x18/0x18 [ 60.734247][ T1085] ? vfs_write+0xb27/0xdc0 [ 60.734256][ T1085] dump_stack+0x15/0x1c [ 60.734265][ T1085] should_fail+0x3c1/0x510 [ 60.734273][ T1085] should_fail_usercopy+0x1a/0x20 [ 60.734282][ T1085] _copy_from_user+0x20/0xd0 [ 60.734291][ T1085] __se_sys_bpf+0x1bb/0x740 [ 60.734299][ T1085] ? __x64_sys_bpf+0x90/0x90 [ 60.734313][ T1085] ? debug_smp_processor_id+0x17/0x20 [ 60.734321][ T1085] __x64_sys_bpf+0x7b/0x90 [ 60.734329][ T1085] do_syscall_64+0x31/0x40 [ 60.734341][ T1085] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 60.734349][ T1085] RIP: 0033:0x7fb5cb212f79 [ 60.734358][ T1085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.734363][ T1085] RSP: 002b:00007fb5c9c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.734376][ T1085] RAX: ffffffffffffffda RBX: 00007fb5cb48cfa0 RCX: 00007fb5cb212f79 [ 60.734383][ T1085] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0100000000000000 [ 60.734388][ T1085] RBP: 00007fb5c9c6e090 R08: 0000000000000000 R09: 0000000000000000 [ 60.734393][ T1085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.734399][ T1085] R13: 00007fb5cb48d038 R14: 00007fb5cb48cfa0 R15: 00007ffd0cfd6cd8 [ 60.747927][ T1087] netlink: 132 bytes leftover after parsing attributes in process `syz.7.211'. [ 60.839779][ T582] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 60.923856][ T582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 60.923865][ T582] usb 4-1: SerialNumber: syz [ 61.041619][ T1099] overlayfs: bad mount option "redirect_dir=on:/" [ 61.332729][ T1076] EXT4-fs (loop3): Test dummy encryption mode enabled [ 61.340780][ T1076] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 61.349143][ T1076] System zones: 0-5 [ 61.358598][ T1076] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 61.409880][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 61.420908][ T582] usb 4-1: 0:2 : does not exist [ 61.505186][ T582] usb 4-1: USB disconnect, device number 4 [ 61.767811][ T1112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.794002][ T1116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.221'. [ 61.817681][ T24] audit: type=1400 audit(1770790944.880:254): avc: denied { create } for pid=1119 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.848514][ T24] audit: type=1400 audit(1770790944.900:255): avc: denied { bind } for pid=1119 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.882191][ T24] audit: type=1400 audit(1770790944.910:256): avc: denied { listen } for pid=1119 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.902054][ T24] audit: type=1400 audit(1770790944.910:257): avc: denied { connect } for pid=1119 comm="syz.1.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.928307][ T1123] netlink: 24 bytes leftover after parsing attributes in process `syz.2.224'. [ 62.074794][ T1132] FAULT_INJECTION: forcing a failure. [ 62.074794][ T1132] name failslab, interval 1, probability 0, space 0, times 1 [ 62.093123][ T1132] CPU: 1 PID: 1132 Comm: syz.2.227 Tainted: G W syzkaller #0 [ 62.101803][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 62.111844][ T1132] Call Trace: [ 62.115112][ T1132] __dump_stack+0x21/0x24 [ 62.119410][ T1132] dump_stack_lvl+0x1a7/0x208 [ 62.124056][ T1132] ? thaw_kernel_threads+0x220/0x220 [ 62.129311][ T1132] ? show_regs_print_info+0x18/0x18 [ 62.134483][ T1132] ? avc_has_perm_noaudit+0x172/0x260 [ 62.139828][ T1132] dump_stack+0x15/0x1c [ 62.143956][ T1132] should_fail+0x3c1/0x510 [ 62.148351][ T1132] ? __get_vm_area_node+0x113/0x450 [ 62.153543][ T1132] __should_failslab+0xa4/0xe0 [ 62.158281][ T1132] should_failslab+0x9/0x20 [ 62.162757][ T1132] kmem_cache_alloc_trace+0x3a/0x2e0 [ 62.168016][ T1132] ? selinux_capable+0x2b6/0x3b0 [ 62.172931][ T1132] __get_vm_area_node+0x113/0x450 [ 62.177927][ T1132] __vmalloc_node_range+0xe0/0x790 [ 62.183009][ T1132] ? reuseport_array_alloc+0x176/0x270 [ 62.188438][ T1132] ? cap_capable+0x19c/0x220 [ 62.193004][ T1132] bpf_map_area_alloc+0xd5/0xe0 [ 62.197823][ T1132] ? reuseport_array_alloc+0x176/0x270 [ 62.203250][ T1132] reuseport_array_alloc+0x176/0x270 [ 62.208506][ T1132] ? reuseport_array_alloc_check+0x90/0x90 [ 62.214280][ T1132] ? array_map_alloc_check+0x284/0x390 [ 62.219707][ T1132] map_create+0x44e/0x2090 [ 62.224093][ T1132] __se_sys_bpf+0x24b/0x740 [ 62.228563][ T1132] ? __x64_sys_bpf+0x90/0x90 [ 62.233134][ T1132] ? debug_smp_processor_id+0x17/0x20 [ 62.238495][ T1132] __x64_sys_bpf+0x7b/0x90 [ 62.242915][ T1132] do_syscall_64+0x31/0x40 [ 62.247306][ T1132] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 62.253166][ T1132] RIP: 0033:0x7f8f7acfbf79 [ 62.257554][ T1132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.277222][ T1132] RSP: 002b:00007f8f79757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.285639][ T1132] RAX: ffffffffffffffda RBX: 00007f8f7af75fa0 RCX: 00007f8f7acfbf79 [ 62.293582][ T1132] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0100000000000000 [ 62.301525][ T1132] RBP: 00007f8f79757090 R08: 0000000000000000 R09: 0000000000000000 [ 62.309469][ T1132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.317413][ T1132] R13: 00007f8f7af76038 R14: 00007f8f7af75fa0 R15: 00007ffed9fc1d18 [ 62.325663][ T306] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 62.380107][ T1135] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 62.394367][ T1135] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 62.422722][ T1135] erofs: (device loop3): mounted with root inode @ nid 36. [ 62.609202][ T1155] mmap: syz.5.235 (1155) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 62.690143][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.712533][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.819764][ T306] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 62.829698][ T306] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 62.837954][ T306] usb 2-1: Manufacturer: syz [ 62.843257][ T306] usb 2-1: config 0 descriptor?? [ 62.904785][ T1171] 9pnet_virtio: no channels available for device 127.0.0.1 [ 63.132721][ T1173] netlink: 104 bytes leftover after parsing attributes in process `syz.1.223'. [ 63.146174][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 63.146185][ T24] audit: type=1400 audit(1770790946.210:260): avc: denied { block_suspend } for pid=1119 comm="syz.1.223" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.304266][ T24] audit: type=1400 audit(1770790946.370:261): avc: denied { ioctl } for pid=1177 comm="syz.2.243" path="socket:[18003]" dev="sockfs" ino=18003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.341245][ T1182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 63.367650][ T24] audit: type=1400 audit(1770790946.400:262): avc: denied { write } for pid=1177 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.392614][ T1186] FAULT_INJECTION: forcing a failure. [ 63.392614][ T1186] name failslab, interval 1, probability 0, space 0, times 0 [ 63.414050][ T1186] CPU: 1 PID: 1186 Comm: syz.3.246 Tainted: G W syzkaller #0 [ 63.422737][ T1186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.432786][ T1186] Call Trace: [ 63.436073][ T1186] __dump_stack+0x21/0x24 [ 63.440387][ T1186] dump_stack_lvl+0x1a7/0x208 [ 63.445038][ T1186] ? show_regs_print_info+0x18/0x18 [ 63.450209][ T1186] ? __get_vm_area_node+0x113/0x450 [ 63.455377][ T1186] dump_stack+0x15/0x1c [ 63.459503][ T1186] should_fail+0x3c1/0x510 [ 63.463896][ T1186] ? alloc_vmap_area+0x178/0x1a20 [ 63.468894][ T1186] __should_failslab+0xa4/0xe0 [ 63.473640][ T1186] should_failslab+0x9/0x20 [ 63.478118][ T1186] kmem_cache_alloc+0x3d/0x2d0 [ 63.482855][ T1186] alloc_vmap_area+0x178/0x1a20 [ 63.487677][ T1186] ? vm_map_ram+0x9c0/0x9c0 [ 63.492263][ T1186] ? kmem_cache_alloc_trace+0x181/0x2e0 [ 63.497805][ T1186] ? selinux_capable+0x2b6/0x3b0 [ 63.502820][ T1186] ? __get_vm_area_node+0x113/0x450 [ 63.508002][ T1186] __get_vm_area_node+0x147/0x450 [ 63.512999][ T1186] __vmalloc_node_range+0xe0/0x790 [ 63.518081][ T1186] ? reuseport_array_alloc+0x176/0x270 [ 63.523604][ T1186] ? cap_capable+0x19c/0x220 [ 63.528168][ T1186] bpf_map_area_alloc+0xd5/0xe0 [ 63.532990][ T1186] ? reuseport_array_alloc+0x176/0x270 [ 63.538417][ T1186] reuseport_array_alloc+0x176/0x270 [ 63.543674][ T1186] ? reuseport_array_alloc_check+0x90/0x90 [ 63.549466][ T1186] ? array_map_alloc_check+0x284/0x390 [ 63.554893][ T1186] map_create+0x44e/0x2090 [ 63.559277][ T1186] __se_sys_bpf+0x24b/0x740 [ 63.563750][ T1186] ? __x64_sys_bpf+0x90/0x90 [ 63.568314][ T1186] ? debug_smp_processor_id+0x17/0x20 [ 63.573657][ T1186] __x64_sys_bpf+0x7b/0x90 [ 63.578045][ T1186] do_syscall_64+0x31/0x40 [ 63.582452][ T1186] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 63.588318][ T1186] RIP: 0033:0x7f6073929f79 [ 63.592708][ T1186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.612284][ T1186] RSP: 002b:00007f6072385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.620667][ T1186] RAX: ffffffffffffffda RBX: 00007f6073ba3fa0 RCX: 00007f6073929f79 [ 63.628614][ T1186] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0100000000000000 [ 63.636558][ T1186] RBP: 00007f6072385090 R08: 0000000000000000 R09: 0000000000000000 [ 63.644502][ T1186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.652452][ T1186] R13: 00007f6073ba4038 R14: 00007f6073ba3fa0 R15: 00007ffe466e4bd8 [ 63.690999][ T1195] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 63.701822][ T1195] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.737797][ T1202] netlink: 116 bytes leftover after parsing attributes in process `syz.5.251'. [ 63.813510][ T1209] xt_hashlimit: size too large, truncated to 1048576 [ 63.860353][ T1204] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 63.873102][ T1204] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3358: comm syz.3.252: Allocating blocks 449-513 which overlap fs metadata [ 64.290708][ T1216] EXT4-fs (loop2): Test dummy encryption mode enabled [ 64.299622][ T1216] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue [ 64.599726][ T582] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.643321][ T1228] overlayfs: bad mount option "redirect_dir=on:/" [ 64.843795][ T24] audit: type=1400 audit(1770790947.910:263): avc: denied { read } for pid=1238 comm="syz.3.261" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.872832][ T1243] netlink: 148 bytes leftover after parsing attributes in process `syz.3.261'. [ 64.883862][ T24] audit: type=1400 audit(1770790947.930:264): avc: denied { open } for pid=1238 comm="syz.3.261" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.915808][ T1243] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 64.932218][ T24] audit: type=1400 audit(1770790947.930:265): avc: denied { ioctl } for pid=1238 comm="syz.3.261" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 64.979742][ T24] audit: type=1400 audit(1770790947.930:266): avc: denied { set_context_mgr } for pid=1238 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 64.999755][ T582] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 65.010013][ T582] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 65.030954][ T582] usb 3-1: config 0 has no interface number 0 [ 65.098496][ T1230] F2FS-fs (loop7): invalid crc value [ 65.109571][ T1230] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 65.138578][ T1248] netlink: 132 bytes leftover after parsing attributes in process `syz.3.262'. [ 65.169012][ T1230] F2FS-fs (loop7): recover fsync data on readonly fs [ 65.176214][ T24] audit: type=1400 audit(1770790948.240:267): avc: denied { create } for pid=1249 comm="syz.3.263" dev="anon_inodefs" ino=18209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 65.189135][ T1230] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 65.198130][ T306] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 65.214112][ T1230] F2FS-fs (loop7): checkpoint=disable on readonly fs [ 65.216980][ T306] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 65.232042][ T306] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 65.240359][ T306] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 65.247965][ T306] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 65.249774][ T582] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 65.258451][ T306] usb 2-1: USB disconnect, device number 5 [ 65.266823][ T582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.278552][ T582] usb 3-1: Product: syz [ 65.292520][ T582] usb 3-1: Manufacturer: syz [ 65.297143][ T582] usb 3-1: SerialNumber: syz [ 65.312295][ T582] usb 3-1: config 0 descriptor?? [ 65.452647][ T1230] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 65.502992][ T1230] EXT4-fs (loop7): can't mount with commit=184467440737095512, fs mounted w/o journal [ 65.809593][ T1263] netlink: 24 bytes leftover after parsing attributes in process `syz.3.266'. [ 65.869808][ T582] uvcvideo: Found UVC 0.00 device syz (046d:0823) [ 65.876702][ T582] uvcvideo: No valid video chain found. [ 66.109735][ T54] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 66.433762][ T24] audit: type=1400 audit(1770790949.500:268): avc: denied { remount } for pid=1275 comm="syz.5.271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 66.472981][ T24] audit: type=1400 audit(1770790949.530:269): avc: denied { associate } for pid=1277 comm="syz.5.271" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 66.531903][ T1282] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 66.551240][ T1282] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsv0,,errors=continue [ 66.563568][ T1282] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.588360][ T1282] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.273: corrupted xattr block 33 [ 66.600298][ T1282] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 66.609301][ T1282] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.273: corrupted xattr block 33 [ 66.622201][ T54] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 66.637555][ T1282] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 66.649745][ T54] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 66.661966][ T1282] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.273: corrupted xattr block 33 [ 66.675754][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.729785][ T1267] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 66.762354][ T1282] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 66.871180][ T1289] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 66.881875][ T1289] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.048799][ T1296] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 67.243239][ T54] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 67.312022][ T54] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input5 [ 67.354105][ T54] usb 8-1: USB disconnect, device number 4 [ 67.359977][ C0] aiptek 8-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 67.385674][ T1306] overlayfs: failed to clone upperpath [ 67.505260][ T582] usb 3-1: USB disconnect, device number 3 [ 67.940343][ T1320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.094600][ T1318] EXT4-fs (loop1): Ignoring removed nobh option [ 68.129884][ T1318] EXT4-fs (loop1): Ignoring removed bh option [ 68.136264][ T1318] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.183652][ T1312] F2FS-fs (loop2): invalid crc value [ 68.195566][ T1327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 68.206284][ T1318] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,noquota,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 68.232673][ T1312] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 68.267126][ T1312] F2FS-fs (loop2): recover fsync data on readonly fs [ 68.273957][ T1312] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 68.280578][ T1312] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 68.411978][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 68.411989][ T24] audit: type=1400 audit(1770790951.480:275): avc: denied { append } for pid=1329 comm="syz.3.283" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 68.796391][ T1330] tmpfs: Unknown parameter 'nr_{n›dlF™¦\£èÿK«Mé kƒŒ×LàÚˆCn©f2 `HúW-9YÝYÜXj¶Ô [ 68.796391][ T1330] Rx{ݧªöî' [ 69.147502][ T1330] erofs: (device loop3): mounted with root inode @ nid 36. [ 69.182351][ T24] audit: type=1400 audit(1770790952.250:276): avc: denied { watch_reads } for pid=1329 comm="syz.3.283" path="/58/file1" dev="loop3" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.232564][ T1335] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 69.243245][ T1335] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.254290][ T1312] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.274457][ T1312] EXT4-fs (loop2): can't mount with commit=184467440737095512, fs mounted w/o journal [ 70.074113][ T1348] EXT4-fs (loop7): Test dummy encryption mode enabled [ 70.085760][ T1348] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 70.094001][ T1348] System zones: 0-5 [ 70.098608][ T1348] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 70.117274][ T1354] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 70.127665][ T1354] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.822364][ T306] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 71.000092][ T1372] EXT4-fs (loop3): Ignoring removed nobh option [ 71.008983][ T1372] EXT4-fs (loop3): Ignoring removed bh option [ 71.028169][ T1372] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.056722][ T1385] netlink: 64 bytes leftover after parsing attributes in process `syz.5.299'. [ 71.063864][ T1372] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,noquota,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 71.098869][ T1389] netlink: 64 bytes leftover after parsing attributes in process `syz.5.300'. [ 71.109090][ T1380] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 71.126966][ T1380] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.190176][ T306] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 71.215257][ T306] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 71.235213][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.270831][ T1363] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 71.779892][ T306] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 71.825662][ T306] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6 [ 71.868755][ T306] usb 3-1: USB disconnect, device number 4 [ 71.874628][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 71.894411][ T1409] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 71.894411][ T1409] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 71.894411][ T1409] [ 71.915463][ T1409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.937825][ T1409] EXT4-fs (loop1): 1 truncate cleaned up [ 71.949731][ T1409] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000040,stripe=0x0000000000004000,nouser_xattr,grpid,,errors=continue [ 72.007850][ T1415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 72.098833][ T1422] netlink: 64 bytes leftover after parsing attributes in process `syz.5.311'. [ 72.319759][ T411] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 72.381016][ T1432] EXT4-fs (loop2): Value of option "test_dummy_encryption=oldalloc" is unrecognized [ 72.638564][ T1444] fuse: Bad value for 'rootmode' [ 72.659711][ T411] usb 2-1: Using ep0 maxpacket: 32 [ 72.745726][ T411] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 72.770532][ T1446] netlink: 132 bytes leftover after parsing attributes in process `syz.7.321'. [ 72.801824][ T1440] FAT-fs (loop2): bogus number of FAT structure [ 72.808170][ T1440] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 72.821614][ T1440] FAT-fs (loop2): Can't find a valid FAT filesystem [ 72.825159][ T1448] netlink: 64 bytes leftover after parsing attributes in process `syz.3.323'. [ 72.898164][ T1453] capability: warning: `syz.3.324' uses deprecated v2 capabilities in a way that may be insecure [ 72.933599][ T411] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 72.941928][ T411] usb 2-1: can't read configurations, error -61 [ 73.031591][ T1456] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 73.042427][ T1456] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.109738][ T411] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 73.149815][ T24] audit: type=1400 audit(1770790956.120:277): avc: denied { bind } for pid=1439 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.180728][ T24] audit: type=1400 audit(1770790956.130:278): avc: denied { write } for pid=1439 comm="syz.2.320" path="socket:[19567]" dev="sockfs" ino=19567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.419712][ T411] usb 2-1: Using ep0 maxpacket: 32 [ 73.460369][ T411] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 73.609854][ T411] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 73.636908][ T411] usb 2-1: can't read configurations, error -61 [ 73.660099][ T411] usb usb2-port1: attempt power cycle [ 73.698590][ T1477] EXT4-fs (loop7): Ignoring removed nobh option [ 73.705050][ T1477] EXT4-fs (loop7): Ignoring removed bh option [ 73.711259][ T1477] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.730995][ T1477] EXT4-fs (loop7): mounted filesystem without journal. Opts: acl,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,noquota,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 73.959698][ T659] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 74.389762][ T411] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 74.410919][ T1485] EXT4-fs (loop3): Test dummy encryption mode enabled [ 74.427550][ T1485] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 74.435732][ T1485] System zones: 0-5 [ 74.440328][ T1485] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,inlinecrypt,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,barrier,,errors=continue [ 74.539746][ T411] usb 2-1: Using ep0 maxpacket: 32 [ 74.570193][ T1494] netlink: 64 bytes leftover after parsing attributes in process `syz.3.334'. [ 74.579749][ T659] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 74.579918][ T411] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 74.595143][ T659] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 74.614540][ T659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.654726][ T1475] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 74.662619][ T24] audit: type=1400 audit(1770790957.730:279): avc: denied { read } for pid=1497 comm="syz.3.336" name="file0" dev="tmpfs" ino=399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 74.759730][ T411] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 74.767435][ T411] usb 2-1: can't read configurations, error -61 [ 74.892576][ T1503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.082123][ T411] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 75.099575][ T1507] xt_hashlimit: size too large, truncated to 1048576 [ 75.289735][ T659] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 75.297517][ T659] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input7 [ 75.317904][ T659] usb 3-1: USB disconnect, device number 5 [ 75.670593][ T411] usb 2-1: device not accepting address 9, error -71 [ 75.679829][ T411] usb usb2-port1: unable to enumerate USB device [ 75.698123][ T1505] F2FS-fs (loop7): invalid crc value [ 75.711319][ T1505] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 75.733681][ T1516] EXT4-fs (loop3): Ignoring removed nobh option [ 75.743087][ T1505] F2FS-fs (loop7): recover fsync data on readonly fs [ 75.747265][ T1516] EXT4-fs (loop3): Ignoring removed bh option [ 75.749864][ T1505] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 75.756703][ T1516] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.772804][ T1505] F2FS-fs (loop7): checkpoint=disable on readonly fs [ 75.782731][ T1516] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,noquota,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 76.058612][ T1505] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.071075][ T1505] EXT4-fs (loop7): can't mount with commit=184467440737095512, fs mounted w/o journal [ 76.269774][ T411] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 76.425157][ T1532] netlink: 64 bytes leftover after parsing attributes in process `syz.7.345'. [ 76.497637][ T1534] netlink: 24 bytes leftover after parsing attributes in process `syz.7.346'. [ 76.669872][ T411] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.710426][ T411] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.799843][ T411] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 76.819866][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 76.835318][ T411] usb 2-1: SerialNumber: syz [ 76.960569][ T1548] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 76.971002][ T1548] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.192895][ T1554] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.222801][ T1554] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 77.254066][ T1507] EXT4-fs (loop1): Test dummy encryption mode enabled [ 77.266849][ T1554] System zones: 0-5 [ 77.279802][ T1554] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 77.287617][ T1507] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 77.306217][ T1507] System zones: 0-5 [ 77.313018][ T1507] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 78.110418][ T411] usb 2-1: 0:2 : does not exist [ 78.169704][ T659] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 78.204564][ T411] usb 2-1: USB disconnect, device number 10 [ 78.421805][ T1571] EXT4-fs (loop3): Ignoring removed nobh option [ 78.428641][ T1571] EXT4-fs (loop3): Ignoring removed bh option [ 78.430087][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.445005][ T1571] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.480630][ T1571] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,noquota,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 78.631992][ T1582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.356'. [ 78.710601][ T1584] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 78.729831][ T1584] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.869779][ T659] usb 8-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 78.880907][ T659] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 78.889967][ T659] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.968354][ T1565] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 79.087952][ T1599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.276961][ T659] aiptek 8-1:17.0: Aiptek using 400 ms programming speed [ 79.285316][ T659] input: Aiptek as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.0/input/input8 [ 79.295774][ T659] usb 8-1: USB disconnect, device number 5 [ 79.390709][ T1602] EXT4-fs (loop3): Test dummy encryption mode enabled [ 79.398507][ T1602] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 79.406765][ T1602] System zones: 0-5 [ 79.411139][ T1602] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 80.103388][ T1612] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 80.118209][ T1612] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.152107][ T24] audit: type=1400 audit(1770790963.220:280): avc: denied { bind } for pid=1613 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.465548][ T1615] F2FS-fs (loop2): Unrecognized mount option "fault_injection=00000000000000000088" or missing value [ 80.570404][ T1633] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 80.591096][ T1633] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsv0,,errors=continue [ 80.602622][ T1633] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.732496][ T1640] netlink: 64 bytes leftover after parsing attributes in process `syz.3.371'. [ 80.741676][ T1633] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.374: corrupted xattr block 33 [ 80.758792][ T1620] F2FS-fs (loop7): invalid crc value [ 80.790135][ T1633] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 80.804019][ T1620] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 80.820280][ T1633] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.374: corrupted xattr block 33 [ 80.834521][ T1633] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 80.843874][ T1633] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.374: corrupted xattr block 33 [ 80.857519][ T1633] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 80.868312][ T1620] F2FS-fs (loop7): recover fsync data on readonly fs [ 80.877206][ T1642] EXT4-fs (loop3): Test dummy encryption mode enabled [ 80.883275][ T1620] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 80.892704][ T1620] F2FS-fs (loop7): checkpoint=disable on readonly fs [ 80.906328][ T1642] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 80.923456][ T1642] System zones: 0-5 [ 80.931168][ T1642] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 80.974800][ T24] audit: type=1400 audit(1770790964.040:281): avc: denied { name_bind } for pid=1613 comm="syz.2.368" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 81.027597][ T1647] exfat: Deprecated parameter 'utf8' [ 81.033096][ T1647] exfat: Deprecated parameter 'utf8' [ 81.038523][ T1647] exfat: Deprecated parameter 'utf8' [ 81.125079][ T1647] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 81.276083][ T1620] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.288433][ T1620] EXT4-fs (loop7): can't mount with commit=184467440737095512, fs mounted w/o journal [ 81.292666][ T1657] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 81.308927][ T1657] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.984887][ T1679] netlink: 64 bytes leftover after parsing attributes in process `syz.1.385'. [ 82.073790][ T1683] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 82.118915][ T1683] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsv0,,errors=continue [ 82.130703][ T1683] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.142456][ T1686] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 82.159792][ T1686] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.170554][ T1683] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.387: corrupted xattr block 33 [ 82.182440][ T1683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 82.193872][ T1683] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.387: corrupted xattr block 33 [ 82.206311][ T1683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 82.216794][ T1683] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.387: corrupted xattr block 33 [ 82.228887][ T1683] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 82.380302][ T1693] EXT4-fs (loop7): Test dummy encryption mode enabled [ 82.399235][ T1693] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 82.407438][ T1693] System zones: 0-5 [ 82.412093][ T1693] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 82.450546][ T1706] EXT4-fs (loop3): Ignoring removed nobh option [ 82.456903][ T1706] EXT4-fs (loop3): Ignoring removed bh option [ 82.468061][ T1706] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.488110][ T1712] netlink: 64 bytes leftover after parsing attributes in process `syz.5.396'. [ 82.509519][ T1716] xt_hashlimit: size too large, truncated to 1048576 [ 82.510931][ T1706] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,noquota,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 82.540934][ T24] audit: type=1400 audit(1770790965.600:282): avc: denied { rename } for pid=1705 comm="syz.3.393" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.568916][ T24] audit: type=1400 audit(1770790965.610:283): avc: denied { reparent } for pid=1705 comm="syz.3.393" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 82.618941][ T24] audit: type=1400 audit(1770790965.610:284): avc: denied { rename } for pid=1705 comm="syz.3.393" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.641653][ T1707] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 82.653250][ T1707] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.669723][ T306] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 82.680777][ T24] audit: type=1400 audit(1770790965.610:285): avc: denied { reparent } for pid=1705 comm="syz.3.393" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.771772][ T24] audit: type=1326 audit(1770790965.840:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac2a5f79 code=0x7ffc0000 [ 82.816151][ T24] audit: type=1326 audit(1770790965.840:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac2a5f79 code=0x7ffc0000 [ 82.873066][ T24] audit: type=1326 audit(1770790965.840:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effac26684e code=0x7ffc0000 [ 82.934480][ T24] audit: type=1326 audit(1770790965.840:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1724 comm="syz.1.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effac2a5f79 code=0x7ffc0000 [ 83.049937][ T306] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 83.061180][ T306] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 83.070230][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.249864][ T1698] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 83.499832][ T306] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 83.513835][ T306] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input9 [ 83.651656][ T306] usb 3-1: USB disconnect, device number 6 [ 83.659684][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 83.806281][ T1740] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 83.820996][ T1740] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsv0,,errors=continue [ 83.832532][ T1740] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.844390][ T1740] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.402: corrupted xattr block 33 [ 83.856277][ T1740] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 83.869280][ T1740] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.402: corrupted xattr block 33 [ 83.881260][ T1740] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 83.890357][ T1740] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.402: corrupted xattr block 33 [ 83.903996][ T1740] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 84.092825][ T1757] netlink: 64 bytes leftover after parsing attributes in process `syz.1.407'. [ 84.141753][ T1759] EXT4-fs (loop1): Ignoring removed nobh option [ 84.150873][ T1759] EXT4-fs (loop1): Ignoring removed bh option [ 84.164832][ T1759] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.180653][ T1759] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,noquota,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 84.215866][ T1764] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 84.215906][ T1764] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.396993][ T280] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 85.430571][ T1797] netlink: 64 bytes leftover after parsing attributes in process `syz.3.419'. [ 85.497195][ T1801] EXT4-fs (loop3): Ignoring removed nobh option [ 85.503521][ T1801] EXT4-fs (loop3): Ignoring removed bh option [ 85.509614][ T1801] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.531147][ T1801] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,noquota,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 85.531545][ T1804] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 85.561437][ T1804] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.660962][ T1811] exfat: Deprecated parameter 'utf8' [ 85.666327][ T1811] exfat: Deprecated parameter 'utf8' [ 85.667953][ T1814] xt_hashlimit: size too large, truncated to 1048576 [ 85.672124][ T1811] exfat: Deprecated parameter 'utf8' [ 85.726222][ T1811] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 85.810202][ T280] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 85.818303][ T280] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.828515][ T280] usb 2-1: config 0 has no interface number 0 [ 85.834899][ T280] usb 2-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 85.844965][ T280] usb 2-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.005066][ T460] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 86.012640][ T280] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 86.021716][ T280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.030161][ T280] usb 2-1: Product: syz [ 86.034535][ T280] usb 2-1: Manufacturer: syz [ 86.039128][ T280] usb 2-1: SerialNumber: syz [ 86.044464][ T280] usb 2-1: config 0 descriptor?? [ 86.050820][ T1825] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 86.059910][ T1785] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.061461][ T1825] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.202190][ T1830] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 86.209396][ T1830] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 86.332311][ T1830] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,errors=continue,journal_dev=0x0000000000000007,,errors=continue [ 86.347402][ T1830] SELinux: security_context_str_to_sid(root) failed for (dev loop2, type ext4) errno=-22 [ 86.379753][ T460] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.390077][ T460] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.469745][ T460] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.478796][ T460] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.486809][ T460] usb 8-1: SerialNumber: syz [ 86.496990][ T1785] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 86.505027][ T1785] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 86.514147][ T1785] F2FS-fs (loop1): invalid crc value [ 86.522119][ T1785] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.544674][ T1785] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 86.551787][ T1785] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 86.622950][ T1844] netlink: 64 bytes leftover after parsing attributes in process `syz.3.431'. [ 86.630579][ T1785] attempt to access beyond end of device [ 86.630579][ T1785] loop1: rw=2049, want=45104, limit=40427 [ 86.971744][ T1814] EXT4-fs (loop7): Test dummy encryption mode enabled [ 87.007649][ T1814] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 87.022202][ T1814] System zones: 0-5 [ 87.037450][ T1814] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 87.346358][ T460] usb 8-1: 0:2 : does not exist [ 87.406418][ T1869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.498624][ T460] usb 8-1: USB disconnect, device number 6 [ 87.715689][ T659] usb 2-1: USB disconnect, device number 11 [ 87.732712][ T1649] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 87.743699][ T1649] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 87.820813][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.313935][ T1884] netlink: 64 bytes leftover after parsing attributes in process `syz.7.442'. [ 88.344492][ T24] kauditd_printk_skb: 76 callbacks suppressed [ 88.344503][ T24] audit: type=1400 audit(1770790971.410:366): avc: denied { name_bind } for pid=1878 comm="syz.3.441" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 88.432748][ T1887] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 88.446201][ T1887] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.443: Allocating blocks 449-513 which overlap fs metadata [ 88.463533][ T1890] EXT4-fs (loop7): Test dummy encryption mode enabled [ 88.473487][ T1890] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 88.481759][ T1890] System zones: 0-5 [ 88.486345][ T1890] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 88.510873][ T1895] exfat: Deprecated parameter 'utf8' [ 88.519695][ T1895] exfat: Deprecated parameter 'utf8' [ 88.525174][ T1895] exfat: Deprecated parameter 'utf8' [ 88.614996][ T1895] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 88.930307][ T1903] exfat: Deprecated parameter 'utf8' [ 88.935656][ T1903] exfat: Deprecated parameter 'utf8' [ 88.941161][ T1903] exfat: Deprecated parameter 'utf8' [ 88.983920][ T1903] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 90.041309][ T1932] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 90.051650][ T1932] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.161224][ T1940] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 90.172386][ T1940] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.190089][ T1945] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 90.200515][ T1945] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.457: Allocating blocks 449-513 which overlap fs metadata [ 90.283350][ T1930] F2FS-fs (loop1): invalid crc value [ 90.346982][ T1930] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 90.389977][ T1959] exfat: Deprecated parameter 'utf8' [ 90.395616][ T1959] exfat: Deprecated parameter 'utf8' [ 90.401319][ T1959] exfat: Deprecated parameter 'utf8' [ 90.426469][ T1930] F2FS-fs (loop1): recover fsync data on readonly fs [ 90.441683][ T1959] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 90.459997][ T1930] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 90.467274][ T1930] F2FS-fs (loop1): checkpoint=disable on readonly fs [ 90.734648][ T1930] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.746971][ T1930] EXT4-fs (loop1): can't mount with commit=184467440737095512, fs mounted w/o journal [ 92.312767][ T2000] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 92.323215][ T2000] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3358: comm syz.7.472: Allocating blocks 449-513 which overlap fs metadata [ 92.775782][ T2014] process 'syz.1.476' launched '/dev/fd/-1' with NULL argv: empty string added [ 92.787992][ T2012] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.789286][ T24] audit: type=1400 audit(1770790975.850:367): avc: denied { create } for pid=2013 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 92.816671][ T2012] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 92.839114][ T2012] System zones: 0-5 [ 92.843675][ T2012] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 92.967535][ T24] audit: type=1400 audit(1770790976.030:368): avc: denied { create } for pid=2013 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.057198][ T24] audit: type=1400 audit(1770790976.680:369): avc: denied { ioctl } for pid=2020 comm="syz.5.478" path="socket:[20426]" dev="sockfs" ino=20426 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.107147][ T2027] netlink: 148 bytes leftover after parsing attributes in process `syz.5.478'. [ 94.116250][ T2027] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 94.512857][ T2032] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.548325][ T2032] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.482: invalid indirect mapped block 4294967295 (level 1) [ 94.562429][ T2032] EXT4-fs (loop3): Remounting filesystem read-only [ 94.568967][ T2032] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.482: invalid indirect mapped block 4294967295 (level 1) [ 94.583371][ T2032] EXT4-fs (loop3): 2 truncates cleaned up [ 94.589132][ T2032] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000005,dioread_nolock,auto_da_alloc=0x000000007fffffff, [ 94.652122][ T2043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.699929][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 94.733156][ T2045] FAULT_INJECTION: forcing a failure. [ 94.733156][ T2045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.746219][ T2045] CPU: 1 PID: 2045 Comm: syz.7.481 Tainted: G W syzkaller #0 [ 94.754869][ T2045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.764908][ T2045] Call Trace: [ 94.768185][ T2045] __dump_stack+0x21/0x24 [ 94.772498][ T2045] dump_stack_lvl+0x1a7/0x208 [ 94.777159][ T2045] ? show_regs_print_info+0x18/0x18 [ 94.782343][ T2045] dump_stack+0x15/0x1c [ 94.786481][ T2045] should_fail+0x3c1/0x510 [ 94.790880][ T2045] should_fail_usercopy+0x1a/0x20 [ 94.795893][ T2045] _copy_from_user+0x20/0xd0 [ 94.800471][ T2045] __copy_msghdr_from_user+0xc9/0x630 [ 94.805834][ T2045] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 94.811115][ T2045] ? __balance_callback+0x5e/0xc0 [ 94.816138][ T2045] ___sys_sendmsg+0x19a/0x2e0 [ 94.820810][ T2045] ? __sys_sendmsg+0x280/0x280 [ 94.825555][ T2045] __x64_sys_sendmsg+0x1f9/0x2c0 [ 94.830467][ T2045] ? __kasan_check_write+0x14/0x20 [ 94.835561][ T2045] ? ___sys_sendmsg+0x2e0/0x2e0 [ 94.840387][ T2045] ? __kasan_check_read+0x11/0x20 [ 94.845387][ T2045] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 94.850994][ T2045] do_syscall_64+0x31/0x40 [ 94.855385][ T2045] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 94.861251][ T2045] RIP: 0033:0x7fb5cb212f79 [ 94.865640][ T2045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.885309][ T2045] RSP: 002b:00007fb5c9c2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.893696][ T2045] RAX: ffffffffffffffda RBX: 00007fb5cb48d180 RCX: 00007fb5cb212f79 [ 94.901689][ T2045] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 94.909901][ T2045] RBP: 00007fb5c9c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 94.917844][ T2045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.925790][ T2045] R13: 00007fb5cb48d218 R14: 00007fb5cb48d180 R15: 00007ffd0cfd6cd8 [ 95.568489][ T2061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.084047][ T2067] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 96.101144][ T2067] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsv0,,errors=continue [ 96.112743][ T2067] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.140116][ T2067] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.488: corrupted xattr block 33 [ 96.151978][ T2067] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 96.162391][ T2063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.166240][ T2067] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.488: corrupted xattr block 33 [ 96.185491][ T2067] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 96.188492][ T2072] netlink: 64 bytes leftover after parsing attributes in process `syz.5.489'. [ 96.194843][ T2067] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.488: corrupted xattr block 33 [ 96.216250][ T2067] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 96.353364][ T2079] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 96.364360][ T2079] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.492: Allocating blocks 449-513 which overlap fs metadata [ 96.659750][ T659] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 97.019755][ T659] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 97.030958][ T659] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 97.040208][ T659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.069732][ T2088] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 97.216935][ T2102] netlink: 64 bytes leftover after parsing attributes in process `syz.2.498'. [ 97.226011][ T24] audit: type=1400 audit(1770790980.260:370): avc: denied { remount } for pid=2096 comm="syz.5.497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 97.417572][ T2101] 9pnet_virtio: no channels available for device 127.0.0.1 [ 97.529752][ T659] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 97.538082][ T659] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input10 [ 97.559033][ T659] usb 4-1: USB disconnect, device number 5 [ 97.564920][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 98.080437][ T2125] EXT4-fs (loop3): Test dummy encryption mode enabled [ 98.088418][ T2125] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 98.096614][ T2125] System zones: 0-5 [ 98.101982][ T2125] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 98.439700][ T2137] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 98.450158][ T2137] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3358: comm syz.1.509: Allocating blocks 449-513 which overlap fs metadata [ 100.003259][ T24] audit: type=1400 audit(1770790983.070:371): avc: denied { search } for pid=2177 comm="syz.7.523" name="/" dev="configfs" ino=14020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 100.207335][ T2188] netlink: 'syz.2.526': attribute type 27 has an invalid length. [ 100.328789][ T2191] cgroup: syz.2.526 (2191) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 100.349063][ T2188] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.353436][ T2167] F2FS-fs (loop3): invalid crc value [ 100.356250][ T2188] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.374284][ T2167] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 100.425978][ T2191] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 100.448623][ T2167] F2FS-fs (loop3): recover fsync data on readonly fs [ 100.488538][ T2167] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 100.502919][ T2167] F2FS-fs (loop3): checkpoint=disable on readonly fs [ 100.566883][ T2188] device batadv_slave_0 left promiscuous mode [ 100.640367][ T2188] device vlan2 left promiscuous mode [ 100.662511][ T2188] device bridge0 left promiscuous mode [ 100.668665][ T2205] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 100.679571][ T2205] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3358: comm syz.1.531: Allocating blocks 449-513 which overlap fs metadata [ 100.739205][ T2167] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.751847][ T2167] EXT4-fs (loop3): can't mount with commit=184467440737095512, fs mounted w/o journal [ 101.352699][ T2191] F2FS-fs (loop2): invalid crc value [ 101.365545][ T2191] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.434622][ T2191] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 101.450634][ T2191] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 101.729892][ T24] audit: type=1400 audit(1770790984.780:372): avc: denied { read } for pid=2238 comm="syz.5.540" name="/" dev="configfs" ino=14020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.821314][ T24] audit: type=1400 audit(1770790984.780:373): avc: denied { open } for pid=2238 comm="syz.5.540" path="/" dev="configfs" ino=14020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 101.876729][ T2249] xt_hashlimit: size too large, truncated to 1048576 [ 101.892770][ T24] audit: type=1400 audit(1770790984.780:374): avc: denied { setattr } for pid=2238 comm="syz.5.540" name="/" dev="configfs" ino=14020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.199702][ T539] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.238516][ T2252] xt_hashlimit: size too large, truncated to 1048576 [ 102.332497][ T2234] F2FS-fs (loop1): invalid crc value [ 102.340480][ T2247] F2FS-fs (loop2): invalid crc value [ 102.391140][ T2234] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 102.403183][ T2247] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 102.418600][ T2234] F2FS-fs (loop1): recover fsync data on readonly fs [ 102.425486][ T2234] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 102.432082][ T2234] F2FS-fs (loop1): checkpoint=disable on readonly fs [ 102.579787][ T539] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.620431][ T539] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.631323][ T2247] F2FS-fs (loop2): recover fsync data on readonly fs [ 102.660338][ T2247] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 102.683487][ T2247] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 102.739783][ T539] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 102.765655][ T539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 102.796208][ T539] usb 4-1: SerialNumber: syz [ 102.930728][ T582] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 102.990277][ T2234] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.012629][ T2234] EXT4-fs (loop1): can't mount with commit=184467440737095512, fs mounted w/o journal [ 103.190345][ T2247] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.198057][ T2249] EXT4-fs (loop3): Test dummy encryption mode enabled [ 103.217108][ T2247] EXT4-fs (loop2): can't mount with commit=184467440737095512, fs mounted w/o journal [ 103.228351][ T2249] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 103.236742][ T2249] System zones: 0-5 [ 103.243531][ T2249] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 103.266880][ T2272] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 103.289773][ T582] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.300148][ T582] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.321519][ T2272] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3358: comm syz.1.548: Allocating blocks 449-513 which overlap fs metadata [ 103.354879][ T2278] FAULT_INJECTION: forcing a failure. [ 103.354879][ T2278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.368561][ T2278] CPU: 1 PID: 2278 Comm: syz.2.549 Tainted: G W syzkaller #0 [ 103.377223][ T2278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.387259][ T2278] Call Trace: [ 103.390536][ T2278] __dump_stack+0x21/0x24 [ 103.394870][ T2278] dump_stack_lvl+0x1a7/0x208 [ 103.399534][ T2278] ? show_regs_print_info+0x18/0x18 [ 103.404713][ T2278] ? has_cap_mac_admin+0x370/0x370 [ 103.409803][ T2278] dump_stack+0x15/0x1c [ 103.413943][ T2278] should_fail+0x3c1/0x510 [ 103.418334][ T2278] should_fail_usercopy+0x1a/0x20 [ 103.423330][ T2278] _copy_from_user+0x20/0xd0 [ 103.427891][ T2278] rtc_dev_ioctl+0x763/0x910 [ 103.432449][ T2278] ? mutex_trylock+0xa0/0xa0 [ 103.437006][ T2278] ? rtc_dev_poll+0xf0/0xf0 [ 103.441478][ T2278] ? __fget_files+0x2c4/0x320 [ 103.446123][ T2278] ? security_file_ioctl+0x84/0xa0 [ 103.451201][ T2278] ? rtc_dev_poll+0xf0/0xf0 [ 103.455671][ T2278] __se_sys_ioctl+0x121/0x1a0 [ 103.460315][ T2278] __x64_sys_ioctl+0x7b/0x90 [ 103.464872][ T2278] do_syscall_64+0x31/0x40 [ 103.469258][ T2278] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 103.475118][ T2278] RIP: 0033:0x7f8f7acfbf79 [ 103.479501][ T2278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.489806][ T582] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 103.499081][ T2278] RSP: 002b:00007f8f79757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.499093][ T2278] RAX: ffffffffffffffda RBX: 00007f8f7af75fa0 RCX: 00007f8f7acfbf79 [ 103.499107][ T2278] RDX: 0000200000000040 RSI: 000000004024700a RDI: 0000000000000003 [ 103.508172][ T582] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 103.516496][ T2278] RBP: 00007f8f79757090 R08: 0000000000000000 R09: 0000000000000000 [ 103.516501][ T2278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.516508][ T2278] R13: 00007f8f7af76038 R14: 00007f8f7af75fa0 R15: 00007ffed9fc1d18 [ 103.530265][ T539] usb 4-1: 0:2 : does not exist [ 103.537944][ T582] usb 8-1: SerialNumber: syz [ 103.647330][ T539] usb 4-1: USB disconnect, device number 6 [ 103.842947][ T2286] F2FS-fs (loop2): invalid crc value [ 103.850893][ T2286] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 103.884705][ T2286] F2FS-fs (loop2): recover fsync data on readonly fs [ 103.891561][ T2286] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 103.898182][ T2286] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 103.906164][ T2252] EXT4-fs (loop7): Test dummy encryption mode enabled [ 103.917330][ T2252] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 103.929731][ T2252] System zones: 0-5 [ 103.939885][ T2252] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 104.109087][ T2293] xt_hashlimit: size too large, truncated to 1048576 [ 104.140588][ T582] usb 8-1: 0:2 : does not exist [ 104.223523][ T582] usb 8-1: USB disconnect, device number 7 [ 104.280084][ T2286] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.292961][ T2286] EXT4-fs (loop2): can't mount with commit=184467440737095512, fs mounted w/o journal [ 104.429323][ T2303] netlink: 64 bytes leftover after parsing attributes in process `syz.5.556'. [ 104.438659][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 104.454388][ T411] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 104.554356][ T24] audit: type=1400 audit(1770790987.620:375): avc: denied { bind } for pid=2311 comm="syz.5.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.587085][ T2314] netlink: 64 bytes leftover after parsing attributes in process `syz.5.561'. [ 104.596338][ T24] audit: type=1400 audit(1770790987.640:376): avc: denied { name_bind } for pid=2311 comm="syz.5.560" src=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 104.629229][ T24] audit: type=1400 audit(1770790987.640:377): avc: denied { node_bind } for pid=2311 comm="syz.5.560" saddr=101:: src=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 104.651149][ T24] audit: type=1400 audit(1770790987.640:378): avc: denied { read } for pid=2311 comm="syz.5.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 104.739885][ T539] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 104.849750][ T411] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.860053][ T411] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.930597][ T2320] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 104.940236][ T411] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.949386][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.949713][ T2320] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3358: comm syz.7.563: Allocating blocks 449-513 which overlap fs metadata [ 104.957500][ T411] usb 2-1: SerialNumber: syz [ 105.003401][ T2325] xt_hashlimit: size too large, truncated to 1048576 [ 105.099722][ T539] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 105.110829][ T539] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 105.120033][ T539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.149710][ T2301] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 105.272363][ T2293] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.280378][ T2293] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 105.288480][ T2293] System zones: 0-5 [ 105.292825][ T2293] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 105.329739][ T5] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 105.350251][ T411] usb 2-1: 0:2 : does not exist [ 105.431816][ T411] usb 2-1: USB disconnect, device number 12 [ 105.619883][ T539] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 105.656406][ T539] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input11 [ 105.798901][ T539] usb 3-1: USB disconnect, device number 7 [ 105.809674][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 105.899728][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.909870][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.989729][ T5] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.998795][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.006814][ T5] usb 4-1: SerialNumber: syz [ 106.283461][ T2325] EXT4-fs (loop3): Test dummy encryption mode enabled [ 106.430212][ T2325] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 106.438472][ T2325] System zones: 0-5 [ 106.443235][ T2325] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 106.630080][ T5] usb 4-1: 0:2 : does not exist [ 106.797618][ T2357] netlink: 64 bytes leftover after parsing attributes in process `syz.7.572'. [ 106.825498][ T5] usb 4-1: USB disconnect, device number 7 [ 106.861408][ T2359] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 106.891834][ T2359] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsv0,,errors=continue [ 106.903432][ T2359] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.915591][ T2359] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.573: corrupted xattr block 33 [ 106.927430][ T2359] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 106.936443][ T2359] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.573: corrupted xattr block 33 [ 106.948422][ T2359] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 106.957428][ T2359] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.573: corrupted xattr block 33 [ 106.969162][ T2359] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 107.040193][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.150764][ T2370] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 107.192032][ T2370] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.576: Allocating blocks 449-513 which overlap fs metadata [ 107.215535][ T2377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'. [ 107.245688][ T2379] tipc: Started in network mode [ 107.251353][ T2379] tipc: Own node identity ffffffffffff, cluster identity 4711 [ 107.259518][ T2379] tipc: Enabling of bearer rejected, failed to enable media [ 107.552065][ T2379] F2FS-fs (loop3): Unrecognized mount option "" or missing value [ 107.790852][ T2389] EXT4-fs (loop1): Ignoring removed nobh option [ 107.824877][ T2389] EXT4-fs (loop1): Ignoring removed bh option [ 107.833407][ T2389] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.859161][ T2392] 9pnet_virtio: no channels available for device 127.0.0.1 [ 108.022753][ T2389] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,noquota,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 108.084796][ T2394] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 108.105003][ T2394] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsv0,,errors=continue [ 108.116785][ T2394] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.133675][ T2394] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.582: corrupted xattr block 33 [ 108.145883][ T2394] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 108.156009][ T2394] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.582: corrupted xattr block 33 [ 108.170998][ T2399] EXT4-fs (loop2): Test dummy encryption mode enabled [ 108.178582][ T2399] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 108.179123][ T2394] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 108.186795][ T2399] System zones: 0-5 [ 108.200683][ T2394] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.582: corrupted xattr block 33 [ 108.212493][ T2394] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 108.222160][ T2399] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 108.285860][ T2406] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 108.296210][ T2406] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.356242][ T2412] EXT4-fs (loop7): Test dummy encryption mode enabled [ 108.398808][ T2412] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 108.407398][ T2412] System zones: 0-5 [ 108.429735][ T2412] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue [ 108.759047][ T2423] netlink: 64 bytes leftover after parsing attributes in process `syz.3.588'. [ 108.782915][ T2420] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 108.840122][ T2427] xt_hashlimit: size too large, truncated to 1048576 [ 108.851644][ T2420] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsv0,,errors=continue [ 108.888701][ T2420] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.259698][ T15] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.280133][ T2432] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 109.339631][ T2432] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,jqfmt=vfsv0,,errors=continue [ 109.359964][ T2432] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.419849][ T2432] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.590: corrupted xattr block 33 [ 109.444359][ T2432] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 109.459978][ T2432] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.590: corrupted xattr block 33 [ 109.489757][ T2432] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 109.498740][ T2432] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.590: corrupted xattr block 33 [ 109.553973][ T2432] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 109.565386][ T2437] EXT4-fs (loop2): Test dummy encryption mode enabled [ 109.574160][ T2437] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 109.582433][ T2437] System zones: 0-5 [ 109.586858][ T2437] ================================================================== [ 109.595015][ T2437] BUG: KASAN: use-after-free in __ext4_iget+0x381/0x44c0 [ 109.602009][ T2437] Read of size 8 at addr ffff88811a7fb238 by task syz.2.591/2437 [ 109.609690][ T2437] [ 109.612020][ T2437] CPU: 1 PID: 2437 Comm: syz.2.591 Tainted: G W syzkaller #0 [ 109.619742][ T15] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.620658][ T2437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.620663][ T2437] Call Trace: [ 109.620679][ T2437] __dump_stack+0x21/0x24 [ 109.620696][ T2437] dump_stack_lvl+0x1a7/0x208 [ 109.630821][ T15] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.640767][ T2437] ? show_regs_print_info+0x18/0x18 [ 109.640778][ T2437] ? thaw_kernel_threads+0x220/0x220 [ 109.640791][ T2437] print_address_description+0x7f/0x2c0 [ 109.640804][ T2437] ? __ext4_iget+0x381/0x44c0 [ 109.640821][ T2437] kasan_report+0xe2/0x130 [ 109.686786][ T2437] ? __ext4_iget+0x381/0x44c0 [ 109.691444][ T2437] __asan_report_load8_noabort+0x14/0x20 [ 109.697046][ T2437] __ext4_iget+0x381/0x44c0 [ 109.701523][ T2437] ? __kasan_check_write+0x14/0x20 [ 109.706608][ T2437] ? _raw_write_lock+0x94/0xf0 [ 109.711347][ T2437] ? _raw_write_trylock+0x150/0x150 [ 109.716521][ T2437] ? __proc_create+0x570/0x8e0 [ 109.719784][ T15] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.721270][ T2437] ? __kasan_check_write+0x14/0x20 [ 109.721290][ T2437] ? ext4_get_projid+0x140/0x140 [ 109.730362][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.735356][ T2437] ? _raw_write_unlock+0x2b/0x60 [ 109.735373][ T2437] ? proc_register+0x34d/0x4e0 [ 109.740881][ T15] usb 4-1: SerialNumber: syz [ 109.748227][ T2437] ext4_enable_quotas+0x33c/0x6d0 [ 109.748244][ T2437] ext4_fill_super+0x84ad/0x8d70 [ 109.772321][ T2437] ? ext4_mount+0x40/0x40 [ 109.776619][ T2437] ? vscnprintf+0x80/0x80 [ 109.780919][ T2437] ? set_blocksize+0x1ed/0x3b0 [ 109.785659][ T2437] ? sb_set_blocksize+0xaa/0xf0 [ 109.790484][ T2437] mount_bdev+0x28b/0x3a0 [ 109.794787][ T2437] ? ext4_mount+0x40/0x40 [ 109.799085][ T2437] ext4_mount+0x34/0x40 [ 109.803214][ T2437] legacy_get_tree+0xed/0x190 [ 109.807863][ T2437] ? ext4_chksum+0x180/0x180 [ 109.812423][ T2437] vfs_get_tree+0x89/0x260 [ 109.816808][ T2437] do_new_mount+0x25a/0xa20 [ 109.821281][ T2437] path_mount+0x585/0xc90 [ 109.825583][ T2437] __se_sys_mount+0x320/0x390 [ 109.830231][ T2437] ? __x64_sys_mount+0xd0/0xd0 [ 109.834965][ T2437] ? debug_smp_processor_id+0x17/0x20 [ 109.840309][ T2437] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 109.846346][ T2437] __x64_sys_mount+0xbf/0xd0 [ 109.850914][ T2437] do_syscall_64+0x31/0x40 [ 109.855308][ T2437] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 109.861169][ T2437] RIP: 0033:0x7f8f7acfd20a [ 109.865555][ T2437] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.885136][ T2437] RSP: 002b:00007f8f79756e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.893526][ T2437] RAX: ffffffffffffffda RBX: 00007f8f79756ee0 RCX: 00007f8f7acfd20a [ 109.901471][ T2437] RDX: 0000200000000100 RSI: 0000200000000280 RDI: 00007f8f79756ea0 [ 109.909414][ T2437] RBP: 0000200000000100 R08: 00007f8f79756ee0 R09: 0000000002800000 [ 109.917359][ T2437] R10: 0000000002800000 R11: 0000000000000246 R12: 0000200000000280 [ 109.925305][ T2437] R13: 00007f8f79756ea0 R14: 0000000000000bc8 R15: 0000200000000500 [ 109.933250][ T2437] [ 109.935551][ T2437] Allocated by task 492: [ 109.939771][ T2437] __kasan_slab_alloc+0xbd/0xf0 [ 109.944597][ T2437] slab_post_alloc_hook+0x5d/0x2f0 [ 109.949681][ T2437] kmem_cache_alloc+0x162/0x2d0 [ 109.954505][ T2437] f2fs_alloc_inode+0x26/0x410 [ 109.959238][ T2437] new_inode_pseudo+0x62/0x210 [ 109.963972][ T2437] new_inode+0x28/0x1e0 [ 109.968102][ T2437] f2fs_new_inode+0xf3/0x1420 [ 109.972751][ T2437] __f2fs_tmpfile+0x105/0x4d0 [ 109.977400][ T2437] f2fs_tmpfile+0x12f/0x220 [ 109.981874][ T2437] vfs_tmpfile+0x1f0/0x2c0 [ 109.986263][ T2437] ovl_get_workdir+0x525/0xda0 [ 109.990997][ T2437] ovl_fill_super+0x15ff/0x2560 [ 109.995822][ T2437] mount_nodev+0x5c/0xf0 [ 110.000034][ T2437] ovl_mount+0x2c/0x40 [ 110.004075][ T2437] legacy_get_tree+0xed/0x190 [ 110.008729][ T2437] vfs_get_tree+0x89/0x260 [ 110.013114][ T2437] do_new_mount+0x25a/0xa20 [ 110.017587][ T2437] path_mount+0x585/0xc90 [ 110.021886][ T2437] __se_sys_mount+0x320/0x390 [ 110.026531][ T2437] __x64_sys_mount+0xbf/0xd0 [ 110.031092][ T2437] do_syscall_64+0x31/0x40 [ 110.035480][ T2437] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 110.041339][ T2437] [ 110.043639][ T2437] Last potentially related work creation: [ 110.049328][ T2437] kasan_save_stack+0x3a/0x60 [ 110.053977][ T2437] __kasan_record_aux_stack+0xd2/0x100 [ 110.059405][ T2437] kasan_record_aux_stack_noalloc+0xb/0x10 [ 110.065185][ T2437] call_rcu+0x11a/0x10b0 [ 110.069399][ T2437] evict+0x881/0x930 [ 110.073263][ T2437] iput+0x638/0x7c0 [ 110.077044][ T2437] dentry_unlink_inode+0x2cf/0x380 [ 110.082125][ T2437] __dentry_kill+0x44f/0x650 [ 110.086683][ T2437] dentry_kill+0xc0/0x2a0 [ 110.090985][ T2437] dput+0x42/0x80 [ 110.094593][ T2437] ovl_get_workdir+0x566/0xda0 [ 110.099325][ T2437] ovl_fill_super+0x15ff/0x2560 [ 110.104146][ T2437] mount_nodev+0x5c/0xf0 [ 110.108355][ T2437] ovl_mount+0x2c/0x40 [ 110.112396][ T2437] legacy_get_tree+0xed/0x190 [ 110.117045][ T2437] vfs_get_tree+0x89/0x260 [ 110.121436][ T2437] do_new_mount+0x25a/0xa20 [ 110.125909][ T2437] path_mount+0x585/0xc90 [ 110.130210][ T2437] __se_sys_mount+0x320/0x390 [ 110.134856][ T2437] __x64_sys_mount+0xbf/0xd0 [ 110.139414][ T2437] do_syscall_64+0x31/0x40 [ 110.143804][ T2437] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 110.149665][ T2437] [ 110.151973][ T2437] The buggy address belongs to the object at ffff88811a7fad10 [ 110.151973][ T2437] which belongs to the cache f2fs_inode_cache of size 1520 [ 110.166516][ T2437] The buggy address is located 1320 bytes inside of [ 110.166516][ T2437] 1520-byte region [ffff88811a7fad10, ffff88811a7fb300) [ 110.179930][ T2437] The buggy address belongs to the page: [ 110.185554][ T2437] page:ffffea000469fe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811a7fb9f0 pfn:0x11a7f8 [ 110.197234][ T2437] head:ffffea000469fe00 order:3 compound_mapcount:0 compound_pincount:0 [ 110.205531][ T2437] flags: 0x4000000000010200(slab|head) [ 110.210964][ T2437] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888102788600 [ 110.219521][ T2437] raw: ffff88811a7fb9f0 000000008013000d 00000001ffffffff 0000000000000000 [ 110.228070][ T2437] page dumped because: kasan: bad access detected [ 110.234452][ T2437] page_owner tracks the page as allocated [ 110.240153][ T2437] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 424, ts 39670984912, free_ts 0 [ 110.260605][ T2437] prep_new_page+0x179/0x180 [ 110.265165][ T2437] get_page_from_freelist+0x223b/0x23d0 [ 110.270769][ T2437] __alloc_pages_nodemask+0x290/0x620 [ 110.276109][ T2437] new_slab+0x84/0x3f0 [ 110.280155][ T2437] ___slab_alloc+0x2a6/0x450 [ 110.284716][ T2437] __slab_alloc+0x63/0xa0 [ 110.289018][ T2437] kmem_cache_alloc+0x1ac/0x2d0 [ 110.293838][ T2437] f2fs_alloc_inode+0x26/0x410 [ 110.298576][ T2437] iget_locked+0x146/0x7d0 [ 110.302962][ T2437] f2fs_iget+0x55/0x4b60 [ 110.307176][ T2437] f2fs_fill_super+0x40f7/0x73f0 [ 110.312085][ T2437] mount_bdev+0x28b/0x3a0 [ 110.316384][ T2437] f2fs_mount+0x34/0x40 [ 110.320512][ T2437] legacy_get_tree+0xed/0x190 [ 110.325160][ T2437] vfs_get_tree+0x89/0x260 [ 110.329547][ T2437] do_new_mount+0x25a/0xa20 [ 110.334018][ T2437] page_owner free stack trace missing [ 110.339355][ T2437] [ 110.341656][ T2437] Memory state around the buggy address: [ 110.347259][ T2437] ffff88811a7fb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.355291][ T2437] ffff88811a7fb180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.363324][ T2437] >ffff88811a7fb200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.371353][ T2437] ^ [ 110.377216][ T2437] ffff88811a7fb280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 110.385249][ T2437] ffff88811a7fb300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 110.393276][ T2437] ================================================================== [ 110.401305][ T2437] Disabling lock debugging due to kernel taint [ 110.410996][ T2437] EXT4-fs warning (device loop2): ext4_enable_quotas:6490: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 110.426111][ T2437] EXT4-fs (loop2): mount failed [ 110.623566][ T2427] EXT4-fs (loop3): Test dummy encryption mode enabled [ 110.631501][ T2427] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 110.639690][ T2427] System zones: 0-5 [ 110.644087][ T2427] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue [ 110.753205][ T2445] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 110.763619][ T2445] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3358: comm syz.1.594: Allocating blocks 449-513 which overlap fs metadata [ 110.780223][ T15] usb 4-1: 0:2 : does not exist [ 111.173822][ T15] usb 4-1: USB disconnect, device number 8