last executing test programs: 8.729841017s ago: executing program 4 (id=5): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x802, 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x40, 0x4) write(r1, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r1, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x1, 0x0, @irqchip={0xaa19, 0x2}}]}) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000300000010cc17691940000102030109026e000301221040080b0101012020070904000000010130000a2401060a0000080000090401"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x10201, 0x0, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x18, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x7176, &(0x7f0000000380)={0x0, 0x6381, 0x10, 0x3, 0x1008e}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000002c0)='io.pressure\x00', 0x2, 0x0) r7 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x47) preadv2(r7, &(0x7f00000001c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000300)=[r4, r6, r7], 0x3) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = open$dir(&(0x7f0000000040)='./sys\x00', 0x101001, 0x20) r10 = openat(r9, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x109002, 0x87) write(r10, &(0x7f0000000000)='0123:abcd:h', 0xb) 6.67139788s ago: executing program 4 (id=14): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kheaders.tar.xz', 0x121000, 0x41) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f00000000c0)=""/126, 0x7e}], 0x2) getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) write(r1, 0x0, 0x2d) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(r2, 0x12, &(0x7f0000000140)={0x8, 0x80000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x1, './debug\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000000)={0x8, 0x9, 0x7, 0x1, 0x5}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000440)={0x2020}, 0x2020) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) 3.238297467s ago: executing program 1 (id=26): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x80}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0xd}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) readv(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/4086, 0x1000}], 0x1000000000000034) 3.221005978s ago: executing program 1 (id=27): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="c5611b6010be7d52000000f086dd", 0x0, 0x61, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffb9) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) sendto(r1, 0x0, 0x60, 0x20000000, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004800)=[{{&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x20004006) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000ec0)={'filter\x00', 0xb001, 0xff03, 0x418, 0x330, 0x110, 0x0, 0x330, 0x330, 0x330, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x2}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0xb, 0xf, {@empty, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff6, 0x85, 0x200, 0x100, 0x7fe, 0x6, 'bond_slave_0\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @multicast2, 0x2, 0xffffffff}}}, {{@arp={@broadcast, @broadcast, 0xff000000, 0x0, 0x5, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x100, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7fff, 0x5, 'syzkaller0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x164}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010102, @rand_addr=0x64010101, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x468) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000083c0)={0x2020}, 0x2020) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x14a0, 0x0, 0x1, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000180)={0x8, {"bd2af2adfb5b061c3ca5dae01a134486c194089195a326cff7bf41d5486235b0604a0d1bcaa1d4c9cf948b7da2ba910eadba18e098f2782dec4aaed64e07696a1f388d897cea87ef8fde32a7b91c76a2334aeffa19ab9e7a870245585d624a4d0ac2fd315a05a8fe7988ad70d72f1d40e1c050bd113ed1f7517f6e8555ad7ce65f8dc986194a72c5c4cbbf7bb37865a73a159e5b950de92c0e5b4ef4c9fda68a19991f2490925979ac04da692e39e73d025299e57ee7ef7a117427de7245a04884f71bf5759890eef09d562e8444de3316e5ab99903057fbf1ecbd7ba093cb3cdf25f8ad6092ce24dad55c63fd5b589b8c1cdd04651be0229404986ade51c29af05a53d764ad854a11f9a2fbc3bb1f21fa282af73cae0607de434cfd9a4899a979f70c807044239aac67cbafaecca42dc1553612c220ede0cae19d30f15d2513ad1f96aaaf51054d5b9b0ba1b55762d65d6f1a61a4f7a4a738b0a037f017e6a24db2ac63f5f5b114b5899df2ad132432c75fde2438efe6b7af8f9c15ef0186ea703b3b3225a2f27f50e6b3031d2ca8e416cf64ca442b5700a2aae18a873b7fbae430f1625fc16a99c0a0e5dd38cc0bb5964349c8fe7f9b1f5e37d6e91fd6c476a46aba077e1b0569e71d52e763f13936a9f3857b866e22ecab499f4185badc8620599b5ab2e2f5232286ef72f8eda0287f0cb3c9e41a1cca48b44f2deb5237852bf9831ee8dca86c5e62a12b5a81e526dfc176646f203b116e118c040bbfd1a89cfa0430a8dd9ea7c120c7091991f866f9814adf5df7ce76278b3b4a2a91829df21c609021dcb35a83f0dbe786fff33b2bb0384938204ac7b43f78ac4806fa2000501d15bdaa14e14c1391bb4b359da837564442061bc5a9d3f75ee655e2c3857dd57aa8c50cb8b54b3b0c3fd0811033a4881bd4249dd0decaffbd010a8796c71da358e1b5cb1be7ded4529aa7feddb304d32a0b0efd3cf29b06f9433f821a16779374a4cea67e14a80ca7ad183d17a537f428cc454f1357e956a2a794dfd899c4737a9ec5f934e7b86bc552b9ea62179bbeb531689b0e047f707ab9709e77bac19e31445b3d93c8ce221e7d66d29039d7c4de0106d856b9e086401371fbca691dfab7ebfcff0f2cafc4401049e9f2e88e47949560ffd88f937e9b689ce4cdd78cf12faa712c1ba94c83ef39a5822d0ebad020c5ac01ff485e1c5aba394999e3957f889df6be6a5cc0573a3c686728f5492a4759c4c3b2f32499102b04e5de169f43d6b5872ab671109fa60db3f90f85dab3e73dc9b3ec8396e96bfe9df695be533a33cb2529eb2c79d6a172596d5df4373705fdd85a7253977f0c43b18da12b65b1361f00bf11f27b39f8a65664b4e27555b8ac93b45e2ea3452297af9f2788e072274e6f37cf643e9c5ac0d43dc4ee69293dbeca1df9d69199f54d8e39a546478c2114f2d235cfa5644db3867c530dfd0b6730c4f75cf200a40c3d542a4935a492cc5d1d0b413ed6326da405ab31745da2753d5a1fecbb754e05c6cb256f134229a247775623fa1683f093553d0d4de43fbb13c58df7645e9bb1da8bdd0758083dee09a2556d5daaff47b43b1e6f78a50be3f7bd32d0d86e4d5b45fb3a10c4f04e5aef36626a7313eca229bcfc4bd798e92334ac56a1ddfd4cead19f359701a23a4309197c0d707371d0f2fe9031c06e8c836ceb70f1a06bf182e979538d5d44544dc2a7ec3bbf66293b57784e35d882a9f43d3bc568e5e9da1f4e891ae931b7effe7eb94c6aa969b084f218c0d3cb11fc474beb3f169963fb9d64486b05e191c20af38ae504d8aae3349d4c6cecaa1971982f112fc4d0d59ea88d35a092cba171af35d7430c05fea852257a6cd08029cd5e12ac31622a9579d90283dd44f6e7d7413b368e06a4263ba1bfb12d3c0ad1f75a0ae2865aa26a913c6132cdf7cfec168417515956c5867c1917ad1c17df1de73ff4e1f90f4ee4eb13b8b006888d735df7e0f7cd5e7f9daf5da42fed239e0c84e3bbef0ef2fef1ae543f0e8ad4d7c9c8939461c8ffed61ed859053cc4451d2c300f00b18c56b8dce2b093c9774c740f6297a2b56cdb2f7a62deb51a249d6888cae11855ae0605877543f3c5665d41c585e7b68f137798590e8d347989fc4e49f2cc731a6cf0192d5af22e8ad7e260644c76d75d76b8f70056ef7d2a55f3c1896bfe34dfc399c58b626e52aed98515b509198ee23214009ce45fef2ea830820591d43ea3571af4a203f01c4a2f5b1f3501bcd4a7c95a1c7ef3aae4047ccae2025960b583064983d1c892ff956738497f20b4ddd17550007b844c3dd86daf4db5446490fae4b566a93ba6e42f651bb71e9445d002337e581528f1964e17ae52fe99a5100e388d4cea37528ca9e0165c8afcb5a1212090881e242a97d1bd7b91785dc5922582c5d8912c7106d5b254c8fc0cca2457976706bd4836728ab101ad224eee7adfc2f3bff52eb282661663924e37ce574f0cdf34cfba0113c882efebd3f8c0bd109cf35c56f618809de9a41ff28a946443e16437363c8adb31a6eedb289b1b2dd6677d780f2efe74a6003a491655967d088bc9fc5930e9f3460c51afb4f8ecd5e57090b1b291cce18db1b3bf71fd8d78f54dedb60cf1258c1976d06ad3a9c070d6016f99c6554821945295d702a1820f05c080e7c71b9d59be5018df62f221d7da2e82a9faf4679646f517c658a891d8c1bb349ffbcb835db12767a89cffcf18e634ecd5f5b5413f7a8d862bd7125d1e00788af106f63275607a9d25c23b9aee06db57499be43757774ebc3cf9c9d2db2781db3daa32a752c843a4233ceb5ae9b54c75b5b7f8d336eb0388477ca05e5b40b7cccea5cf71b16490073be089e6bf467eebfa1a03bae9c115ff8c751d4edd3d0f731224affb5554d306c04ff19b45f09a9a4129f6d044527e1afe4dc04dc09aa186e7daede408994378b303f77dec1b0e815171ad34bf69a34e27259cbf6be96d08e9b03fd6367b8a000da24e6097d5f5671b00ff1fb053fbe734a74a711df78ef86fe0a5c2728788142f42f0e661d2af960c5a357e4c234375ddd88c810419fe3f2f8e4ad3864e77772d683ce7452fdcbfd693ebe7dd7d0c369cba59c466d230415bd9a09945bc356f887537c7d01449fc6cb999f5c7eca8b40c5687197c6366dbc2ddd8120fb5169c61716e5acdbfdcf884694116c6b7d40ab2c782bb6d2d33a49adeb98f115e996686e121c05c93de04a706085c1b917afc9228a62b17efd6f70a1e44ab8ca73ca777da3aaf646002e8144ea5b6c107a9abf2dd1a15f2dd67a1578950795b05642b4d4d2c3b1d838e617c169d704a2f0cd5c6fac24eccf8ea33511b72c0fd32499f221ff649d008ecb96fdfd8b064201f99f29836b2b4894a3c9d579bda416742d70fdfc27857856507079edf2a7872b1c12a74d97deeedac9bef4d3428c44884e32ad6b5527684aaafe1b14b3c6147f226f91ae5a5ec931d82bcc7c96801445d671a368ada9a6831ca07b121c22da8421c7239f746dda0a531c38856f3b427f578170e885ee39ae600c6b7357e5904ccece51a13471c78e46ce45ffcaec7ee1f8ca7b2869b91921a09aa402ff909aed4b54d993e3fc0d51ecf1bad387dbc863ea0beddc39431e3372092ee559c12db5379a131ad15c6f64b408246e5f88f14bbdce8de3803db3f531d69406c87546e8daba7ed9b878bd5405d174b884ee4ea3638c640e181853be4d45d54c66c820331c6044f5ed386df7bfede1fdb2e153726efe9f4238ca34f238b568427d02ccf724114c01d8303090c5cd1f572e7b3bbeb74c521f2c588ed7efe0d9c71e3826796ac08c786213bd39d9460218781a7eb480fd9477b8d8bd1fa3893bbd789cc0d3b921e64b7a8c2296091babd739459b5bc615f631059197d36b18bf8f6a316f79dc350a39f8c68e1ca059f119abbbcc08bea4521f16876e928cb00d037ca1bd424bc46f176fd6dd1d365e34ad975a53f1e6d2a85610e540ad18b88a593005a554a4b0735e73ff798cf09fe7af065413967b4fb0f8c6ac593fecfb9c36daca0631f7ea46b9995210ee3edfc12cf8de5fdc5149cc9bde82b59d9f7531fa7a3e06fd6c8616c7bf9616c32eef292005313bebaa9a03eeec33389c7903d73d6ac35bed319bd040a166a1af07b14b70d72e590eabf8e310b3b16916a88636f65bd06b091a26f9760cfbe7320d019805d7f25dbf6b8cc0f11562a288cfd6448d1eba1b7854aa81ffa2006c61e97802f8628e11ed43b71d0dd0f2e2720782089d7ec170b76e6e628d10f46b61925fec011baebabdac89a15f606011381bbc6ea4e0c03bef784f53ad7ddfb847bd582ca38491e793b4ef2d1dc11659f9beb17051d071df74b80a721cc4ebf093c9503dfa957284fdd61498f94dadadda985c123f9596a1e165ccf0e4698e3ba00d32fa672359acfffb7212af72b373b188e3e1c0bc93ccaa312bdcb097ecd4a18f5949b9d543a1f10859634f0addca88cd5dd483e232e77285bdb5d44b5b97eca49d7236c55b0f19bcbf7f507e555bd2859bb814e61e1634c92ad19c8870066ee71d3fbbe4aa74cf957e34118e60ba3477e24dffcdf7257a20af81ad29835a6176b1d4f76f722d8a76f3edb9cad7f2a51652ba80fb2e8535fe90b8f63e0083a84026d93719ba7f2804c08e8ee69ecc5b426b270b3a4227257e380203731d9aea7f1dd5e6bf5e75bced0cc70b853bff5cd1f916a4404464a0b49a3aa7aae4ac63146a89aa966bcda589af3c77ad5cbf5bac88dfa72b04eb6132e04e91c0dbca4e348a76befa629f6086b7ec066bd820c7501b367608e09cf8c46b8a828650d1aa0fbd91781b1084b37cd981ed96d899ec5919b379bf7b9745a27cb8d64e8469ba27b40cdad8f5c863c236b67b81a49a84e741d34d01cc8c0603027818a38e439ab146c8b0f245fb687d95c6b01e3e0da6e41917baf9eba7e056ac45f4a7a424e824a103533008e3cf14239e6de1621fd3654eee3ebaca605f2547348e206b86fa5662c292ae543d312de1a06ba7a7162c2e771c350785c49a4ffe379b89cdd1d95cdb70fefd970293b13e2a176615a669c1c3abf4a1dad6c9666e0c6a0cf29ce8d4d4f278335131a857d2a70a9a8d56b4e51d08086b07233b14ec3d4c6c19be51bb988afb56e6c298ead33faef2d113e50ba22f567e365117b0d96469e62420de207dbfba07f07350e7f1894b98e049905c800f61eafa853dbdeef546d9866c623c971448ec44786d5a3b760584fc5f021739f4a27179d72e30b21b2009bc45a8b6e2a8f7a6aecb887816b2ebcb173fcc7e93078543beef2c935a465d9cf2df9d002dd3edfd9bdcb03ab9fc50d2722df146f924e586187b688dc9f8e9c9794fc371d885b399c9e31c1fa597b2e47c3e0b950e76a8b0c588065cff7e29dcae16fe4a6e3201df7b545918840fc6fb430248bcaada3ef62212224333ec549ac0771d1b96ba1a67cf654dbd5328d642fe97b33b8f55eea6b9872f3810c8e60a1d3597dabf5421c3eb2f27fca37a23eb397400bde3a3c53e7e0b40d1edd7b2cc8cbc9302e088eeb4f3f23f2477e4eaa5e581f1d73621fffe6c9028ea2199332f45435efae52ba5ccb7a00fecfa66a3a298e118eb1c3f3f4dd7a5aa4ea9cc36e04e4b938d8df8ee0411d95de51cb987f82a8495c3ec58b1d743a68ff30298383b9dc14f8a0f0c2395c8716c051448dc3535de39b6b3a7926895e17e2df2904bd53b2d54a653d3fcdb4f7b3d9f43457a8e63fd37044525868026cfe71f97", 0x1000}}, 0x1006) 2.901228526s ago: executing program 1 (id=29): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000012000100"], 0x48}, 0x1, 0x0, 0x0, 0x20040812}, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000100), &(0x7f00000001c0)='./file1\x00', 0x8, 0x3) getdents(r1, &(0x7f0000000080)=""/32, 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004080)={&(0x7f0000003dc0)=@delpolicy={0x58, 0x14, 0x3f1fc60a99b7c84f, 0x70bd2a, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e23, 0xfff7, 0x4e20, 0x5, 0xa, 0x20, 0x20, 0x32}, 0x6e6bb4, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x100}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r5 = userfaultfd(0x801) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x60, 0x13, r6, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0xfffffeb1) 2.602912614s ago: executing program 1 (id=32): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xe, 0x2}}}, 0x24}}, 0x20080000) r0 = socket$netlink(0x10, 0x3, 0x0) (async) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00431b000000000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x845}, 0x4040014) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) 2.3812124s ago: executing program 1 (id=33): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040), 0x1, 0x44a, &(0x7f0000000880)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) r1 = io_uring_setup(0x7c91, &(0x7f0000000180)={0x0, 0x0, 0x2}) io_uring_setup(0x75e5, &(0x7f00000000c0)={0x0, 0x0, 0x22, 0x0, 0x0, 0x0, r1}) chdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="20030b"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_matches\x00') readlinkat(r3, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000540)=""/76, 0x4c) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00030c03db8f81640845fb83c921"], 0x0, 0x0, 0x0}, 0x0) 774.94154ms ago: executing program 3 (id=40): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0xdddd0000, 0x118000, 0x1}) (async, rerun: 64) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000001080)={0x30000, 0x121000, 0x1}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0xeeee0000, 0x5000}) 761.297141ms ago: executing program 3 (id=41): r0 = inotify_init1(0x800) read(r0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) ppoll(&(0x7f00000000c0)=[{r2, 0x188}], 0x1, 0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0x5, 0x7fff0004}]}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x80040, 0x54) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (rerun: 64) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010001000000000002000500", @ANYRES32=0x0, @ANYBLOB="040005000000000010000100000000002000"], 0x2c, 0x3) (async, rerun: 64) getxattr(&(0x7f0000002a80)='./file0\x00', &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async, rerun: 64) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x2) 732.456892ms ago: executing program 3 (id=42): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x0) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x800) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180)) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r6 = request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='+}\'\x00', r5) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @auto=[0x37, 0x5d, 0x37, 0x38, 0x66, 0x66, 0x39, 0x37, 0x65, 0x30, 0x5b, 0x65, 0x64, 0x61, 0x61, 0x65]}, &(0x7f0000000380)={0x0, "207ea4f2faf610283db6fadc592269848b3d57574d29de9f2174460493b20c9fb75490bef76668fcaece0ac685cc535e90f24994da4789a0c6bd74f9d0ad0d02", 0x3f}, 0x48, r6) fcntl$getownex(r2, 0x10, &(0x7f0000000400)={0x0, 0x0}) sched_setaffinity(r7, 0x8, &(0x7f0000000440)) fcntl$setown(r3, 0x8, r7) socket$inet6(0xa, 0xa, 0xd) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r8, 0x80047453, &(0x7f0000000480)) r9 = socket(0x15, 0xa, 0x6e5) sendmsg$AUDIT_SIGNAL_INFO(r9, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x3f2, 0x200, 0x70bd27, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x200008c4}, 0x1) truncate(&(0x7f00000005c0)='./file0\x00', 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r9) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000680)={'syztnl1\x00', r1, 0x10, 0x700, 0x0, 0xfffffffe, {{0x19, 0x4, 0x2, 0x0, 0x64, 0x64, 0x0, 0x90, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x24, 0x47, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x6d6}, {@local, 0x72ed4c51}, {@multicast2, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @lsrr={0x83, 0x27, 0xe7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty, @loopback, @remote, @broadcast, @empty, @empty, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'tunl0\x00', r1, 0x20, 0x7, 0x7, 0xe2b, {{0x18, 0x4, 0x2, 0x3f, 0x60, 0x64, 0x0, 0x0, 0x4, 0x0, @remote, @loopback, {[@cipso={0x86, 0x44, 0x3, [{0x1, 0xf, "89b9a9c1f966a4937dfb6caae5"}, {0x6, 0xe, "6748a68c3961b782f0275a9e"}, {0x0, 0x12, "30889826c10fe6ebfddb8e07922c1c6e"}, {0x1, 0xf, "9e09406da4b4306a9ee2ad24aa"}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2e0, r11, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40040}, 0x4000041) get_robust_list(r7, &(0x7f0000000d40)=&(0x7f0000000d00)={&(0x7f0000000c40)={&(0x7f0000000c00)}, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)}}, &(0x7f0000000d80)=0x18) fcntl$setlease(r10, 0x400, 0x2) recvmsg$unix(r9, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000dc0)=""/60, 0x3c}, {&(0x7f0000000e00)=""/135, 0x87}, {&(0x7f0000000ec0)=""/171, 0xab}, {&(0x7f0000000f80)=""/188, 0xbc}, {&(0x7f0000001040)=""/28, 0x1c}, {&(0x7f0000001080)=""/169, 0xa9}, {&(0x7f0000001140)=""/28, 0x1c}, {&(0x7f0000001180)=""/127, 0x7f}, {&(0x7f0000001200)=""/225, 0xe1}], 0x9, &(0x7f00000013c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x2000) ioctl$PPPIOCGCHAN(r8, 0x80047437, &(0x7f00000014c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001540)={'gre0\x00', &(0x7f0000001500)={'gre0\x00', r12, 0x8, 0x80, 0x101, 0x9, {{0x6, 0x4, 0x3, 0x33, 0x18, 0x68, 0x0, 0xff, 0x0, 0x0, @private=0xa010100, @broadcast, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001640)={'sit0\x00', &(0x7f0000001580)={'erspan0\x00', r15, 0x700, 0x8, 0x4, 0x3, {{0x26, 0x4, 0x3, 0x36, 0x98, 0x67, 0x0, 0x3, 0x4b34d92341d373d5, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0x0, [{@empty, 0x5}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @cipso={0x86, 0x21, 0xffffffffffffffff, [{0x0, 0xe, "d001828da4b52d18458548fc"}, {0x3, 0xb, "12117d41edb5ba5300"}, {0x0, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0x3f, 0x3, 0x1, [{@rand_addr=0x64010100, 0x63}, {@local, 0x9}, {@private=0xa010102, 0x2}, {@loopback, 0x401}]}, @rr={0x7, 0x17, 0x52, [@broadcast, @remote, @broadcast, @private=0xa010102, @broadcast]}, @noop, @generic={0x88, 0x9, "a0a9789f3f8b9d"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x20, 0x5, 0x3, 0x5, 0x1240, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) 585.779375ms ago: executing program 3 (id=43): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a0000000000006111500000000000180000000000000000000000000000009500a40000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a0000000000006111500000000000180000000000000000000000000000009500a40000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r1, r5, 0x0, 0x0, @val=@netkit}, 0x1c) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r6, 0x7}, 0x8) (async) r7 = bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r6, 0x7}, 0x8) mknodat$null(r7, &(0x7f0000000080)='./file0\x00', 0x2000, 0x103) (async) mknodat$null(r7, &(0x7f0000000080)='./file0\x00', 0x2000, 0x103) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000400000002000000000000d54a308a000c000c400000000000000003"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}, 0x1, 0x0, 0x0, 0xc004054}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}, 0x1, 0x0, 0x0, 0xc004054}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f0000000240)={[{@fat=@flush}, {@utf8}, {@uni_xlate}, {@utf8}, {@utf8}, {@numtail}, {@shortname_lower}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@uni_xlateno}, {@fat=@dos1xfloppy}, {@rodir}, {@uni_xlate}, {@fat=@sys_immutable}]}, 0xf5, 0x2f0, &(0x7f0000000f80)="$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") 581.999445ms ago: executing program 0 (id=45): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_async', 0x40202, 0x145) write$tcp_mem(r0, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x824}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xffd, 0x3, 0x8058f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000000000000711818000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="ffff00"/20, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="040000000000003901b6707d90520400000039e8cd01000100000000000000008af9000000000000000000"], 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_async', 0x40202, 0x145) (async) write$tcp_mem(r0, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x824}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xffd, 0x3, 0x8058f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000000000000711818000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="ffff00"/20, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="040000000000003901b6707d90520400000039e8cd01000100000000000000008af9000000000000000000"], 0x50) (async) 564.969446ms ago: executing program 0 (id=46): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) (async) pselect6(0x40, &(0x7f0000000440)={0x2, 0xffffffffffffffff, 0x10000, 0xffff, 0x200, 0x9, 0x3, 0xfffffffffffffffd}, &(0x7f0000000480)={0x9, 0x8, 0x2, 0x9, 0x2, 0x80000001, 0x80000000}, 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0xc2) write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x5, 0x4, 0x408, 0x8}}, 0x20) (async, rerun: 64) setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100), 0x0, 0xfffffcef, 0x0) (async, rerun: 64) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) (async, rerun: 64) read$FUSE(r0, &(0x7f0000001100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003140)={0x0, 0x0}, &(0x7f0000003180)=0xc) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0), 0xc009, &(0x7f00000002c0)=ANY=[@ANYBLOB="6664aa07bdcaf7ecfa37133d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000001600,smackfsdef=%,func=PATH_CHECK,fsname=#.,euid<', @ANYRESDEC=0x0, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB=',dont_measure,\x00']) 564.622676ms ago: executing program 0 (id=47): setreuid(0xffffffffffffffff, 0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fb4a4425211f000009001f0070687930000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x4018880}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x48, 0x37, 0x80, 0x9}, {0x6, 0x6, 0x2, 0x57c}]}, 0x10) 532.340827ms ago: executing program 0 (id=48): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x80}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0xd}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) readv(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/4086, 0x1000}], 0x1000000000000034) 526.291597ms ago: executing program 3 (id=49): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000140), 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x1, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x7e99a}, [@IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) 523.396257ms ago: executing program 3 (id=50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b00073f861a88f1c600000000008100", 0x12}, {&(0x7f0000000380)="b7000018", 0x4}], 0x2) syz_usb_connect(0x3, 0x5a, &(0x7f0000000080)=ANY=[@ANYRES8], 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 521.465937ms ago: executing program 0 (id=51): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) r3 = socket(0x1, 0x803, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1e00, 0xc, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x6, 0x1, @mcast2, 0x6}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9587, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x428}], 0x1, 0x0, 0x0, 0x2c}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x38c93d85b75af3de}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd0, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001400b59500000000fedbdf250a7818fe", @ANYRES32=r6, @ANYBLOB="1400020800000000000000000000ff00000101011400010000000000000000000000000000000001"], 0x40}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@abort}]}, 0x1, 0x548, &(0x7f00000008c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x2, 0x10010, r9, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000f00)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff"]) r10 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x3261e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 456.236898ms ago: executing program 4 (id=52): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) (async) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 365.082871ms ago: executing program 0 (id=53): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @var={0x1, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000300)=""/209, 0x4f, 0xd1, 0x2}, 0x20) syslog(0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x198) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7f, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xb4, 0x85, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="602328000000280483efb97130f0187ff0479c479c37f525cde38bf7914077366b1696b7695ada49aa116d1b7af474f7f65cb4e886c55ce3c23da34c83867da2b3334e13f044717e42fb5bd9e4f78b63da9a33a1f13581bb497b2e271e9295c15c32fd5644b3858d913aedb6945ba5556c1805bee04538835a60008787de3e276337ba9028d173de6fd949b4deba27c08efb"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000600)={0x2c, &(0x7f0000000280)={0x0, 0x22, 0x4b, {0x4b, 0x7, "a749e14daaecc3a4a2c6ad73e73d1d360b5311c6597d76156f386f5e3079b54f3306446510ef47b64ca44097b8d104d5135d5de01299c6ef419489a0f5f510a998fd400c82048513a6"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000000500)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0xa, 0x7}, @generic={0x1f, 0x10, 0x3b49b24fc0b068e8, "0a086638cb938b10e5f4f04b996cd83be51e2cb756887fb927cd3253"}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x15, 0x4, 0x7ff, 0xf, 0x4, [0x3f00, 0x0, 0xff00, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x0, 0x7, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x1, 0x3}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfd, 0x18, 0xff, 0x2, "694004a7", "5bf4624a"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x7, 0x0, 0x0, 0x2, 0xd0f0}}}, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x40, 0x9, 0xe2, "36599afbacf03f6627bb18fd73ec781c240228259f02779db3a175af1f4b901da7ce16bb61490bab6a3ae1ea0f8df149eb2e3bca7bedddfef5507f860feb948803c9744d14f7bb9536af36b75267c6093514d8c60a09c4f7f69bd6c823e0d67c48df0eaf205aca68a8eebb18e2e93227caba84829290608a520512176f7f8713027475c3698c8024c9d9f6e6166016b575e456ad737c25ff93e855001243d3632bd197f4cd0d9a9081198a0d3dbdae3ad3481b59df007a7a0fb9b6edad1ec96bad11a5daa9b4aee528c2cfd43f1235272f1972e2487a1ac7a2c4d81764782aa1c309"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x16}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x20, 0x20, [0xf0]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000940)={0x40, 0xb, 0x2, "f0d1"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0xe}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000a00)={0x40, 0x17, 0x6}, &(0x7f0000000a40)={0x40, 0x19, 0x2, "e123"}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x5}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) getdents(r1, 0x0, 0x58) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) futimesat(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}) ioctl$TIOCGSID(r4, 0x5429, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @jmp={0x5, 0x1, 0x6, 0x6, 0x5, 0xffffffffffffffe0, 0x10}, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 364.180721ms ago: executing program 2 (id=54): init_module(&(0x7f0000000200)=ANY=[@ANYBLOB="7f454c460727090503000000a11ae8deba584574911e4839c0f769a80000000003000300070000009f00000042691f88df4102582207696a7ac8347c0000000040000000000009000000080038fb0000070001000300000000700300000008000000000000000000040000000000430000000000000004000000000000000001000000000000b7660000000000005ee179e50663ece08161949caa8dd56d005dc86145c1e6f375b29331d1a47ec13ccaf1cf994c07d38275103986e15a1b16183fec793fcbb1356255a215de6805c44362b115399b2fdd0900d3fde1b1e70ab471469080c88a253e803e8a1a1e2941fce24562710c95"], 0x78, 0x0) r0 = socket(0xa, 0x3, 0x87) (async) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r2}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1d) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) ioctl$KVM_TDX_CAPABILITIES(r3, 0xc008aeba, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x10ae) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071123600000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, r4, 0x8, 0x0, 0xb}, 0x94) 338.825512ms ago: executing program 2 (id=55): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80000) r1 = timerfd_create(0x4, 0x80000) close_range(r0, r1, 0x2) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000180)={0x7, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, &(0x7f0000000140)=[{0x12, 0x101, 0xee}, {0x14, 0x101, 0x9}, {0x2, 0x0, 0x8}]}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000200)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000240)) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/170, 0xaa}], 0x1) lseek(r0, 0x8, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x9, 0x90, 0x9, 0x69, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x8, 0xfffffffb, 0x4}}) setsockopt$inet6_mreq(r2, 0x29, 0x2, &(0x7f0000000440)={@loopback, r5}, 0x14) fsetxattr(r0, &(0x7f0000000480)=@known='system.advise\x00', &(0x7f00000004c0)='/dev/vhost-vsock\x00', 0x11, 0x3) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2fc, 0x12, 0x8, 0x70bd2b, 0x25dfdbfc, {0x23, 0x3, 0x0, 0xf, {0x4e21, 0x4e24, [0x4, 0x8, 0x7, 0x8000], [0x0, 0xa, 0x2, 0x8], r5, [0xb, 0x380d]}, 0xfd3, 0x7ff}, [@INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "1b209642ed286b6bb9fcb61183f833c0793ebee9606d097e90c7789ef34d7e3af5860d6800f67c96d7171669d9c4261950f0bd844c7237e8446a2fb6bc1be4288a680c3e83fe27fd9d"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "424cf385eff7b04596305be0ea5abbac3d0e972fb2ed02f025157cc1b86ccde1bd2cd50e8d8e6b84c82b90939239bf6c679981feba6043b60813667e97d9f3bdcc75f6ea6914fbdd3a57ea89371b5ad75c929a4e8ba7506d7b5dd1b6422e28870520ab9e077fb3"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "dba26fe5c4aaaa8dfc207c77fbc61ace59d112d523a7b1636fecaf875c3bba1b83576146c2b7e0634b6277143b365c21432f897dd7d95fa33cafd0e7eb33d7706997bfeeda8d3edf9c56a520109ec25a6f10653ee1c5965675bcb769a0be6df63474061d4e5d"}, @INET_DIAG_REQ_BYTECODE={0xc7, 0x1, "5dc4db7d7ff0a37be46cbd5eba12bdcf4998bf3ce1a913e31bf44ea0eea696907f69cf7ae037db72a7cc4079dd24fc1f3ce62973679eae150067ae12165996fade3cf29a12dcbac988a0eae4171452a480b98c70f127edce5b5c44c3a50e42730859e000e864db82a257630fb9912d4bfd58fd895afcc612bdb99c81990c5ac23b9148ace73f58e45db624d59926216f20c9228b5f8ebc107f2f3921cab16dedfec6320c9cad459fc3a736a6ab2fd742bbc2bc0c612aa316c311cfdf086a5f96927301"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "9b203da2418e2740255833ba210c9e84287fbe5aadca97c87936eff95116ac6184bbd4d29eb89a0591cc7fe9f6793a5f14b0192a61e2f48fdaae3b7e1bbf5be4c8d34fa7fac9a8f67cc095ce4f42fd6dd7999fa5e0f4e24ffff1d70c258a50131b541b31ecb4f949d62e2eadb181f7923e0e2ea14890b61bf2f7ac6b9b5f2854be500e8020d726c157dae6e79017af509509eada93aa2abb9723653418403dbf19e09036ddf786de38109c1ccc8d66ebaf95e70ee08fcb17760e2d2f"}]}, 0x2fc}, 0x1, 0x0, 0x0, 0xc000}, 0x48811) syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r2) r6 = getpid() r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f0000000900)=0x7) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xae}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) pread64(r4, &(0x7f0000000a40)=""/148, 0x94, 0xfffffffffffffffa) sched_setaffinity(r6, 0x8, &(0x7f0000000b00)=0xac4) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, &(0x7f0000000b40)=""/123, &(0x7f0000000bc0)=0x7b) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000c00)={0x43, 0x4, 0x2}, 0x10) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000c40)) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sync_file_range(r9, 0x0, 0x5, 0x5) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001280)={0x0, 0x3, 0x6}) 311.151562ms ago: executing program 2 (id=56): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0xa10c14, &(0x7f0000000040)={[{@uni_xlate}, {@utf8no}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@numtail}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}, {@utf8no}]}, 0x81, 0x2a6, &(0x7f0000000180)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/59, 0x5e) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x20040014) 144.239106ms ago: executing program 2 (id=57): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@dioread_nolock, 0x4a}, {@debug}, {@errors_continue}, {@noquota}, {@debug}, {@usrjquota, 0x22}], [], 0x2c}, 0x84, 0x4d5, &(0x7f0000001bc0)="$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") mount(0x0, &(0x7f00000009c0)='.\x00', 0x0, 0x22be836, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0x1d9442, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x45}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={0x100000, 0x0, 0x20000}, 0x20) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setregid(0xee01, 0x0) setregid(0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r6, 0x4000}], 0x1, &(0x7f0000000200), &(0x7f0000000240)={[0x7f]}, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x800455c9, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/78, 0x4e}, {&(0x7f0000001580)=""/223, 0xdf}], 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) 133.225897ms ago: executing program 2 (id=58): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x31, &(0x7f0000000440)={0x32, 0x7f, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async) mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x2000200, &(0x7f0000000240)={[{@prjquota}]}, 0x8, 0x51f, &(0x7f0000000c40)="$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") (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000430893eff3fe4c0dc3e20b9a0d76b50619e537805b85c990d3d57768dd9adab83510342001edc1fc9ab1ad22459726c5db7d0910818b1c7bbc654e2f217af3f0f4f226acb1bd7c62937d832222510d0e38b93df88d46933e32583edcf32e553735708c4e0b50f331182b105f31e35174668cee2035eee10e5df460a6bc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) (async) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x0) accept(r2, 0x0, &(0x7f00000002c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 110.958417ms ago: executing program 4 (id=59): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaf9) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x1, 0x4, 0xffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000080)=0xa) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000140)=0xfffffe01, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000280)="33032000ffff140000007ef52f555f2a0c0900000000000000f786dd3bfafffffffffffffff47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x62, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @multicast2}, &(0x7f0000000180)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x10000, 0x4000004, 0x7, 0x4002a, r0, 0x349, '\x00', r4, r0, 0x3}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x7, 0x1, r5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000840), &(0x7f0000000340)=r5}, 0x20) close(r5) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f0000000900)}, 0x20) 56.754489ms ago: executing program 2 (id=60): setresgid(0xee00, 0x0, 0xee00) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(0xee00, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x2000080}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010700000000fddbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="08002cc1"], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x40) r5 = dup2(r1, r1) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000140)={[{@nodioread_nolock}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_err_ignore}]}, 0x1, 0x54e, &(0x7f0000000880)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000083c0)='./file2\x00', 0x0, 0x100) utime(&(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x309, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x24008404) 38.122609ms ago: executing program 4 (id=61): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000013da0000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031, 0x80}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0xd}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x800) readv(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/4086, 0x1000}], 0x1000000000000034) 0s ago: executing program 1 (id=62): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[@nested_vmlaunch={0x12f, 0x18, 0x3}, @uexit={0x0, 0x18, 0x22}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xef, 0x3, 0x6, 0x2}}, @code={0xa, 0x64, {"36f344a467f0806d0000b9bc0800000f32b9800000c00f3235004000000f30f20f01dc0f009798000000420f00dbc74424007dd80000c744240249000000c7442406000000000f011c240fc758f964440f2125"}}], 0xcc}) syz_open_dev$tty1(0xc, 0x4, 0x1) splice(r0, &(0x7f00000000c0), r1, &(0x7f0000000240)=0x8, 0x110, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000ac0)="f6", &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000080)="20df", 0x0}, 0x20) unshare(0x22000400) r3 = timerfd_create(0x1, 0x80000) timerfd_settime(r3, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/make-it-fail\x00', 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) write(r4, 0x0, 0x0) syz_usb_connect(0x2, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003a146a908dd043190e6280102030109023e0001070700080904300300020a0000052406000005240002000d02000000c80000001009000c112412"], &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.947622][ T30] audit: type=1400 audit(1785704400.314:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 23.025844][ T30] audit: type=1400 audit(1785704407.464:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.029701][ T277] cgroup: Unknown subsys name 'net' [ 23.049593][ T30] audit: type=1400 audit(1785704407.464:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.077717][ T30] audit: type=1400 audit(1785704407.504:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.078372][ T277] cgroup: Unknown subsys name 'devices' [ 23.249576][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.255311][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.395818][ T30] audit: type=1400 audit(1785704407.844:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.419910][ T30] audit: type=1400 audit(1785704407.844:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.448382][ T30] audit: type=1400 audit(1785704407.844:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.468181][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.481068][ T30] audit: type=1400 audit(1785704407.934:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.508080][ T30] audit: type=1400 audit(1785704407.934:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.546771][ T30] audit: type=1400 audit(1785704407.994:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.572786][ T30] audit: type=1400 audit(1785704407.994:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.572826][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.461224][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.468652][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.476426][ T285] device bridge_slave_0 entered promiscuous mode [ 24.483770][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.490882][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.498649][ T285] device bridge_slave_1 entered promiscuous mode [ 24.549254][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.556429][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.564270][ T287] device bridge_slave_0 entered promiscuous mode [ 24.589673][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.597148][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.604844][ T287] device bridge_slave_1 entered promiscuous mode [ 24.636293][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.643498][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.651605][ T288] device bridge_slave_0 entered promiscuous mode [ 24.671556][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.679266][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.686748][ T288] device bridge_slave_1 entered promiscuous mode [ 24.753793][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.761037][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.768765][ T286] device bridge_slave_0 entered promiscuous mode [ 24.775805][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.783229][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.790825][ T289] device bridge_slave_0 entered promiscuous mode [ 24.798082][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.805186][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.812805][ T289] device bridge_slave_1 entered promiscuous mode [ 24.825776][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.833340][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.840825][ T286] device bridge_slave_1 entered promiscuous mode [ 24.905696][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.912905][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.920252][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.927388][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.018593][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.026096][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.033937][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.041022][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.049710][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.056776][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.064443][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.071794][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.092052][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.099549][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.106933][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.114529][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.122990][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.130787][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.139468][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.147071][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.182226][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.191268][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.198549][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.206606][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.215266][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.222426][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.230309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.238679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.267753][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.276072][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.285006][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.292437][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.300442][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.309104][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.316361][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.337459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.345948][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.355356][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.381066][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.388959][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.397301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.406450][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.414125][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.422524][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.431248][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.438929][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.447256][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.456310][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.463717][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.471658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.480422][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.487984][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.496682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.520657][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.529647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.538310][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.545455][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.554341][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.563487][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.572127][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.579300][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.586793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.594963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.603439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.611868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.620172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.628955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.637800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.646454][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.666263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.674658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.683256][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.691736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.700197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.708328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.716382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.727004][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.735371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.747007][ T289] device veth0_vlan entered promiscuous mode [ 25.758935][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.767342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.775927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.784450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.793911][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.801846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.809854][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.818263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.827216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.834976][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.854835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.863830][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.872547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.880930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.889433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.897305][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.905819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.914467][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.923666][ T285] device veth0_vlan entered promiscuous mode [ 25.932098][ T286] device veth0_vlan entered promiscuous mode [ 25.940045][ T288] device veth0_vlan entered promiscuous mode [ 25.947699][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.955344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.963446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.972294][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.983478][ T289] device veth1_macvtap entered promiscuous mode [ 25.996519][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.005539][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.015090][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.028631][ T287] device veth0_vlan entered promiscuous mode [ 26.039912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.048097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.056656][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.065012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.073387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.081943][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.091763][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.099512][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.108396][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.116934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.129332][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.138189][ T285] device veth1_macvtap entered promiscuous mode [ 26.146307][ T288] device veth1_macvtap entered promiscuous mode [ 26.156572][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.164787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.173194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.182108][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.202968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.213709][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 26.219380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.235053][ T286] device veth1_macvtap entered promiscuous mode [ 26.251703][ T287] device veth1_macvtap entered promiscuous mode [ 26.267132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.271914][ T308] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.278626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.301488][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.310025][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.319180][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.328370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.338511][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.346895][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.355555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.382300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.391827][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.401353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.410145][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.419043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.427814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.436482][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.445123][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.488997][ T315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 26.508583][ T315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 26.547282][ T318] loop0: detected capacity change from 0 to 512 [ 26.569358][ T319] loop3: detected capacity change from 0 to 4096 [ 26.609368][ T319] EXT4-fs (loop3): Test dummy encryption mode enabled [ 26.616274][ T319] EXT4-fs (loop3): Ignoring removed orlov option [ 26.627520][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.691106][ T324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 26.706239][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.724882][ T324] device bridge_slave_1 left promiscuous mode [ 26.731420][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.755187][ T318] EXT4-fs (loop0): Test dummy encryption mode enabled [ 26.853389][ T318] EXT4-fs (loop0): Ignoring removed oldalloc option [ 26.877601][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 26.899546][ T319] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 27.034778][ T318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.1: iget: bad extra_isize 90 (inode size 256) [ 27.038148][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 27.059411][ T318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1: error while reading EA inode 11 err=-117 [ 27.061239][ T319] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 27.073556][ T318] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 27.094379][ T318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.1: iget: bad extra_isize 90 (inode size 256) [ 27.108496][ T318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1: error while reading EA inode 11 err=-117 [ 27.123752][ T318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.1: iget: bad extra_isize 90 (inode size 256) [ 27.127709][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.138653][ T318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1: error while reading EA inode 18 err=-117 [ 27.147891][ T26] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 27.160703][ T6] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 27.172596][ T318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #18: comm syz.0.1: iget: bad extra_isize 90 (inode size 256) [ 27.190972][ T318] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1: error while reading EA inode 18 err=-117 [ 27.206082][ T318] EXT4-fs (loop0): 1 orphan inode deleted [ 27.212331][ T318] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,noload,debug_want_extra_isize=0x000000000000005a,test_dummy_encryption=v1,oldalloc,min_batch_time=0x0000000000000080,stripe=0x0000000000000040,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 27.223035][ T319] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 27.271627][ T319] syz.3.4 (319) used greatest stack depth: 19712 bytes left [ 27.316602][ T334] ======================================================= [ 27.316602][ T334] WARNING: The mand mount option has been deprecated and [ 27.316602][ T334] and is ignored by this kernel. Remove the mand [ 27.316602][ T334] option from the mount to silence this warning. [ 27.316602][ T334] ======================================================= [ 27.353950][ T334] fuse: Bad value for 'fd' [ 27.367607][ T26] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 27.373581][ T334] loop0: detected capacity change from 0 to 128 [ 27.381156][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.394381][ T334] EXT4-fs (loop0): Unrecognized mount option "fsuuid=4û71c8b0-9d8b-626b-3d15-a1e87f73" or missing value [ 27.428203][ T26] usb 5-1: Product: syz [ 27.442919][ T26] usb 5-1: Manufacturer: syz [ 27.447646][ T26] usb 5-1: SerialNumber: syz [ 27.497626][ T6] usb 2-1: not running at top speed; connect to a high speed hub [ 27.514750][ T342] process 'syz.3.6' launched './file0' with NULL argv: empty string added [ 27.578115][ T6] usb 2-1: config 3 has an invalid interface number: 199 but max is 0 [ 27.611271][ T6] usb 2-1: config 3 has no interface number 0 [ 27.618232][ T343] fuse: root generation should be zero [ 27.628210][ T6] usb 2-1: config 3 interface 199 has no altsetting 0 [ 27.817517][ T6] usb 2-1: New USB device found, idVendor=050d, idProduct=0004, bcdDevice=7c.d9 [ 27.834988][ T346] loop2: detected capacity change from 0 to 40427 [ 27.837293][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.860033][ T6] usb 2-1: Product: syz [ 27.862896][ T346] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(150997504) blocks(1024) [ 27.864658][ T6] usb 2-1: Manufacturer: syz [ 27.864677][ T6] usb 2-1: SerialNumber: syz [ 27.875052][ T26] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 27.901896][ T26] usb 5-1: USB disconnect, device number 2 [ 27.907878][ T346] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 27.920752][ T346] F2FS-fs (loop2): invalid crc value [ 27.928832][ T346] F2FS-fs (loop2): Found nat_bits in checkpoint [ 27.982749][ T346] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 27.990096][ T346] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 27.997916][ T312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.032307][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 28.032322][ T30] audit: type=1400 audit(1785704412.484:146): avc: denied { read append open } for pid=345 comm="syz.2.9" path="/2/file0/memory.events.local" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.106007][ T361] attempt to access beyond end of device [ 28.106007][ T361] loop2: rw=2049, want=57344, limit=40427 [ 28.132688][ T361] attempt to access beyond end of device [ 28.132688][ T361] loop2: rw=2049, want=53248, limit=40427 [ 28.150805][ T361] attempt to access beyond end of device [ 28.150805][ T361] loop2: rw=2049, want=58640, limit=40427 [ 28.207833][ T6] cdc_subset: probe of 2-1:3.199 failed with error -22 [ 28.217250][ T6] usb 2-1: USB disconnect, device number 2 [ 28.237521][ T293] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.272113][ T287] attempt to access beyond end of device [ 28.272113][ T287] loop2: rw=2049, want=45104, limit=40427 [ 28.290659][ T30] audit: type=1400 audit(1785704412.734:147): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 28.321148][ T30] audit: type=1400 audit(1785704412.764:148): avc: denied { create } for pid=362 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.367536][ T30] audit: type=1400 audit(1785704412.764:149): avc: denied { shutdown } for pid=362 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.388476][ T30] audit: type=1400 audit(1785704412.764:150): avc: denied { write } for pid=362 comm="syz.4.14" path="socket:[16643]" dev="sockfs" ino=16643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.413002][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.425163][ T30] audit: type=1400 audit(1785704412.794:151): avc: denied { create } for pid=362 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.445250][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.457010][ T312] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 28.466734][ T30] audit: type=1400 audit(1785704412.894:152): avc: denied { mount } for pid=362 comm="syz.4.14" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 28.487662][ T293] usb 4-1: Using ep0 maxpacket: 16 [ 28.490402][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.503695][ T312] usb 1-1: config 0 descriptor?? [ 28.644016][ T30] audit: type=1400 audit(1785704413.084:153): avc: denied { block_suspend } for pid=366 comm="syz.2.13" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.671441][ T30] audit: type=1400 audit(1785704413.114:154): avc: denied { append } for pid=366 comm="syz.2.13" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.695044][ T30] audit: type=1400 audit(1785704413.114:155): avc: denied { create } for pid=366 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.718555][ T39] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 28.767590][ T293] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 28.777793][ T293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.785821][ T293] usb 4-1: Product: syz [ 28.790484][ T293] usb 4-1: Manufacturer: syz [ 28.795407][ T293] usb 4-1: SerialNumber: syz [ 28.989120][ T312] hid-led 0003:27B8:01ED.0001: item fetching failed at offset 3/5 [ 28.997177][ T312] hid-led: probe of 0003:27B8:01ED.0001 failed with error -22 [ 29.007508][ T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.043446][ T358] loop3: detected capacity change from 0 to 2048 [ 29.057679][ T39] usb 5-1: not running at top speed; connect to a high speed hub [ 29.088766][ T358] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.099893][ T358] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.127493][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.177489][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.205002][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 29.215246][ T39] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 29.287504][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 29.525330][ T377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 29.535384][ T377] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12'. [ 29.559406][ T39] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 29.569556][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 29.579754][ T39] usb 5-1: Product: syz [ 29.584309][ T39] usb 5-1: Manufacturer: syz [ 29.597747][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.742406][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.790000][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.812408][ T26] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.822790][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.848296][ T26] usb 3-1: config 0 descriptor?? [ 30.260352][ T372] netlink: 'syz.2.16': attribute type 13 has an invalid length. [ 30.617448][ T6] usb 2-1: device descriptor read/64, error -71 [ 30.700388][ T312] usb 1-1: USB disconnect, device number 2 [ 30.787745][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 30.794102][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 30.818061][ T26] usb 3-1: USB disconnect, device number 2 [ 30.877156][ T385] wireguard: wireguard0: Could not create IPv6 socket [ 31.080091][ T6] usb 2-1: device descriptor read/64, error -71 [ 31.357867][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.461487][ T401] loop2: detected capacity change from 0 to 256 [ 31.492163][ T401] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 31.627466][ T6] usb 2-1: device descriptor read/64, error -71 [ 31.647542][ T293] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.653706][ T411] loop3: detected capacity change from 0 to 512 [ 31.677666][ T293] usb 4-1: 2:1: All rates were zero [ 31.699792][ T293] usb 4-1: USB disconnect, device number 2 [ 31.747988][ T411] EXT4-fs (loop3): Test dummy encryption mode enabled [ 31.760644][ T415] loop1: detected capacity change from 0 to 512 [ 31.770444][ T409] loop0: detected capacity change from 0 to 40427 [ 31.771904][ T411] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.25: inode has both inline data and extents flags [ 31.790654][ T411] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.25: couldn't read orphan inode 15 (err -117) [ 31.803264][ T411] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 31.810439][ T409] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 31.824431][ T409] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 31.834315][ T409] F2FS-fs (loop0): invalid crc value [ 31.841862][ T409] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.852408][ T415] EXT4-fs (loop1): Test dummy encryption mode enabled [ 31.859897][ T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.884481][ T415] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.27: inode has both inline data and extents flags [ 31.902918][ T415] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.27: couldn't read orphan inode 15 (err -117) [ 31.915886][ T415] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 31.915899][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.975342][ T409] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 31.983314][ T424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.28'. [ 31.987649][ T409] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.068329][ T438] loop1: detected capacity change from 0 to 2048 [ 32.096499][ T286] attempt to access beyond end of device [ 32.096499][ T286] loop0: rw=2051, want=53248, limit=40427 [ 32.108379][ T286] attempt to access beyond end of device [ 32.108379][ T286] loop0: rw=2051, want=73728, limit=40427 [ 32.120940][ T286] F2FS-fs (loop0): Issue discard(6144, 6144, 512) failed, ret: -5 [ 32.120976][ T286] F2FS-fs (loop0): Issue discard(7168, 7168, 2048) failed, ret: -5 [ 32.147503][ T60] usb 3-1: device descriptor read/64, error -71 [ 32.155827][ T438] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 32.183459][ T438] netlink: 32 bytes leftover after parsing attributes in process `syz.1.29'. [ 32.313557][ T438] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 32.337673][ T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.360033][ T43] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 32.374679][ T43] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 32.387189][ T43] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.387189][ T43] [ 32.397521][ T43] EXT4-fs (loop1): Total free blocks count 0 [ 32.403535][ T43] EXT4-fs (loop1): Free/Dirty block details [ 32.409599][ T43] EXT4-fs (loop1): free_blocks=4096 [ 32.414840][ T43] EXT4-fs (loop1): dirty_blocks=32 [ 32.420091][ T43] EXT4-fs (loop1): Block reservation details [ 32.426182][ T43] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 32.432725][ T43] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 32.445842][ T43] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.445842][ T43] [ 32.521360][ T447] Zero length message leads to an empty skb [ 32.557531][ T60] usb 3-1: device descriptor read/64, error -71 [ 32.607456][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 32.727578][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 38, changing to 7 [ 32.738740][ T39] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 110, changing to 7 [ 32.847564][ T60] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.907564][ T39] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 32.916679][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.924792][ T39] usb 4-1: Product: syz [ 32.927715][ T6] usb usb2-port1: attempt power cycle [ 32.929310][ T39] usb 4-1: Manufacturer: syz [ 32.939757][ T39] usb 4-1: SerialNumber: syz [ 33.110964][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 33.110979][ T30] audit: type=1400 audit(1785704417.554:188): avc: denied { write } for pid=451 comm="syz.0.34" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.147549][ T60] usb 3-1: device descriptor read/64, error -71 [ 33.347533][ T6] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 33.477655][ T39] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 33.497518][ T39] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 33.521925][ T39] usb 4-1: USB disconnect, device number 3 [ 33.537546][ T60] usb 3-1: device descriptor read/64, error -71 [ 33.557551][ T6] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 33.565967][ T6] usb 2-1: config 0 has no interface number 0 [ 33.572305][ T6] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.583680][ T6] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.593789][ T6] usb 2-1: config 0 interface 1 has no altsetting 0 [ 33.600631][ T6] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 33.609712][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.618600][ T6] usb 2-1: config 0 descriptor?? [ 33.657540][ T60] usb usb3-port1: attempt power cycle [ 33.737883][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.996948][ T30] audit: type=1400 audit(1785704674.441:189): avc: denied { associate } for pid=467 comm="syz.0.39" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.019659][ T30] audit: type=1400 audit(1785704674.441:190): avc: denied { ioctl } for pid=461 comm="syz.3.36" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.045616][ T30] audit: type=1400 audit(1785704674.441:191): avc: denied { set_context_mgr } for pid=461 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 34.065984][ T30] audit: type=1400 audit(1785704674.471:192): avc: denied { map } for pid=461 comm="syz.3.36" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.092505][ T450] loop1: detected capacity change from 0 to 512 [ 34.097625][ T60] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.118992][ T450] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.33: inode #1: comm syz.1.33: iget: illegal inode # [ 34.134746][ T450] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.33: error while reading EA inode 1 err=-117 [ 34.147906][ T450] EXT4-fs (loop1): 1 orphan inode deleted [ 34.153764][ T450] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 34.165591][ T30] audit: type=1400 audit(1785704674.621:193): avc: denied { mount } for pid=449 comm="syz.1.33" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.209096][ T30] audit: type=1400 audit(1785704674.651:194): avc: denied { create } for pid=483 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.236018][ T30] audit: type=1400 audit(1785704674.681:195): avc: denied { accept } for pid=488 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.256985][ T30] audit: type=1400 audit(1785704674.691:196): avc: denied { write } for pid=488 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 34.276674][ T30] audit: type=1400 audit(1785704674.691:197): avc: denied { ioctl } for pid=488 comm="syz.3.42" path="socket:[15974]" dev="sockfs" ino=15974 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.307463][ T60] usb 3-1: device descriptor read/8, error -71 [ 34.318590][ T492] loop3: detected capacity change from 0 to 128 [ 34.338169][ T492] FAT-fs (loop3): bogus number of reserved sectors [ 34.344837][ T492] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 34.356046][ T492] FAT-fs (loop3): Can't find a valid FAT filesystem [ 34.453866][ T516] loop0: detected capacity change from 0 to 512 [ 34.460798][ T6] usbhid 2-1:0.1: can't add hid device: -71 [ 34.471076][ T6] usbhid: probe of 2-1:0.1 failed with error -71 [ 34.478844][ T6] usb 2-1: USB disconnect, device number 5 [ 34.493600][ T26] usb 5-1: USB disconnect, device number 3 [ 34.506991][ T516] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a32,abort,,errors=continue. Quota mode: writeback. [ 34.526613][ T516] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.597478][ T60] usb 3-1: device descriptor read/8, error -71 [ 34.610112][ T520] Invalid ELF header type: 22714 != 1 [ 34.639806][ T526] loop0: detected capacity change from 0 to 512 [ 34.659422][ T528] loop2: detected capacity change from 0 to 256 [ 34.697224][ T530] loop4: detected capacity change from 0 to 512 [ 34.707546][ T312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.717583][ T526] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.53: inode has both inline data and extents flags [ 34.732369][ T526] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.53: couldn't read orphan inode 15 (err -117) [ 34.744613][ T526] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 34.759371][ T526] syz.0.53 (pid 526) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 34.790994][ T530] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 34.807613][ T530] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.831535][ T536] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.52: directory missing '..' [ 34.875496][ T543] gretap0: refused to change device tx_queue_len [ 34.884303][ T543] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 34.942029][ T285] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 34.963941][ T285] ------------[ cut here ]------------ [ 34.970189][ T285] kernel BUG at fs/namei.c:2941! [ 34.975446][ T285] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 34.981634][ T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0 [ 34.989166][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 34.997528][ T312] usb 4-1: device descriptor read/64, error -71 [ 34.999430][ T285] RIP: 0010:may_delete+0x727/0x730 [ 35.011019][ T285] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 6a 2c f5 ff e9 75 fe ff ff e8 10 bd b5 ff 0f 0b e8 09 bd b5 ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 f1 bc [ 35.030928][ T285] RSP: 0018:ffffc900009f7cc8 EFLAGS: 00010293 [ 35.037323][ T285] RAX: ffffffff81b3f9d7 RBX: ffff888129ac6330 RCX: ffff888107d9e2c0 [ 35.045503][ T285] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 35.053520][ T285] RBP: ffffc900009f7d20 R08: 0000000000000003 R09: 0000000000000004 [ 35.061707][ T285] R10: dffffc0000000000 R11: fffff5200013ef78 R12: 1ffff11025358c66 [ 35.069798][ T285] R13: 0000000000000001 R14: ffff88810d3abe00 R15: dffffc0000000000 [ 35.077891][ T285] FS: 000055556d717500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.087239][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.094048][ T285] CR2: 000055556d742988 CR3: 0000000126faf000 CR4: 00000000003506a0 [ 35.102595][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.109273][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'. [ 35.110765][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.127618][ T285] Call Trace: [ 35.131105][ T285] [ 35.134242][ T285] vfs_rmdir+0x2f/0x450 [ 35.138437][ T285] ? incfs_kill_sb+0xec/0x210 [ 35.143162][ T285] incfs_kill_sb+0xfe/0x210 [ 35.147841][ T285] deactivate_locked_super+0xa0/0x100 [ 35.153326][ T285] deactivate_super+0xaf/0xe0 [ 35.158023][ T285] cleanup_mnt+0x44f/0x500 [ 35.162458][ T285] __cleanup_mnt+0x19/0x20 [ 35.166902][ T285] task_work_run+0x127/0x190 [ 35.171625][ T285] exit_to_user_mode_loop+0xd0/0xe0 [ 35.176847][ T285] exit_to_user_mode_prepare+0x87/0xd0 [ 35.182500][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 35.188078][ T285] do_syscall_64+0x58/0xa0 [ 35.192507][ T285] ? clear_bhb_loop+0x50/0xa0 [ 35.197379][ T285] ? clear_bhb_loop+0x50/0xa0 [ 35.202246][ T285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.208175][ T285] RIP: 0033:0x7fb7fa00d257 [ 35.212702][ T285] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 35.232465][ T285] RSP: 002b:00007fffa9834028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 35.241002][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb7fa00d257 [ 35.249009][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa98340e0 [ 35.257102][ T285] RBP: 00007fffa98340e0 R08: 00007fffa98350e0 R09: 00000000ffffffff [ 35.265193][ T285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa98351d0 [ 35.273279][ T285] R13: 00007fb7fa0a245c R14: 000000000000879d R15: 00007fffa98362a0 [ 35.281625][ T285] [ 35.284755][ T285] Modules linked in: [ 35.292327][ T543] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 35.300592][ T543] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 35.303628][ T285] ---[ end trace 6e33858122cf3d10 ]--- [ 35.310103][ T543] EXT4-fs (loop2): orphan cleanup on readonly fs [ 35.316411][ T285] RIP: 0010:may_delete+0x727/0x730 [ 35.322583][ T543] EXT4-fs (loop2): ext4_process_orphan: truncating inode 16 to 9000 bytes [ 35.326762][ T285] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 6a 2c f5 ff e9 75 fe ff ff e8 10 bd b5 ff 0f 0b e8 09 bd b5 ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 f1 bc [ 35.337327][ T543] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.60: bg 0: block 15: invalid block bitmap [ 35.356879][ T285] RSP: 0018:ffffc900009f7cc8 EFLAGS: 00010293 [ 35.368126][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.369299][ T285] [ 35.374862][ T543] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 35.382495][ T285] RAX: ffffffff81b3f9d7 RBX: ffff888129ac6330 RCX: ffff888107d9e2c0 [ 35.384746][ T543] EXT4-fs (loop2): 1 truncate cleaned up [ 35.393941][ T285] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 35.416275][ T543] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,dioread_lock,nouid32,data_err=ignore,,errors=continue. Quota mode: none. [ 35.416658][ T285] RBP: ffffc900009f7d20 R08: 0000000000000003 R09: 0000000000000004 [ 35.444645][ T285] R10: dffffc0000000000 R11: fffff5200013ef78 R12: 1ffff11025358c66 [ 35.453750][ T285] R13: 0000000000000001 R14: ffff88810d3abe00 R15: dffffc0000000000 [ 35.462853][ T285] FS: 000055556d717500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.472823][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.474409][ T543] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 35.479941][ T285] CR2: 0000200000006680 CR3: 0000000126faf000 CR4: 00000000003506a0 [ 35.496320][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.505007][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.513166][ T285] Kernel panic - not syncing: Fatal exception [ 35.519793][ T285] Kernel Offset: disabled [ 35.524508][ T285] Rebooting in 86400 seconds..