last executing test programs: 4m19.936930418s ago: executing program 32 (id=24): mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x4, 0x8001) 4m18.27917156s ago: executing program 33 (id=29): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x8490}}, 0x20}}, 0x4000880) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x7, 0x68, 0xfd, 0x40, 0x781, 0x55e8, 0x712b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x3, 0x0, 0x25, "", [{{0x9, 0x4, 0xc9, 0x3, 0x0, 0x4d, 0x99, 0x6d, 0x1}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 4m17.49031761s ago: executing program 34 (id=36): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setuid(0xee01) (fail_nth: 2) 4m7.315082144s ago: executing program 35 (id=98): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) epoll_create(0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@lazytime}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") 3m31.655459366s ago: executing program 36 (id=261): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)={0x2, 0x0, [{0x60000}, {0x0, 0x22, &(0x7f0000000000)=""/34}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000003640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) recvmmsg(r1, &(0x7f0000004880)=[{{0x0, 0x0, 0x0}, 0x9}], 0x2102, 0x10000, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x800) sendto$packet(r4, &(0x7f0000000340)="5bd0365e0c584103125e3a771c6fb836fdb07c7d415a25230c35ff47", 0x1c, 0x45004, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 3m2.927794225s ago: executing program 37 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x3c) unshare(0x20040600) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000007a40)=ANY=[@ANYBLOB="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"], 0xfd, 0x5528, &(0x7f0000007b80)="$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") r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x80, 0x18000}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x1) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r1, 0xee00, 0xee00) capset(&(0x7f00000001c0)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000200)={0x80, 0xa, 0x7, 0x7, 0x7, 0xffffffff}) mount$9p_unix(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x4818, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0xe8) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_fuse_handle_req(r2, &(0x7f0000000bc0)="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", 0x2000, &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlink(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='.\x00') socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) 2m56.267767891s ago: executing program 38 (id=423): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(r3, 0x9, 0x0, &(0x7f0000000380)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000180001801400018008001100ac1414aa08000200ac1414aa1c001080080002400000c8fd0800014000000911080001400000000204000680"], 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) listen(r0, 0xfffffffe) 2m53.366248074s ago: executing program 39 (id=437): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000480)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-7,shortname=win95,shortname=win95,\x00\x00\x00\x00immutable,shortname=winnt,shortname=winnt,uni_xlate=1,check=normal,codepage=862,iocharset=cp932,nonumtail=0,rodir,iocharset=cp936,shortname=win95,utf8=0,\x00'], 0x2, 0x295, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x6) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_names\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100", @ANYRESHEX, @ANYRES64=r2], 0x0) 2m49.219621307s ago: executing program 40 (id=452): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @broadcast}, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x100, 0x82000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0x1}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x40002002}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0x6, 0x3, 0x7d, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0x20003, 0x8, 0x4c76, 0x10000, 0x242, 0x0, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0xfffffffe, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x7, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000004, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x129432f6, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x4, 0x8000, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xe84, 0x8, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0xd, 0x9, 0x2, 0x1, 0xfdffdffc, 0x2, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x9, 0x4, 0x5, 0xfffffffd, 0xff, 0x4, 0x8000, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xfffffffd, 0x1ef, 0x5, 0x8, 0x7, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x3, 0x400003, 0x6, 0x8, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1004, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x9, 0x1c, 0x9, 0x8, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x100b, 0xffffffff, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x5, 0xfffe, 0xa620, 0x1ccc, 0x5, 0x1, 0x6, 0x14c, 0x60aa, 0x6, 0xa, 0x1000, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x1622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x4, 0x30, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x31, &(0x7f0000000280)="b74560dc", 0x4) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20000000) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f000000cb00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004804}}, {{&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000b3613007adb4dd25740000293a5aa4550e3fd31c12b19f6b87d7c844e50036cf961f69df9f092aec6828ff54811fdf1650d5170c7db46b1c627446dcb181ddeb149c0511821f6ffb706030f27112db6dd1836a250dc822796f5e0657cede192812625634c024e143869455bae6f330ecff"], 0x18, 0x4008000}}], 0x2, 0x810) ioctl$NILFS_IOCTL_GET_BDESCS(r6, 0xc0186e87, &(0x7f0000000300)={&(0x7f00000001c0)=[{0x8, 0x6, 0x0, 0x7, 0x7fff}, {0x5, 0x0, 0x7ff, 0x2, 0x2}, {0x1, 0xa7, 0x6, 0x9, 0x1200000}, {0x2, 0x9, 0x3, 0x5, 0xfffffffb}, {0xffffffffffffffff, 0x804, 0xfff, 0x3, 0x5}, {0x6, 0x36fd, 0x4, 0x4, 0x80}, {0xffffffff80000001, 0x6b3, 0x2, 0xdca1, 0x81}], 0x7, 0x28, 0x1, 0x3}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xfffffffc}]}}]}, 0x38}}, 0x4c840) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000000)=0x30) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) fsmount(0xffffffffffffffff, 0x1, 0xf8) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 2m46.065325776s ago: executing program 41 (id=464): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) utime(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x6c, 0x0, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x20000050) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r0}}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000005c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41000000000000000290000003b000000", 0x30) 2m43.241997337s ago: executing program 42 (id=479): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x6, 0x1, @mcast2, 0x46}, 0x1c) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x9587, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x428}], 0x1, 0x0, 0x0, 0x2c}, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r5, r4, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d757b7"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000040)=ANY=[]}, {0x0, 0x0}, {0x0, 0x0}]}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xf3a, 0x1) tee(r6, r9, 0xf3a, 0x4) 2m37.676902236s ago: executing program 43 (id=501): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001080)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@rodir}, {@rodir}, {@rodir}, {@shortname_win95}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x300) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x0) getdents64(r0, &(0x7f0000010f40)=""/4096, 0x1000) 2m34.271494241s ago: executing program 44 (id=514): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x228) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@random={'user.', '+@,\x00'}, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/174, 0xae, 0x50000000) pread64(r0, &(0x7f0000000780)=""/185, 0xb9, 0x3c) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x808450, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x324, &(0x7f0000000600)="$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") 2m29.548008999s ago: executing program 45 (id=541): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getown(r0, 0x9) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000280)) listen(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c70f000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@random="1837f7f44a93", @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @empty}, "8ff57934ea79b45b"}}}}}, 0x0) 2m21.977506079s ago: executing program 46 (id=571): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/57, 0x39}, {0x0}], 0x2}, 0x3}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002780)=""/169, 0xa9}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000002d80)=[{0x0}, {&(0x7f0000002a00)=""/186, 0xba}], 0x2}, 0x401}, {{&(0x7f0000002ec0)=@ax25={{0x3, @null}, [@null, @null, @null, @remote, @bcast, @bcast, @bcast, @null]}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002f40)=""/130, 0x82}, {0x0}], 0x2}, 0xff1}, {{0x0, 0x0, 0x0}, 0x9}], 0x5, 0x2, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r3], 0x48}}, 0x404c054) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="88085f32", 0x4}], 0x1}, 0x80000) 2m18.406415138s ago: executing program 47 (id=585): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0xffffffffffffffa2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @local=@item_012={0x0, 0x2, 0x2, "2dab"}, @main=@item_012={0x0, 0x0, 0x9, '\b\x00'}, @local=@item_012={0x2, 0x2, 0x2, "0802"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @main=@item_4={0x3, 0x0, 0x2, "e416cc3b"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) 2m2.451593567s ago: executing program 48 (id=591): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7fe, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@remote, {0x0, 0xd, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x202}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e22, 0x5, 0x0, 0x0, 0x0, 0x29}, {@in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x5, 0xfffffffffffffff4}, {0xffffffffffffffff, 0x0, 0x9, 0xf7fffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0xfffffffe, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x100, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000100), 0x6004, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}, {@access_user}, {@cachetag={'cachetag', 0x3d, 'trans=fd,'}}, {@cachetag={'cachetag', 0x3d, '/:\x90\']}'}}, {@aname={'aname', 0x3d, '.-[&}((]{)*^,#(*\\*$!-#{'}}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x44) faccessat2(r6, &(0x7f0000000280)='./file1\x00', 0xf9d990febe49b200, 0x100) 1m57.618543078s ago: executing program 49 (id=694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) splice(r2, 0xffffffffffffffff, r2, 0x0, 0x375, 0xc) dup(r1) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x6, 0x4, 0x2, 0x15, 0x7c, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @multicast1, {[@generic={0x88, 0x2}]}}, {0x4e22, 0x4e23, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x3, "c4a1b8e01ba9a62c1c2e3cf577a8d851045ef41945f383ccf137201eb4dd7df2", "98994d19627a481b27e612cf41970f3f", {"00855f5dc8025460287d5461246a68a5", "66ea89cf5fc168040200"}}}}}}}}, 0x8e) 1m45.472391672s ago: executing program 50 (id=757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d074200080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x8000) syz_usb_disconnect(r1) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_connect$uac3(0x5, 0xdf, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x7104, 0x2202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x9, 0x80318c7c6ba4e45f, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x35, 0x9}, [@mixer_unit={0x9, 0x24, 0x5, 0x5, 0xd5, "7e643f8b"}, @multiply_unit={0xb, 0x24, 0xd, 0x7, 0x9, 0xe, 0x2}, @feature_unit={0x11, 0x24, 0x7, 0x2, 0x6, [0x2, 0xf, 0x5]}, @cluster_info_segment={0x6, 0x20, 0x7, 0xab, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0x8, 0x9d, "558b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x8, 0x1, {0xa, 0x25, 0x25, 0x7, 0x1, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x20, 0xc, 0x2, 0x7c, 0x14}, @as_header={0x17, 0x24, 0x1, 0x1a, 0x8, 0x2, 0x1001, 0x5, 0x1, 0x4, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x1, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfd, 0x3, 0x3, {0xa, 0x25, 0x25, 0x0, 0x4, 0x8}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x0, 0x16, 0x8, 0x10, 0x5}, 0x34, &(0x7f0000000540)={0x5, 0xf, 0x34, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x9, 0x68}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0xe6, "72d1023bc3809a20037ebbcc78865f46"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x5, 0x7}]}}) syz_usb_disconnect(r5) syz_usb_connect$midi(0x1, 0xde, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcc, 0x1, 0x1, 0x5e, 0x80, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x9, [@midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x0, 0x7, [{0x5, 0xf}, {0x2, 0x1}, {0x1, 0xf7}, {0xe, 0x4}, {0x68, 0x3}, {0x2, 0x80}, {0x0, 0x7}], 0x9}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}], [{{0x9, 0x5, 0x9, 0xc, 0x8, 0x9, 0x40, 0x7, {0x5, 0x25, 0x1, 0x1, "fe"}}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x4, 0x32, 0x2, {0xa, 0x25, 0x1, 0x6, "7a1968d19c01"}}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x8, 0x2, 0x40, {0xa, 0x25, 0x1, 0x6, "0be3c1ede7c2"}}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x4, 0x7, 0xfb, {0x10, 0x25, 0x1, 0xc, "089e1ff56a71fde1e5f05f83"}}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xb0, 0xcc, 0x7f, {0x11, 0x25, 0x1, 0xd, "7b7f26d365e797cb24f9b619cf"}}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xc, 0x1, 0x20, {0x13, 0x25, 0x1, 0xf, "0ee2347732a0a15aa9a424b4690114"}}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x7, 0x34, 0xc8, {0x12, 0x25, 0x1, 0xe, "52fec08d2e76e6ed9832b81b93dc"}}}]}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x40, 0x8, 0x9, 0x48, 0x10}, 0xc, &(0x7f0000000200)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x13, 0x6, 0x7, 0x8}]}, 0x2, [{0xb, &(0x7f0000000240)=@string={0xb, 0x3, "0dc52949cc7198b976"}}, {0x6b, &(0x7f0000000300)=@string={0x6b, 0x3, "f695323b388002d4cf58b5fcc36802d692f33d6cf7b926621e013f0223195737794e198bc7097148403e2611f70ec7a33e5253c72909c93a9f74495858c3150cc6a534dc3d0543440d057fbfb9afb9c573b7d5c64a79180a87c84dd800a11db87773d76ec738c0bb5b"}}]}) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1m34.35478269s ago: executing program 7 (id=817): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x88, 0x1, &(0x7f0000000000), 0x4) 1m34.077857677s ago: executing program 7 (id=820): r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000003c0)='.\x00', 0x5db) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x173) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) getdents64(r3, &(0x7f0000000080)=""/209, 0xd1) 1m33.939763671s ago: executing program 7 (id=822): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) close_range(r0, r1, 0x0) 1m33.16374092s ago: executing program 7 (id=826): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000600), 0x7, 0x4c6, &(0x7f0000000100)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x29, 0x3, 0x0, {0x6, 0x8, 0x0, 'lowerdir'}}, 0x29) io_cancel(0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1m32.37155288s ago: executing program 7 (id=829): r0 = socket$tipc(0x1e, 0x6, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080), &(0x7f0000000140)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x2, [@func={0xb, 0x0, 0x0, 0xc, 0x5}, @union={0xe, 0x2, 0x0, 0x5, 0x0, 0x2, [{0x3, 0x5, 0x1}, {0xa, 0x4, 0x7}]}, @union={0xb, 0x8, 0x0, 0x5, 0x0, 0x3, [{0xe, 0x2, 0x8000}, {0x5, 0x1, 0x2}, {0x5, 0x3, 0x401}, {0x1, 0x1, 0x2}, {0x2, 0x4}, {0x3, 0x3}, {0x5, 0x2, 0x6}, {0x3, 0x4, 0x3}]}]}}, 0x0, 0xb6, 0x0, 0x1}, 0x28) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x8, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x2, 0x0, 0x8, "008c"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) mremap(&(0x7f00002b5000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x12, "050ae6274da9bb8efa8fdbcfb55eaa12dd52"}, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x7f, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) 1m32.201433004s ago: executing program 7 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0xc5ab, 0x80}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x569}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0x2}]}, 0x7c}}, 0x40014) 1m32.201279374s ago: executing program 51 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0xc5ab, 0x80}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x569}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GENEVE_ID={0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0x2}]}, 0x7c}}, 0x40014) 1m25.903649242s ago: executing program 2 (id=858): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x10, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x4, {@empty, @mac=@dev, @dev, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x4, 0x76, 0xfdfef038}, {0x6, 0x25, 0x3, 0x6}]}, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010040}, 0x20000004) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) socket(0x10, 0x3, 0x0) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r3, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2404}}, 0x50) 1m25.066484592s ago: executing program 2 (id=862): syz_emit_ethernet(0x42, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x23, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @loopback, @broadcast}, @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x3, 0x9, 0x0, 0x3, 0x1, 0x8000, 0x2, 0x4e23, 0x4e24}, 0x0, 0x4}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed00c4, &(0x7f0000000180)={[{@noblock_validity}, {@resuid}, {@lazytime}, {@noload}, {@nogrpid}, {@dax}]}, 0xfe, 0x481, &(0x7f0000001180)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$netlink(0x10, 0x3, 0xa) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r1 = dup(r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) readv(r2, &(0x7f0000001480)=[{&(0x7f0000000100)=""/164, 0xa4}], 0x1) pselect6(0x40, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x400000000, 0x0, 0x0, 0x200, 0x80}, 0x0, &(0x7f0000000140)={0x18, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x0, 0x1981}, 0x0, 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0d1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) mmap$usbfs(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, r4, 0x336cacde) r6 = accept$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4001000, 0x6, 0x1000, 0x103a, 0x0, 0x0, 0xffffffff}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000) clock_gettime(0xfffffffffffffffe, 0x0) 1m23.96368725s ago: executing program 2 (id=868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000002100000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1m23.343639096s ago: executing program 2 (id=872): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2d, 0x2c, 0x2, 0x2, 0x5, 0xac, 0x5, 0x2, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000440)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@usrquota}, {@noauto_da_alloc}, {@grpjquota}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000001640)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x6, 0x11, r2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) write(r1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r4) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x22) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1m22.654959763s ago: executing program 2 (id=876): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000052000100000000000400000002000000040001"], 0x18}, 0x1, 0x0, 0x0, 0x4040044}, 0x4040) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000180)={0x7, 0x1002, 0x2, 0x52ca49be, 0x3, "043900f7ff0009000000f4ffff800bffffff00", 0x8, 0x1}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) 1m21.98763014s ago: executing program 2 (id=877): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x2, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/mem_sleep\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='s2id', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/pm_freeze_timeout\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/freeze_filesystems\x00', 0x1, 0x0) write(r3, &(0x7f0000000900), 0x0) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='mem', 0x3) listxattr(&(0x7f00000004c0)='./cgroup\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0) 1m21.97950547s ago: executing program 52 (id=877): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x2, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/mem_sleep\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='s2id', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/pm_freeze_timeout\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0\n\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/freeze_filesystems\x00', 0x1, 0x0) write(r3, &(0x7f0000000900), 0x0) close(r3) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000d00)='mem', 0x3) listxattr(&(0x7f00000004c0)='./cgroup\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], 0x0) 1m13.039063433s ago: executing program 5 (id=920): userfaultfd(0x80801) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b"], 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x800) socket$netlink(0x10, 0x3, 0x13) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003400)={0x0, &(0x7f0000002f40)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc00, 0x1, 0x1233, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x1fffef000, 0x2e8}}, @nested_load_syzos={0x136, 0x58, {0x1, 0x6, [@wr_crn={0x67, 0x20, {0x2, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x3}]}}, @rdmsr={0x66, 0x18, {0x812}}, @out_dx={0x6a, 0x28, {0x4c8c, 0x4, 0x8000}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x4, 0x8}}, @nested_load_syzos={0x136, 0x70, {0x3, 0xf, [@cpuid={0x64, 0x18, {0x8, 0x3}}, @rdmsr={0x66, 0x18, {0xbe5}}, @nested_amd_invlpga={0x17d, 0x20, {0x6000, 0xe943}}]}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x47, 0x0, 0x60a1b8fc, 0x2}}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_load_syzos={0x136, 0x58, {0x2, 0x1, [@nested_create_vm={0x12d, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x3, 0x3}}]}}, @out_dx={0x6a, 0x28, {0x734e, 0x1, 0x6}}, @nested_amd_clgi={0x17f, 0x10}, @uexit={0x0, 0x18, 0x367}, @wr_drn={0x68, 0x20, {0x2, 0x5}}, @nested_vmlaunch={0x12f, 0x18}, @nested_load_syzos={0x136, 0x50, {0x0, 0x6535, [@nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x2}]}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x8d, {0x2, "260f2200470f7829c4217e70920000008007f3430fc7b73e070000b805000000b9f5fffd930f01d966baf80cb8580a0f8aef66bafc0cb830000000ef66bad104ecc7442400f3000000c7442402dde27a6eff2c24c421e9f62ec7442400449ed2cac7442402018c0000c7442406000000000f011424"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x8, 0xfffffff9}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_code={0x12e, 0x52, {0x3, "8fe92001970a000000c4425bf58800180000f20f11d10f38f6312647c1093e440f09c4627d5a34cd4af002bc0f79c1670f01c545d88d00000000"}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x101, 0x8}}], 0x48f}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000003440)={0x3, 0x0, [{0x40000080, 0x0, 0x9}, {0x2dd, 0x0, 0x7}, {0x312, 0x0, 0xfff}]}) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) r4 = syz_ublk_setup_io_uring(0x10ec, &(0x7f0000000380)={0x0, 0x8c54, 0x8000, 0x0, 0xc2}, &(0x7f0000000400), &(0x7f0000000440), &(0x7f00000004c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xffffffff, 0x3000009, 0x4000010, r4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000ec0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r5, 0x3, &(0x7f0000002f00)=0xfffffffe) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20044080}, 0x40) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x1000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020600) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x469) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 1m12.842757108s ago: executing program 5 (id=921): utime(&(0x7f0000001080)='./cgroup.cpu/cgroup.procs\x00', 0x0) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x2000) 1m12.7630345s ago: executing program 5 (id=923): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1/file4\x00', 0x30164fc, 0x0, 0x81, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1m11.711517176s ago: executing program 5 (id=925): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000001a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002100), 0x14081, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x0, 0x5802, 0x294, 0x1d0, 0x294, 0x2c0, 0x378, 0x378, 0x2c0, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x0, 0xffffffff, 0xffffff00], 'wg2\x00', 'ip6gre0\x00', {}, {0xff}, 0x62, 0x8, 0x3, 0x4a}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffff00, 0xffffff00, 0x0, 0x52f1fc93a83a0023], [0xff000000, 0x0, 0xff000000, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x8, 0x81, 0x40681f015a70b21b}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'erspan0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffffb0802dee, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x100}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000063c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a3700", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000180)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) 1m10.933299826s ago: executing program 5 (id=931): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setuid(0xee01) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x48, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0x6, 0xc, 0x800, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x48}}, 0x8000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8971, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x2002) ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f0000000400)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xe2c80, 0x0) 1m10.044355508s ago: executing program 5 (id=933): utime(&(0x7f0000001080)='./cgroup.cpu/cgroup.procs\x00', 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x2000) 1m9.932859231s ago: executing program 53 (id=933): utime(&(0x7f0000001080)='./cgroup.cpu/cgroup.procs\x00', 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x2000) 1m9.551361681s ago: executing program 3 (id=937): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setuid(0xee01) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0xfffffffffffffd41, 0x1, {0x5, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x6, 0xc, 0x800, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}}, 0x8000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r0, 0x0, 0x0) 1m8.35160757s ago: executing program 3 (id=939): userfaultfd(0x801) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mlockall(0x7) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0) r0 = memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x0) syz_usb_connect$uac1(0x3, 0x83, &(0x7f0000000540)=ANY=[@ANYBLOB="12010102000000106b1d01014000010203010902710003010940000904000000010100000a240105000a000201020904010000010200000904010101010200000a2402024a06000005000000000000001009050109ff030509020725010c025a3d47bb02000001020000090402010101020000090582014000000505072501040201002eb8cb343ea5e1989e00001131e0867a16f5790ea5101f9364529d1d"], &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x40, 0x9, 0x2, 0x10, 0xc}, 0x0, 0x0}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x81) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$netlink(0x10, 0x3, 0x13) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x9e}]}) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3fa, 0x2, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x800) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001100050000000001feffffff07000000", @ANYBLOB="64c5b5e5a15d17c53767e34e8d9a11d1a12b899df4271196cf7d10d88a87aa2d56", @ANYBLOB="1a200600000100000c001a800800058004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x82800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="4c37bd0400000000000000000000000061a98100"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r8 = fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x4) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f00000009c0)=@req={0x28, &(0x7f0000000200)={'veth1_to_hsr\x00', @ifru_mtu=0x2}}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000003e80)) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0x3, &(0x7f0000000480)=0x2, 0x4) 1m4.270261393s ago: executing program 3 (id=964): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001600)={0x9, {"a2e3ad21ed0d52f91b25090947f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b657fe8ed7c34f4638e7d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc4856bea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffff00", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r0, &(0x7f0000001600)={0x9, {"a2e3ad21ed0d52f91b25090947f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b657fe8ed7c34f4638e7d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc4856bea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffff00", 0x1000}}, 0x1006) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000002a80)={&(0x7f0000000500)={0xa, 0x4e22, 0x1, @mcast2, 0x4}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000540)="34f9d0418cb248129b17a32fa77f04b5b1167752a51e08d9", 0x18}, {&(0x7f0000000580)="f43f3e7c5d6ab6a9802894934bb1e6250e4f0097d2ed6fc689c24d98116d0945b95ff951610904d0198a5ab70fadcf7cce518589c99783b8ce2bef3594d4d1f3ae016c2a63dd67b96a39d5c305c8b00ca928c6f3c6ffa8b9d4e004773cbe6b353fd79b43f905e34a6aca07e2b3cb8bc72a23466b55130cc44ccff7702aba734a55248e1cf4", 0x85}, {&(0x7f0000000640)="d38b9f22f63c6d5edfcb7a4e0a2fca05e2abefede2a066fb9e92f6deb3311becf7839d4634dcd0d121571c642e8084c5ac243c9d3e7065b1f8642131c4e303b9dd3e0308b9e81abab9", 0x49}, {&(0x7f00000006c0)="729fac3f201c2d7706b5b1f58ba800c6f63c8c67093bfe4302e0d2dce8c72d6f36a9bdc35311ab1217bdd6899e3cd1ed2ed5697124193d672e5494c02f53e7b04e6e4bb1574575f4cdce6d64a678629273818d4cc31fd4e6509ce96f7fde2221", 0x60}, {&(0x7f0000000740)="278e04bae6615732d6f507", 0xb}, {&(0x7f0000000780)="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", 0x3c6}], 0x6, &(0x7f0000001980)=[@hopopts_2292={{0x80, 0x29, 0x36, {0x1, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x10001}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x8, 0x46, "823312e1dff54b70864423343d2a2ac8d3e8066051a90dca61a45e171b2a52e811e6b6e2bf62ebf94d5ccb824525d59e6c6972d630515e2c1b30b35652680ea9dc82408c6652"}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0xc2}, @ra={0x5, 0x2, 0x45db}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x98}, 0x80000) 1m4.115268777s ago: executing program 3 (id=967): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, &(0x7f0000000400), 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x2093, 0x5e20, 0xfffffffd, 0x7ffffff9}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) write(r0, &(0x7f0000000000)="304181bddf73316c7cabaaa67c435726585002d76ae27764994ab60f9cf0a9dc0608ac48c77f302f2927", 0xfffffffffffffee3) r5 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x402040, 0x0) 1m3.811513594s ago: executing program 3 (id=970): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000180)="82bae30f65927ca2382279faae173004f879f6901d4de28fbbe1f2e0bdec568ae8"}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r2 = getpid() (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000007a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x40000}}], 0x1, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xbc}}, 0x0) (async, rerun: 32) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xa04080, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0xdf793e1edcea99dd) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000100)={0x8001, 0xfffffffffffffffd, 0x1, 0x7fff}) 1m3.392888165s ago: executing program 3 (id=973): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) listen(r0, 0xfffffff9) (async) listen(r0, 0xfffffff9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @random="0000ee773968"}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4d24}}, 0x18) (async) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4d24}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 1m3.362606065s ago: executing program 54 (id=973): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe) listen(r0, 0xfffffff9) (async) listen(r0, 0xfffffff9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @random="0000ee773968"}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4d24}}, 0x18) (async) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4d24}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 12.728530892s ago: executing program 1 (id=1306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) signalfd(r1, &(0x7f0000000440)={[0x5]}, 0x8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x2, 0x0, [{0x40000001, 0xad, 0x0, 0x3, 0x4, 0xfff, 0x7}, {0x80000000, 0x8, 0x1, 0x9, 0x8, 0x5, 0x108c9746}]}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x10, 0x1e, {0x1e, 0x8, "6073d48df01956383eb8ee3446b4a04c98947a8229eb613e5e8555f6"}}, &(0x7f0000000040)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "20c39d41243af586c4b8f00bb3cecc3af7def64d06452d6858fa0b83a2671f3bc442a6f64da09caefc19f4231bf001d454b597518f2ecb77007a8335e46a0eff585722003ea4a98a717e363af2e07e046db46921da54d0995217131f74c62d5ad01d48c0d9149fe212c500cde4efcb496ca5034d5bb5578a32c6ddc01edf8dae91a4b27eada099edfa52aee6f43df6225962780154ad68a5fb7b"}}, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, '@'}, @global=@item_4={0x3, 0x1, 0xd, "a556bcbd"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xba, 0x1, {0x22, 0x4e}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x40, 0x6, 0x8f, "72f3f6fa94d7a97e3eca2e4b127dc51b9d8e8c47a1add97a5bd78c1b6fabe20025e79e18f233b255aba3fcbf716f9e4547fe56e7fdc47e9499b61811fb7bac1542bae7dbcfc56d5b4e3d8d91a8d44f101f8a8c57bdc2b66755786cefe19e919e4091b8107788df838d9095fe19e10b561b75e57c177b063792efdcbf1e8e222ef755e729c015927b22c4a76276eea4"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300)={0x20, 0x1, 0x5c, "aa127ed4b457865fc011017439146a438939c43ae95af81bbdf4784257a7fee35ebc1026bfc34938b43e460a395f69d3211df4b93669abeb66ed3eec40e644da14bbc406627ea2feb95fad77b0e89ac14dfc6fb03cf8e2b1278611da"}, &(0x7f00000003c0)={0x20, 0x3, 0x1}}) 9.740806117s ago: executing program 1 (id=1320): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0x4, 0x0, 0x0, 0xffffffff, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x55320ecc9fd8d967}]}, 0x20}, 0x1, 0x7, 0x0, 0x2000000}, 0x0) 9.6087828s ago: executing program 1 (id=1322): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0xa2) 9.539216062s ago: executing program 1 (id=1323): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x174b91d2a960c153, &(0x7f0000000040)=""/197, &(0x7f0000000140)=0xc5) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x1fb, 0x3, 0xfec00000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000024c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcfa, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x1, 0x0, 0x7, 0x8}, {0x12, 0x2, 0x0, 0x403, 0x0, 0x400}, 0x8, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4f}}]}, 0x68}}, 0x44080) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x2800091, &(0x7f0000002500)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYBLOB="ca7b2da526224f497b", @ANYRESDEC, @ANYRES64=0x0, @ANYBLOB="3a8c30d1ba4e62c00b447e0eca3a20a04631b77d87f0f1a2b484824bb0aeefa5d765975b20e491a152b808865ab36bff475270bb3f61057230af2e961f4d27ebcddf8bcf718c5694a54bf1f76251e583949c6eec384c30b8c02086455cb0ad9816581a9e99ceb31b9744f641aba002fd9ba17b8ef617ae2db4793a7aeb57f4db7d9bb0b930ffcaeb286a3bcf4b26547d3b4b4e98bcdf5d78d7"], 0x15, 0x1cd, &(0x7f0000002600)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) readahead(0xffffffffffffffff, 0x6, 0x1795) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000007c0)={'#! ', './file0'}, 0xb) 8.964306746s ago: executing program 1 (id=1326): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x10001}, {0x6}]}, 0x10) (fail_nth: 2) 8.606056925s ago: executing program 1 (id=1329): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[{@fat=@nfs}, {}, {@fat=@flush}, {@shortname_winnt}, {@utf8}, {@numtail}, {@utf8}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@fat=@check_strict}]}, 0x41, 0x38c, &(0x7f0000000380)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x58, 0x5, 0x6}]}}]}, 0x38}}, 0xc840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0xa, @val=@iter={&(0x7f0000000080)=@cgroup={0x1, r1, 0xffffffffffffffff}, 0x10}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x24040, 0x10) 8.586146026s ago: executing program 55 (id=1329): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[{@fat=@nfs}, {}, {@fat=@flush}, {@shortname_winnt}, {@utf8}, {@numtail}, {@utf8}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@fat=@check_strict}]}, 0x41, 0x38c, &(0x7f0000000380)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x58, 0x5, 0x6}]}}]}, 0x38}}, 0xc840) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0xa, @val=@iter={&(0x7f0000000080)=@cgroup={0x1, r1, 0xffffffffffffffff}, 0x10}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x24040, 0x10) 3.979488351s ago: executing program 6 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x4000000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}]}}) 3.60258654s ago: executing program 0 (id=1360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200001800000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) 3.547606711s ago: executing program 6 (id=1361): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000100000f01000fffff000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000000100)=0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1800042, &(0x7f0000000000), 0xfc, 0x578, &(0x7f0000000180)="$eJzs3V1rZGcdAPD/mcxMkt1oovaiCq2LLe4W3WTTtW3woruCeFdQqtdryM6GsJPMkkzaTVgkix9AENGCN3rljeAHEGQ/QhEK9l6sKItuFSyiPXJesnnZOc1LMzM2+f3gmfPMOc85/+c5Mzmvz+QEcGZdiIjrETESES9ExGQ5vlam2CpSVu79R/cWspREmr7+tySSclxWLClT5nw521gx2Gu8GKxtbN6eb7dbq+Xome7ynZm1jc3LS8vzi63F1srVq7Mvz70y99LclRNpZ9auV7/555/+6FffevV3X33zjzf+eukHWX0nyunb7ThpxTppZOvisXpErPYj2BCMlO35d1qoKDY64GoBAFAhO8b/bER8KT/+n4yR/GiuWnNXPul77QAAAICTkF6biP8kEekRNY48BwAAADAstbwPbFKbLvsCTEStNj1d9OF9Ks7V2p217lduddZXbhZ9ZaeiUbu11G5dyfvUjkZEI8nezz6+olC8fzEvG9GMZE8f4J9MjufTpxc67ZvDuOABAAAAZ9D5fef//5wszv8BAACAU2aqHJ4bcj0AAACA/pkadgUAAACAvjvG+X+zH/UAAAAA+uLbr72WpXT7+dc339hYv9154/LN1trt6eX1hemFzuqd6cVOZ7GdjkYsH7S8dqdz52uxsn53ptta686sbWzeWO6sr3RvLO15BDYAAAAwQJ/54oN3k4jY+vp4nmL73v5IxQx+KwCnRu2Q5dLs5b3+1gUYrKrdPHD61T96sm6+cIo1ikEy7HoAw3PQBmCsqsTbxwrnuAIAAIbg4ucfvJsmT97/r+9cGwBOqcPe/wdOn4r7/+nkoCsCDFzl/f8DOgYAn3wNPQDhzDv4/n+Ft/NJ1w+OkKYHLgsAAOiriTwltenyXuBE1D5ICzEVjeTWUrt1JSI+HRF/mGyMZu9n8zkTPxoAAAAAAAAAAAAAAAAAAAAAAAAAgENK0yTSY6gfay4AAABgGCJqf0nK5wBfnHx+Yv/1gWbyQf4o4A/TNH3z56//7O58t7s6m43/ez6+GRHdt7LxzWFcvgAAAAB22X7Kf37+/mJjyLUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LR6/9G9he0UEeODivvwGxEx9UT8iKjHWD4ci0ZEnPtHEvVd8yURMXIC8bfuR8TTveInWbViqqzF/vi1fCUlg4j/TJqmPeOf/9jR4Wx7kG1/rvf6+6vFhXzY+++/XqRrHzd+9fav9nj7N7I/fr3Y/n3qkDG+8M5vZna9/d5OdrSYXu+9/dmOn1Rsf5/rFaz+5Kjvf3dzs6pu6S8jLj65/ykj7ORmust3ZtY2Ni8vLc8vthZbK1evzr4898rcS3NXZm4ttVvla88YP37mtx9WxX94IeJcGb+5XadyxzKVv3753k7p5p46PZ9lGlVL3vHfd+4++lyR3V06b+DD+xGXnuv9+T+dD3uu/1/8K83l+4Fs+sVyn5BsFfmI8usbEc/++vfPVrb//liZO/rnf+ngpude+M4P/3TIogDAAKxtbN6eb7dbq33PvJWm6eEKZ0elh19yErG1f1J2AHfCrRiPiIpJe2ONl2s1Drvkpyqr+t54xIA+naNmrh2lcDp6pC9bsvV/0MAznGnmX8hhb5kAAICTtnP0P+yaAAAAAAAAAAAAAAAAAAAAwNk1iP8rtj/m1nCaCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwkf4XAAD//y/Z11Q=") r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRESHEX, @ANYBLOB="e4ae"], 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x8, 0x7, 0x4000000000000e52, 0x800000000002, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x1ffffffffffffff, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae03, 0x27) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10013}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x44050) 3.439946074s ago: executing program 0 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x17, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x5517, &(0x7f00000079c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020) 3.363646916s ago: executing program 9 (id=1365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x52, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0xf, 0xff09) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)=0xa4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110350000000000a5000000000000019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0xa000000c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./sys\x00', 0x400, 0x182) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r5 = openat(r4, &(0x7f0000000080)='./sys\x00', 0x24000, 0x10e) write$binfmt_format(r5, &(0x7f00000000c0)='0\x00', 0x2) fcntl$setown(r5, 0x8, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r1, 0xae03, 0x76) 3.006973115s ago: executing program 9 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x4481, 0x609}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x58}}, 0x40014) r1 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$cgroup_subtree(r1, &(0x7f0000000680)=ANY=[@ANYBLOB='1-Bx'], 0x31) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x0, 0x5, [@remote, @remote, @multicast, @multicast, @empty]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000000)='3', 0x1, 0x4fed0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) fallocate(r3, 0x8, 0x4000, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[], 0xffffff65) close_range(r5, r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x4481, 0x609}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x58}}, 0x40014) (async) open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000680)=ANY=[@ANYBLOB='1-Bx'], 0x31) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x0, 0x5, [@remote, @remote, @multicast, @multicast, @empty]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$eJzs27tvHMUfAPDvrl/xL/lhE8IjD8AQEBYPO054pKCACCSKICFBQWvZThRyiVFsJBJFkCAUKkRDjyj5F6igQYgKiRZ6FClCaZJQHdq7XfvecS5nn5P7fKT1zezOeuZ7u3M3u3MbwMCayv4kEbsi4s+ImKhm6wtMVV9uXr+4cOv6xYUkyuX3/0kq5W5cv7hQFC3225lnptOI9Msk9reod+X8hdPzpdLSuTw/u3rm49mV8xdeOnVm/uTSyaWzh48effnI3GuvHn6lJ3Fmbbqx77PlA3vfSYbfPf51ti4t4m+Io0emOm18tlzucXX99f+adDLcx4ZwR4YiIjtcI5X+PxFDsX7wJuLtL/raOGBTlcvl8s72my+VgftYEvV5XR4GRfFFn13/FkvjIOCNzRt+9N21N6sXQFncN/OlumU40hivpEYarm97aSoiPrz073fZEptzHwIAoM5P2fjnxVbjvzQeqSn3QD43NBkRD0bE7oh4KCL2RMTDEZWyj0bEY3n58Q3W3zhJ0jz+Sa92HdwGZOO/1/O5rfrxX1oUmRyq5MYqY8DJGElOnCotHcrfk+kYGcvycx3q+PmtP75pt612/JctWf3FWDBvx9Xhsfp9FudX5+8m5lrXLkfsG24Vf7I2E5BExN6I2NdlHaee/+FAu223j7+DHswzlb+PeK56/C9FQ/yFpPP85OyOKC0dmi3Oima//X7lvXb131X8PZAd//+1PP/X4p9MaudrV+68jit/fdX2mqbb8380+aCSHs3XfTq/unpuLmI0OV5tdO36w+v7FvmifBb/9MHW/X93rL8T+yMiO4kfj4gnIuLJvO1PRcTTEXGwQ/y/Hnvmo+7j31xZ/It3dPzXE6PRuKZ1Yuj0Lz/WVTrZFP+tDsd/LTWdvzZ//g01xbWRdnV3NgMAAMC9J7u63hVJOrOWTtOZmerv5fdEpKXlldUXTix/cnax+ozAZERa3OmaqLkfOpdf1lfzlyOi+tOCYvuR/L7xt0PjlfzMwnJpsd/Bw4Db2ab/Z/5uvq0G3G88rwWDS/+HwXW7/v/5FrUD2Hrdf/8f2+jvPIFtqkX/169hIIy1/P435ofB0ND/TfvBAGno/zv61Q5g63V//2+0p+0Atp75fxhIK+Nx+4fkOyaK/9Tl7vdtIka2RTM2LRHptmjGtk2M3OP9on+fSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL30XwAAAP//cBbcWg==") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) (async) pwrite64(r2, &(0x7f0000000000)='3', 0x1, 0x4fed0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) (async) fallocate(r3, 0x8, 0x4000, 0x8000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f0000001240), 0x80000) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) (async) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[], 0xffffff65) (async) close_range(r5, r5, 0x0) (async) 2.739266402s ago: executing program 0 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0), 0x8) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r3, &(0x7f00000000c0)="9d", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async, rerun: 64) recvfrom(r3, 0x0, 0x0, 0x40000003, 0x0, 0x0) (async, rerun: 64) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a40)="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", 0x5bd}], 0x1}}], 0x1, 0x4001c00) (async, rerun: 32) syz_usb_connect(0x5, 0x51, &(0x7f0000000280)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905071f28"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (rerun: 32) 2.579156906s ago: executing program 6 (id=1370): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") clock_adjtime(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00') 2.495527988s ago: executing program 8 (id=1371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae07, 0x27) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000100)={r1, &(0x7f0000000000)='/dev/kvm\x00', 0x4080, &(0x7f0000000040)={@_ha_fsid={[0x5, 0xe]}, {0x1ff, 0xfff5, 0x7}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x9}) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000140)=""/206) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) 2.495242338s ago: executing program 9 (id=1372): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x5000000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}]}}) 2.442987429s ago: executing program 8 (id=1373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x38441, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x5) 2.373717581s ago: executing program 8 (id=1374): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x18c58, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)=""/106, 0x6a}], 0x2, 0x40c002a0, 0xfffffffd) lseek(r2, 0x4, 0x4) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000180)=0x1) close(0x3) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="a4000300"/20, @ANYRES32=r1, @ANYBLOB="24200400858d0000400012800e00010069703665727370616e0000002c000280050016000200000004001200050017000000000014000600ff010000000000000000000000000001280019800e00020069703665727370616e0000001400050025a6702c066dce054dd1f376e0d7243608002800211800000c002b8008000800", @ANYRES32=r2, @ANYBLOB="08001300", @ANYRES32=0x0, @ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x48001}, 0x0) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x18c58, 0x0) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') (async) preadv(r3, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)=""/106, 0x6a}], 0x2, 0x40c002a0, 0xfffffffd) (async) lseek(r2, 0x4, 0x4) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000000180)=0x1) (async) close(0x3) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="a4000300"/20, @ANYRES32=r1, @ANYBLOB="24200400858d0000400012800e00010069703665727370616e0000002c000280050016000200000004001200050017000000000014000600ff010000000000000000000000000001280019800e00020069703665727370616e0000001400050025a6702c066dce054dd1f376e0d7243608002800211800000c002b8008000800", @ANYRES32=r2, @ANYBLOB="08001300", @ANYRES32=0x0, @ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x48001}, 0x0) (async) 2.259661614s ago: executing program 4 (id=1375): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0xfffffe00, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.140380897s ago: executing program 4 (id=1376): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0xffffffff, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xfc01, 0x2, 0x0, 0x7fff0000}]}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000140)=0x10001) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x104002e, &(0x7f0000000480)={[{@noquota}, {@nodioread_nolock}, {@noinit_itable}]}, 0x3, 0x453, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000006ac0)=""/153, &(0x7f0000006b80)=0x99) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r7, r5, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r6}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r8, 0x1, 0x2d, 0x0, &(0x7f00000000c0)) (fail_nth: 1) 2.092882938s ago: executing program 6 (id=1377): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x5, 0x6, 0x5, 0xfffffffffffffffe, 0xa7a, 0x1}, {0xab18, 0xb, 0x5, 0x0, 0x1d2, 0x4737}], ['\x00', '\x00', '\x00', '\x00']}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xac, r1, 0x1, 0x70bd29, 0x5dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80, @local, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}]}]}]}, 0xac}}, 0x0) 1.971625871s ago: executing program 9 (id=1378): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x174b91d2a960c153, &(0x7f0000000040)=""/197, &(0x7f0000000140)=0xc5) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x1fb, 0x3, 0xfec00000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000024c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffcfa, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x1, 0x0, 0x7, 0x8}, {0x12, 0x2, 0x0, 0x403, 0x0, 0x400}, 0x8, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x4f}}]}, 0x68}}, 0x44080) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x2800091, &(0x7f0000002500)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYBLOB="ca7b2da526224f497b", @ANYRESDEC, @ANYRES64=0x0, @ANYBLOB="3a8c30d1ba4e62c00b447e0eca3a20a04631b77d87f0f1a2b484824bb0aeefa5d765975b20e491a152b808865ab36bff475270bb3f61057230af2e961f4d27ebcddf8bcf718c5694a54bf1f76251e583949c6eec384c30b8c02086455cb0ad9816581a9e99ceb31b9744f641aba002fd9ba17b8ef617ae2db4793a7aeb57f4db7d9bb0b930ffcaeb286a3bcf4b26547d3b4b4e98bcdf5d78d7"], 0x15, 0x1cd, &(0x7f0000002600)="$eJzsmL+PEkEUx7+zLKxrjNhqo4kkYOGyu6iRwkRiaaGJRmMHkZWgixjYAqj0H7C1trawJjZY3t9wV9xddcXddVddwl5md/Z2Dtj7EQjhcu9TPL47783se2/CIwEEQVxZtrcONv/mczrXN5CDJtZ39DhGkeKH2cMH681X/36Z+xvD0cvyxHEZSf+3zvF+FcCokoInnn3f92V/Tny+hRLpNKqx/z0YDKGrUPBOaAcMH4T+LOk2jzeMT03XMT623ToXJjcWNzY3pcn89n4w1KX8mOTv9gdfaq7rdOYXL3ja065r3aTeaVF+FQXPpPzk+4p6Y8b9gwUF0d2UwPBG6KfQot6ELZHqv6PG56fmrJ/3b2DdnFntpRZrs1y3s2fsSmMlkl9loYeTZQxgmW8XX/TvF9rFwMWuvtxUFyX+6MBiDoznp/+bIS/NJ1WaH0Wv9a3Y7Q8eNlu1htNwvtp26Yn5yDQf28VgEIU2aQRChR7Mp+vS+emE2AzLoFfzvI4V2uNnu6fB69hxAdKeYP4pKNwPs2YTP3LR2vNb7B7XhRQw9kMS0viZWAxBEARBEARBEARBEARBEMSp3NXDf0FPUJ5asl8H0UcBAAD//zrebSY=") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002400)=ANY=[], 0x0, 0x4a}, 0x28) readahead(0xffffffffffffffff, 0x6, 0x1795) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000007c0)={'#! ', './file0'}, 0xb) 1.904460783s ago: executing program 0 (id=1379): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) unshare(0x22020600) mlock(&(0x7f0000a51000/0x4000)=nil, 0x4000) mremap(&(0x7f0000a51000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000a52000/0x3000)=nil) mremap(&(0x7f0000a56000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000a51000/0x3000)=nil) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x240400c4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$dupfd(r6, 0x0, r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800080000000096e884c2000069874db87686821c088b98", @ANYRES32=r0, @ANYBLOB="00000000184de686302a472c00000200850000000c000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', r2, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) 1.583231031s ago: executing program 6 (id=1380): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x6000000d}) epoll_pwait(r6, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r6, 0x40305829, &(0x7f0000000140)={0x2, 0x2, 0xfffffffffffffffe, 0x4ed9, 0x6, 0x81}) write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0xffffffffffffffda, r2, {0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, {0x2, 0xc75b, 0x0, 0x0, 0x20000000000007f, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, r3, r4, 0x3, 0x5}}}, 0x90) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000100)) ioctl$KVM_CREATE_VM(r7, 0xae03, 0x7) 1.371498926s ago: executing program 0 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x382, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000040100000c"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000020000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.362540666s ago: executing program 4 (id=1382): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000210425b970000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000010020001280080001006772650f14000280"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x29) 1.247619849s ago: executing program 8 (id=1383): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xfffffffc}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_team\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040840}, 0x4008000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x10001}, {0x6}]}, 0x10) 893.923138ms ago: executing program 8 (id=1384): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x3, 0x7, 0x20, 0x64, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @lsrr={0x83, 0x3, 0x89}]}}, {0x17, 0x8, 0x0, @broadcast}}}}}, 0x0) r1 = syz_open_pts(r0, 0x200) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x7ffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x11) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae07, 0x27) 893.375988ms ago: executing program 9 (id=1385): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000006b0000631120000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 847.737339ms ago: executing program 4 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000016000"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 673.415484ms ago: executing program 4 (id=1387): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") clock_adjtime(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00') 591.938126ms ago: executing program 4 (id=1388): setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5433, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x198) mkdir(&(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0xce) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x13d) write(r1, 0x0, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f00000002c0)='0{a4a', 0x5) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/idVendor\x00', 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='0x', 0x2) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) symlink(&(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f00000005c0)='./config/usb_gadget/g1/os_desc/c.1\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000680)='WINNCM\n', 0x7) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='dummy_udc.0', 0xb) close(r5) read(r3, &(0x7f0000000780)=""/20, 0x14) 572.350306ms ago: executing program 6 (id=1389): r0 = socket$igmp6(0xa, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000007700)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000007480)=[{{&(0x7f0000000000)=@l2tp6, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/132, 0x84}, 0x5e000000}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f00000001c0)=""/137, 0x89}], 0x2, &(0x7f00000002c0)=""/167, 0xa7}, 0x2}, {{&(0x7f0000000380)=@generic, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000580)=""/239, 0xef}], 0x3, &(0x7f00000006c0)=""/34, 0x22}, 0x6}, {{&(0x7f0000000700)=@caif=@dgm, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)=""/15, 0xf}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x2, &(0x7f00000008c0)=""/205, 0xcd}, 0x4}, {{&(0x7f00000009c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000a40)=""/161, 0xa1}, {&(0x7f0000000b00)=""/131, 0x83}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/185, 0xb9}, {&(0x7f0000001c80)=""/172, 0xac}, {&(0x7f0000001d40)=""/253, 0xfd}, {&(0x7f0000001e40)=""/77, 0x4d}], 0x7, &(0x7f0000001f40)=""/233, 0xe9}, 0x9}, {{&(0x7f0000002040)=@phonet, 0x80, &(0x7f0000003580)=[{&(0x7f00000020c0)=""/63, 0x3f}, {&(0x7f0000002100)=""/101, 0x65}, {&(0x7f0000002180)=""/62, 0x3e}, {&(0x7f00000021c0)=""/100, 0x64}, {&(0x7f0000002240)=""/11, 0xb}, {&(0x7f0000002280)=""/72, 0x48}, {&(0x7f0000002300)=""/217, 0xd9}, {&(0x7f0000002400)=""/151, 0x97}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/148, 0x94}], 0xa, &(0x7f0000003640)=""/94, 0x5e}, 0xfff}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000036c0)=""/247, 0xf7}, {&(0x7f00000037c0)=""/236, 0xec}, {&(0x7f00000038c0)=""/45, 0x2d}], 0x3, &(0x7f0000003940)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004940)=@phonet, 0x80, &(0x7f0000005a80)=[{&(0x7f00000049c0)=""/126, 0x7e}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/60, 0x3c}], 0x3, &(0x7f0000005ac0)=""/133, 0x85}, 0x3}, {{&(0x7f0000005b80)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005c00)=""/218, 0xda}, {&(0x7f0000005d00)=""/27, 0x1b}, {&(0x7f0000005d40)=""/130, 0x82}, {&(0x7f0000005e00)=""/255, 0xff}], 0x4, &(0x7f0000005f40)=""/187, 0xbb}, 0xffffff85}, {{&(0x7f0000006000)=@hci, 0x80, &(0x7f0000006400)=[{&(0x7f0000006080)=""/18, 0x12}, {&(0x7f00000060c0)=""/197, 0xc5}, {&(0x7f00000061c0)=""/41, 0x29}, {&(0x7f0000006200)=""/229, 0xe5}, {&(0x7f0000006300)=""/248, 0xf8}], 0x5, &(0x7f0000006480)=""/4096, 0x1000}, 0x1}], 0xa, 0x1, &(0x7f0000007740)={r1, r2+60000000}) r4 = syz_usb_connect$midi(0x1, 0x4a, &(0x7f0000007780)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x1, 0xa7, 0x40, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x48, [@ms_header={0x7, 0x24, 0x1, 0xe991, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0xb8, 0x1, [{0x9, 0x1}], 0x4}], [{{0x9, 0x5, 0xa, 0x0, 0x200, 0xfd, 0x0, 0x6, {0xd, 0x25, 0x1, 0x9, "fb86edd864ebffecd8"}}}]}}}}}]}}, &(0x7f0000007c80)={0xa, &(0x7f0000007800)={0xa, 0x6, 0x250, 0x95, 0x7, 0x0, 0x40, 0x8}, 0x27, &(0x7f0000007840)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x3, 0x9, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "c1aea71e572b7db6efd05e07004a924e"}]}, 0x9, [{0x4, &(0x7f0000007880)=@lang_id={0x4, 0x3, 0x1401}}, {0x28, &(0x7f00000078c0)=@string={0x28, 0x3, "1cf8e4634ad1be0baf6c211f7285d2e7cdb47931b77f3b21faff92b2d7710a49d345e8fb2f74"}}, {0x4, &(0x7f0000007900)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000007940)=@lang_id={0x4, 0x3, 0x1c01}}, {0xb9, &(0x7f0000007980)=@string={0xb9, 0x3, "7125994a12b7eddbdde0aa632de994796a584757fc4df63923d1d8335f718e1b3d27681fc4fd6227205c926028be4869d55f4188ed7641d8bf1236f3408c7afad7afa76c9ad0c9991bf4c7521acf3f7afd3103cfd46b56b2aac2e324778f8d9f2d027491208fb0741e9434a47300467c2721bb74dbfe1b16b0e0020f86ee7eae1def26c5a919b46c3e698ca858c09034bfa2ace9b8dd0018d1c8a34e054d2155f0563c73796fa99c8ecbd46b5966a817d935a4086f345c"}}, {0x84, &(0x7f0000007a40)=@string={0x84, 0x3, "4f7ee7cff5e1c2ac4b2889f64e931b5c81b9f2ffbef37e6b606998bf1cfe4f9b76d95544d2c87a15e32f2efde6235a6e0f076693ff73a91a34b85035071b30e4e45226604699b1b8a1fac5b31e3330ed5d712e147248731a1061e9050094cba6372b56f51d5f07853fc077b25afa8009cf5d4e573f55601a42952e046f1ca088d99c"}}, {0x99, &(0x7f0000007b00)=@string={0x99, 0x3, "0ee6aa0a1b7760be14ee82bd63336db066d3039807debef11686c0c1e087ce87d7075f8c64a268780165737bff5c2b8bd853b6016d164f3c42536368e2031e3b5cb781706ca4282be4a78167c672a32a7bef4fd1f3972540d6173e4a2cf64a288bd5cf8bb28dcf0ce2d7a3b966d1627c84cbae07e11f7b7c2362b61626622f04b29a90075c0cc5ba4b83b8623e63f95424dc5988eb9ca7"}}, {0x45, &(0x7f0000007bc0)=@string={0x45, 0x3, "6fef501d1d37dc72777e8c3a527e4cbc4aa06b043bfcada32720038a99f94fb4d513be9c5b11ef751dd91311a401fecd20a1f8b5945b5f5fbf51f031d422014c647179"}}, {0x4, &(0x7f0000007c40)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_control_io$hid(r4, &(0x7f0000007f80)={0x24, &(0x7f0000007d40)={0x40, 0x11, 0xa4, {0xa4, 0x23, "cd68d784d77f0fbe9082154228e0dce026ea5b1f853363ff5909d7898d94db2df679d3086cb6a49249b1e5bb85e3bb9f9c79b4aa565af126ce2f04ad829dc53a5134c5e40a1a9a53f4f818b4639436abcea37c22b04bd97e7de4a5f7b244643b62d7e70de1c04a52d2e789209a8cb3190728310e8aa7f37b2b5baa3ae1653791f0074f324606ff65f115ec3db8563e10b1c8d5b75ca38a51bf26768e2372bda6bc5b"}}, &(0x7f0000007e00)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "e87ae986733c58da10cb5e1f9b002310bfca20954f78975d02f6cd510a6bf55b5b77702713d0bd92566e64a81b7d2a98d2001a5fa97a1a6d1655517cb5f096da7841a687e9b6a0844c31a3ba3e642f6d242d4418d8764effc5938f7f1874e382ba04014363a9c8b9804edc6f3d18d6f2b8d9c53a65782ffc0dc50b3d817fcccc15b8fb039d3dacc80c1a53ea021ddfff17ad5913cfc085778645d3a50a9f74b9f9ac0ef07b5fdd9846432191133b4970fa6d378d46b9d3b1d633a83fb4573b36e76427eec06f13037829e4944b404e71b126d57f91fe597ecaa0c8ea1295582fcb838ae70edc4a"}}, &(0x7f0000007f00)={0x0, 0x22, 0x9, {[@local=@item_4={0x3, 0x2, 0x9, "a8175953"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x2, 0x0, 0x8, "a14e"}]}}, &(0x7f0000007f40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8d67, 0x2, 0x1, {0x22, 0x2}}}}, &(0x7f0000008280)={0x2c, &(0x7f0000007fc0)={0x0, 0x7, 0xda, "dcce72df26257708324c3ab6b8257bcf7dac2e4a6d9021bbb63fd5b99a0eb3bb18e9eafe549b2f73855ddf3a140c13aa8f814da4019fbc9765b0a07e1150da1f83791e7e68a82864663462b2cf02b183fcb53204a84fe2147889d4fd0b932bde7a3561287418ba558e6e81eb0d66b85c7cc3a0e3c7ed1045d0367d912c0803b6c5df63d80ce1bad21185bc65af1ba668924a08007c8279b52796b3d7c18fc7c5e7bb3a8ff03cb17c554a40faf1fded0102e5e1ba630c900575b9f81a445472406d877ffefb88376aaca2842f6dbd478c6929c586cfd05c7bee89"}, &(0x7f00000080c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000008100)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000008140)={0x20, 0x1, 0xd6, "860078364ca49164d8e9e362ea5406bf7c9fd9591833f385c677f73fd48ead14da94472acccdbedb3363f412632f5e715ceb7e8edcd87207fded71e31f452e73e69114a4b595a799d265e7da0f6ccc606eab9834a714ce9f4017c597ee342ec3b3974b635a4615ded495ef8fbbf821f88ad117781e2ead9488321e07f85c2fe6a0294e88481c7555ada2cffc0171f612bbb28fc8a51d8ce9e8ce27e0c68693cffc1021ac217799479a68d95045649bcb050b411f59be3f8503e1c5b7e8f2e423a379e3fe114791b4d0f38bf4d9ee281d565a4edc000a"}, &(0x7f0000008240)={0x20, 0x3, 0x1, 0x7f}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000008300)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f00000082c0)='./file0\x00', r5, r8) r10 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f000000a380)={0x18, 0xffffffffffffffda, r6, {0x4f030942}}, 0x18) clock_settime(0x0, &(0x7f000000a3c0)={0x77359400}) read$FUSE(r10, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r10, &(0x7f000000c440)={0x18, 0x0, r11, {0x5}}, 0x18) ioctl$KVM_SET_DEBUGREGS(r10, 0x4080aea2, &(0x7f000000c480)={[0xa000, 0x1, 0x80a0000, 0x5000], 0x6, 0x21}) syz_usb_control_io$rtl8150(r4, &(0x7f000000c600)={0x14, &(0x7f000000c500)={0x40, 0x21, 0x1e, {0x1e, 0xa, "5caa0863c107397cce82e4c47c24bcac88077d6d46f1a024f018ff8d"}}, &(0x7f000000c540)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "04aa98e3f66763cededaa1b536123eac02772176d2297c4a57c96d9b3436c3f19d2401add20e8472d4bd790b4f6869a2a69fcd71da05d9350b204cd23948fa535dbaba8e3f56e28505d783bd68875b40ea5316a1398f492c4eadb8b46654ecea17cc8d6a1c7b0634f2a8790d1af75ad94a03eaf0cd7473bf2591321585008ce056674bb9fda0da1248ebb30d1e96f660a1472dd1d36cbaa2d9c951d8e385f2228396b4dfed98eb"}}}, &(0x7f000000c780)={0x2c, &(0x7f000000c640)={0x20, 0xd, 0x1e, "66b741d3dff154815c18a6efebcc9971bb41e284c44db592ccfad5a523cf"}, &(0x7f000000c680)={0x0, 0xa, 0x1, 0x84}, &(0x7f000000c6c0)={0x0, 0x8, 0x1, 0xfe}, &(0x7f000000c700)={0xc0, 0x5, 0x1, 'T'}, &(0x7f000000c740)={0x40, 0x5, 0x3, "95ac41"}}) r14 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r10, &(0x7f000000cd00)={&(0x7f000000c7c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000ccc0)={&(0x7f000000c800)=@bridge_setlink={0x4b4, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x10800, 0x2200}, [@IFLA_EVENT={0x8, 0x2c, 0x4}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd0e0}, @IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}, @IFLA_MAP={0x24, 0xe, {0x6, 0x0, 0x7, 0x6, 0x9, 0x2}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_VFINFO_LIST={0x43c, 0x16, 0x0, 0x1, [{0xac, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x5}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0xe07, 0x3, 0x8100}}, {0x14, 0x1, {0x8001, 0xde2, 0xff}}, {0x14, 0x1, {0x3, 0xa4a, 0x4, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x693, 0x2, 0x9a8}}, {0x14, 0x1, {0x80, 0x7ce, 0x1, 0x88a8}}, {0x14, 0x1, {0xa, 0xde, 0xf, 0x88a8}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4000, 0x2}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xf365, 0x3ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @random="2fa4b113024c"}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x800}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffb, 0x296}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6f2, 0x100}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x8, 0x38000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x100, 0xead37ed1}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xd, 0xb7de}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x94c, 0xffff7d21}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xdcb, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0xfffffff7}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x69a, 0x7, 0x8100}}, {0x14, 0x1, {0x7, 0x7, 0x0, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x80, 0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0xf7d, 0xcc8}}]}, {0x13c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xdf4, 0x1}}, @IFLA_VF_VLAN_LIST={0xcc, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x2, 0x183, 0x565b, 0x88a8}}, {0x14, 0x1, {0x3d00, 0x3bf, 0x1, 0x8100}}, {0x14, 0x1, {0x7, 0xf6e, 0x7ff, 0x88a8}}, {0x14, 0x1, {0x101, 0x1ce, 0x2, 0x88a8}}, {0x14, 0x1, {0x1, 0xe4e, 0x7f, 0x8100}}, {0x14, 0x1, {0xeea, 0x622, 0x4, 0x88a8}}, {0x14, 0x1, {0x1, 0x477, 0x8c79, 0x8100}}, {0x14, 0x1, {0x9, 0x4f3, 0x0, 0x8100}}, {0x14, 0x1, {0x2, 0x4c8, 0x8, 0x88a8}}, {0x14, 0x1, {0x8, 0xfbb, 0x3, 0x88a8}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xb764, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x352e09d0, 0x100}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7fff, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3ff, 0x5}}]}, {0x5c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x3, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fff, 0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x6}}, @IFLA_VF_LINK_STATE={0xc}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x5bf, 0xbe}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @broadcast}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x7}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x1}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x3508000000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0x7ff}}, @IFLA_VF_MAC={0x28, 0x1, {0x80000001, @random="ce2fd5a14fa8"}}, @IFLA_VF_RATE={0x10, 0x6, {0x240, 0x6, 0xcd7f}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9753, 0xb8}}]}]}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x8801}, 0x2005800) fsconfig$FSCONFIG_SET_PATH(r10, 0x3, &(0x7f000000cd40)=':+\x00', &(0x7f000000cd80)='./file0\x00', r10) r15 = openat(r10, &(0x7f000000cdc0)='./file0\x00', 0x141002, 0x80) lstat(&(0x7f000000ce80)='./file0\x00', &(0x7f000000cec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getgid() r19 = syz_mount_image$fuse(&(0x7f000000ce00), &(0x7f000000ce40)='./file0\x00', 0x2038012, &(0x7f000000cf40)={{'fd', 0x3d, r15}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r16}, 0x2c, {'group_id', 0x3d, r18}, 0x2c, {[{@default_permissions}], [{@subj_role={'subj_role', 0x3d, '@/'}}, {@euid_gt={'euid>', r12}}, {@appraise_type}, {@flag='sync'}]}}, 0x1, 0x0, &(0x7f000000d040)="3830224324f0a648fd20493d80f1f4bc19080cf35edf7814a0fbb4e2dc2cacd792ea5214f34a955520537ffe1495f6c8416e02f1057710b54d998f84bc3201b591ff905e66930a304393a5466beaf6c434264b5f9d1f3772d216ad5f90f35e77ee929056b24b661645899a2dd684b03cc0d9fbbce2a64e4c9e6c38a659d3a0230a6c857a0e8075b67e7e149e82266e94bad700ff3a91b3ed1bf3331dbb2f9691c8835f0bf989") mknodat$loop(r19, &(0x7f000000d100)='./file0\x00', 0x4, 0x0) bind$unix(r15, &(0x7f000000d140)=@file={0x1, './file0\x00'}, 0x6e) write$eventfd(r10, &(0x7f000000d1c0)=0xb34, 0x8) r20 = openat(0xffffffffffffff9c, &(0x7f000000d200)='./file0\x00', 0x280800, 0x100) ioctl$BTRFS_IOC_RM_DEV(r14, 0x5000940b, &(0x7f000000d240)={{r0}, "4668217ab0ba9c7aae2a9582707d79da5e6642f3d01a098bd80e8afcd1d512311375452211438973570999e869b5165141a032b72e38755c9604e922c801cf2ffec3a5cd0006c6c03ba10c5ab972905e0904fc21e2661b996624dbe7500f5881fe5f4f7702a69093514af81091fb4a38933cfea17c16038f91b8d8b686ce4d5edc7202dec1061e93b0f437efaa28f86348210a96173b99e76c7fd5582d92aa3969b5f208b6590496b051d5e77a3b3ac499826fcefdc80e17e2d93f21bc09dfc877b6900ff9af0ccc8b7dbe5b5496502d247b6a1e5229bf89961049c9bd386d9ecdac85721effcc4d1fa1db1de1521cc01c5c0a067c00798ece2906d5b23bf6b8b48a1620ae9c5324a872cb09fb1e62a0e434a704a2fa1e11c9ecb8d2364ddfe8a974fdd3a724b673069a8e3bd95cd0b3112582cb9480e9c1a3794cbed80ffd14718addb3a822f48e65a3f7480240156f2bb2a581faacde59ab8db500a44ec8b1b1890310b6d92e5d086816e15e61c5a51b8ee30ca9035b2193e2a95ea49c2b8ecc3882698b73db38b5dd1876d6bd40207589d192d2207d0c25404bea3a113e3eede24fe01ac8785ac0673bb7ff7bde49a5a25b4cdb567d0e0235cce468eff2b843ae20f1f46b5cc9eee2d879b36ff7fbbcaad34c3e8f41d450ea89b8e4f69b8aba6688afc54be82d0b32c566f257483db1369752810ed79f3299e0a3b16f19c75c6050519e062c7987ffe7d5928800be73485198ab1844eaaf45fb9075f8d43e2eddd03c17cf5050aeb49bfdff3cfc7f993775ae97ba39d2f0c5e32b2681b9ed9cfced1fa80a8dcd0cac6c7bb521e532c349a14a093c6659d7723bfe99812e5bd84c2d553c96268c834010267d1e292617f47cd32bc064076b9264e7b67192d91a61b0f54f3276b22b2cca1213bbed6d2effefb1a100d0723c9e00e077a5ed3ee31a57d19999e1b8ae329a055dcb6f4842e90432473562de7e9c4e8cc757fddda8f4195ef26beace59fa465ddfb22885f4414f9d08f8faee81c7995e4800ced36ebe8995535d22f1c987da33e0dd5ae4acc5fda0ea5e3254ace08bf3f89d91b1f3a43e4dac85a587f008815bdfeb33b249cb2f4d19ac1d0e52c721a3df7251777504584a48b7e5d0676ea05027c626f8b998fb2265d759e660f77d58366cdac92b1faa94ad64085973cce2c47d4242d54aa703691f21985bf712821fb7abd999bcda6950e75d610ecca37c371cfb22128f8051d04f5aa8f0793c1347745d06d29b15c824f7e1336ba1face3e448724a4ff9d2d457538f41a2c78eaa32210cf5ff70cb298d3968f351534e702208c1518f1889b517e77f28c4663323f53257c21d146faba0b76936a47947daded8dfc186b8b01c3614e8c7eb10259eafa0b40f4be77aada10e430b0cb9a3d6f1b8921435d3f515bb5d1694832147215451f1b47c7fca6176863b8f3bce8978a6ed7e636544ff01aa42993a7bdbcece94bd1a477606abd24b976750cf12a41d413d66d0e22485096da898b35baf0268546c251e15f4247c06d4e046419265d70b07eaa8cffc2712ba384033bf3546f943396099f369af9a1704c9a1f5bdfe814a8b76a4de20e7314682c471053c734f12ff03a51ef5fbc689f9faa57a5143a128370dca00a11c360df31b324308425f4c0fd75c1a1ecbcd54f020600c799f39fc4074393a89956bcd539ef67a8513281844fe8ee651eded8e8a50476cd578ab05e7d4c94164e19257b707dfefdab7c341e806617791c8150f6d800b8ab7c156ca6e8786ff3ae284cdbe1566c4ecb7ab41409c8045eb511ebf4978a187acd1acfe1b5675e31cb2eed4dcb41378f0a745fe16cb58f2b6dade2868ff8eda2031acb9c735698b8af07c61cb464f7d38a8989d5e2aadbccacdea3f3fd7b55bd95240762a0a6fda65de2321fa0a3b144a419560d41309d303e101eb0480cf44375b04f806749536b66e8134e8d5bede67d83c786fa2fdf513a59bbcb4dfcaf7ef4175bb856e9f4e9eb82223ff9860b4f226c707f5e3908c0b5a671c4e78b27f01249a33702d2bf68a456dcf6e85efe1349b8ab4b9ea1ff6d11e93e193648bc0a24884e7da661786eb7ee2d3290957db2e09efe0e6550e8a9df721107aedb1ff8cceac0bb432465b4a662f689eaf22d30951f377d7547707ba646fce26a166ca036ce9b412921b98dfa068f63e723d07bac0d6df55ed739a42b863963e03588cb0db862ecde85201a2c300e30130daaeffbee15d7dc68150f638a18aa4d64309111f9a512f626081b1e0894755d45ae6a2faa6a267ee86dfa4c744b95d8945f99dc2f882ef47884ec2059b44744f0c9b0305efc2024deaabd298aa289c39a4d182751969ef4085228a2d133455783b7a0a5795e1d0937493731acf071445d9f31ad931def29ea39cb31e04af6c7237e7c60a67d3a40a2085a6145c6299008baddfb5e6163b5eb830de126526a60469c833e15b83fb7f751d82b1f8ecddde83b91ecf3226eeb065afa6d3f5143bbd20ba31ec1aabe3104c552717bb1f98feabac62435e43fc009f00ad2621b36d2d2bebdd2b752ea291787d86bd2ee35685df128055d6cea42f2ed87be5101a9e0df33344842d7e252f5ff3d9b7d26e631cbb826056894fd4f4c5cc338af65f901b9b3fc0cc50eaedbfa84bd2d0afd2bff75bf7c84ff8c1f8ddc19382839c216d60f246a0e3b11f4e383a4f29903df433f3192cdcbfbfa7077bc975ac5efa756eebb6ed7a1b1267949cfd5fe0646c531c1ac404cc4addbfec307dda61a63cb9014f5a2444b03a15e20c61b78db50919202bb66f32caf26e483930d6e43759454847def3860c3e55b93953dbe669df1a0660fc5919b9ace0e29ace13c5a4e5f8853e8375dfe5d7281a8f3c610a1de0339cee2c31eedc2f8ad90f06d69a84e7299588efe047fcf8182e0bf7701f4117b527f8edce2462134f94ba1863ec799057fcae510d2c7046bd13a2b9cccf9d058b08500d7ff1e09fe1a06b7aaa59f920611d95ffb4e463ce50a44c0c8020a3492d00f6d5ae9caa70637d094887ec4bd6de44fd0f16c8af2f5eaf6c68144bf629da34c5fdb32227128f07a049ed123a834f251e9218dbbe0d3d7d88cccfbe4dd9af4bb1e4c7fd147c41d9f52ebf3069abb22766f1670f72fd35ae631012a1b65f9a324748f7e73d33295d6a5b33cd18f97d582cc6c965228cf4bc32d5136f9e6fe57efd2951789f762da63e6bddf8f9ae249231daf6b0afab7d74672e312e84abfa3e5f319e4f11b4c9c6be1bef8f1ebd4cb5c4d5e23c56afc384f994bceaf6f7703a1136cf963e033376e63cd5828467bdb991c121bf8ff61ecf19d7ab15e5666e2670577fcc5e97257d79525090c4b14138290a4f6c0c9c72f1ecc0a1b21508c96fc94261f842a7ca51334ca9b64266b64a2ce2b2da11c91304f586cf351b3f2d54140f8f7caf6dd38dde44e4095c00c7e827f932474fa537ae579413a4e4a8f66bd091026f64fde2324344f05aa49d79bae6f1a5845dff59f17240f18fe04c6ba9835ec9a70834e6136006a2a63dd7cd0b349de9eba85c816197a974d3fb0d3d706159938924d9947075b871626a13ded135da937c8b070abaa39e4c42555cba4f5646a7418e6f87bdf2318fe76b4dbd499883765e7927a6d63875a9948827ed787c3418bd2eb4f80cc5d088f4443c4fc81904bcdbd483cc7ccac2234f519e6e2ea5eadaeb6c60e8a99d2dad400bedebaca9e637659386a1b4a9da6c6e81084e2f546ae91b8b97657208c35b26a94eae424fa98a6ef05ad5c658a36beace078eaf27fb1724ed616ddd2d696338d5632bdbb5112bffb36c8176379b14710ee70917e5a7fb12d72145a32901fe0cd545b69c5b9575663db5a22e3ec375a393c1ae7090958e4004c17c634a0a3d4d56be8158a8aa2768c656e4428b744298d0180c82f8f7b010fe275421ab74bbaf574a325c127a35419652571d3d4566cf4c096f80b5fdc7b7e8dcd10fe952deb5fe17841140bd462a3ec40dfade14d33636f5800482807ab381a28501216c32b29df5701a3f45994b4a23713ad1e940175439bb3ce17a7d5c41f23a0ad898cb2ced8620aff9ac9b8a86d9e54fc7ce5c31ec061c4ade4825592a6d4d6fc099597b2bcdbe130546973fcb4f2c6f16b5be522e1978cf890f3fb87223d1cc033e25e0527bb1106059baa71b0c2077b4c88f589f3389ac3334ed8a96e8d9fad8983bd932401f3222250407af4a133263cac403159ea57fdecd8dc81df816d57ad879c80a5a1bcb63536fa01927c671ea194f487c7412a5583816c6c699e4b2976f8daea9a7f0348c2b3effb625d5bbb5cf29a0485da612ed24e99a4f78849a623d901b6cc5c446725b8225b742ce5340dad2bef259b107700a645e5f14d77df170bb111e0400c4927c7c130013041cba96403dcfdb75e163c2dece14de93f6f3535bba2b230ae10784e708535cbcdd9924eb1079a7d586e6a0ee19fa1e97d78157a5b77fa94fb4ce5496ae70c13385d57a2de19309463a472e03b5f4b34bf24f9fb9f29e6dd181d435db144c3e909c8e267d878eb09a66fb4b351717f3a5bda552088b368ae033926aaa8101389d73d54506bcd1807f739d1b408f9f14cc1bf5cef16d51c3e0e519592c7e12e3be7f78e6c337cf88f943c67a785d0176f4e3db5d4214aba84fd7c68427da2348101c5dabe08c95a2cfe5dc874e16110bd90ebda3dbfee60eea01a8628b175fe1a6c35de7e133ed0b4664dc00ab96e723a6085d7e28397d83a269a197632ab5336762f244199b392a96f9bc428d6a4a5444bf817645a7880227886b991475206bfbd13c5a22a7b38aa3b0eedf3cdfd5246c962067ead937fdb916442ccb1cee080965fc649decbcffadd23539082850f5d254e2183ccbd71313758fe0695de965fe2ddb9fb70e2c599ac30c51822d167649793549436b1dbf50940396c5cbf0fd437d8bf183f48152c5be7bc7c3d4ee5ea86e0d3eb0228a9f9384ca244b0bdebb83d2d1a4111f76ca8369f459119ea1e4afc1adaed715b37099699d7111935931eea9ac5aa5e1483544731ca40ebec2fd42f8a4897522dcb4e4e20ae09efd50343e3cc971b6f18d9b8eb8df262aa91f76b721abc7afeb8df8d6a9b83bb0c4beada590119cc694ad90290a91c86e39c499f5fed27ff2b333296f2324fb42339020100a7eab169df53e1514ad553363edb4f65e1edc758f6d87d1261c70f4e422a387bd710326dd22e9053910a88b2a31c5760ae6a785bbf0cdc4304eb15c184b55129cfb3255fca75d0477485eae8e2c8d6ce1813749e221273aa247e359e589d343d29e1069cd02e3364744f1b0bfda98d4c4c531b8f39dd10784131276349621d48de83b10532bc0d9daa2ddea4fcf2abdc3728ba6bf8d585c67afcf7d5ddd42813de82b2655d64de794a4d2882986feff93fbb4e5ec6c2868d6edb7250ff76071283dab4656a35c2871fd4b702e022c4033fbcadf18b56e809801fba44d8cdde630087f0f6f64873c9d142098b23bb39180ed63a1623cfd67ef8ec9a28181e4a6439ac30c8855f30f3baa6301533f692ecdbe5aaa0c9cdf3fbd77386c834594785435f000528aa3ecbd26c817dc17d8bbd53b994c9460c552b6d083d3306da928684ef042bed687b77082cc1ba67c8014a40330d9de0edee560105cd3defa186e994ba3df0d7cd4e8298184c33f19e669744a78e991cacbf98a74001e9eb7d3fec139632e75f33ba34cbd2b4ac73a7886c6961506f7664f4659bb1c2"}) ioctl$NS_GET_OWNER_UID(r20, 0xb704, &(0x7f000000e240)=0x0) write$FUSE_DIRENTPLUS(r19, &(0x7f000000e280)={0x650, 0x0, r6, [{{0x4, 0x0, 0x7f, 0x40, 0x6, 0x80000000, {0x1, 0xd, 0xfffffffffffffe01, 0x100000001, 0x6, 0x1200, 0x7fff, 0x1, 0x4, 0xa000, 0x6, r21, r18, 0xfffffffa, 0x8969}}, {0x0, 0xfffffffffffff654, 0x2, 0x5, 'fd'}}, {{0x4, 0x1, 0x10, 0x0, 0x7, 0x9, {0x1, 0x7, 0xfffffffffffffffd, 0x0, 0x100, 0x9, 0xfffff1b3, 0x0, 0x9, 0xc000, 0xd8c7, r7, r17, 0x4}}, {0x2, 0xfa2, 0x2, 0x2, 'fd'}}, {{0x5, 0x2, 0x200, 0xb3, 0x8, 0x3cb1, {0x4, 0x5, 0x6, 0x5, 0x4, 0xf4, 0x9, 0x2, 0x3, 0x6000, 0x1, r7, r8, 0x800, 0x2}}, {0x0, 0x7ff, 0x2, 0x3, '$#'}}, {{0x0, 0x1, 0x4, 0xd8, 0x5, 0x4, {0x1, 0x9, 0x5, 0x1ff, 0x100000000, 0x1, 0x4, 0x7fffffff, 0x7, 0x6000, 0x6, r12, r8, 0x3, 0x9}}, {0x5, 0xfffffffffffffff7, 0x2, 0x0, 'P{'}}, {{0x6, 0x1, 0x77a, 0x6, 0x800, 0x0, {0x5, 0x9, 0xbc47, 0x6, 0x3, 0xffffffffffffff17, 0x0, 0xe, 0x1ff8000, 0xa000, 0xae, r12, r17, 0x9a, 0x6}}, {0x2, 0x7, 0x1, 0x0, '+'}}, {{0x0, 0x2, 0x7ff, 0x7fffffff, 0x51, 0x8, {0x1, 0xfffffffffffffffe, 0x5, 0x100000001, 0x9, 0xf, 0x1, 0x9, 0x7, 0xe000, 0x1, r7, r8, 0xfffffff9, 0x3}}, {0x0, 0x1, 0x8, 0x1, 'group_id'}}, {{0x6, 0x0, 0x401, 0x10001, 0xd99a, 0x9, {0x1, 0x6, 0x5, 0x4, 0xfffffffffffffffc, 0x9, 0x40, 0x8, 0xc, 0x2000, 0x5, r12, r8, 0x7}}, {0x4, 0xae5, 0x5, 0x0, 'euid>'}}, {{0x3, 0x1, 0x7, 0x7fffffff, 0x57a, 0x0, {0x6, 0x6, 0x3ff, 0xca43, 0x2, 0x9, 0xdf, 0x6, 0x7, 0xc000, 0x7, r12, r17, 0x7, 0x5}}, {0x0, 0x2, 0x7, 0x8, 'user_id'}}, {{0x5, 0x3, 0x0, 0x4, 0x4, 0x8, {0x0, 0x0, 0x2, 0x8, 0xfff, 0x0, 0x9, 0x7, 0x1000, 0x1000, 0xffff, r7, r8, 0xa, 0x93bd}}, {0x0, 0x1, 0x7, 0x9, 'user_id'}}, {{0x2, 0x0, 0x2, 0xe, 0x7, 0xffff, {0x4, 0x8, 0x1, 0xcbc8, 0x3, 0x4, 0x3f, 0x4, 0x2000, 0xa000, 0x7f, r12, r8, 0x80000001, 0x5f6}}, {0x6, 0x2e, 0x8, 0xd7, 'group_id'}}]}, 0x650) sendmsg$nl_netfilter(r20, &(0x7f000000ec40)={&(0x7f000000e900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000ec00)={&(0x7f000000e940)={0x2a4, 0x8, 0x5, 0x301, 0x70bd25, 0x25dfdbfe, {0x1, 0x0, 0x2}, [@typed={0x14, 0x44, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x18c, 0xd6, 0x0, 0x1, [@typed={0x4, 0x110}, @generic="822b80c7971aab25abd85fb4dec889fc8645fd7323818616f02816ff3ed206cf5c82929b607a989989d57ac46bfa4e3d4eb09bd3e0c6d9573e4ab5c8fe396f4b50a81f5226682d5860499e419d30e1c512ad2334a400bf7675302efb29d76ec7b7c9ff2b520653de13005be58cbad6ac11f4f2a4c40475c3acdd3ff566d3b5565ce5761e1c74fa2fb5fb27", @generic="463bdfae8b960395c9e23f02e6ec1687ba1c68af6c7fb37758d5a2851914d01d256b0c67a733ae9a658719fdb23efb39b53b4a628f4e02fc96a093dacb32e2076769d3ab6132eb34cb39ab972a4c5b44f9d57c5513e26639f04cc62a23548c9611368104aa4062eb621bb44a9f4409932cfaf67da361923913e33d72caf5b5b8e9241f9738f24a8bbd0598a595f50b70d106c027bb45d9f02e0a5eee5472fdd076670a1d6a7444edd6f76fbbe778735c236e45a900a1deafc91da20cf90237338703a074646f8dd70444ec6d6ff731772199ed85af49013ed0cd6238e367c74eb8fb6d8a0b", @typed={0x14, 0x2c, 0x0, 0x0, @ipv6=@remote}]}, @typed={0x8, 0x145, 0x0, 0x0, @uid=r12}, @nested={0xe2, 0x25, 0x0, 0x1, [@nested={0x4, 0xc5}, @typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}, @typed={0x8, 0x8a, 0x0, 0x0, @fd=r15}, @generic="af5f74e104cc8d1a2c1c4d16253b201ddcc5013aae46f7f22aaa1f1d30465108b11dd6fb669748bc256737fe5826c9a6b55c4b039f018b3cd382d74e0f39f9044433d52781e41577d2f4ffc03368c96e2c0c5e444037a63c4514a851556895cca69bd942d87bc3", @generic="8d87651d703dfa1f0df01760bd48f38149ab9f80507becbe092f203bfc8938fcb01c4b224dc0ba73a7deeaf8d2ca8755c1f678382239cd1d157dff256bd8924776b1b6", @typed={0x8, 0x53, 0x0, 0x0, @pid=r13}, @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x16, 0x0, 0x0, @pid=r9}, @typed={0x8, 0xb1, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}]}, @generic='!']}, 0x2a4}, 0x1, 0x0, 0x0, 0x40040}, 0x42) 419.70193ms ago: executing program 0 (id=1390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000002100000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 417.06187ms ago: executing program 9 (id=1391): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0xffffffff, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xfc01, 0x2, 0x0, 0x7fff0000}]}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000140)=0x10001) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x104002e, &(0x7f0000000480)={[{@noquota}, {@nodioread_nolock}, {@noinit_itable}]}, 0x3, 0x453, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000006ac0)=""/153, &(0x7f0000006b80)=0x99) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r7, r5, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r6}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r8, 0x1, 0x2d, 0x0, &(0x7f00000000c0)) 339.939682ms ago: executing program 56 (id=1391): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0xffffffff, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0xfc01, 0x2, 0x0, 0x7fff0000}]}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000140)=0x10001) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x104002e, &(0x7f0000000480)={[{@noquota}, {@nodioread_nolock}, {@noinit_itable}]}, 0x3, 0x453, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000006ac0)=""/153, &(0x7f0000006b80)=0x99) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r7, r5, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r6}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r8, 0x1, 0x2d, 0x0, &(0x7f00000000c0)) 0s ago: executing program 8 (id=1393): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/6, 0x6}, 0x7}], 0x1, 0x102, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100), &(0x7f0000000200)=0x10) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r3 = socket$inet6(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000001d80)={0x0, 0x22, 0x2, @thr={&(0x7f0000000cc0)="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", &(0x7f0000001cc0)="38da62923c2f3546f301e154569e14fb88ef2955606e0b06f30cf2261d7026554ac8fde783161659cb99b27824fa21c174d63cc51da60eca087ec4e5cc12a756606f63ffd5bfe917bc6406378cdf9e097511b647fad2df6e404791ab155d6d52a0bdebec0e311f9babf03cef4eb02ff4185872674e9bcb162bc781f75235f90487445c63d86f23465877ba8dd91ecb01c5ad726c688c549e4aca2550b7de2e2c6d79fb0108c27523544683"}}, &(0x7f0000001dc0)=0x0) timer_gettime(r4, &(0x7f0000001e00)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd25, 0x25dfdbfc, {0x2, 0x1f, 0x9, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x30000000) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) io_submit(r1, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae03, 0x17) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:devicekit_exec_t:s0\x00', 0x26, 0x1) kernel console output (not intermixed with test programs): entered disabled state [ 220.367536][ T3710] device bridge_slave_0 entered promiscuous mode [ 220.533012][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.541913][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.550904][ T421] usb 9-1: USB disconnect, device number 21 [ 220.560955][ T317] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 220.585270][ T3710] device bridge_slave_1 entered promiscuous mode [ 220.814448][ T317] usb 4-1: Using ep0 maxpacket: 16 [ 220.995898][ T317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 221.031718][ T3773] overlayfs: unrecognized mount option "! [ 221.031718][ T3773] " or missing value [ 221.096575][ T317] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.112090][ T317] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 221.132315][ T317] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.679681][ T770] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 222.047474][ T24] kauditd_printk_skb: 678 callbacks suppressed [ 222.047487][ T24] audit: type=1400 audit(1787019718.758:17992): avc: denied { create } for pid=3788 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.102153][ T770] usb 5-1: Using ep0 maxpacket: 8 [ 222.107327][ T24] audit: type=1400 audit(1787019718.798:17993): avc: denied { getopt } for pid=3788 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.148665][ T24] audit: type=1400 audit(1787019718.798:17994): avc: denied { map_create } for pid=3788 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 222.188196][ T24] audit: type=1400 audit(1787019718.798:17995): avc: denied { bpf } for pid=3788 comm="syz.0.951" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.208888][ T24] audit: type=1400 audit(1787019718.798:17996): avc: denied { map_read map_write } for pid=3788 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 222.225894][ T770] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 222.232425][ T24] audit: type=1400 audit(1787019718.848:17997): avc: denied { ioctl } for pid=3781 comm="syz.4.949" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.283280][ T317] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.283593][ T770] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 222.293801][ T24] audit: type=1400 audit(1787019718.858:17998): avc: denied { ioctl } for pid=3781 comm="syz.4.949" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.322873][ T770] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 1024 [ 222.334556][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.363286][ T317] usb 4-1: Product: syz [ 222.368299][ T317] usb 4-1: Manufacturer: syz [ 222.372938][ T317] usb 4-1: SerialNumber: syz [ 222.378987][ T24] audit: type=1400 audit(1787019718.888:17999): avc: denied { ioctl } for pid=3781 comm="syz.4.949" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.405373][ T24] audit: type=1400 audit(1787019718.888:18000): avc: denied { mounton } for pid=3791 comm="syz.0.952" path="/72/file0" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 222.427907][ T24] audit: type=1400 audit(1787019718.907:18001): avc: denied { ioctl } for pid=3781 comm="syz.4.949" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.537171][ T770] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 222.555028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.563847][ T770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.572690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.577581][ T770] usb 5-1: Product: syz [ 222.593407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.601969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.610488][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.617576][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.641009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.659666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.674892][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.682040][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.689838][ T770] usb 5-1: Manufacturer: syz [ 222.694464][ T770] usb 5-1: SerialNumber: syz [ 222.721674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.738151][ T3785] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 222.748967][ T3785] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 222.766327][ T112] device bridge_slave_1 left promiscuous mode [ 222.772586][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.084550][ T3782] 9pnet: Insufficient options for proto=fd [ 223.091485][ T112] device bridge_slave_0 left promiscuous mode [ 223.097673][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.159194][ T770] usb 5-1: invalid MIDI in EP 0 [ 223.164520][ T770] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 223.175023][ T112] device veth1_macvtap left promiscuous mode [ 223.181145][ T112] device veth0_vlan left promiscuous mode [ 223.182462][ T770] usb 5-1: USB disconnect, device number 15 [ 223.349497][ T312] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 223.483873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.502099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.525394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.535107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.591957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.600540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.625938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.633954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.654354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.672501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.683196][ T3710] device veth0_vlan entered promiscuous mode [ 223.731785][ T317] usb 4-1: 0:2 : does not exist [ 223.740723][ T317] usb 4-1: USB disconnect, device number 4 [ 223.764704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.781633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.802798][ T3710] device veth1_macvtap entered promiscuous mode [ 223.813154][ T312] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.828902][ T312] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 223.846157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.855270][ T312] usb 9-1: config 1 has no interface number 0 [ 223.861777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.874794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.886788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.895148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.953706][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 223.991740][ T3820] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 224.044006][ T312] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 224.057309][ T312] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.075648][ T312] usb 9-1: Product: syz [ 224.086514][ T312] usb 9-1: Manufacturer: syz [ 224.106907][ T312] usb 9-1: SerialNumber: syz [ 224.336352][ T3832] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 224.408376][ T312] usb 9-1: USB disconnect, device number 22 [ 224.446173][ T112] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 225.622543][ T421] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 226.039203][ T421] usb 5-1: device descriptor read/64, error -71 [ 226.688742][ T421] usb 5-1: device descriptor read/64, error -71 [ 226.934512][ T3875] 9pnet: Insufficient options for proto=fd [ 226.967982][ T3863] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.010248][ T421] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 227.030763][ T3863] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.058775][ T3863] device bridge_slave_0 entered promiscuous mode [ 227.091332][ T24] kauditd_printk_skb: 389 callbacks suppressed [ 227.091345][ T24] audit: type=1400 audit(1787019723.779:18391): avc: denied { ioctl } for pid=3859 comm="syz.4.972" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.137070][ T3863] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.187235][ T24] audit: type=1400 audit(1787019723.809:18392): avc: denied { ioctl } for pid=3859 comm="syz.4.972" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.237827][ T3863] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.243162][ T24] audit: type=1400 audit(1787019723.829:18393): avc: denied { ioctl } for pid=3859 comm="syz.4.972" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 227.257253][ T3863] device bridge_slave_1 entered promiscuous mode [ 227.293225][ T421] usb 5-1: device descriptor read/64, error -71 [ 227.301937][ T24] audit: type=1400 audit(1787019723.839:18394): avc: denied { execmem } for pid=3879 comm="syz.6.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 227.326259][ T24] audit: type=1400 audit(1787019723.899:18395): avc: denied { read write } for pid=2061 comm="syz-executor" name="loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.350755][ T24] audit: type=1400 audit(1787019723.899:18396): avc: denied { read write open } for pid=2061 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.376146][ T24] audit: type=1400 audit(1787019723.899:18397): avc: denied { ioctl } for pid=2061 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 227.402818][ T24] audit: type=1400 audit(1787019723.929:18398): avc: denied { read } for pid=3879 comm="syz.6.979" dev="nsfs" ino=4026532367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 227.424364][ T24] audit: type=1400 audit(1787019723.929:18399): avc: denied { read open } for pid=3879 comm="syz.6.979" path="pid:[4026532367]" dev="nsfs" ino=4026532367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 227.448352][ T24] audit: type=1400 audit(1787019723.958:18400): avc: denied { map_create } for pid=3879 comm="syz.6.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 227.470913][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.8.980'. [ 227.522283][ T3883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.980'. [ 227.895261][ T421] usb 5-1: device descriptor read/64, error -71 [ 228.044038][ T421] usb usb5-port1: attempt power cycle [ 228.135567][ T3897] EXT4-fs error (device loop6): __ext4_get_inode_loc:4451: comm syz.6.984: Invalid inode table block 5 in block_group 0 [ 228.196440][ T3897] EXT4-fs (loop6): get root inode failed [ 228.237166][ T3897] EXT4-fs (loop6): mount failed [ 228.381753][ T3903] PM: suspend entry (deep) [ 228.464943][ T3908] FAULT_INJECTION: forcing a failure. [ 228.464943][ T3908] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 228.478285][ T3908] CPU: 1 PID: 3908 Comm: syz.4.988 Not tainted syzkaller #0 [ 228.485584][ T3908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.495644][ T3908] Call Trace: [ 228.498950][ T3908] __dump_stack+0x21/0x24 [ 228.503296][ T3908] dump_stack_lvl+0x1a7/0x208 [ 228.507980][ T3908] ? show_regs_print_info+0x18/0x18 [ 228.513198][ T3908] dump_stack+0x15/0x1c [ 228.517366][ T3908] should_fail+0x3ab/0x500 [ 228.521834][ T3908] should_fail_alloc_page+0x4f/0x60 [ 228.527041][ T3908] __alloc_pages_nodemask+0x11a/0x640 [ 228.532419][ T3908] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 228.537970][ T3908] ? __kasan_check_write+0x14/0x20 [ 228.543094][ T3908] ? up_write+0x57/0x120 [ 228.547349][ T3908] ? __anon_vma_prepare+0x38e/0x410 [ 228.552570][ T3908] handle_pte_fault+0x153b/0x3910 [ 228.557604][ T3908] ? _raw_spin_unlock+0x4d/0x70 [ 228.562479][ T3908] handle_mm_fault+0xf86/0x1720 [ 228.567355][ T3908] ? stack_trace_snprint+0xe0/0xe0 [ 228.572477][ T3908] ? can_reuse_spf_vma+0xe0/0xe0 [ 228.577433][ T3908] ? do_sys_openat2+0x68e/0x750 [ 228.582296][ T3908] ? __kasan_check_write+0x14/0x20 [ 228.587419][ T3908] ? down_read_trylock+0x106/0x160 [ 228.592550][ T3908] ? __init_rwsem+0x1c0/0x1c0 [ 228.597243][ T3908] ? vmacache_update+0xb7/0x120 [ 228.602105][ T3908] ? find_vma+0x13b/0x150 [ 228.606446][ T3908] do_user_addr_fault+0x576/0xe20 [ 228.611489][ T3908] ? do_kern_addr_fault+0x80/0x80 [ 228.616542][ T3908] ? rw_verify_area+0x1c0/0x360 [ 228.621410][ T3908] exc_page_fault+0x5a/0xc0 [ 228.625920][ T3908] asm_exc_page_fault+0x1e/0x30 [ 228.630908][ T3908] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 228.637242][ T3908] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 228.656857][ T3908] RSP: 0018:ffffc90000bf7da0 EFLAGS: 00050202 [ 228.662958][ T3908] RAX: ffffffff823e1001 RBX: 0000000000000010 RCX: 0000000000000002 [ 228.670943][ T3908] RDX: 0000000000000000 RSI: ffffc90000bf7e00 RDI: 0000000000000000 [ 228.678921][ T3908] RBP: ffffc90000bf7dd0 R08: 0000000000000000 R09: 1ffff9200017efc1 [ 228.686913][ T3908] R10: dffffc0000000000 R11: fffff5200017efc2 R12: 00007ffffffff000 [ 228.694894][ T3908] R13: 0000000000000010 R14: ffffc90000bf7e00 R15: 0000000000000000 [ 228.702878][ T3908] ? _copy_to_user+0x61/0x90 [ 228.707499][ T3908] ? _copy_to_user+0x78/0x90 [ 228.712101][ T3908] put_timespec64+0xc5/0x120 [ 228.716705][ T3908] ? get_timespec64+0x1b0/0x1b0 [ 228.721574][ T3908] ? ns_to_timespec64+0x21/0xb0 [ 228.726438][ T3908] ? posix_cpu_clock_get+0x196/0x420 [ 228.731734][ T3908] __x64_sys_clock_gettime+0x21a/0x280 [ 228.737200][ T3908] ? __ia32_sys_clock_settime+0x2a0/0x2a0 [ 228.742926][ T3908] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 228.749004][ T3908] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 228.754648][ T3908] do_syscall_64+0x31/0x40 [ 228.759077][ T3908] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 228.765074][ T3908] RIP: 0033:0x7f36094210d9 [ 228.769509][ T3908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.789135][ T3908] RSP: 002b:00007f3607e7a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 228.797561][ T3908] RAX: ffffffffffffffda RBX: 00007f36096a8fa0 RCX: 00007f36094210d9 [ 228.805542][ T3908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffffffffffffffe [ 228.813534][ T3908] RBP: 00007f3607e7a090 R08: 0000000000000000 R09: 0000000000000000 [ 228.821512][ T3908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.829499][ T3908] R13: 00007f36096a9038 R14: 00007f36096a8fa0 R15: 00007ffe5f09a8b8 [ 228.851074][ T3903] Filesystems sync: 0.450 seconds [ 228.856224][ T3903] Freezing user space processes ... [ 228.865887][ T3903] Freezing of tasks failed after 0.004 seconds (4 tasks refusing to freeze, wq_busy=0): [ 228.875941][ T3903] [ 228.878291][ T3903] OOM killer enabled. [ 228.882309][ T3903] Restarting tasks ... done. [ 228.917991][ T3903] Abort: One or more tasks refusing to freeze [ 228.956782][ T3903] PM: suspend exit [ 229.124788][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.143245][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.150759][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.991'. [ 229.168010][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.991'. [ 229.177820][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.991'. [ 229.187458][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.991'. [ 229.212324][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.991'. [ 229.242496][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.991'. [ 229.259992][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.991'. [ 229.313193][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.991'. [ 229.354194][ T3916] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.361268][ T3916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.581302][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.594497][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.623015][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.630098][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.785415][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.803395][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.823561][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.842187][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.849368][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.032133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.046941][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.207214][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.218239][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.229855][ T3934] ip_tables: iptables: counters copy to user failed while replacing table [ 230.331569][ T3923] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 230.352885][ T3923] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 230.362765][ T3923] F2FS-fs (loop6): invalid crc value [ 230.549184][ T3923] F2FS-fs (loop6): Found nat_bits in checkpoint [ 230.619807][ T3923] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 230.627012][ T3923] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 230.660293][ T9] device bridge_slave_1 left promiscuous mode [ 230.667240][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.732963][ T9] device bridge_slave_0 left promiscuous mode [ 230.739234][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.813904][ T9] device veth1_macvtap left promiscuous mode [ 230.819988][ T9] device veth0_vlan left promiscuous mode [ 231.317622][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.343682][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.352494][ T3953] PM: suspend entry (deep) [ 231.409537][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.421788][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.434106][ T3953] Filesystems sync: 0.065 seconds [ 231.439208][ T3953] Freezing user space processes ... [ 231.440167][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.444462][ T3953] [ 231.447652][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.452877][ T3953] Freezing of tasks failed after 0.005 seconds (6 tasks refusing to freeze, wq_busy=0): [ 231.473005][ T3953] [ 231.475377][ T3953] OOM killer enabled. [ 231.479396][ T3953] Restarting tasks ... [ 231.485904][ T3863] device veth0_vlan entered promiscuous mode [ 231.514279][ T3953] done. [ 231.517108][ T3953] Abort: One or more tasks refusing to freeze [ 231.536496][ T3953] PM: suspend exit [ 231.665598][ T3946] F2FS-fs (loop6): Found nat_bits in checkpoint [ 231.844414][ T3946] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 231.845247][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.901341][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.945560][ T3863] device veth1_macvtap entered promiscuous mode [ 231.980752][ T3972] PM: suspend entry (deep) [ 232.051483][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.066111][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.084385][ T3972] Filesystems sync: 0.076 seconds [ 232.089688][ T3972] Freezing user space processes ... [ 232.090263][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.104141][ T3972] [ 232.106499][ T3972] Freezing of tasks failed after 0.014 seconds (34 tasks refusing to freeze, wq_busy=0): [ 232.116607][ T3972] [ 232.119346][ T3972] OOM killer enabled. [ 232.123338][ T3972] Restarting tasks ... [ 232.130625][ T24] kauditd_printk_skb: 492 callbacks suppressed [ 232.130638][ T24] audit: type=1400 audit(1787019728.793:18893): avc: denied { module_request } for pid=3863 comm="syz-executor" kmod="netdev-geneve0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 232.148127][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.177573][ T3972] done. [ 232.180384][ T3972] Abort: One or more tasks refusing to freeze [ 232.186488][ T3972] PM: suspend exit [ 232.219763][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.252995][ T24] audit: type=1400 audit(1787019728.793:18894): avc: denied { sys_module } for pid=3863 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 232.344608][ T24] audit: type=1400 audit(1787019728.793:18895): avc: denied { module_request } for pid=3863 comm="syz-executor" kmod="geneve0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 232.383607][ T24] audit: type=1400 audit(1787019728.852:18896): avc: denied { module_request } for pid=3863 comm="syz-executor" kmod="netdev-geneve0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 232.447731][ T24] audit: type=1400 audit(1787019728.902:18897): avc: denied { unmount } for pid=2061 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 232.520072][ T24] audit: type=1400 audit(1787019728.902:18898): avc: denied { module_request } for pid=3863 comm="syz-executor" kmod="netdev-geneve0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 232.543657][ T24] audit: type=1400 audit(1787019728.902:18899): avc: denied { module_request } for pid=3863 comm="syz-executor" kmod="netdev-geneve1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 232.565916][ T24] audit: type=1400 audit(1787019728.912:18900): avc: denied { module_request } for pid=3863 comm="syz-executor" kmod="netdev-geneve1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 232.588835][ T24] audit: type=1400 audit(1787019728.912:18901): avc: denied { module_request } for pid=3863 comm="syz-executor" kmod="netdev-geneve1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 232.629890][ T24] audit: type=1400 audit(1787019728.912:18902): avc: denied { search } for pid=3980 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.950873][ T4011] __nla_validate_parse: 45 callbacks suppressed [ 232.950883][ T4011] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1010'. [ 233.217228][ T4013] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 13)! [ 233.296056][ T4013] EXT4-fs (loop1): group descriptors corrupted! [ 233.375377][ T4019] netlink: 'syz.4.1013': attribute type 10 has an invalid length. [ 233.406327][ T4019] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1013'. [ 233.625122][ T4028] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 233.906219][ T866] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 233.914192][ T4028] EXT4-fs (loop1): Test dummy encryption mode enabled [ 234.001001][ T4028] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,noinit_itable,test_dummy_encryption,inode_readahead_blks=0x0000000000000040,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 234.163338][ T4041] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 234.197701][ T1990] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 234.212139][ T4041] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.359632][ T866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 234.446393][ T4058] erofs: (device loop1): mounted with root inode @ nid 36. [ 234.459347][ T866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.469138][ T1990] usb 5-1: device descriptor read/64, error -71 [ 234.629090][ T4061] [EXT4 FS bs=1024, gc=1, bpg=255, ipg=32, mo=a803c028, mo2=0000] [ 234.640346][ T4061] System zones: 1-12 [ 234.646643][ T4061] EXT4-fs (loop6): 1 truncate cleaned up [ 234.652660][ T4061] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,sysvgroups,debug,noauto_da_alloc,init_itable,discard,journal_ioprio=0x0000000000000004,errors=remount-ro,nodiscard, [ 234.790635][ T866] usb 1-1: string descriptor 0 read error: -22 [ 234.797822][ T866] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 234.808635][ T866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.881043][ T1990] usb 5-1: device descriptor read/64, error -71 [ 235.152345][ T1990] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 235.363380][ T4072] device sit0 entered promiscuous mode [ 235.370534][ T4072] netlink: 'syz.8.1026': attribute type 1 has an invalid length. [ 235.378362][ T4072] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1026'. [ 235.437886][ T1990] usb 5-1: device descriptor read/64, error -71 [ 235.514177][ T866] usb 1-1: 1:1: cannot get freq at ep 0x1 [ 235.530175][ T866] usb 1-1: USB disconnect, device number 23 [ 235.672706][ T4082] bridge0: port 3(macsec1) entered blocking state [ 235.679677][ T4082] bridge0: port 3(macsec1) entered disabled state [ 235.696355][ T770] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 235.766864][ T655] udevd[655]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 235.865798][ T1990] usb 5-1: device descriptor read/64, error -71 [ 235.966290][ T770] usb 9-1: device descriptor read/64, error -71 [ 235.986408][ T1990] usb usb5-port1: attempt power cycle [ 236.086849][ T317] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 236.468794][ T770] usb 9-1: device descriptor read/64, error -71 [ 236.740024][ T770] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 237.111682][ T770] usb 9-1: device descriptor read/64, error -71 [ 237.406140][ T4111] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1038'. [ 237.414314][ T24] kauditd_printk_skb: 799 callbacks suppressed [ 237.414341][ T24] audit: type=1400 audit(1787019733.818:19702): avc: denied { prog_load } for pid=4108 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 237.560392][ T24] audit: type=1400 audit(1787019734.047:19703): avc: denied { mounton } for pid=4108 comm="syz.4.1038" path="/142/file0" dev="tmpfs" ino=811 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.603338][ T24] audit: type=1400 audit(1787019734.077:19704): avc: denied { unmount } for pid=3863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 237.633683][ T24] audit: type=1400 audit(1787019734.097:19705): avc: denied { ioctl } for pid=4071 comm="syz.8.1026" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.674000][ T24] audit: type=1400 audit(1787019734.137:19706): avc: denied { ioctl } for pid=4071 comm="syz.8.1026" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.699495][ T24] audit: type=1400 audit(1787019734.137:19707): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 237.721676][ T24] audit: type=1400 audit(1787019734.147:19708): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.725354][ T317] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.767471][ T317] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.779455][ T317] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.793204][ T317] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.803349][ T317] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.812704][ T24] audit: type=1400 audit(1787019734.147:19709): avc: denied { search } for pid=134 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.840069][ T770] usb 9-1: device descriptor read/64, error -71 [ 237.845253][ T317] usb 7-1: config 0 descriptor?? [ 237.882166][ T24] audit: type=1400 audit(1787019734.147:19710): avc: denied { search } for pid=134 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.904686][ T24] audit: type=1400 audit(1787019734.147:19711): avc: denied { read } for pid=134 comm="dhcpcd" name="n20" dev="tmpfs" ino=6785 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 237.996728][ T770] usb usb9-port1: attempt power cycle [ 238.216291][ T866] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 238.466299][ T4129] using random self ethernet address [ 238.473120][ T4129] using random host ethernet address [ 238.570830][ T317] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 238.582662][ T317] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 238.629351][ T866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.652733][ T866] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.683662][ T866] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.880327][ T866] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 238.893882][ T866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 238.907969][ T866] usb 1-1: Product: syz [ 238.913034][ T866] usb 1-1: Manufacturer: syz [ 238.917709][ T866] usb 1-1: SerialNumber: syz [ 239.010250][ T4147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1047'. [ 239.107095][ T4153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 239.208866][ T866] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 239.721836][ T866] usb 1-1: USB disconnect, device number 24 [ 239.826449][ T866] usblp0: removed [ 240.158301][ T770] usb 7-1: USB disconnect, device number 14 [ 240.549808][ T4178] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 241.060166][ T25] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 241.464445][ T4199] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1065'. [ 241.522957][ T4206] tipc: Started in network mode [ 241.527913][ T4206] tipc: Own node identity 6ef967d46499, cluster identity 4711 [ 241.535748][ T4206] tipc: Enabled bearer , priority 0 [ 241.653954][ T4205] tipc: Disabling bearer [ 241.672819][ T25] usb 7-1: config 0 has no interfaces? [ 241.833097][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 241.845881][ T4214] raw_sendmsg: syz.0.1067 forgot to set AF_INET. Fix it! [ 241.852990][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 241.862905][ T25] usb 7-1: Product: syz [ 241.867895][ T25] usb 7-1: Manufacturer: syz [ 241.872544][ T25] usb 7-1: SerialNumber: syz [ 241.880164][ T4215] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1068'. [ 241.881070][ T25] usb 7-1: config 0 descriptor?? [ 242.271646][ T312] usb 7-1: USB disconnect, device number 15 [ 242.491639][ T24] kauditd_printk_skb: 475 callbacks suppressed [ 242.491651][ T24] audit: type=1400 audit(1787019739.104:20187): avc: denied { view } for pid=4225 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 242.621334][ T24] audit: type=1400 audit(1787019739.104:20188): avc: denied { view } for pid=4225 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 242.654612][ T24] audit: type=1400 audit(1787019739.144:20189): avc: denied { mounton } for pid=4223 comm="syz.4.1071" path="/155/bus" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 242.682873][ T24] audit: type=1400 audit(1787019739.144:20190): avc: denied { create } for pid=4223 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.703905][ T24] audit: type=1400 audit(1787019739.144:20191): avc: denied { write } for pid=4223 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.724993][ T24] audit: type=1400 audit(1787019739.144:20192): avc: denied { write } for pid=4223 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.765447][ T24] audit: type=1400 audit(1787019739.154:20193): avc: denied { view } for pid=4225 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 242.817639][ T24] audit: type=1400 audit(1787019739.154:20194): avc: denied { view } for pid=4225 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 242.848838][ T24] audit: type=1400 audit(1787019739.154:20195): avc: denied { view } for pid=4225 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 242.887731][ T24] audit: type=1400 audit(1787019739.164:20196): avc: denied { view } for pid=4225 comm="syz.0.1070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 242.953005][ T4234] PM: suspend entry (deep) [ 243.002549][ T4234] Filesystems sync: 0.044 seconds [ 243.008208][ T4234] Freezing user space processes ... [ 243.029296][ T4234] Freezing of tasks failed after 0.015 seconds (2 tasks refusing to freeze, wq_busy=0): [ 243.039023][ T4234] [ 243.041350][ T4234] OOM killer enabled. [ 243.045324][ T4234] Restarting tasks ... done. [ 243.060744][ T4234] Abort: One or more tasks refusing to freeze [ 243.096216][ T4234] PM: suspend exit [ 243.771463][ T312] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 243.934217][ T4232] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.034613][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1080'. [ 244.174737][ T312] usb 2-1: config 0 has no interfaces? [ 244.354331][ T312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 244.404072][ T287] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 244.429761][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 244.449066][ T312] usb 2-1: Product: syz [ 244.453252][ T312] usb 2-1: Manufacturer: syz [ 244.468645][ T312] usb 2-1: SerialNumber: syz [ 244.478024][ T312] usb 2-1: config 0 descriptor?? [ 244.776033][ T287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.795757][ T287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 244.814940][ T287] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.947707][ T1990] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 244.997016][ T287] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 245.038934][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.064540][ T287] usb 1-1: Product: syz [ 245.072029][ T287] usb 1-1: Manufacturer: syz [ 245.080803][ T287] usb 1-1: SerialNumber: syz [ 245.096658][ T4290] ip_tables: iptables: counters copy to user failed while replacing table [ 245.127652][ T287] uvcvideo: Found UVC 1.00 device syz (046d:0821) [ 245.137146][ T287] uvcvideo: No valid video chain found. [ 245.374351][ T420] usb 1-1: USB disconnect, device number 25 [ 245.438947][ T1990] usb 7-1: unable to get BOS descriptor or descriptor too short [ 245.490928][ T4292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=4292 comm=syz.8.1092 [ 245.505703][ T4292] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1092'. [ 245.515829][ T4292] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1092'. [ 245.527137][ T4292] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1092'. [ 245.530042][ T1990] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.539692][ T4292] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1092'. [ 245.558928][ T1990] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.558937][ T287] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 245.559885][ T4292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4292 comm=syz.8.1092 [ 245.749722][ T1990] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 245.759408][ T1990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.767471][ T1990] usb 7-1: Product: syz [ 245.771771][ T1990] usb 7-1: Manufacturer: syz [ 245.776437][ T1990] usb 7-1: SerialNumber: syz [ 245.799921][ T287] usb 5-1: Using ep0 maxpacket: 8 [ 245.920800][ T287] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 246.044150][ T4279] udc-core: couldn't find an available UDC or it's busy [ 246.051387][ T4279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 246.091148][ T287] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.100237][ T287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.108870][ T287] usb 5-1: Product: у [ 246.113227][ T287] usb 5-1: Manufacturer: 羲㐳椐闬⡌ꍨ顪싀㧬噢Ꙁ擔⮩靄洔ℎ뇻推螹脎괌뗡쏨㕋뇂׺밪ᘱ࿏⌫叜ឍ犏㺊䨩㇃⁧ᤧ囕虂롫ꍒ࢞婽 [ 246.130033][ T287] usb 5-1: SerialNumber: 騘ⒹꚚ渀탁뵱葟除糬毬齰椂甚᫰隊େ徭ブ歿崄㿆훌䢨ꥂ︤ꙏ䝫滨ᆳᵖ尽꟫杓盛 [ 246.151344][ T1990] usb 7-1: 0:1 : does not exist [ 246.171534][ T1990] usb 7-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0 [ 246.181284][ T1990] usb 7-1: unit 0 not found! [ 246.195645][ T1990] usb 7-1: USB disconnect, device number 16 [ 246.217041][ T317] usb 2-1: USB disconnect, device number 17 [ 246.424884][ T4315] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.438616][ T4315] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.449828][ T656] udevd[656]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 246.523789][ T287] usb 5-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 246.532876][ T287] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 246.552973][ T287] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 246.561527][ T287] usb 5-1: found format II with max.bitrate = 0, frame size=1023 [ 246.574806][ T287] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 246.593965][ T287] usb 5-1: unit 6 not found! [ 246.615636][ T287] usb 5-1: USB disconnect, device number 22 [ 246.726402][ T4320] FAT-fs (loop1): Directory bread(block 64) failed [ 246.733028][ T4320] FAT-fs (loop1): Directory bread(block 65) failed [ 246.740890][ T4320] FAT-fs (loop1): Directory bread(block 66) failed [ 246.747777][ T4320] FAT-fs (loop1): Directory bread(block 67) failed [ 246.754446][ T4320] FAT-fs (loop1): Directory bread(block 68) failed [ 246.760983][ T4320] FAT-fs (loop1): Directory bread(block 69) failed [ 246.770904][ T4320] FAT-fs (loop1): Directory bread(block 70) failed [ 246.777661][ T4323] EXT4-fs error (device loop6): __ext4_get_inode_loc:4451: comm syz.6.1104: Invalid inode table block 5 in block_group 0 [ 246.784009][ T4320] FAT-fs (loop1): Directory bread(block 71) failed [ 246.791856][ T4323] EXT4-fs (loop6): get root inode failed [ 246.802546][ T4323] EXT4-fs (loop6): mount failed [ 246.808554][ T4320] FAT-fs (loop1): Directory bread(block 72) failed [ 246.815730][ T4320] FAT-fs (loop1): Directory bread(block 73) failed [ 247.002987][ T4320] attempt to access beyond end of device [ 247.002987][ T4320] loop1: rw=524288, want=1196, limit=256 [ 247.034548][ T4320] attempt to access beyond end of device [ 247.034548][ T4320] loop1: rw=0, want=1196, limit=256 [ 247.059233][ T4320] attempt to access beyond end of device [ 247.059233][ T4320] loop1: rw=0, want=1196, limit=256 [ 247.121000][ T4320] attempt to access beyond end of device [ 247.121000][ T4320] loop1: rw=0, want=1196, limit=256 [ 247.152823][ T4320] attempt to access beyond end of device [ 247.152823][ T4320] loop1: rw=0, want=1196, limit=256 [ 247.290353][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 247.518923][ T24] kauditd_printk_skb: 642 callbacks suppressed [ 247.518938][ T24] audit: type=1400 audit(1787019744.113:20839): avc: denied { ioctl } for pid=4348 comm="syz.1.1112" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 247.587081][ T287] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 247.707882][ T24] audit: type=1400 audit(1787019744.113:20840): avc: denied { ioctl } for pid=4348 comm="syz.1.1112" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 247.767889][ T24] audit: type=1400 audit(1787019744.153:20841): avc: denied { unmount } for pid=2504 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 247.863416][ T24] audit: type=1400 audit(1787019744.153:20842): avc: denied { ioctl } for pid=4348 comm="syz.1.1112" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 247.938863][ T24] audit: type=1400 audit(1787019744.153:20843): avc: denied { ioctl } for pid=4348 comm="syz.1.1112" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 247.968407][ T24] audit: type=1400 audit(1787019744.153:20844): avc: denied { ioctl } for pid=4348 comm="syz.1.1112" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.002623][ T24] audit: type=1400 audit(1787019744.153:20845): avc: denied { ioctl } for pid=4348 comm="syz.1.1112" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.068643][ T24] audit: type=1400 audit(1787019744.163:20846): avc: denied { create } for pid=4348 comm="syz.1.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.098516][ T24] audit: type=1400 audit(1787019744.173:20847): avc: denied { connect } for pid=4348 comm="syz.1.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 248.143621][ T24] audit: type=1400 audit(1787019744.173:20848): avc: denied { ioctl } for pid=4348 comm="syz.1.1112" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.239691][ T1990] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 248.429030][ T4367] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 248.447118][ T4367] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.555619][ T4367] EXT4-fs (loop6): shut down requested (2) [ 248.641346][ T1990] usb 2-1: No LPM exit latency info found, disabling LPM. [ 249.023509][ T1990] usb 2-1: config 3 has an invalid interface number: 164 but max is 1 [ 249.031712][ T1990] usb 2-1: config 3 has an invalid interface number: 135 but max is 1 [ 249.043519][ T1990] usb 2-1: config 3 has no interface number 0 [ 249.049933][ T1990] usb 2-1: config 3 has no interface number 1 [ 249.073956][ T1990] usb 2-1: config 3 interface 164 altsetting 6 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 249.113640][ T1990] usb 2-1: config 3 interface 164 altsetting 6 endpoint 0xA has invalid maxpacket 16, setting to 8 [ 249.133407][ T1990] usb 2-1: config 3 interface 164 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 249.163400][ T1990] usb 2-1: config 3 interface 164 altsetting 6 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 249.183917][ T1990] usb 2-1: config 3 interface 164 altsetting 6 endpoint 0x9 is Bulk; changing to Interrupt [ 249.203955][ T1990] usb 2-1: config 3 interface 164 altsetting 6 endpoint 0x7 has invalid maxpacket 1536, setting to 8 [ 249.234131][ T1990] usb 2-1: config 3 interface 135 altsetting 12 has a duplicate endpoint with address 0x7, skipping [ 249.264428][ T1990] usb 2-1: config 3 interface 135 altsetting 12 endpoint 0xC has invalid maxpacket 1023, setting to 0 [ 249.285084][ T1990] usb 2-1: config 3 interface 135 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 249.309155][ T1990] usb 2-1: config 3 interface 135 altsetting 12 endpoint 0x1 has invalid maxpacket 32, setting to 8 [ 249.327839][ T1990] usb 2-1: config 3 interface 135 altsetting 12 endpoint 0x8 has invalid maxpacket 64, setting to 0 [ 249.349335][ T1990] usb 2-1: config 3 interface 135 altsetting 12 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 249.377854][ T1990] usb 2-1: config 3 interface 164 has no altsetting 0 [ 249.390809][ T1990] usb 2-1: config 3 interface 135 has no altsetting 0 [ 249.598029][ T4395] PM: suspend entry (deep) [ 249.625612][ T1990] usb 2-1: New USB device found, idVendor=0403, idProduct=a5ae, bcdDevice=e5.dc [ 249.634675][ T1990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.659963][ T1990] usb 2-1: Product: 컥풬Ⴕ礇粬娀寊冐ﮘ⛲䕆虗뒜拷￳껃箕嘊⿽봸橨髎䍺뢡䋧쓼绾ﻴ㾏핐嫠ࢾ찎둃௣烩ثꠎ㳻㞘숯②엠軵⿒礧胹❳툩况䛉ᰡ쿂㍀谰鎅紐洃哒ꭰ﬑둫汎ﾧ햅싩躐኷딧謢琼锠꜁皚춉Ａ頵씁娖桼˴鎭鏍ᴩ훸蛀끄쌃⫢毠췇揮ꚉ䡓↴퍄㼹ᠠ靪碳懊竢樰 [ 249.703666][ T4395] Filesystems sync: 0.100 seconds [ 249.709707][ T4395] Freezing user space processes ... [ 249.710962][ T1990] usb 2-1: Manufacturer: ѕ [ 249.720826][ T1990] usb 2-1: SerialNumber: 拁ᤝ坿냢Ꭺ얎궇羂䒾퉼䕫욂툹嗚桮⧹⥹⤳偶꧹啵켌帚㙏藋轞闪뾝せ᭨战躺젛ዟᲺ冀縱儈魛휷딱艈 [ 249.737497][ T4395] [ 249.737508][ T4395] Freezing of tasks failed after 0.027 seconds (3 tasks refusing to freeze, wq_busy=0): [ 249.737511][ T4395] [ 249.737516][ T4395] OOM killer enabled. [ 249.737519][ T4395] Restarting tasks ... done. [ 249.778597][ T4395] Abort: One or more tasks refusing to freeze [ 249.784973][ T4395] PM: suspend exit [ 249.805908][ T1990] usb 2-1: can't set config #3, error -71 [ 249.817126][ T1990] usb 2-1: USB disconnect, device number 18 [ 249.982336][ T4402] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 250.017490][ T4402] EXT4-fs (loop6): Test dummy encryption mode enabled [ 250.079600][ T4402] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,mblk_io_submit,noinit_itable,test_dummy_encryption,inode_readahead_blks=0x0000000000000040,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 250.145284][ T4410] FAULT_INJECTION: forcing a failure. [ 250.145284][ T4410] name failslab, interval 1, probability 0, space 0, times 0 [ 250.158180][ T4410] CPU: 1 PID: 4410 Comm: syz.0.1127 Not tainted syzkaller #0 [ 250.165569][ T4410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.175638][ T4410] Call Trace: [ 250.178942][ T4410] __dump_stack+0x21/0x24 [ 250.183291][ T4410] dump_stack_lvl+0x1a7/0x208 [ 250.187986][ T4410] ? show_regs_print_info+0x18/0x18 [ 250.193200][ T4410] dump_stack+0x15/0x1c [ 250.197364][ T4410] should_fail+0x3ab/0x500 [ 250.201794][ T4410] ? avc_alloc_node+0x83/0x340 [ 250.206578][ T4410] __should_failslab+0xa4/0xe0 [ 250.211354][ T4410] should_failslab+0x9/0x20 [ 250.215875][ T4410] kmem_cache_alloc+0x3d/0x2d0 [ 250.220650][ T4410] avc_alloc_node+0x83/0x340 [ 250.225248][ T4410] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 250.230730][ T4410] ? _raw_spin_lock+0xf0/0xf0 [ 250.235432][ T4410] ? avc_xperms_free+0x270/0x270 [ 250.240392][ T4410] avc_compute_av+0x147/0x6b0 [ 250.245095][ T4410] avc_has_perm_noaudit+0x1fa/0x260 [ 250.250309][ T4410] ? avc_denied+0x1b0/0x1b0 [ 250.254832][ T4410] ? unwind_get_return_address+0x4d/0x90 [ 250.260484][ T4410] ? vm_unmapped_area+0x393/0xf60 [ 250.265539][ T4410] selinux_vm_enough_memory+0x10e/0x190 [ 250.271108][ T4410] ? selinux_syslog+0x120/0x120 [ 250.275976][ T4410] ? cap_vm_enough_memory+0x1c3/0x250 [ 250.281380][ T4410] security_vm_enough_memory_mm+0x6b/0xa0 [ 250.287123][ T4410] mmap_region+0x91c/0x19c0 [ 250.291645][ T4410] ? arch_get_unmapped_area+0x640/0x640 [ 250.297201][ T4410] ? cap_mmap_addr+0x165/0x2e0 [ 250.302017][ T4410] ? selinux_mmap_addr+0xbe/0xe0 [ 250.306968][ T4410] ? security_mmap_addr+0x72/0x90 [ 250.312026][ T4410] do_mmap+0x85f/0xf50 [ 250.316124][ T4410] vm_mmap_pgoff+0x1f4/0x350 [ 250.320728][ T4410] ? account_locked_vm+0x1a0/0x1a0 [ 250.325875][ T4410] ? slab_free_freelist_hook+0xc5/0x190 [ 250.331456][ T4410] ? __se_sys_memfd_create+0x324/0x3a0 [ 250.336939][ T4410] ? kfree+0xc0/0x270 [ 250.340938][ T4410] ksys_mmap_pgoff+0xfd/0x1e0 [ 250.345633][ T4410] __x64_sys_mmap+0xfa/0x110 [ 250.350242][ T4410] do_syscall_64+0x31/0x40 [ 250.354670][ T4410] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 250.360576][ T4410] RIP: 0033:0x7f8b7de83e42 [ 250.365046][ T4410] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 250.384673][ T4410] RSP: 002b:00007f8b7c8dcdf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 250.393145][ T4410] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b7de83e42 [ 250.401142][ T4410] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 250.409139][ T4410] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 250.417128][ T4410] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 250.425113][ T4410] R13: 00007f8b7c8dcee0 R14: 00007f8b7c8dcea0 R15: 0000200000000080 [ 250.445305][ T4402] EXT4-fs (loop6): re-mounted. Opts: (null) [ 250.519470][ T4413] PM: suspend entry (deep) [ 250.591347][ T4415] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 250.617789][ T4415] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.681278][ T4413] Filesystems sync: 0.141 seconds [ 250.699227][ T4413] Freezing user space processes ... [ 250.721012][ T4413] Freezing of tasks failed after 0.016 seconds (3 tasks refusing to freeze, wq_busy=0): [ 250.731366][ T4413] [ 250.733713][ T4413] OOM killer enabled. [ 250.737700][ T4413] Restarting tasks ... done. [ 250.799224][ T4413] Abort: One or more tasks refusing to freeze [ 250.815346][ T4413] PM: suspend exit [ 250.859241][ T4425] FAULT_INJECTION: forcing a failure. [ 250.859241][ T4425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.960288][ T4425] CPU: 1 PID: 4425 Comm: syz.1.1133 Not tainted syzkaller #0 [ 250.967785][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.977844][ T4425] Call Trace: [ 250.981164][ T4425] __dump_stack+0x21/0x24 [ 250.985503][ T4425] dump_stack_lvl+0x1a7/0x208 [ 250.990184][ T4425] ? sysvec_reschedule_ipi+0x69/0x70 [ 250.995471][ T4425] ? show_regs_print_info+0x18/0x18 [ 251.000680][ T4425] dump_stack+0x15/0x1c [ 251.004844][ T4425] should_fail+0x3ab/0x500 [ 251.009270][ T4425] should_fail_alloc_page+0x4f/0x60 [ 251.014471][ T4425] __alloc_pages_nodemask+0x11a/0x640 [ 251.019863][ T4425] ? __kasan_check_read+0x11/0x20 [ 251.024904][ T4425] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 251.030451][ T4425] ? __mod_memcg_lruvec_state+0x30/0x2c0 [ 251.036098][ T4425] ? __this_cpu_preempt_check+0x13/0x20 [ 251.041658][ T4425] ? lru_cache_add+0x15f/0x380 [ 251.046435][ T4425] handle_pte_fault+0x153b/0x3910 [ 251.051483][ T4425] __handle_speculative_fault+0xe77/0x1390 [ 251.057301][ T4425] ? finish_fault+0xa60/0xa60 [ 251.061999][ T4425] ? down_read_trylock+0x106/0x160 [ 251.067119][ T4425] ? __kasan_check_write+0x14/0x20 [ 251.072236][ T4425] do_user_addr_fault+0x846/0xe20 [ 251.077273][ T4425] ? do_kern_addr_fault+0x80/0x80 [ 251.082313][ T4425] ? debug_smp_processor_id+0x17/0x20 [ 251.087699][ T4425] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 251.093784][ T4425] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 251.099431][ T4425] exc_page_fault+0x5a/0xc0 [ 251.103947][ T4425] ? asm_exc_page_fault+0x8/0x30 [ 251.108899][ T4425] asm_exc_page_fault+0x1e/0x30 [ 251.113759][ T4425] RIP: 0033:0x7f61e143d258 [ 251.118184][ T4425] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 251.137800][ T4425] RSP: 002b:00007f61dffde470 EFLAGS: 00010206 [ 251.143877][ T4425] RAX: 0000000000201002 RBX: 00007f61dffde530 RCX: 0000000000000003 [ 251.151861][ T4425] RDX: 00000000000027ad RSI: 0000000000000fae RDI: 00007f61dffde5d0 [ 251.159840][ T4425] RBP: 0000000000000006 R08: 00007f61d7bbf000 R09: 0000000000000003 [ 251.167835][ T4425] R10: 00002000000079c2 R11: 000000000000550a R12: 0000000000000c01 [ 251.175820][ T4425] R13: 00007f61e163d000 R14: 0000000000000017 R15: 00007f61dffde5d0 [ 251.272185][ T4425] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 251.539382][ T4438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=4438 comm=syz.4.1137 [ 251.630262][ T4435] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1136'. [ 251.661298][ T4435] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 251.863598][ T4425] F2FS-fs (loop1): Invalid gid value -1 [ 251.984034][ T1990] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 252.045478][ T317] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 252.165489][ T4458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.172755][ T4458] IPv6: NLM_F_CREATE should be set when creating new route [ 252.180032][ T4458] IPv6: NLM_F_CREATE should be set when creating new route [ 252.244998][ T1990] usb 5-1: Using ep0 maxpacket: 16 [ 252.267228][ T4456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.309510][ T4458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.385622][ T1990] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 252.398080][ T1990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 252.412858][ T1990] usb 5-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 252.426221][ T4457] F2FS-fs (loop1): invalid crc value [ 252.432155][ T1990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.435874][ T420] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 252.451497][ T4457] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 252.459100][ T317] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 252.484329][ T1990] usb 5-1: config 0 descriptor?? [ 252.493474][ T4457] F2FS-fs (loop1): recover fsync data on readonly fs [ 252.500936][ T4457] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 252.506585][ T317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.554331][ T317] usb 1-1: config 0 descriptor?? [ 252.559365][ T24] kauditd_printk_skb: 527 callbacks suppressed [ 252.559380][ T24] audit: type=1400 audit(1787019749.134:21376): avc: denied { ioctl } for pid=4405 comm="syz.8.1125" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.677951][ T24] audit: type=1400 audit(1787019749.174:21377): avc: denied { unmount } for pid=3863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 252.697964][ T24] audit: type=1400 audit(1787019749.194:21378): avc: denied { ioctl } for pid=4443 comm="syz.0.1139" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.756547][ T24] audit: type=1400 audit(1787019749.194:21379): avc: denied { ioctl } for pid=4443 comm="syz.0.1139" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.777052][ T420] usb 9-1: Using ep0 maxpacket: 16 [ 252.804734][ T24] audit: type=1400 audit(1787019749.194:21380): avc: denied { ioctl } for pid=4443 comm="syz.0.1139" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 252.843674][ T24] audit: type=1400 audit(1787019749.204:21381): avc: denied { read write } for pid=3710 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.868086][ T24] audit: type=1400 audit(1787019749.204:21382): avc: denied { read write open } for pid=3710 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.907875][ T24] audit: type=1400 audit(1787019749.204:21383): avc: denied { ioctl } for pid=3710 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 252.934534][ T420] usb 9-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.959037][ T4463] udc-core: couldn't find an available UDC or it's busy [ 252.967660][ T420] usb 9-1: config 0 interface 0 has no altsetting 0 [ 252.974289][ T420] usb 9-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 252.985311][ T4463] udc-core: couldn't find an available UDC or it's busy [ 253.007989][ T420] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.017700][ T24] audit: type=1400 audit(1787019749.303:21384): avc: denied { map_create } for pid=4462 comm="syz.6.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 253.038503][ T1990] apple 0003:05AC:026C.0010: ignoring exceeding usage max [ 253.046309][ T420] usb 9-1: config 0 descriptor?? [ 253.067330][ T1990] apple 0003:05AC:026C.0010: unknown main item tag 0x3 [ 253.068216][ T420] usb 9-1: can't set config #0, error -71 [ 253.077366][ T1990] apple 0003:05AC:026C.0010: unknown main item tag 0x0 [ 253.087168][ T1990] apple 0003:05AC:026C.0010: unknown main item tag 0x0 [ 253.088177][ T24] audit: type=1400 audit(1787019749.303:21385): avc: denied { perfmon } for pid=4462 comm="syz.6.1145" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 253.094288][ T317] usb 1-1: Cannot set MAC address [ 253.120279][ T1990] apple 0003:05AC:026C.0010: unknown main item tag 0x0 [ 253.127793][ T317] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 253.136182][ T1990] apple 0003:05AC:026C.0010: hidraw0: USB HID v0.01 Device [HID 05ac:026c] on usb-dummy_hcd.4-1/input0 [ 253.158921][ T4463] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 253.162292][ T420] usb 9-1: USB disconnect, device number 26 [ 253.183162][ T4463] EXT4-fs (loop6): orphan cleanup on readonly fs [ 253.200353][ T4463] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.1145: bad orphan inode 15 [ 253.204209][ T317] usb 1-1: USB disconnect, device number 26 [ 253.280202][ T4463] ext4_test_bit(bit=14, block=18) = 1 [ 253.285628][ T4463] is_bad_inode(inode)=0 [ 253.319939][ T1990] usb 5-1: USB disconnect, device number 24 [ 253.339518][ T4463] NEXT_ORPHAN(inode)=1023 [ 253.351491][ T4463] max_ino=32 [ 253.373678][ T4463] i_nlink=0 [ 253.389050][ T4463] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2914: inode #15: comm syz.6.1145: corrupted xattr block 19 [ 253.479551][ T4463] EXT4-fs warning (device loop6): ext4_evict_inode:305: xattr delete (err -117) [ 253.539309][ T4463] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 253.566717][ T4472] fido_id[4472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 253.839958][ T4479] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 253.926283][ T4478] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 254.326714][ T4493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.703962][ T312] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 254.734065][ T301] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 254.983438][ T4507] PM: suspend entry (deep) [ 255.095894][ T312] usb 2-1: No LPM exit latency info found, disabling LPM. [ 255.115467][ T301] usb 9-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 255.128330][ T301] usb 9-1: config 0 interface 0 has no altsetting 0 [ 255.134953][ T301] usb 9-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 255.144168][ T301] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.156217][ T301] usb 9-1: config 0 descriptor?? [ 255.161272][ T4507] Filesystems sync: 0.172 seconds [ 255.161285][ T4507] Freezing user space processes ... [ 255.187602][ T4507] Freezing of tasks failed after 0.015 seconds (4 tasks refusing to freeze, wq_busy=0): [ 255.197635][ T4507] [ 255.199959][ T4507] OOM killer enabled. [ 255.203925][ T4507] Restarting tasks ... done. [ 255.212833][ T4507] Abort: One or more tasks refusing to freeze [ 255.220296][ T4507] PM: suspend exit [ 255.276015][ T312] usb 2-1: unable to read config index 0 descriptor/all [ 255.284140][ T312] usb 2-1: can't read configurations, error -71 [ 255.547058][ T301] usb 9-1: can't set config #0, error -71 [ 255.555657][ T301] usb 9-1: USB disconnect, device number 27 [ 255.740865][ T4526] EXT4-fs (loop6): Ignoring removed orlov option [ 255.787506][ T4526] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 255.899947][ T4526] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 255.935922][ T4540] xt_hashlimit: size too large, truncated to 1048576 [ 256.399986][ T287] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 257.014561][ T287] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.054037][ T4563] F2FS-fs (loop6): invalid crc value [ 257.104493][ T4563] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 257.137147][ T4563] F2FS-fs (loop6): recover fsync data on readonly fs [ 257.144600][ T4563] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 257.194395][ T287] usb 9-1: config 0 has no interfaces? [ 257.213127][ T4571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1178'. [ 257.217856][ T287] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 257.242928][ T287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.253670][ T287] usb 9-1: config 0 descriptor?? [ 257.265758][ T4570] xt_hashlimit: size too large, truncated to 1048576 [ 257.534365][ T4571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1178'. [ 257.588174][ T24] kauditd_printk_skb: 723 callbacks suppressed [ 257.588188][ T24] audit: type=1400 audit(1787019754.146:22097): avc: denied { read write } for pid=4542 comm="syz.1.1171" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.688897][ T24] audit: type=1400 audit(1787019754.176:22098): avc: denied { read write open } for pid=4542 comm="syz.1.1171" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.764883][ T24] audit: type=1400 audit(1787019754.176:22099): avc: denied { ioctl } for pid=4542 comm="syz.1.1171" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.817915][ T4544] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.821444][ T24] audit: type=1400 audit(1787019754.176:22100): avc: denied { ioctl } for pid=4542 comm="syz.1.1171" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 257.824444][ T4544] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 257.824450][ T4544] audit: backlog limit exceeded [ 257.862848][ T4544] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.869750][ T4547] audit: audit_backlog=65 > audit_backlog_limit=64 [ 257.879265][ T4547] audit: audit_lost=52 audit_rate_limit=0 audit_backlog_limit=64 [ 258.121436][ T4592] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1180'. [ 258.501986][ T4599] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 258.687711][ T4599] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.039858][ T770] usb 9-1: USB disconnect, device number 28 [ 259.060511][ T4604] EXT4-fs (loop6): Test dummy encryption mode enabled [ 259.067337][ T4604] EXT4-fs (loop6): Ignoring removed orlov option [ 259.114852][ T4604] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,auto_da_alloc,data_err=abort,orlov,,errors=continue [ 259.231107][ T4611] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1191'. [ 259.317175][ T4614] tipc: Started in network mode [ 259.338435][ T4614] tipc: Own node identity 667213c09522, cluster identity 4711 [ 259.380154][ T4614] tipc: Enabled bearer , priority 0 [ 259.531650][ T4613] tipc: Disabling bearer [ 259.782388][ T4631] EXT4-fs (loop1): Test dummy encryption mode enabled [ 259.812389][ T4631] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1198: inode has both inline data and extents flags [ 259.830376][ T1990] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 259.841438][ T4631] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1198: couldn't read orphan inode 15 (err -117) [ 259.865367][ T4631] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 259.887025][ T4624] F2FS-fs (loop6): invalid crc value [ 259.905838][ T4624] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 259.939000][ T4624] F2FS-fs (loop6): recover fsync data on readonly fs [ 259.946419][ T4624] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 260.005850][ T4637] FAULT_INJECTION: forcing a failure. [ 260.005850][ T4637] name failslab, interval 1, probability 0, space 0, times 0 [ 260.018568][ T4637] CPU: 0 PID: 4637 Comm: syz.4.1199 Not tainted syzkaller #0 [ 260.025949][ T4637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.036012][ T4637] Call Trace: [ 260.039317][ T4637] __dump_stack+0x21/0x24 [ 260.043665][ T4637] dump_stack_lvl+0x1a7/0x208 [ 260.048356][ T4637] ? show_regs_print_info+0x18/0x18 [ 260.053565][ T4637] dump_stack+0x15/0x1c [ 260.057731][ T4637] should_fail+0x3ab/0x500 [ 260.062188][ T4637] ? security_inode_alloc+0x33/0x110 [ 260.067493][ T4637] __should_failslab+0xa4/0xe0 [ 260.072275][ T4637] should_failslab+0x9/0x20 [ 260.076789][ T4637] kmem_cache_alloc+0x3d/0x2d0 [ 260.081564][ T4637] security_inode_alloc+0x33/0x110 [ 260.086689][ T4637] inode_init_always+0x725/0x9c0 [ 260.091643][ T4637] new_inode_pseudo+0x91/0x210 [ 260.096416][ T4637] new_inode+0x28/0x1e0 [ 260.100583][ T4637] shmem_get_inode+0x343/0x9d0 [ 260.105363][ T4637] __shmem_file_setup+0x113/0x2b0 [ 260.110401][ T4637] shmem_file_setup+0x2f/0x40 [ 260.115188][ T4637] __se_sys_memfd_create+0x1de/0x3a0 [ 260.120491][ T4637] __x64_sys_memfd_create+0x5b/0x70 [ 260.125703][ T4637] do_syscall_64+0x31/0x40 [ 260.130131][ T4637] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 260.136028][ T4637] RIP: 0033:0x7f36094210d9 [ 260.140454][ T4637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.160065][ T4637] RSP: 002b:00007f3607e79e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 260.168492][ T4637] RAX: ffffffffffffffda RBX: 000000000000056e RCX: 00007f36094210d9 [ 260.176472][ T4637] RDX: 00007f3607e79ee0 RSI: 0000000000000000 RDI: 00007f36094b8204 [ 260.184461][ T4637] RBP: 0000200000000480 R08: 00000000ffffffff R09: 0000000000000000 [ 260.192457][ T4637] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000100 [ 260.200445][ T4637] R13: 00007f3607e79ee0 R14: 00007f3607e79ea0 R15: 0000200000000040 [ 260.283028][ T1990] usb 1-1: device descriptor read/64, error -71 [ 260.694384][ T1990] usb 1-1: device descriptor read/64, error -71 [ 260.814794][ T287] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 260.975261][ T1990] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 261.003258][ T4650] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 261.063588][ T4650] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue [ 261.103599][ T4660] x_tables: duplicate underflow at hook 3 [ 261.236235][ T287] usb 9-1: unable to get BOS descriptor or descriptor too short [ 261.296292][ T1990] usb 1-1: device descriptor read/64, error -71 [ 261.356505][ T287] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.386563][ T287] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.402135][ T4666] PM: suspend entry (deep) [ 261.506721][ T4666] Filesystems sync: 0.096 seconds [ 261.518116][ T4666] Freezing user space processes ... [ 261.539648][ T4666] Freezing of tasks failed after 0.016 seconds (2 tasks refusing to freeze, wq_busy=0): [ 261.549423][ T4666] [ 261.551772][ T4666] OOM killer enabled. [ 261.555736][ T4666] Restarting tasks ... done. [ 261.570151][ T4666] Abort: One or more tasks refusing to freeze [ 261.576265][ T4666] PM: suspend exit [ 262.264478][ T4690] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 262.274597][ T4690] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.448086][ T770] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 262.481530][ T4704] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.492452][ T4704] EXT4-fs (loop6): Number of reserved GDT blocks insanely large: 1024 [ 262.558783][ T4697] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288) [ 262.590215][ T4697] F2FS-fs (loop1): invalid crc value [ 262.599865][ T4697] F2FS-fs (loop1): invalid crc value [ 262.605201][ T4697] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 262.614658][ T24] kauditd_printk_skb: 806 callbacks suppressed [ 262.614670][ T24] audit: type=1400 audit(1787019759.152:22865): avc: denied { write } for pid=4701 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.641937][ T24] audit: type=1400 audit(1787019759.162:22866): avc: denied { read } for pid=4701 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.662796][ T24] audit: type=1400 audit(1787019759.162:22867): avc: denied { read } for pid=4701 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.683706][ T24] audit: type=1400 audit(1787019759.162:22868): avc: denied { write } for pid=4701 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.704671][ T24] audit: type=1400 audit(1787019759.162:22869): avc: denied { getopt } for pid=4701 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 262.725639][ T24] audit: type=1400 audit(1787019759.232:22870): avc: denied { read write } for pid=4695 comm="syz.1.1222" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.728758][ T770] usb 5-1: Using ep0 maxpacket: 32 [ 262.768062][ T24] audit: type=1400 audit(1787019759.232:22871): avc: denied { read write open } for pid=4695 comm="syz.1.1222" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.802037][ T24] audit: type=1400 audit(1787019759.232:22872): avc: denied { ioctl } for pid=4695 comm="syz.1.1222" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.828354][ T24] audit: type=1400 audit(1787019759.362:22873): avc: denied { ioctl } for pid=4687 comm="syz.4.1219" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 262.854318][ T24] audit: type=1400 audit(1787019759.392:22874): avc: denied { read write } for pid=3863 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 262.938658][ T770] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.951624][ T770] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.961640][ T770] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 262.983334][ T770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.999651][ T4713] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 263.013604][ T4713] EXT4-fs (loop1): Test dummy encryption mode enabled [ 263.033516][ T770] usb 5-1: config 0 descriptor?? [ 263.045930][ T4713] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,noinit_itable,test_dummy_encryption,inode_readahead_blks=0x0000000000000040,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 263.083261][ T4713] EXT4-fs (loop1): re-mounted. Opts: (null) [ 263.585369][ T770] usb 5-1: USB disconnect, device number 25 [ 263.618136][ T287] usb 9-1: string descriptor 0 read error: -71 [ 263.667295][ T287] usb 9-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 263.785483][ T4732] exfat: Deprecated parameter 'utf8' [ 263.790961][ T4732] exfat: Deprecated parameter 'namecase' [ 263.796770][ T4732] exfat: Deprecated parameter 'utf8' [ 263.929779][ T4732] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 264.222544][ T4734] device bridge1 entered promiscuous mode [ 264.565000][ T287] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.598177][ T287] usb 9-1: can't set config #1, error -71 [ 264.606250][ T287] usb 9-1: USB disconnect, device number 29 [ 264.716229][ T1990] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 264.934573][ T4725] overlayfs: invalid origin (0000) [ 264.998060][ T1990] usb 2-1: device descriptor read/64, error -71 [ 265.000611][ T4743] netlink: 280 bytes leftover after parsing attributes in process `syz.8.1236'. [ 265.135875][ T4756] FAULT_INJECTION: forcing a failure. [ 265.135875][ T4756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 265.150559][ T4756] CPU: 0 PID: 4756 Comm: syz.8.1240 Not tainted syzkaller #0 [ 265.157942][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.168002][ T4756] Call Trace: [ 265.171314][ T4756] __dump_stack+0x21/0x24 [ 265.175664][ T4756] dump_stack_lvl+0x1a7/0x208 [ 265.180350][ T4756] ? show_regs_print_info+0x18/0x18 [ 265.185552][ T4756] dump_stack+0x15/0x1c [ 265.189738][ T4756] should_fail+0x3ab/0x500 [ 265.194172][ T4756] should_fail_alloc_page+0x4f/0x60 [ 265.199383][ T4756] __alloc_pages_nodemask+0x11a/0x640 [ 265.204762][ T4756] ? __alloc_pages_nodemask+0x640/0x640 [ 265.208181][ T287] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 265.210317][ T4756] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 265.210361][ T4756] ? __kasan_check_write+0x14/0x20 [ 265.219356][ T4757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'. [ 265.223424][ T4756] ? _raw_spin_trylock+0xb7/0x150 [ 265.223462][ T4756] ? __lock_text_start+0x8/0x8 [ 265.243693][ T4757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'. [ 265.247223][ T4756] pte_alloc_one+0x1f/0xc0 [ 265.247263][ T4756] __pte_alloc+0x24/0x1d0 [ 265.264888][ T4756] handle_pte_fault+0x2feb/0x3910 [ 265.269927][ T4756] handle_mm_fault+0xf86/0x1720 [ 265.274797][ T4756] ? trace_spf_vma_notsup+0x23/0x110 [ 265.280103][ T4756] ? can_reuse_spf_vma+0xe0/0xe0 [ 265.285049][ T4756] ? __kasan_check_write+0x14/0x20 [ 265.290168][ T4756] ? down_read_trylock+0x106/0x160 [ 265.295283][ T4756] ? __kasan_check_write+0x14/0x20 [ 265.300425][ T4756] ? can_reuse_spf_vma+0xc8/0xe0 [ 265.305366][ T4756] do_user_addr_fault+0x576/0xe20 [ 265.310401][ T4756] ? do_kern_addr_fault+0x80/0x80 [ 265.315430][ T4756] ? debug_smp_processor_id+0x17/0x20 [ 265.320812][ T4756] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 265.326880][ T4756] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 265.332520][ T4756] exc_page_fault+0x5a/0xc0 [ 265.337039][ T4756] ? asm_exc_page_fault+0x8/0x30 [ 265.341984][ T4756] asm_exc_page_fault+0x1e/0x30 [ 265.346836][ T4756] RIP: 0033:0x7f8f22c0c24e [ 265.351237][ T4756] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 265.370952][ T4756] RSP: 002b:00007f8f217ad470 EFLAGS: 00010206 [ 265.377007][ T4756] RAX: 0000000000272001 RBX: 00007f8f217ad530 RCX: 0000000000000066 [ 265.385000][ T4756] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f8f217ad5d0 [ 265.392959][ T4756] RBP: 0000000000000102 R08: 00007f8f1938e000 R09: 0000000000272000 [ 265.400916][ T4756] R10: 0000000000000000 R11: 00007f8f217ad540 R12: 0000000000000001 [ 265.408873][ T4756] R13: 00007f8f22e0c000 R14: 0000000000000000 R15: 00007f8f217ad5d0 [ 265.418488][ T4756] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 265.648110][ T1990] usb 2-1: device descriptor read/64, error -71 [ 265.668478][ T287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.683860][ T287] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.878182][ T287] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 265.902375][ T287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.916887][ T287] usb 5-1: Product: syz [ 265.921573][ T287] usb 5-1: Manufacturer: syz [ 265.928110][ T1990] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 265.929815][ T4771] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 265.965029][ T287] usb 5-1: SerialNumber: syz [ 265.976159][ T4771] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.063774][ T4771] EXT4-fs (loop6): shut down requested (2) [ 266.208109][ T1990] usb 2-1: device descriptor read/64, error -71 [ 266.812935][ T4784] F2FS-fs (loop1): invalid crc value [ 266.825633][ T4784] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 266.857207][ T4784] F2FS-fs (loop1): recover fsync data on readonly fs [ 266.864607][ T4784] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 267.238196][ T287] usb 5-1: 0:1 : does not exist [ 267.243354][ T287] usb 5-1: 0:2 : does not exist [ 267.255545][ T287] usb 5-1: unit 5 not found! [ 267.272011][ T287] usb 5-1: USB disconnect, device number 26 [ 267.280129][ T4799] EXT4-fs (loop6): mounted filesystem without journal. Opts: commit=0x0000000000000005,nodiscard,max_batch_time=0x00000000000003ff,,errors=continue [ 267.578167][ T770] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 267.650879][ T24] kauditd_printk_skb: 499 callbacks suppressed [ 267.650892][ T24] audit: type=1400 audit(1787019764.192:23374): avc: denied { ioctl } for pid=4798 comm="syz.6.1255" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 267.880414][ T24] audit: type=1400 audit(1787019764.262:23375): avc: denied { read write } for pid=1910 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 267.905038][ T770] usb 7-1: Using ep0 maxpacket: 8 [ 268.138240][ T770] usb 7-1: unable to get BOS descriptor or descriptor too short [ 268.280912][ T770] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 268.524100][ T656] udevd[656]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 268.589044][ T24] audit: type=1400 audit(1787019764.262:23376): avc: denied { read write open } for pid=1910 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.702201][ T24] audit: type=1400 audit(1787019764.262:23377): avc: denied { ioctl } for pid=1910 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.728726][ T770] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 268.747957][ T24] audit: type=1400 audit(1787019764.352:23378): avc: denied { create } for pid=4807 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.788070][ T770] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.816440][ T770] usb 7-1: Product: syz [ 268.898052][ T770] usb 7-1: Manufacturer: syz [ 268.902770][ T770] usb 7-1: SerialNumber: syz [ 268.909561][ T24] audit: type=1400 audit(1787019764.352:23379): avc: denied { write } for pid=4807 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.006571][ T24] audit: type=1400 audit(1787019764.352:23380): avc: denied { nlmsg_write } for pid=4807 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.060560][ T4823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 269.067086][ T4823] audit: audit_lost=67 audit_rate_limit=0 audit_backlog_limit=64 [ 269.068211][ T24] audit: type=1400 audit(1787019764.362:23381): avc: denied { write } for pid=4807 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.228077][ T287] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 269.275291][ T4799] fs-verity: sha512 using implementation "sha512-avx2" [ 269.288125][ T301] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 269.302835][ T4799] fs-verity (loop6, inode 13): ext4_end_enable_verity() failed with err -28 [ 269.548297][ T770] usb 7-1: USB disconnect, device number 17 [ 269.569077][ T656] udevd[656]: setting mode of /dev/bus/usb/007/017 to 020664 failed: No such file or directory [ 269.580336][ T656] udevd[656]: setting owner of /dev/bus/usb/007/017 to uid=0, gid=0 failed: No such file or directory [ 269.634884][ T4840] PM: suspend entry (deep) [ 269.648492][ T287] usb 1-1: unable to get BOS descriptor or descriptor too short [ 269.677211][ T301] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 269.703499][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.710460][ T301] usb 2-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 269.719605][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.759814][ T301] usb 2-1: config 0 descriptor?? [ 269.780048][ T4819] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 269.808352][ T287] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.838061][ T287] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.847639][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 270.028181][ T287] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 270.037422][ T4840] Filesystems sync: 0.397 seconds [ 270.042456][ T4840] Freezing user space processes ... [ 270.042897][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.048540][ T4840] [ 270.056338][ T287] usb 1-1: Product: syz [ 270.058746][ T4840] Freezing of tasks failed after 0.006 seconds (4 tasks refusing to freeze, wq_busy=0): [ 270.062813][ T287] usb 1-1: Manufacturer: syz [ 270.077128][ T287] usb 1-1: SerialNumber: syz [ 270.083071][ T4840] [ 270.085415][ T4840] OOM killer enabled. [ 270.089438][ T4840] Restarting tasks ... done. [ 270.103117][ T4840] Abort: One or more tasks refusing to freeze [ 270.110667][ T4840] PM: suspend exit [ 270.252668][ T301] wacom 0003:056A:032F.0011: unknown main item tag 0x2 [ 270.283554][ T301] wacom 0003:056A:032F.0011: unknown main item tag 0x1 [ 270.308195][ T301] wacom 0003:056A:032F.0011: ignoring exceeding usage max [ 270.343403][ T301] wacom 0003:056A:032F.0011: hidraw0: USB HID v0.81 Device [HID 056a:032f] on usb-dummy_hcd.1-1/input0 [ 270.506293][ T301] usb 2-1: USB disconnect, device number 24 [ 270.513096][ T4864] tipc: Enabled bearer , priority 0 [ 270.542469][ T4860] EXT4-fs (loop6): Test dummy encryption mode enabled [ 270.558175][ T4860] EXT4-fs (loop6): Ignoring removed orlov option [ 270.852992][ T4860] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,auto_da_alloc,data_err=abort,orlov,,errors=continue [ 270.898797][ T4863] tipc: Disabling bearer [ 270.996184][ T4869] fido_id[4869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 271.897483][ T287] usb 1-1: can't set config #1, error -71 [ 271.978394][ T287] usb 1-1: USB disconnect, device number 29 [ 272.105049][ T4881] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 272.541389][ T4883] PM: suspend entry (deep) [ 272.547681][ T343] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 272.643610][ T4883] Filesystems sync: 0.096 seconds [ 272.649014][ T4883] Freezing user space processes ... [ 272.663574][ T4883] Freezing of tasks failed after 0.009 seconds (4 tasks refusing to freeze, wq_busy=0): [ 272.678151][ T4883] [ 272.680510][ T4883] OOM killer enabled. [ 272.684497][ T4883] Restarting tasks ... done. [ 272.701818][ T4883] Abort: One or more tasks refusing to freeze [ 272.748299][ T4883] PM: suspend exit [ 272.758867][ T24] kauditd_printk_skb: 446 callbacks suppressed [ 272.758881][ T24] audit: type=1400 audit(1787019769.302:23824): avc: denied { mounton } for pid=4892 comm="syz.0.1286" path="/137/file0" dev="tmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 272.832833][ T24] audit: type=1400 audit(1787019769.342:23825): avc: denied { unmount } for pid=1910 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 272.853904][ T24] audit: type=1400 audit(1787019769.342:23826): avc: denied { read write } for pid=3863 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.908498][ T24] audit: type=1400 audit(1787019769.342:23827): avc: denied { read write open } for pid=3863 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.952254][ T4886] F2FS-fs (loop6): Invalid gid value -1 [ 272.972222][ T24] audit: type=1400 audit(1787019769.342:23828): avc: denied { ioctl } for pid=3863 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.998277][ T24] audit: type=1326 audit(1787019769.362:23829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4894 comm="syz.1.1287" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e15860d9 code=0x7ffc0000 [ 273.024691][ T4871] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.024880][ T4886] audit: audit_backlog=65 > audit_backlog_limit=64 [ 273.031237][ T4871] audit: audit_lost=69 audit_rate_limit=0 audit_backlog_limit=64 [ 273.031250][ T4871] audit: backlog limit exceeded [ 273.218166][ T4903] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 273.243627][ T4903] EXT4-fs (loop1): Unsupported encryption level 3 [ 273.619471][ T4912] EXT4-fs (loop6): Test dummy encryption mode enabled [ 273.638121][ T4912] EXT4-fs (loop6): Ignoring removed orlov option [ 273.650203][ T4903] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 273.669626][ T4912] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,auto_da_alloc,data_err=abort,orlov,,errors=continue [ 273.877176][ T700] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 273.894919][ T4923] overlayfs: unrecognized mount option "debug_want_extra_isize=0x0000000000000060" or missing value [ 274.994527][ T4928] fuse: Bad value for 'fd' [ 275.032160][ T4921] overlayfs: failed to resolve './file0': -2 [ 275.121066][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 275.438238][ T4950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1304'. [ 275.565662][ T317] wiimote 0005:057E:0306.0012: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 275.612886][ T317] wiimote 0005:057E:0306.0012: New device registered [ 276.278544][ T301] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 276.286296][ T287] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 276.390623][ T4951] F2FS-fs (loop6): invalid crc value [ 276.519383][ T4951] F2FS-fs (loop6): Found nat_bits in checkpoint [ 276.538059][ T301] usb 2-1: Using ep0 maxpacket: 32 [ 276.658520][ T301] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 276.668912][ T301] usb 2-1: config 0 has no interface number 0 [ 276.675030][ T301] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 276.708089][ T4951] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 276.709075][ T287] usb 1-1: unable to get BOS descriptor or descriptor too short [ 276.720510][ T312] wiimote 0005:057E:0306.0012: detected device: Nintendo Wii Remote (Gen 1) [ 276.774317][ T312] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0012/input/input28 [ 276.818879][ T287] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 276.837443][ T287] usb 1-1: config 189 has no interface number 0 [ 276.849677][ T312] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0012/input/input29 [ 276.867052][ T287] usb 1-1: config 189 interface 127 has no altsetting 0 [ 276.893330][ T312] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0012/input/input27 [ 276.899211][ T301] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 276.926606][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.951031][ T301] usb 2-1: Product: syz [ 276.955203][ T301] usb 2-1: Manufacturer: syz [ 276.975241][ T301] usb 2-1: SerialNumber: syz [ 276.990281][ T301] usb 2-1: config 0 descriptor?? [ 276.997729][ T4975] PM: suspend entry (deep) [ 277.019651][ T4964] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 277.068503][ T287] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 277.095596][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.120445][ T343] attempt to access beyond end of device [ 277.120445][ T343] loop6: rw=2049, want=45104, limit=40427 [ 277.124904][ T287] usb 1-1: Product: syz [ 277.158657][ T287] usb 1-1: Manufacturer: syz [ 277.201299][ T287] usb 1-1: SerialNumber: syz [ 277.222081][ T4951] wiimote 0005:057E:0306.0012: Device removed [ 277.248076][ T4975] Filesystems sync: 0.215 seconds [ 277.263455][ T4975] Freezing user space processes ... [ 277.298178][ T4975] Freezing of tasks failed after 0.007 seconds (10 tasks refusing to freeze, wq_busy=0): [ 277.328061][ T4975] [ 277.330495][ T4975] OOM killer enabled. [ 277.334516][ T4975] Restarting tasks ... done. [ 277.354215][ T4960] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 277.383754][ T4975] Abort: One or more tasks refusing to freeze [ 277.411002][ T4975] PM: suspend exit [ 277.528346][ T287] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 277.548073][ T287] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 277.579705][ T287] usbserial_generic 1-1:189.127: generic converter detected [ 277.601114][ T287] usb 1-1: generic converter now attached to ttyUSB0 [ 277.621668][ T287] usb 1-1: USB disconnect, device number 30 [ 277.630900][ T287] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 277.668406][ T287] usbserial_generic 1-1:189.127: device disconnected [ 277.740809][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'. [ 277.819897][ T24] kauditd_printk_skb: 556 callbacks suppressed [ 277.819910][ T24] audit: type=1400 audit(1787019774.362:24375): avc: denied { ioctl } for pid=4958 comm="syz.1.1306" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.853170][ T24] audit: type=1400 audit(1787019774.362:24376): avc: denied { ioctl } for pid=4958 comm="syz.1.1306" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.878393][ T24] audit: type=1400 audit(1787019774.382:24377): avc: denied { read write } for pid=4961 comm="syz.8.1308" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 277.881030][ T4983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 277.903231][ T24] audit: type=1400 audit(1787019774.382:24378): avc: denied { read write open } for pid=4961 comm="syz.8.1308" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 277.938355][ T24] audit: type=1400 audit(1787019774.382:24379): avc: denied { mounton } for pid=4961 comm="syz.8.1308" path="/170/file0" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 278.001676][ T24] audit: type=1400 audit(1787019774.402:24380): avc: denied { mount } for pid=4961 comm="syz.8.1308" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 278.080943][ T24] audit: type=1400 audit(1787019774.452:24381): avc: denied { read } for pid=4981 comm="syz.4.1312" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 278.119058][ T24] audit: type=1400 audit(1787019774.452:24382): avc: denied { read open } for pid=4981 comm="syz.4.1312" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 278.163311][ T24] audit: type=1400 audit(1787019774.452:24383): avc: denied { ioctl } for pid=4981 comm="syz.4.1312" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 278.168344][ T301] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 278.199499][ T24] audit: type=1400 audit(1787019774.502:24384): avc: denied { read write } for pid=1910 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 278.239652][ T4991] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1315'. [ 278.256473][ T301] asix: probe of 2-1:0.188 failed with error -71 [ 278.287380][ T301] usb 2-1: USB disconnect, device number 25 [ 278.578090][ T770] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 278.907277][ T5014] erofs: (device loop1): mounted with root inode @ nid 36. [ 278.936221][ T5016] dummy_hcd dummy_hcd.0: remove, state 1 [ 278.939339][ T770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.943937][ T5016] usb usb1: USB disconnect, device number 1 [ 278.967146][ T5016] dummy_hcd dummy_hcd.0: stopped [ 278.973079][ T770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.988096][ T770] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.990977][ T5016] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 279.002074][ T770] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.016367][ T770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.033643][ T770] usb 5-1: config 0 descriptor?? [ 279.080737][ T5009] device macsec1 entered promiscuous mode [ 279.086501][ T5009] device vlan1 entered promiscuous mode [ 279.130750][ T5016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5016 comm=syz.8.1321 [ 279.144621][ T5016] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5016 comm=syz.8.1321 [ 279.168091][ T5009] device vlan1 left promiscuous mode [ 279.463608][ T3863] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 279.538940][ T4993] : renamed from vlan0 [ 279.728102][ T770] usbhid 5-1:0.0: can't add hid device: -71 [ 279.734190][ T770] usbhid: probe of 5-1:0.0 failed with error -71 [ 279.741890][ T770] usb 5-1: USB disconnect, device number 27 [ 279.955679][ T5029] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.963005][ T5029] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.970775][ T5029] device bridge_slave_0 entered promiscuous mode [ 279.979554][ T5029] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.986622][ T5029] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.994407][ T5029] device bridge_slave_1 entered promiscuous mode [ 280.591898][ T7] tipc: Left network mode [ 280.598708][ T700] usb 9-1: new low-speed USB device number 31 using dummy_hcd [ 280.841868][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.849641][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.867046][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.875907][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.885958][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.893025][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.902350][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.913213][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.924006][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.933058][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.940139][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.968205][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.977496][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.986511][ T317] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 280.994799][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.999228][ T700] usb 9-1: unable to get BOS descriptor or descriptor too short [ 281.007799][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.108547][ T700] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.118854][ T700] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 281.169730][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.187657][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.196989][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.205651][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.310528][ T5029] device veth0_vlan entered promiscuous mode [ 281.343874][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.349151][ T317] usb 5-1: No LPM exit latency info found, disabling LPM. [ 281.360196][ T700] usb 9-1: string descriptor 0 read error: -22 [ 281.366420][ T700] usb 9-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 281.375194][ T5029] device veth1_macvtap entered promiscuous mode [ 281.378999][ T700] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.476385][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.484729][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.495319][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.503588][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.698531][ T317] usb 5-1: config 3 has an invalid interface number: 164 but max is 1 [ 281.706885][ T317] usb 5-1: config 3 has an invalid interface number: 135 but max is 1 [ 281.715119][ T317] usb 5-1: config 3 has no interface number 0 [ 281.721259][ T317] usb 5-1: config 3 has no interface number 1 [ 281.727360][ T317] usb 5-1: config 3 interface 164 altsetting 6 endpoint 0x4 has invalid maxpacket 64, setting to 8 [ 281.738070][ T317] usb 5-1: config 3 interface 164 altsetting 6 endpoint 0xA has invalid maxpacket 16, setting to 8 [ 281.748809][ T317] usb 5-1: config 3 interface 164 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 281.759493][ T317] usb 5-1: config 3 interface 164 altsetting 6 endpoint 0xE has invalid maxpacket 64, setting to 8 [ 281.770212][ T317] usb 5-1: config 3 interface 164 altsetting 6 endpoint 0x9 is Bulk; changing to Interrupt [ 281.780236][ T317] usb 5-1: config 3 interface 164 altsetting 6 endpoint 0x7 has invalid maxpacket 1536, setting to 8 [ 281.791383][ T317] usb 5-1: config 3 interface 135 altsetting 12 has a duplicate endpoint with address 0x7, skipping [ 281.802188][ T317] usb 5-1: config 3 interface 135 altsetting 12 endpoint 0xC has invalid maxpacket 1023, setting to 0 [ 281.813283][ T317] usb 5-1: config 3 interface 135 altsetting 12 has an invalid endpoint with address 0x0, skipping [ 281.824698][ T317] usb 5-1: config 3 interface 135 altsetting 12 endpoint 0x1 has invalid maxpacket 32, setting to 8 [ 281.835514][ T317] usb 5-1: config 3 interface 135 altsetting 12 endpoint 0x8 has invalid maxpacket 64, setting to 0 [ 281.847288][ T317] usb 5-1: config 3 interface 135 altsetting 12 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 281.860471][ T317] usb 5-1: config 3 interface 164 has no altsetting 0 [ 281.867251][ T317] usb 5-1: config 3 interface 135 has no altsetting 0 [ 282.088509][ T317] usb 5-1: New USB device found, idVendor=0403, idProduct=a5ae, bcdDevice=e5.dc [ 282.097565][ T317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.106807][ T317] usb 5-1: Product: 컥풬Ⴕ礇粬娀寊冐ﮘ⛲䕆虗뒜拷￳껃箕嘊⿽봸橨髎䍺뢡䋧쓼绾ﻴ㾏핐嫠ࢾ찎둃௣烩ثꠎ㳻㞘숯②엠軵⿒礧胹❳툩况䛉ᰡ쿂㍀谰鎅紐洃哒ꭰ﬑둫汎ﾧ햅싩躐኷딧謢琼锠꜁皚춉Ａ頵씁娖桼˴鎭鏍ᴩ훸蛀끄쌃⫢毠췇揮ꚉ䡓↴퍄㼹ᠠ靪碳懊竢樰 [ 282.141288][ T317] usb 5-1: Manufacturer: ѕ [ 282.145816][ T317] usb 5-1: SerialNumber: 拁ᤝ坿냢Ꭺ얎궇羂䒾퉼䕫욂툹嗚桮⧹⥹⤳偶꧹啵켌帚㙏藋轞闪뾝せ᭨战躺젛ዟᲺ冀縱儈魛휷딱艈 [ 282.190808][ T5050] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 282.253022][ T5052] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 282.272768][ T5052] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 282.281611][ T5052] EXT4-fs (loop9): orphan cleanup on readonly fs [ 282.291616][ T5052] EXT4-fs error (device loop9): ext4_clear_blocks:880: inode #11: comm syz.9.1330: attempt to clear invalid blocks 1024 len 1 [ 282.306600][ T5052] EXT4-fs (loop9): Remounting filesystem read-only [ 282.314261][ T5052] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1330: bg 0: block 361: padding at end of block bitmap is not set [ 282.330059][ T5052] EXT4-fs error (device loop9) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 282.340846][ T5052] EXT4-fs error (device loop9): ext4_free_branches:1026: inode #11: comm syz.9.1330: invalid indirect mapped block 1811939328 (level 0) [ 282.355918][ T5052] EXT4-fs error (device loop9): ext4_free_branches:1026: inode #11: comm syz.9.1330: invalid indirect mapped block 2185560079 (level 1) [ 282.371184][ T5052] EXT4-fs (loop9): 1 truncate cleaned up [ 282.376904][ T5052] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,abort [ 282.488601][ T317] ftdi_sio 5-1:3.164: FTDI USB Serial Device converter detected [ 282.496722][ T317] usb 5-1: Detected FT2232C [ 282.518188][ T317] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 282.538121][ T317] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 282.556748][ T317] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 282.618696][ T317] ftdi_sio 5-1:3.135: FTDI USB Serial Device converter detected [ 282.627069][ T317] usb 5-1: Detected FT2232C [ 282.634074][ T317] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 12 [ 282.641811][ T317] ftdi_sio ttyUSB1: Overriding wMaxPacketSize on endpoint 8 [ 282.668230][ T317] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 282.688123][ T317] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 282.696337][ T317] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 282.706640][ T317] usb 5-1: USB disconnect, device number 28 [ 282.714679][ T317] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 282.719338][ T5058] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.731206][ T5058] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.738796][ T317] ftdi_sio 5-1:3.164: device disconnected [ 282.746620][ T317] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 282.762550][ T317] ftdi_sio 5-1:3.135: device disconnected [ 282.788479][ T7] device bridge_slave_1 left promiscuous mode [ 282.795839][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.873485][ T7] device bridge_slave_0 left promiscuous mode [ 282.879870][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.948452][ T24] kauditd_printk_skb: 509 callbacks suppressed [ 282.948467][ T24] audit: type=1400 audit(1787019779.492:24894): avc: denied { read write } for pid=1910 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 282.958520][ T7] device veth1_macvtap left promiscuous mode [ 282.983182][ T24] audit: type=1400 audit(1787019779.492:24895): avc: denied { read write open } for pid=1910 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.015803][ T7] device veth0_vlan left promiscuous mode [ 283.021880][ T24] audit: type=1400 audit(1787019779.492:24896): avc: denied { ioctl } for pid=1910 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 283.328098][ T24] audit: type=1400 audit(1787019779.602:24897): avc: denied { read } for pid=5062 comm="syz.0.1340" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.357153][ T24] audit: type=1400 audit(1787019779.612:24898): avc: denied { read open } for pid=5062 comm="syz.0.1340" path="net:[4026532292]" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 283.384810][ T24] audit: type=1400 audit(1787019779.612:24899): avc: denied { create } for pid=5062 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.405637][ T24] audit: type=1400 audit(1787019779.672:24900): avc: denied { map_create } for pid=5062 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 283.448430][ T700] usb 9-1: USB disconnect, device number 31 [ 283.465714][ T24] audit: type=1400 audit(1787019779.682:24901): avc: denied { perfmon } for pid=5062 comm="syz.0.1340" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 283.586118][ T24] audit: type=1400 audit(1787019779.682:24902): avc: denied { map_read map_write } for pid=5062 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 283.644600][ T24] audit: type=1400 audit(1787019779.712:24903): avc: denied { map_create } for pid=5062 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 283.727692][ T5076] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 283.736517][ T5076] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 284.231075][ T5094] PM: suspend entry (deep) [ 284.309686][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 284.359737][ T5094] Filesystems sync: 0.124 seconds [ 284.364885][ T5094] Freezing user space processes ... [ 284.374084][ T5094] Freezing of tasks failed after 0.003 seconds (5 tasks refusing to freeze, wq_busy=0): [ 284.390184][ T5094] [ 284.392531][ T5094] OOM killer enabled. [ 284.396522][ T5094] Restarting tasks ... done. [ 284.427678][ T5094] Abort: One or more tasks refusing to freeze [ 284.465158][ T5094] PM: suspend exit [ 284.508064][ T54] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 284.661893][ T5113] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 284.701312][ T5113] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 285.087212][ T5129] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1361: casefold flag without casefold feature [ 285.167170][ T5129] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1361: couldn't read orphan inode 15 (err -117) [ 285.259738][ T5129] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 285.329856][ T5129] ext4 filesystem being mounted at /78/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 285.640322][ T5146] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 285.682886][ T5146] EXT4-fs error (device loop9): ext4_free_branches:1026: inode #11: comm syz.9.1366: invalid indirect mapped block 9 (level 0) [ 285.715408][ T5146] EXT4-fs (loop9): 1 truncate cleaned up [ 285.738816][ T5146] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue [ 286.188861][ T5164] erofs: (device loop6): mounted with root inode @ nid 36. [ 286.213946][ T5164] overlayfs: missing 'lowerdir' [ 286.219756][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1374'. [ 286.533982][ T5177] FAULT_INJECTION: forcing a failure. [ 286.533982][ T5177] name failslab, interval 1, probability 0, space 0, times 0 [ 286.576152][ T5182] erofs: (device loop9): mounted with root inode @ nid 36. [ 286.598070][ T5177] CPU: 0 PID: 5177 Comm: syz.4.1376 Not tainted syzkaller #0 [ 286.605468][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 286.615531][ T5177] Call Trace: [ 286.618837][ T5177] __dump_stack+0x21/0x24 [ 286.623179][ T5177] dump_stack_lvl+0x1a7/0x208 [ 286.627875][ T5177] ? show_regs_print_info+0x18/0x18 [ 286.633094][ T5177] dump_stack+0x15/0x1c [ 286.637266][ T5177] should_fail+0x3ab/0x500 [ 286.641699][ T5177] ? avc_alloc_node+0x83/0x340 [ 286.646489][ T5177] __should_failslab+0xa4/0xe0 [ 286.651278][ T5177] should_failslab+0x9/0x20 [ 286.655801][ T5177] kmem_cache_alloc+0x3d/0x2d0 [ 286.660595][ T5177] avc_alloc_node+0x83/0x340 [ 286.665208][ T5177] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 286.670687][ T5177] ? _raw_spin_lock+0xf0/0xf0 [ 286.675383][ T5177] ? avc_xperms_free+0x270/0x270 [ 286.680336][ T5177] avc_compute_av+0x147/0x6b0 [ 286.685029][ T5177] ? memset+0x35/0x40 [ 286.689052][ T5177] avc_has_perm+0x332/0x3d0 [ 286.693570][ T5177] ? avc_has_perm_noaudit+0x260/0x260 [ 286.698968][ T5177] ? rw_verify_area+0x1c0/0x360 [ 286.703843][ T5177] ? preempt_count_add+0x90/0x1b0 [ 286.708887][ T5177] ? vfs_write+0xae4/0xd70 [ 286.713324][ T5177] selinux_socket_getsockopt+0x22f/0x340 [ 286.718981][ T5177] ? selinux_socket_getpeername+0x340/0x340 [ 286.724892][ T5177] ? mutex_lock+0x92/0xf0 [ 286.729244][ T5177] ? __fget_files+0x2e1/0x340 [ 286.733949][ T5177] security_socket_getsockopt+0x72/0xa0 [ 286.739542][ T5177] __sys_getsockopt+0xed/0x370 [ 286.744328][ T5177] __x64_sys_getsockopt+0xbf/0xd0 [ 286.749391][ T5177] do_syscall_64+0x31/0x40 [ 286.753826][ T5177] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 286.759733][ T5177] RIP: 0033:0x7f36094210d9 [ 286.764171][ T5177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.783877][ T5177] RSP: 002b:00007f3607e7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 286.792323][ T5177] RAX: ffffffffffffffda RBX: 00007f36096a8fa0 RCX: 00007f36094210d9 [ 286.800311][ T5177] RDX: 000000000000002d RSI: 0000000000000001 RDI: 000000000000000c [ 286.808305][ T5177] RBP: 00007f3607e7a090 R08: 00002000000000c0 R09: 0000000000000000 [ 286.816298][ T5177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.824296][ T5177] R13: 00007f36096a9038 R14: 00007f36096a8fa0 R15: 00007ffe5f09a8b8 [ 287.531821][ T5029] erofs: (device loop9): erofs_fill_dentries: bogus dirent @ nid 36 [ 287.640907][ T5204] device bridge_slave_0 left promiscuous mode [ 287.647114][ T5204] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.678990][ T5204] device bridge_slave_1 left promiscuous mode [ 287.685320][ T5204] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.787878][ T5208] overlayfs: missing 'lowerdir' [ 287.959213][ T24] kauditd_printk_skb: 473 callbacks suppressed [ 287.959227][ T24] audit: type=1400 audit(1787019784.502:25377): avc: denied { read write } for pid=5211 comm="syz.6.1389" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.083167][ T24] audit: type=1400 audit(1787019784.542:25378): avc: denied { read write open } for pid=5211 comm="syz.6.1389" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.138228][ T24] audit: type=1400 audit(1787019784.542:25379): avc: denied { ioctl } for pid=5211 comm="syz.6.1389" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.144062][ T5214] tipc: Started in network mode [ 288.178073][ T5214] tipc: Own node identity 6a7728b451e4, cluster identity 4711 [ 288.195710][ T24] audit: type=1400 audit(1787019784.542:25380): avc: denied { ioctl } for pid=5211 comm="syz.6.1389" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.228110][ T5214] tipc: Enabled bearer , priority 0 [ 288.235494][ T24] audit: type=1400 audit(1787019784.542:25381): avc: denied { ioctl } for pid=5211 comm="syz.6.1389" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.269183][ T24] audit: type=1400 audit(1787019784.542:25382): avc: denied { ioctl } for pid=5211 comm="syz.6.1389" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.298109][ T770] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 288.325341][ T24] audit: type=1400 audit(1787019784.592:25383): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 288.368081][ T24] audit: type=1400 audit(1787019784.622:25384): avc: denied { execmem } for pid=5215 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 288.388619][ T24] audit: type=1400 audit(1787019784.652:25385): avc: denied { module_request } for pid=5213 comm="syz.0.1390" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 288.430087][ T5210] using random self ethernet address [ 288.435575][ T5210] using random host ethernet address [ 288.436324][ T24] audit: type=1400 audit(1787019784.662:25386): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.478782][ T5213] tipc: Disabling bearer [ 288.489401][ T5210] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 288.501118][ T5210] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 288.509618][ T5210] CPU: 0 PID: 5210 Comm: syz.4.1388 Not tainted syzkaller #0 [ 288.516990][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 288.527131][ T5210] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 288.533157][ T5210] Code: 94 c0 4d 8d b4 c6 f0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 de 7a 92 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 c5 7a 92 fe 41 be 78 11 00 00 4d [ 288.552771][ T5210] RSP: 0018:ffffc9000096f9f0 EFLAGS: 00010246 [ 288.558846][ T5210] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 288.566824][ T5210] RDX: ffff88810fd8e2c0 RSI: 0000000000000003 RDI: 0000000000000005 [ 288.574787][ T5210] RBP: ffffc9000096fa10 R08: ffff88810005986f R09: 1ffff1102000b30d [ 288.582745][ T5210] R10: dffffc0000000000 R11: ffffed102000b30e R12: dffffc0000000000 [ 288.590705][ T5210] R13: ffff8881185bf478 R14: ffff888100b81180 R15: 0000000000000000 [ 288.598711][ T5210] FS: 00007f3607e7a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 288.607646][ T5210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.614218][ T5210] CR2: 0000001b3450eff8 CR3: 00000001114b7000 CR4: 00000000003506b0 [ 288.622178][ T5210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.630135][ T5210] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.638109][ T5210] Call Trace: [ 288.641403][ T5210] ? dummy_wakeup+0x270/0x270 [ 288.646069][ T5210] usb_gadget_set_selfpowered+0x6c/0x180 [ 288.651693][ T5210] composite_dev_prepare+0x2e7/0x310 [ 288.656969][ T5210] configfs_composite_bind+0xb4/0x13a0 [ 288.662411][ T5210] ? __kasan_check_write+0x14/0x20 [ 288.667508][ T5210] ? os_desc_qw_sign_store+0x140/0x140 [ 288.672948][ T5210] udc_bind_to_driver+0x24e/0x6d0 [ 288.677963][ T5210] ? mutex_lock+0x92/0xf0 [ 288.682278][ T5210] usb_gadget_probe_driver+0x1fc/0x380 [ 288.687724][ T5210] gadget_dev_desc_UDC_store+0x217/0x330 [ 288.693340][ T5210] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 288.698876][ T5210] configfs_write_file+0x320/0x3d0 [ 288.703973][ T5210] ? configfs_read_file+0x400/0x400 [ 288.709158][ T5210] vfs_write+0x344/0xd70 [ 288.713395][ T5210] ? kernel_write+0x3c0/0x3c0 [ 288.718074][ T5210] ? __kasan_check_write+0x14/0x20 [ 288.723187][ T5210] ? mutex_lock+0x92/0xf0 [ 288.727537][ T5210] ? mutex_trylock+0xb0/0xb0 [ 288.732137][ T5210] ? __fget_files+0x2e1/0x340 [ 288.736804][ T5210] ? __fdget_pos+0x2d2/0x380 [ 288.741377][ T5210] ? ksys_write+0x70/0x260 [ 288.745782][ T5210] ksys_write+0x14a/0x260 [ 288.750104][ T5210] ? __ia32_sys_read+0x90/0x90 [ 288.754857][ T5210] ? __kasan_check_read+0x11/0x20 [ 288.759897][ T5210] __x64_sys_write+0x7b/0x90 [ 288.764491][ T5210] do_syscall_64+0x31/0x40 [ 288.768900][ T5210] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 288.774798][ T5210] RIP: 0033:0x7f36094210d9 [ 288.779200][ T5210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.798795][ T5210] RSP: 002b:00007f3607e7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.807202][ T5210] RAX: ffffffffffffffda RBX: 00007f36096a8fa0 RCX: 00007f36094210d9 [ 288.815178][ T5210] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000006 [ 288.823143][ T5210] RBP: 00007f36094b8024 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 288.831100][ T5210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.839060][ T5210] R13: 00007f36096a9038 R14: 00007f36096a8fa0 R15: 00007ffe5f09a8b8 [ 288.847039][ T5210] Modules linked in: [ 288.857623][ T5210] ---[ end trace e7be4ff2c1523f4d ]--- [ 288.863581][ T5210] RIP: 0010:dummy_set_selfpowered+0xbc/0x150 [ 288.869920][ T5210] Code: 94 c0 4d 8d b4 c6 f0 04 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 de 7a 92 fe 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 c5 7a 92 fe 41 be 78 11 00 00 4d [ 288.890029][ T5210] RSP: 0018:ffffc9000096f9f0 EFLAGS: 00010246 [ 288.896342][ T5210] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 288.908236][ T770] usb 7-1: No LPM exit latency info found, disabling LPM. [ 288.952855][ T5210] RDX: ffff88810fd8e2c0 RSI: 0000000000000003 RDI: 0000000000000005 [ 288.961894][ T5210] RBP: ffffc9000096fa10 R08: ffff88810005986f R09: 1ffff1102000b30d [ 288.980825][ T5210] R10: dffffc0000000000 R11: ffffed102000b30e R12: dffffc0000000000 [ 288.990269][ T5210] R13: ffff8881185bf478 R14: ffff888100b81180 R15: 0000000000000000 [ 289.004536][ T5210] FS: 00007f3607e7a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 289.017950][ T5210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.031283][ T5210] CR2: 0000001b3450cff8 CR3: 00000001114b7000 CR4: 00000000003506a0 [ 289.040846][ T5210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.049697][ T5210] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.057696][ T5210] Kernel panic - not syncing: Fatal exception [ 289.064092][ T5210] Kernel Offset: disabled [ 289.068428][ T5210] Rebooting in 86400 seconds..