last executing test programs: 40.981599616s ago: executing program 3 (id=29): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003980), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003d00)={0x18, r2, 0x709, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40084}, 0x4000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x80c4) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x4, 0xca}, @nested={0x4, 0x13a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000180)="0000ffffff8d00f03f0100000001", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 40.925473667s ago: executing program 3 (id=30): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0xfffffffc, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x4a}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}}, 0x0) 40.925258877s ago: executing program 3 (id=31): syz_usb_connect$uac2(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x7, 0x1, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0xb, 0x40, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x5, 0xdd, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x3, 0x1, 0x5, 0xd0, 0x8f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb74, 0x28}, [@processing_unit={0xd, 0x24, 0x7, 0x2, 0x6, 0x40, "ea37b6ce76a5"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x0, 0x1, 0x2, 0x9}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x3, 0x0, "93"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xa, 0x7, 0x8}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x37, 0x9, 0x9, 0xb, 0x80}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8f7b, 0x7f, 0x7a, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x58, 0x1, 0x0, 0xf7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x9f, 0x7, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x49, 0x8, {0x7, 0x25, 0x1, 0xc, 0x72, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x10, 0x2, 0xb, 0x3, '-', "67dd8f"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc, 0x2, 0x3, 0x0, "", 'c'}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x0, 0x4, 0x4, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x7, 0x7, {0x7, 0x25, 0x1, 0x4, 0x4, 0xcae}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xf, 0x3, 0x5, 0x8, 0x4}, 0x4c, &(0x7f0000000300)={0x5, 0xf, 0x4c, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0x3ff, 0x0, 0xe}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x28, 0xd, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x4e7, 0xf00, 0x6, [0xff00, 0x0, 0x3f00, 0x3f18]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x8, 0x81}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x51, 0x8, 0x10, 0xfc}]}, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x449}}]}) 38.229256927s ago: executing program 3 (id=41): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) shutdown(r3, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000100)={r2, r2, 0xfffffffc}) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000001c40)=0x4) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0xc, &(0x7f0000000300), 0x2, 0x53a, &(0x7f00000011c0)="$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") r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r6, &(0x7f0000000100)='.dead\x00', &(0x7f0000000180)='+-\x84\x00') mknodat(r5, 0x0, 0x81c0, 0x1006) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000006000000040000000600000001000000", @ANYRES16=r0, @ANYBLOB="feffffff00"/20, @ANYRES8=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000062580000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085009500"/80], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$getown(r8, 0x9) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc) r9 = socket$inet6_udp(0xa, 0x2, 0x0) nanosleep(&(0x7f0000000500), &(0x7f0000000540)) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xc8, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) readv(r11, &(0x7f0000000040)=[{&(0x7f0000001640)=""/228, 0xe4}], 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x8c) socket$inet6_udp(0xa, 0x2, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000001100)='maps\x00') preadv(r12, &(0x7f00000006c0)=[{&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f0000000340)=""/238, 0xee}], 0x2, 0x800, 0x8) 38.0204175s ago: executing program 3 (id=42): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, 0x0, 0x50, 0x20000000, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x346a739d}}], [], 0x6b}}) 37.54125363s ago: executing program 3 (id=46): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) (async) unshare(0x4040600) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt.,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) pidfd_getfd(r3, r3, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @random="ab87f1f7376b", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x88, 0x0, @remote, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x1, 0x20, 0xa10}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) setrlimit(0x7, &(0x7f00000000c0)={0x5, 0x3ff}) (async) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000025000086dd6000000000242b00fe800000000000000000000000000000fe8000000000000000000000000000aa2c000000000000002b00"/74, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, 0xffffffffffffffff) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r2, 0x16, 0x0, @void}, 0x10) (rerun: 64) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10400, 0xc1) faccessat(r6, &(0x7f0000000140)='./file0\x00', 0x101) 37.454827307s ago: executing program 32 (id=46): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) (async) unshare(0x4040600) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, &(0x7f0000000100)={[{@name={'name', 0x3d, 'qt.,\xac\xa7@\xef\xac\r\xbd\xe6\xec\xa64\x10*o\xe4\xc2\xd2\xa3\x02h\xd3\xee\xbao\xfe\x17\xfc\x0f\xedU\x7f\xdc\x005\x1f\xaaAa\x19V\xc6Ks9\xe6\xa8\xbc\x97\xe6\x1d,\xc4\x16\x8b[h~\t\x04\xdb\xe8\x14\x81\xae\x04\x9fX\xf0`W\x01\xd8\xb4Q\xc9\x96R\xd0\xcf\x85\xcfX\x9d\xdd\x89>Y\x8a\x95\xd7\xde@0R[\xd5'}}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) pidfd_getfd(r3, r3, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @random="ab87f1f7376b", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x88, 0x0, @remote, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x1, 0x20, 0xa10}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) setrlimit(0x7, &(0x7f00000000c0)={0x5, 0x3ff}) (async) syz_emit_ethernet(0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000025000086dd6000000000242b00fe800000000000000000000000000000fe8000000000000000000000000000aa2c000000000000002b00"/74, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r5, 0x400454a4, 0xffffffffffffffff) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r2, 0x16, 0x0, @void}, 0x10) (rerun: 64) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10400, 0xc1) faccessat(r6, &(0x7f0000000140)='./file0\x00', 0x101) 17.248422401s ago: executing program 4 (id=204): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@ipv6_delrule={0xa0, 0x21, 0x200, 0x70bd29, 0x25dfdbfc, {0xa, 0x14, 0x20, 0x1, 0x9, 0x0, 0x0, 0x6, 0x4}, [@FRA_SRC={0x14, 0x2, @mcast2}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x100}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x6}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8008804}, 0x20008840) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0xa1081a, &(0x7f0000000a00)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC, @ANYRES16, @ANYRES8, @ANYRES16, @ANYRESOCT, @ANYRES32], 0x21, 0x14fd, &(0x7f0000003f40)="$eJzs3Au0jtXWOPA511oPm6Q3yX3NNR/etLFIklyS5JIkyZEkt4QkSZKkcr8lIQm5J7mH5BaS+/2We5Ik7SQJyS1Z/6HT+XRO5/v3ne873zDGt+dvjGfsNd/nneuZ65177Od53j3e97sOg6rUq1qxDjPD/wj+9UdXAEgBgL4AcA0ARABQMlvJbJf2Z9LY9X92EPHv9eDUK12BuJKk/+mb9D99k/6nb9L/9E36n75J/9M36X/6Jv0XIj3bOi33tbKl303e/0/P5Pz/f0ha0dFfrS96fcd/IUX6n75J/9M36X/6Jv1P36T/6Zv0P32T/qdv0n8h0rP//nvH8r+D/wvblf79E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRPpwNlxkA+Nv4StclhBBCCCGEEEKIf5+Q8UpXIIQQQgghhBBCiP99CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQB/JCPrBA4IAhhvxQAJJwAxSEGyEVCkFhKAIeikIxuAmKw81QAm6BknArlILboDSUgbJQDm6H8nAHVIA7oSLcBZWgMlSBqnA3VIN7oDrcCzXgPqgJ90MteABqw1+gDjwIdeEhqAcPQ314BBpAQ2gEjaHJfyv/RXgJXobO0AW6QjfoDj2gJ/SC3tAH+sIr0A9SfnttBsIgeB0GwxswBN6EoTAMhsNbMAJGwigYDWNgLIyDt2E8vAMT4F2YCJNgMkyBqTANpsN7MANmwix4H2bDBzAH5sI8mA8L4ENYCItgMXwES+BjWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCp/ANtgOO2An7ILdsAc+hb3wGeyDz2E/fPEv5p/5h/yOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwBw35sJcmAfzYD7Mh4SEjIz5MT8mMYkFsSCmYioWxsLo0WMxLIbF8WYsgSWwJJbEUlgKS2MZLIPlsByWx/JYAStgRayIlbASVsEqeDfejfdgdayONbAG1sSaWAtrYVre2lgH62BdrIv1sB7Wx/rYABtgI2yETbAJNsWm2AybYQtsgS2xJbbCVtgaW2MbbINtsS22w3bYHttjB+yAHfEFfAFfxBfxZXwZu2Al1Q27Y3fsiT2xN/bBPvgK9sNX8VV8DQfgQByEr+Pr+AYOwdM4FIfhcByO5dVIHIWjkdVYHIfjcDyOxwk4ASfiJJyEU3AqTsPpOB1n4Eycie/jbPwAP8C5OBfn4wJcgAtxES7GxbgEz+BSXIbLcQWuxFW4EtfgWlyD63EDrsdNuAm34Bb8BD/B7bgdd+JO3I0GAD/Fz/AzHID7cT8ewAN4EA/iITyEaZiGh/EwHsEjeBSP4jE8hsfxBJ7EE3gKT+FpPINn8Syex/N4AZ/L803d3YXWDQB1iVFGZVAZVIpKUZlVZpVFZVFZVVaVUAmVTWVT2VV2lUPlULlULpVH5VH51DlFihSrWOVX+VVSJVVBVVClqlRVWBVWXnlVTBVTxVVxVUKVUCXVraqUuk2VVmVUc19OlVPlVQtfQd2pKqqKqpKqrKqoqqqqqqaqqeqquqqhaqiaqqaqpR5QtVU37I0PqkudqacGYn01CBuohqqRaqzewEdVUzUEm6nmqoV6XA3DodhKNfWt1VOqjRqFbdUzajQ+q9qrsdhBPa86qhdUJ/Wiekk1851VFzURu6nuagr2VL1Ub9VHzcDK6lLHqqjX1AA1UA1Sr6v5+IYaot5UQ9UwNVy9pUaokWqUGq3GqLFqnHpbjVfvqAnqXTVRTVKT1RQ1VU1T09V7aoaaqWap99Vs9YGao+aqeWq+WqA+VAvVIrVYfaSWqI/VUrVMLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fb1idqmtqsdaqfapXarPepTtVd9pvapz9V+9YU6oL5UB9VX6pD6WqWpb9Rh9a06or5TR9X36pj6QR1XJ9RJ9aM6pX5Sp9UZdVadU+fVz+qC+kVdVEGBRq201kZHOoPOqFN0Jp1ZX6Wz6Kt1Vn2NTuhrdTZ9nc6ur9c5dE6dS+fWeXRenU9bTdpp1rHOrwvopL5BF9Q36lRdSBfWRbTXRXUxfZMurm/WJfQtuqS+VZfSt+nSuowuq8vp23V5fYeuoO/UFfVdupKurKvoqvpuXU3fo6vre3UNfZ+uqe/XtfQDurb+i66jH9R19UO6nn5Y19eP6Aa6oW6kG+sm+lHdVD+mm+nmuoV+XLfUT+hW+kndWj+l2+indVv9jG6nn9Xt9XO6g35ed9Qv6E76F31RB91Zd9FddTfdXffQPXUv3Vv30X31K7qfflX316/pAXqgHqRf14P1G3qIflMP1cP0cP2WHqFH6lF6tB6jx+px+m09Xr+jJ+h39UQ9SU/WU/RUPU33/m2mWf+F/Hf+SX7/X4++RW/Vn+hterveoXfqXXq33qP36L16r96n9+n9er8+oA/og/qgPqQP6TSdpg/rw/qIPqKP6qP6mD6mj+sT+pz+UZ/SP+nT+ow+o8/p8/q8vvDbawAGjTLaGBOZDCajSTGZTGZzlclirjZZzTUmYa412cx1Jru53uQwOU0uk9vkMXlNPmMNGWfYxCa/KWCS5gb87aRpCpsixpuippi56V/JNwXNjSbVFPq7/D+rr4lpYpqapqaZaWZamBampWlpWplWprVpbdqYNqataWvamXamvWlvOpgOpqPpaDqZTuYl85LpbDqbrqar6W56mJ6ml+lt+pi+5hXTz/Qz/U1/M8AMMIPMIDPYDDZDzBAz1Aw1w81wM8KMMKPMKDPGjDHjzDgz3ow3E8wEM9FMNJPNZDPVTDXTzXQzw8wws8wsM9vMNnPMHDPPzDMLzAKz0Cw0i81is8QsMUvNMrPMrDArzCqzyqwxa8w6s85sMBvMJrPJLM241Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDJpJs0cNofNEXPEHDVHzTFzzBw3x81Jc9KcMqfMaXPanDVnzXlz3lwwF8xFc/HSZV+kIhWZyEQZogxRSpQSZY4yR1miLFHWKGuUiBJRtihblD26PsoR5YxyRbmjPFHeKF9kI4pcxFEc5Y8KRMnohqhgdGOUGhWKCkdFIh8VjYpFN0XFo5ujEtEtUcno1qhUdFtUOioTlY3KRbdH5aM7ogrRnVHF6K6oUlQ5qhJVje6OqkX3RNWje6Ma0X1Rzej+qFb0QFQ7+ktUJ3owqhs9FNWLHo7qR49EDaKGUaOocdTk3zp/CKdzPuY72y62q+1mu9setqftZXvbPravfcX2s6/a/vY1O8AOtIPs63awfcMOsW/aoXaYHW7fsiPsSDvKjrZj7Fg7zr5tx9t37AT7rp1oJ9nJdoqdaqfZ6fY9O8POtLPs+3a2/cDOsXPtPDvfLrAf2oV2kV1sP7JL7Md2qV1ml9sVdqVdZVfbNXatXWfX2w12o91kN9stdqv9xG6z2+0Ou9PusrvtHvup3Ws/s/vs53a//cIesF/ag/Yre8h+bdPsN/aw/dYesd/Zo/Z7e8z+YI/bE/ak/dGesj/Z0/aMPWvP2fP2Z3vB/mIv2nDp4v7S6Z0MGcpAGSiFUigzZaYslIWyUlZKUIKyUTbKTtkpB+WgXJSL8lAeykf56BImpvyUn5KUpIJUkFIplQpTYfLkqRgVo+JUnEpQCSpJJakUlaLSVJrKUlm6nW6nO+gOupPupLvoLqpMlakqVaVqVI2qU3WqQTWoJtWkWlSLalNtqkN1qC7VpXpUj+pTfWpADagRNaIm1ISaUlNqRs2oBbWgltSSWlErak2tqQ21obbUltpRO2pP7akDdaCO1JE6USd6iV6iztSZulJX6k7dqSf1pN7Um/pSX+pH/ag/9acBNIAG0SAaTINpCA2hoTSMhtNbNIJG0igaTWNoLI2jcTSextMEmkATaSJNpsk0labSdJpOM2gGzaJZNJtm0xyaQ/NoHi2gBbSQFtJiWkxLaAktpaW0nJbTSlpJq2k1raW1tJ7W00baSJtpM22lrbSNttEO2kG7aBftoT20l/bSPtpH+2k/HaADdJAO0iE6RGmURofpMB2hI3SUjtIxOkbH6TidpJN0ik7RaTpNZ+ksnaef6QL9QhcpUIrL5DK7q1wWd7XL6q5x/xjncrldHpfX5XPW5XA5/y4m51yqK+QKuyLOu6KumLvJpV66pfpdXNqVcWVdOXe7K+/ucBX+EFdz97jq7l5Xw93nqrq7/y6u6e53tdzDrrZ7xNVxDV1d19jVcw+7+u4R18A1dI1cY9fSPeFauSdda/eUa+Oe/kO80C1ya906t95tcHvdZ+6sO+eOuO/cefez6+y6uL7uFdfPver6u9fcADfwD/Fw95Yb4Ua6UW60G+PG/iGe7Ka4qW6am+7eczPczD/EC9yHbrZb7Oa4uW6em/9rfKmmxe4jt8R97Ja6ZW65W+FWulVutVvzH7WucJvcZrfF7XGfum1uu9vhdrpdbvev8aV17HOfu/3uC3fYfesOuq/cIXfUpblvfo0vre+o+94dcz+44+6EO+l+dKfcT+60O/Pr+i+t/Uf3i7voggNGVqzZcMQZOCOncCbOzFdxFr6as/I1nOBrORtfx9n5es7BOTkX5+Y8nJfzsWVix8wx5+cCnOQbuCDfyKlciAtzEfZclIvxTVycb+YSfAuX5Fu5FN/GpbkMl+VyfDuX5zu4At/JFfkursSVuQpX5bu5Gt/D1flersH3cU2+n2vxA1yb/8J1+EGuyw9xPX6Y6/Mj3IAbciNuzE34UW7Kj3Ezbs4t+HFuyU9wK36SW/NT3Iaf5rb8DLfjZ7k9P8cd+HnuyC9wJ36RX+KXuTN34a7cjbtzD+7Jvbg39+G+/Ar341e5P7/GA3ggD+LXeTC/wUP4TR7Kw3g4v8UjeCSP4tE8hsfyOH6bx/M7PIHf5Yk8iSfzFJ7K03g6v8czeCbP4vd5Nn/Ac3guz+P5vIA/5IW8iBfzR7yEP+alvIyX8wpeyat4Na/htbyO1/MG3sibeDNv4a38CW/j7byDd/Iu3s17+FPey5/xPv6c9/MXfIC/5IP8FR/irzmNv+HD/C0f4e/4KH/Px/gHPs4n+CT/yKf4Jz7NZ/gsn+Pz/DNf4F/4IgeGGGMV69jEUZwhzhinxJnizPFVcZb46jhrfE2ciK+Ns8XXxdnj6+Mccc44V5w7zhPnjfPFNqbYxRzHcf64QJyMb4gLxjfGqXGhuHBcJPZx0bhYfFNcPL45LhHfEpeMb41LxbfFpeMy8cP3lYtvj8vHd8QV4jvjivFdcaW4clwlrhrfHVeL74mrx/fGNeL74hLx/XGt+IEYfvu8St34obhe/HBcP34kbhA3jBvFjeMm8aNx0/ixuFncPG4RPx63jJ+IW8VPxq3jp+I28dN/ur9r3C3uHveIe8Qh3KvnJecnFyQ/TC5MLkouTn6UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGULVjODRK6+98ZHP4DP6FJ/JZ/ZX+Sz+ap/VX+MT/lqfzV/ns/vrfQ6f0+fyuX0en9fn89aTd5597PP7Aj7pb/AF/Y0+1RfyhX0R731RX8w39k18E9/UP+ab+ea+hX/cP+6f8E/4J/2T/infxj/t2/pnfDv/rG/vn/PP+ed9R/+C7+Rf9C/5l31n38V39V19d9/d9/Q9fW/f2/f1fX0/38/39/39AD/AD/KD/GA/2A/xQ/xQP9QP98P9CD/Cj/Kj/Bg/xo/z4/x4P95P8BP8RD/RT/aT/VQ/1U/30/0MP8PP8rP87NTZfo6f4+f5eX6BX+AX+oV+sV/sl/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/2qf5b/xh/60/4r/zR/33/pj/wR/3J/xJ/6M/5X/yp/0Zf9af8+f9z/6C/8Vf9MGPS7ydGJ94JzEh8W5iYmJSYnJiSmJqYlpieuK9xIzEzMSsxPuJ2YkPEnMScxPzEvMTCxIfJhYmFiUWJz5KLEl8nFiaWJZYnliRWJlYlQgh77Y45A8FQjLcEAqGG0NqKBQKhyLBh6KhWLgpFA83hxLhllAy3BpKhdtC6VAmlA2PhAahYWgUGocm4dHQNDwWmoXmoUV4PLQMT4RW4cnQOjwV2oSnQ9vwTGgXng3tw3OhQ3g+dPzbHVd4OXQOXULX0C10Dz1Cz9Ar9A59Qt/wSugXXg39w2thQBgYBoXXw+DwRhgS3gxDw7AwPLwVRoSRYVQYHcaEsWFceDuMD++ECeHdMDFMCpPDlDA1TAvTw3thRpgZZoX3w+zwQZgT5oZ5YX5YED4MC8OisDh8FJaEj8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBJ2Ba2hx1hZ9gVdoc94dOwN3wW9oXPw/7wRTgQvgwHw1fhUPg6pIVvwuHwbTgSvgtHw/fhWPghHA8nwsnwYzgVfgqnw5lwNpwL58PP4UL4JVyUz6wJIYQQQvyX9PiT/d3+yWMGANRv4+4AcPX23Gm/368BYGOOv457qTwtEwDwVJcOD/5tq1Spa9euvz13qYaowFwASPzDAX6Ll0ELeAJaQ3Mo/k/r66VeOM9/Mn/yVoDMv8tJgcvx5fm//E/mf/Tx4QtLxWez/X/mnwuQWuByTia4HC+DFpdWA82hxH8yf86mf1J/pq/GATT7XU4WuBxfrr8YPAZPQ+u/e6YQQgghhBBCCPFXvVTZdn92/3zp/jyPuZyTES7Hf3Z/LoQQQgghhBBCiCvv2Rc6Pflo69bN28lABjKQwX8MrvRfJiGEEEIIIcS/2+WL/suPZbqSBQkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOnQ7770KxMA/K98ndiVXqMQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQghxpf2/AAAA//+7dzOa") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x2, 0x40000002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x8000009a5}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000080)={0x0, 0x2, 0x10000000000, 0x800}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0xffffffffffffffff) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r6, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000480)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x2, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x102000000000000, 0x9, 0x2, 0x1, 0x400000008], 0xeeef0000, 0x4fb40}) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7d, 0x8, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0x1]}}) ioctl$KVM_GET_MP_STATE(r6, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0xffffffffffffffeb}], 0x30, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 16.619077832s ago: executing program 4 (id=206): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r1 = dup(r0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@x25={0x805, {0x0, 0xb, 0x0, "5a989ad0771acc8099c6c3f69ea5318f131defed12b6dce20d8fdd1c251c5d2b1b69eca1483493eda89400c19957c4619f9ff5aa047f88021544ef394531efee631a42b86f2df7cdb6f0abb5d645c79b95b87316a5411c3fa86756974dd9ea655351d5910e218eddc993ebe193b8884e58794a8dbd3a54e6fc5b0b267cdc4d541497bb63c3ec2e406ca890d73e308e3572dc797a34e9562220b752cbf93eb4154c9f79cd15305e019da5ff6da3aa943e6128efce65817f55b77034be0e49a89b436b686610f8aca2e3bea2eae26da729d689298a026eb27476ee159bc3019d9f92af91a5229ab80e4f9205b7d0425b541700f0b6cd4a293bea3405a7807c87f645c886907786945d67dd1dc3b6d484dda95909804610c4890647e4fa68f9c09b7367880886103833da80f489f6d267db9d5e0c9e94bd1e0d450b5f1dfd8e89655799727fad30f50db2e967f829b2555732597c2d465db8bdb2b09d1ed5dfb2793ee675c8ef830afe3082b5019fc1bfc1bf1bf45fb8ab78d44036076ade37de5cff45c8b20225178bcfd6da6c1239bcc605b01146d2539e1007002e5cfbd16c0b831b5a6a57019a473fb7faef9fb05c592f7dc58be83440e45cfdd6db4c88cb8b5ee68a6bfde86cb75da454847f84e3253179f5e99afa49169d9352116837575e4091f5bbf59acd64a49734621f413521363b0e508a5039ea8b72abd20c625fb171dc12da4b695d6b2310dae947a2c6f8fb51c9842c19f2ff479ce09dcd806a219739c1fba8ef2334c18ba6d8304b8afed38036749da81f154b926a06ba3f089ff8b1fd32cd1edc3d168fd6a33552689b415656abe7b5268da00942e3e0a57daff0cd29f44713dd518375a63cc3066ec5962dd3887fcb65178e0d9edb1efdeddb2aacbd3c934b98206841f8a1c2a3987efbf4efcd318a282cd0be0f209d01281fe147688073c9205400b3b504a2c26d02c4f732ffab734043ae954e47c88a15b0ab040fd4ad7712097747df6a94d5d72404a87348a552ce691268cad161ccd9f8bcecddb9d5c93ab5bf2d6b9042f66cca3aba0b29a44bbdee1cf7622da0d45781c0b0092381e952d6908bdf4f7ca0a0c1d960ab785bcabf14db57cee832ef3e096463b8da7cd8bcd5beea86c20b75aa41abc1c3c46a5b639a23d6266ad9cdeb1cae6525580f56b76ea850493b4816931fa0e868cb7df759c7721c36571fbd48ad63c7e7cd327c138e6abeccf8b864832609f94d6f050b9ce49967700f3584a2e12d1f355999b7fe4098839695ae85d98b39364a51f9b259de2cc85ef6304b08f0186e739dfd2698db1538b639d2f2585a795d74afdd2c86d3059dd18ae3543babe83abf2182b57271c66497ee09884bd5cb9f64c87f254b53407fb2bda17331d66acd5b766dbcde9e40edd4dc0a1d93dea9ce33af0c73d942b6ed8a6762ae02f0e59424632a3f92fca516e602ddfc2d87fe863bf158c1cdafd467662cd8482bfea764cba960c8821cb830db4d6d16146f83594d52d5c6ef596910fceffa63d3ebd2a07db85f37bf0831573945ac0eef2158bcb6b0a9494043e15323559da7c804fcb2c3b335da627cd74c057dfae6b644ff2d4b13e7247c5a2a4a5c997923861b5fcaf4f65e28405e6f3f40a15abf8375616394d302b8cd49d2038951d5b625d23c3769176fd6f0706d036b944899e74a466e1a5b5224b339e4581b97de50a14928a252bcc2bb7d0948acd99591521ad1d9bbc33eece8cd007e6540b5ecf764768188dbf8141846b4943820756139f22dcb5a9b8c0196e8ae5d4f0d72de323d7425124fa6782dc8d9f56bf12c29d0b0c7e71893d0d76b834192f45eaf8cf3acd88c0e5ae9686bcb44f6b4d1fb01af6c30a71bac70fb2f32958583013c1a460fd15b6012221b0f7bae87d5a03ee6662d0da6dec922041c25dbff9484d9190390b0d261e03799fc20d0cec0a39ff63e68a165a82b1e7ef4ef3ed4a534386d38ef1aa8b708c8eca3fa3a45b00d670e246431dc238f5e51c2c2633495a9196e46dc31db87bca329b927759a1c3ed16869d6c6baa402e60ec99d628ca45b8b5191464b122e3c4cd866b21ef8b051d4fc6176aa42761157c75f9f1671b9bb0f1a333447f00f155cf5ea29658315faee3bc6829daccbdad5ab6df6727cf22f51c06a2a0a9c3ff798b29971fee71488e064368db6d29ac12dd3ff00ce77c7f6d580657b9801a639158649dc49a629e36838d8c87877f0d6da0eb4bf0bc3a972726e3386d7fe0391192cdace728359600c5aad25b9a08f0f1f96f552329c113c03ece85613a1cb41f4629718cbf2e69662d6478a8f360e5339f966abf43735ed7be8213d100630518ce60110a76eb0f3a14f82a87274f50add8edbfd634a41a007cae20f36d25adcee9611caf4ba6ddb55285e6735ee913865ec6afc08c9be72db79306dd2797d5837c1714575af9122557108d546785e41237154c0dc685449caf7827cd675366c707f08bd0f56b15a16cf9ea996aa85e21714c334fc690c67d0a56198bfd516e349ab9cdd6476e88678eaa7b47179b69a4abc66d3555602ab67300580b558245684e85008497a515d88289a365554c4e525fe53495bafe6dfcf5f9c4e4a0153e9eaf254685344e41ed3ac61615131998f93b015892bc291cb3e3f97214acbef36884c5ecf479d8e3d66d39db03e2b359b185fe5d8abc0509523558320169d91f7bca4c4aba1a80930ee2b5452e52bb2a04dbc1997962b70ed0de85e5404d3871726ed0a8a8438eb80866ef8efb6159b7ce00abcecc9883e47f559b90e3a97cfc9d1610c3bcac86c5d681ae1d2d37ba49cd72bb0af191be3ca908e61227efd81262dc76b8e068d75bc58ee5bb459fa0495be32426bf2a500cbc95cabd0841e66280cd13b38cf18a7ded0397b275364d7fcf21249ff6909d174d80931f2c69fb60372b06f84cb05a7d7a7c8a7b0c22b6a7b1ee388677a02366177bb5ce127646921db1027b9cd71a9d41b95e23afb15db289557e9c7e5467335df3dd66bfd902832412d211470404a723075cc4df3e48c1c09874d2c470e9463becb4f35b2e4644a21623c2f7ed4a3b8cefb1efc9807736b057063cf6e4b1b7b9f22b12b51e8bdcccd278a8b1af08c7d47ba0d18f493e3a6ad1b3f3c279575ef6c6fc40b9181578fde772388dfaf1fa01e3ce3484448ea08c2380c0173ffb6e7458a57f1d803cd3183d83c581eca0e85191237d49673085eb509c5ced8482d7d873afe9286b3d6f22bcffc3725608055f427c4e1be1556cc1576cd44018d8b835700a74ea0d0bc0fbd6358bfaefb2b27e5e0df776b24e0d974c6714bec1f4f72ce2a457e25f998dafb26a097be2c5d4c301565f28cac4681369e452322dad87a797c2ea10f11f924d431344e3dcecceb1f86f248e5b32b72efa800776a73ebb2a236f582a6183b10045a9096a7986b1c8c5802a48977c98a4875ac97de64b473186a4a68fdebf15d5e59d9b7135369ee270083035dea77507ce3b1b64dabbccabcdedc58e3e3c96bf20cea86dab5d3dbc20a1f0236c61d70efc450cf482f4542f6a15dfae6d63fa6ad86e3aeaa7c30a5129adc3c1d8aa41aed9c6fd3838fb71c6d78673ba71d8b2e4bbf934907c4c8b3eb7f2ab4a72230b7fde8bcc6bf64a775aeae35fe788ede272e21b1980c6debf39d39d37ac9456d943b6e1372da91c5bbb647035d75ec4b0ea1df5577d862dba86129df9e782a8e560c3e91933cbef826a9dce5e910f3d5535271d7143bc9b8a8b3f5a38106e60eeb371e309d570e42a5f45079b8e79bb79e225e2ccb7d124a937a4ae6b7ae109359f48dc20a99ddfae3d8e83a2909f398a59a702e79098839cf09fba4457ed81486b54720bffd8689482cfe6c8194851cb97d9ef721f6981eec40892ccf3d7000d2f33f3931956f1991a61240d1e79b103fd22bf3cfa4ece8133e149ef50259414417115652fac5f7d0c7c3c62d24da56714278278ac30f0dfed67b905bce8bc4394a8bfcbadf7cb33523b08abb36ffb10e2f21709b76df05c6b292f67a476296a1603a232598c355317ef42bab7d9676f06c78c6323ce917deceed1b99d17d4b001766ad2ebf06df62e35fbc65514e1dba250975b6f3bd14ed4e6dbea4ff66bfeac91fb5d8a2c74c0fa95a434452c2f6cc4e90ddde9982352886d4c8e5ddc8752b6594a919ebcc8418bdbfc80cb147eb8f7f95248037f6292bf93ddac7d65074ce43df935053e102b34b379cb35677fce9b8e9955e8dca72a9cf1e465234bff80c617d156294e14ac122350bd3e87881042c84d6e0ca018ba5eaa8b7ca49b12559b47ec3d234585f017e887d9be0f4b79f9ef1c86aa563b41ed04bc723189c2ad355f32e75367fdac9ddb2d3733f98f6b7463412d770b357763f43b3c181536fa0d27ff0b9cbbc21fb680f8ddd508609442843e9cda1c86867cb5b31483621b1648cdc4b4ac2f30585563528c3b75cac96c0abb0b5f287bacbe20d14648781061aa3e2cf351b9b33c39b836c3633de8eee0c7bb8c2468dbaea497cd40d89bf57313a6202b8705e3dec6f89313dd228d7160aba0b827cc774e6429c5e40363f9df7cd1128613e2f1dd307df27eabaaca3c6401af4cf1a0c8ab5a8efb8a29a65623407e887ec6ccf7067fa49d72eedec5e1b6a8e499375de74c40b09edbae47bd17591ee8e6fbdc4e5648d25d2c0bde156c0c9e3f8cc5a6d2768fc22cefb73f57a6ce7bfb0c6f12face01d3dcc5ba93555a7714d15240d546c1a520a8211e4"}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000200)=ANY=[]) 16.303691647s ago: executing program 4 (id=209): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB="180000000a00000000000000100000026b110e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000108000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="fc00000000000000080004000600000008001b"], 0x30}}, 0x0) 16.182105692s ago: executing program 4 (id=210): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ffffffff7f000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=@deltfilter={0x24, 0x2d, 0x119, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0x1, 0x1}, {0xf, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0003"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 15.753202321s ago: executing program 4 (id=215): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x4, 0x0, 0x0, 0xfffffffe}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061105e000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x23) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x2, 0x0, 0x0, @irqchip={0xfffffffa, 0xffff5540}}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000800)={0x1, 0x1}) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101002, 0x4) 15.703479252s ago: executing program 4 (id=216): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x865, 0x8) read$watch_queue(r2, &(0x7f0000000040)=""/203, 0xcb) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat2(r5, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) write(r0, &(0x7f0000000040), 0xffffff4a) prlimit64(0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000008b000000050010000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r7, &(0x7f00000002c0), &(0x7f0000000380)=""/107}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000040), &(0x7f0000000840)=""/215}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r6, &(0x7f0000000040)}, 0x20) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffa000/0x3000)=nil) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000240)=0x30) 15.676644347s ago: executing program 33 (id=216): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x865, 0x8) read$watch_queue(r2, &(0x7f0000000040)=""/203, 0xcb) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000140)='./file0\x00') openat2(r5, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) write(r0, &(0x7f0000000040), 0xffffff4a) prlimit64(0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000008b000000050010000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r7, &(0x7f00000002c0), &(0x7f0000000380)=""/107}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000040), &(0x7f0000000840)=""/215}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r6, &(0x7f0000000040)}, 0x20) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffa000/0x3000)=nil) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000240)=0x30) 6.531181955s ago: executing program 2 (id=302): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000004000000fbffffff04"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x2b8, 0xffffffff, 0x98, 0x130, 0x98, 0x98, 0xffffffff, 0x220, 0x220, 0x98, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'xfrm0\x00', {}, {0xff}, 0x84, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "f46f"}}, @common=@addrtype={{0x30}, {0x950, 0x22, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x40, &(0x7f00000001c0)=0x1) syz_usb_connect$midi(0x4, 0x88, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x499, 0x100c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0xc, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x96, [@midi_out_jack={0x15, 0x24, 0x3, 0x1, 0x6, 0x7, [{0xff, 0x1}, {0x27, 0x8}, {0x92, 0x6}, {0x40, 0x68}, {0x7, 0x3}, {0x3, 0xff}, {0x9, 0x6}], 0xd2}, @midi_out_jack={0x11, 0x24, 0x3, 0x3, 0x6, 0x5, [{0x2, 0x7}, {0xf6, 0xb}, {0x8, 0x3}, {0x7, 0x8}, {0x2, 0x1}], 0x9}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x413d, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x6, 0x3}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x72, 0x3, [{0x1, 0x7}, {0x1, 0x2}, {0x95, 0x73}], 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0xd9}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x5, 0x2, [{0x6, 0x9}, {0x0, 0x9}], 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x4, 0x7}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x5, 0xc, 0x8, 0xff, 0x8}, 0x47, &(0x7f0000000540)={0x5, 0xf, 0x47, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xba, 0x5, 0x2b43, 0x7, 0x1, [0xc00f, 0xff0060, 0xff0030, 0xff0f, 0x3f0f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe8, 0xd, 0x9, 0x7, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0xca, "26696832edae330b468a43d294624c3c"}]}, 0x6, [{0x7c, &(0x7f00000004c0)=@string={0x7c, 0x3, "5827ffdd9df03f74f34f97747fe99d3d02ca0dd25306900ea359dca38ee7cec9216078dd160624733561e50a51f0c50197a34e1a804395e70debef473e016e42a4d634fa0886044547ea705ac9d4150a9e31623d5e7d7784200d26cbf2dac7f3f96a715020eec7e1d1c9c37765090a5ca406200fbaa388e5d4a1"}}, {0xcf, &(0x7f0000000200)=@string={0xcf, 0x3, "c34e1b07d7cf74f9997da0ba3626082b954a419d51c57360e1a5541d5fc40b1fae7e6a41dfec38ce6ead6da3a0f33f8649673c3da91ec1736f96f0bb2f24ed2ddaab57eface86830ab5792c04f9128518a243db939fa895656028f9b62e9f241351f8da645b47fde4fedf88a812c22a5c5c8695dcad6385da5d021e3e5b05093952073f0bd3eddeb56fc3067bfb90e32c82a789dcc404bced520591495f2fd1685da4927e59b61c3bbfc99b806e92b4f2ee6b39fe6a7942661b5e49e23905eb49137571234700e1cbcf292becd"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1407}}, {0x24, &(0x7f0000000340)=@string={0x24, 0x3, "424db656f37596b5edd0cb3e3454cd4b35ffd8bad1f0b3e70fdb1630b02fa404ade0"}}, {0x3e, &(0x7f0000000380)=@string={0x3e, 0x3, "a53af89a2752af454bc96dcd18bd4b868dd6c95b49ef0712e3e3db29ec2825a642adb906a8cd47b9a15cef425f075863f16df5c4cf71b2bcf81f8715"}}, {0x67, &(0x7f00000003c0)=@string={0x67, 0x3, "dd52f8078ed6b69735fb76c03dad8012c88637e42d453fdb97693e2db1cb52c5b10531f3c8038cea925a64fc181b5ea12b169176d7cb7fbbd3f0a0204f460732a1676a7f6a4d23646de91f595c1a2caa863715c69f63caf4e32defedc7a6f9a1c183902f3b"}}]}) (async) syz_usb_connect$midi(0x4, 0x88, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x499, 0x100c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0xc, 0x20, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x96, [@midi_out_jack={0x15, 0x24, 0x3, 0x1, 0x6, 0x7, [{0xff, 0x1}, {0x27, 0x8}, {0x92, 0x6}, {0x40, 0x68}, {0x7, 0x3}, {0x3, 0xff}, {0x9, 0x6}], 0xd2}, @midi_out_jack={0x11, 0x24, 0x3, 0x3, 0x6, 0x5, [{0x2, 0x7}, {0xf6, 0xb}, {0x8, 0x3}, {0x7, 0x8}, {0x2, 0x1}], 0x9}, @ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x413d, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x9, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x6, 0x3}, @midi_out_jack={0xd, 0x24, 0x3, 0x0, 0x72, 0x3, [{0x1, 0x7}, {0x1, 0x2}, {0x95, 0x73}], 0x3}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0xd9}, @midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x5, 0x2, [{0x6, 0x9}, {0x0, 0x9}], 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x4, 0x7}]}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x5, 0xc, 0x8, 0xff, 0x8}, 0x47, &(0x7f0000000540)={0x5, 0xf, 0x47, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xba, 0x5, 0x2b43, 0x7, 0x1, [0xc00f, 0xff0060, 0xff0030, 0xff0f, 0x3f0f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe8, 0xd, 0x9, 0x7, 0x36}, @ss_container_id={0x14, 0x10, 0x4, 0xca, "26696832edae330b468a43d294624c3c"}]}, 0x6, [{0x7c, &(0x7f00000004c0)=@string={0x7c, 0x3, "5827ffdd9df03f74f34f97747fe99d3d02ca0dd25306900ea359dca38ee7cec9216078dd160624733561e50a51f0c50197a34e1a804395e70debef473e016e42a4d634fa0886044547ea705ac9d4150a9e31623d5e7d7784200d26cbf2dac7f3f96a715020eec7e1d1c9c37765090a5ca406200fbaa388e5d4a1"}}, {0xcf, &(0x7f0000000200)=@string={0xcf, 0x3, "c34e1b07d7cf74f9997da0ba3626082b954a419d51c57360e1a5541d5fc40b1fae7e6a41dfec38ce6ead6da3a0f33f8649673c3da91ec1736f96f0bb2f24ed2ddaab57eface86830ab5792c04f9128518a243db939fa895656028f9b62e9f241351f8da645b47fde4fedf88a812c22a5c5c8695dcad6385da5d021e3e5b05093952073f0bd3eddeb56fc3067bfb90e32c82a789dcc404bced520591495f2fd1685da4927e59b61c3bbfc99b806e92b4f2ee6b39fe6a7942661b5e49e23905eb49137571234700e1cbcf292becd"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1407}}, {0x24, &(0x7f0000000340)=@string={0x24, 0x3, "424db656f37596b5edd0cb3e3454cd4b35ffd8bad1f0b3e70fdb1630b02fa404ade0"}}, {0x3e, &(0x7f0000000380)=@string={0x3e, 0x3, "a53af89a2752af454bc96dcd18bd4b868dd6c95b49ef0712e3e3db29ec2825a642adb906a8cd47b9a15cef425f075863f16df5c4cf71b2bcf81f8715"}}, {0x67, &(0x7f00000003c0)=@string={0x67, 0x3, "dd52f8078ed6b69735fb76c03dad8012c88637e42d453fdb97693e2db1cb52c5b10531f3c8038cea925a64fc181b5ea12b169176d7cb7fbbd3f0a0204f460732a1676a7f6a4d23646de91f595c1a2caa863715c69f63caf4e32defedc7a6f9a1c183902f3b"}}]}) 5.853155035s ago: executing program 2 (id=310): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x11, 0x12, &(0x7f00000003c0)=ANY=[@ANYBLOB="181100000edc2f309a6bed20be403d67df7270e114d313d35c1c62030ba488df25528b6a0c851fb2a0e1c39a02", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000186400000e00000000000000010000003cd60200ffffffff18190000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000002500)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002540)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000002580)={0x3, 0x7, 0x5, 0x2211}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6gretap0\x00', 0x16803}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000e00100f20000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5}, &(0x7f0000000500), &(0x7f0000000380)=r5}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:systemd_passwd_agent_exec_t:s0\x00', 0x31, 0x2) 4.921364809s ago: executing program 6 (id=320): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) 4.263339605s ago: executing program 2 (id=328): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x7, 0x6, 0xaaca, 0x80000001, 0x2}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x3fe}) socket$inet(0x2, 0x3, 0x1) syz_open_dev$vcsa(&(0x7f0000000080), 0x9, 0x200000) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x9, 0x200000) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000000c0)=""/54, &(0x7f0000000100)=0x36) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000440)={0x2, 0x0, 0x6, 0x800, 0x1, 0xffffff80}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB], 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_delrule={0x1c, 0x21, 0x4, 0x70bd25, 0x25dfdbfe, {0xa, 0x20, 0x10, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_delrule={0x1c, 0x21, 0x4, 0x70bd25, 0x25dfdbfe, {0xa, 0x20, 0x10, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) dup(r3) (async) r4 = dup(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00302bfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES8=r4, @ANYRES64=r4], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000000ffffff80180000000000000000000000000000009500000000000000360a060000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @none}, 0x8) 4.263169416s ago: executing program 2 (id=329): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(r0, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r5, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x1c}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, &(0x7f0000000040)) socket$inet_icmp(0x2, 0x2, 0x1) write(r6, &(0x7f0000000180)='1', 0x1) syz_read_part_table(0x1063, &(0x7f0000001080)="$eJzsz7FNw0AUx+G/sc/gAkHDQBT0NKzAHLAHrRs2oEGpskbKjHHRneIVkhTfV917+klPF65qSMlzeyz574uvJJ8lqbVNby9b+LifUuv38ten+yVlyi55mNfjz3ooffueedz611alPvU6ydRuJannexkz3H38XvSzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCjTgEAAP//me8QpQ==") 3.547317854s ago: executing program 2 (id=338): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x1, 0x4fe, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTOImm3U3XdgDIGDLslDQqs6P7kYrONC9gNBqJcSKE4duSNwoil1HcVKa0ENy5I5EJU7wJ3DjgNQTB27c4MalHJAqqEANUg9GM54mJoljs03iJv58pPHMe+P4+57t957nJc4LYGhdjYjtiLgUEZ9ExGSRnxRb3Gxv2f2ePrm/sPvk/kISrdbH/0jy81ledPxM5tXiMccj4offi/hJcjhuc3NrZb5Wq64V6an1+upUc3Pr+nJa5MzOzcxNv3/jvdkTq+ub9d8+/u7yhz/6/e++9OhP29/8WVas8s8v5+c663GS2lUvRbkjbzQiPjyNYAMyWrx/OH+y1vaZiHgrb/+TMZK/mv05olkDAOdAqzUZrcnONABw0WXX/+VI0koxF1CONK1U2nN4b8REWms019+ZbGzcWYx8DutKlNLby7XqdDFXeCVKSZaeyY/307MH0jci4vWI+MXYK3m6stCoLQ7ygw8ADLFXD4z//x5rj/8AwAU3PugCAABnzvgPAMPH+A8Aw+f/GP/7/3YgAPBSc/0PAMPH+A8Aw6fn+L9zNuUAAM7EDz76KNtau8X/v168u7nx7fLd64vV5kqlvrFQWWisrVaWGo2lWrWy0Gr1erxao7E68+5esrm5dave2Lizfmu5Pr9UvVUtnXJ9AIDeXn/z4V+SiNj+1iv5Fh1rORir4WJLB10AYGBGBl0AYGB8nweGVx/X+KYB4ILrtZZn1z8RemDxVzivrn3e/D8MK/P/MLw+3fz/d068HMDZM/8Pw6vVSqz5DwBDxhw/8EK//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAhVc63JK3ka4FvZ7dppRJxOSKuRCm5vVyrTkfEaxHx57HSWJaeGXShAYAXlP49Kdb/ujb5dvng2UvJf8byfUT89Fcf//Le/Pr62kyW/8+9/PUHRf7spUFUAADodPNwVnucLvYdF/JPn9xfeL6dZREff9BeXDSLu1ts7TOjMZrvx6MUERP/Sop0W/Z5ZeQE4m/vRMTn9ut/ryNCOZ8Daa98ejB+FvvyKcTff/4Pxk//J36an8v2pfy5+OwJlAWGzcMP2v1k0fayJla0vzSu5vuj2/943kO9uOf93+6h/i/d6/9GDsVP8jZ/dS99fEkev/uH7x/KbE22z+1EfGH0qPjJXvykS//7dp91/OsXv/xWt3OtX0dci6Pjt9XzbnZqvb461dzcur5cn1+qLlXvzM7OzcxNv3/jvdmpfI66ffvHAw//rFjm/rWuz81OxESX+OM96v+1Puv/m2ef/Pgrx8T/xlePfv3fOCZ+NiZ+vc/48xM3uy7fncVf7FL/Xq//O33Gf/S3rcU+7woAnIHm5tbKfK1WXetxkH3W7HUfB+fzILYjXoJi9DpIi7fsy1KeC35wTKeRnlHnBJyq/UY/6JIAAAAAAAAAAAAAAADdNDe3VsbidL9ONOg6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9NwAA//8tM9Id") socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000040)={0x2, 0x1234, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c006400004801907864010102ac1414aa0000907812340001bea67f717dfd14293e62b0fa6951e811d0ea311749c6ca2f2dc5692722ed31eab4af815a506e939e63cd49f94fb82ec9ff9d6a4c00ce64990a80d154666aaa5935bc9c5d805cfa0f8ab608cc0e9c59548937b8841ce6ba1fefa3a625a25b6c860d190e6ca986bb27b8612a"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000ac0)={0xa, &(0x7f0000000a40)=[{0x1ff, 0x1, 0x8, 0x10001}, {0x7, 0x9, 0x3, 0x2851b19a}, {0x5, 0x6, 0x3, 0x4}, {0x7, 0x2, 0xfb, 0x8}, {0x1, 0x6, 0x5, 0x7e}, {0xfff7, 0x9a, 0x7, 0xb9}, {0x3, 0xac, 0x9, 0x2}, {0xc, 0xd, 0x2, 0x9}, {0x400, 0x2, 0x9, 0x5}, {0x2, 0x4, 0x7b}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400adc0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) 2.840303321s ago: executing program 1 (id=341): r0 = socket(0x3, 0x4, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0xffffffffffffffff, 0x1, 0x0) syz_clone3(&(0x7f00000011c0)={0x100200, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x2}, &(0x7f0000000140)=""/21, 0x15, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x9}, 0x58) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='io\x00') r3 = socket(0xa, 0x2, 0x0) sendto$inet(r3, 0x0, 0xffffffffffffffd2, 0xe800, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) preadv(r2, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/102, 0x66}], 0x1, 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000001240), 0x1003) timer_create(0x5, &(0x7f0000001280)={0x0, 0x34, 0x0, @tid=r1}, &(0x7f00000012c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000001300), &(0x7f0000001340)) sendto$inet6(r0, &(0x7f0000000000)="c10e000018001ffcb9409b0dffff110d0207bee70105060506100a124300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0x78, 0x4880, 0x0, 0xffffffffffffff94) 2.816516506s ago: executing program 1 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r0 = socket$xdp(0x2c, 0x3, 0x0) (async) clock_gettime(0x0, 0x0) (async) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55bf, &(0x7f0000006a80)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185dc53, 0x0, 0x46, 0x0, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) fdatasync(r1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x3f00) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="04010000100007000080000000000000ff020000000000000000000000000001fe8000000000000000000000000000aaffff0000000000000000002002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f0000010000d3e100000000000021002b000000fc0000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000200000000000000000000000000000000000100000000000000000000000000000000000000200000000000070000000000000000e80a000000000000000000000a000240700000000000000005000000fc01000000000000000d5728c8caebbc48dba58930934c38457b0aeff97a300d6e34b8dd6100"/201], 0x104}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201000200000008ac0514024000a8b0d14579049f530101ff202709040051020301010509210400020122340709058103ff030a1007"], 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a"], 0x104}}, 0x0) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}, 0x1c) (async) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0xfffffffffffffffe, 0xc, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x800, 0x0, 0x0, 0x80000, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) (async) mlockall(0x3) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x4010, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x1000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, 0x0, 0x0, 0x0}, 0x10) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) 2.731079884s ago: executing program 6 (id=343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x200007f, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xa, 0x0}, {0x3, 0x0, 0x7f, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x0, 0x0, 0xfffffff7, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x37, 0x0}, {0x0, 0x0, 0x2, 0x0}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000020000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x34) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 2.637368483s ago: executing program 2 (id=345): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7005000000000000000000000000080005c0"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') open(0x0, 0x100843, 0x9c) unshare(0x2040400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffece, 0x0, 0x0, 0x0, 0xba, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x2, &(0x7f0000000000)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a297f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}}, 0x0) close(r5) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x400000}}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x3c}, 0x0, @in6=@local, 0x3502, 0x44465ed6aed8c8c4, 0x2, 0x0, 0x100}}, 0xe8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) setns(r2, 0x20000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002204"], 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.481413425s ago: executing program 6 (id=346): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x8, 0x1c, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7800, 0x40, 0x81}}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x4, r0, 0x91}, 0xc) 2.481266405s ago: executing program 0 (id=347): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@block_validity}, {@noquota}, {@sysvgroups}, {@nobh}, {@usrquota}, {@nojournal_checksum}, {@noload}, {@bh}, {@norecovery}], [{@hash}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x3, 0x57b, &(0x7f0000000bc0)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhTaM0SSrDN9DO78DAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEf8GAAD//w+JMu0=") setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000002c0)=@v2={0x2000000, [{0x1, 0x9}, {0x2}]}, 0x14, 0x1) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sync() rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 2.481008045s ago: executing program 6 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26}) syz_mount_image$exfat(&(0x7f0000000200), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000400)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@gid}, {@allow_utime={'allow_utime', 0x3d, 0x2}}, {@utf8}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @multicast2, r6}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.285853796s ago: executing program 6 (id=350): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'veth0_to_hsr', 0x32, 0x36}, 0xf) (async) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000340)={0x0, 0xc, 0x4, "32e90f04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_print_times', 0x440200, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x108, 0x0, &(0x7f0000000540)=[@release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x100b}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/225, 0xe1, 0x1, 0xb}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x40}, @request_death={0x400c630e, 0x1}, @dead_binder_done, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @flat=@binder={0x73622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/177, 0xb1, 0x2, 0x1a}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @register_looper, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/126, 0x7e, 0x2, 0x3e}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x1000}], 0xe, 0x0, &(0x7f0000000680)="a784e897b6d330dab0810e964520"}) 1.941984247s ago: executing program 0 (id=351): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4603000702000000000000000003003e00f9ffffff040100000000000004b2ccac3e6a29a18b00000000000000330d0000ff003800010078"], 0x78) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183741, 0x9e) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000140)=""/1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff0000}]}) 1.829403141s ago: executing program 1 (id=352): fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.829182471s ago: executing program 1 (id=353): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) 1.771434263s ago: executing program 0 (id=354): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)={0x2, {{0x2, 0x12, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') lseek(r1, 0x6, 0x1) pread64(r1, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'sysfs\x00'}], 0xa, "c97e5da6d160493d398c1a9a1e4043de1147ecb5ad516c7d6be9c0f20c9b60c7ed731e933d7922376ef4686a375b446c2dc56d3f617a31773ed2594800e8f0830ade07001b07f8fa88d7fa4a2f7472cc7aa592d81040b05607b5008bbce087cc447f5075b4e975e9e3783a513969fa7608319989ecfc58fe44a2e8144817e84a1970aa5a34e1d51e863fa7cedd2bfe5571edd3c2bb062f651517b691093f17399ae1e077b648efa948347c0f6e151e4f043630474bf2e5a22001db83ab43997c87fa33b0f0e63b8f04541328f5bc74cd1c1be4b6b95fdfe78d617d3a396015212026e547de6f92e9243293a3c8d2"}, 0x100) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.761764755s ago: executing program 0 (id=355): syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) (async) socket(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) (async) close(0x3) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f00000005c0)=0x20000, &(0x7f00000001c0)=r3}, 0x20) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x8100, 0x0, 0x0, 0x0, 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x40286608, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8935, &(0x7f0000000000)={{0x2, 0x4e23, @empty}, {0x6, @local}, 0x12, {0x2, 0x4e23, @broadcast}, 'veth0_to_hsr\x00'}) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b80000001900010000000400fcdbdf25ac1e010100000000000000000000000064010101001040000000000000000000000000084e2400ff0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000000000000000000000000000100000001000000feffffffffffffff030000000000000073b4ffffffffffffffffffffffffffff010000000000000000000000100000000000000000000020fcffffffffffffff2903000000000000fefffeff000004000000000100000000"], 0xb8}}, 0x0) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000640)='net/protocols\x00') recvmmsg$unix(r9, &(0x7f0000003d00)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000003680)=[{&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/5, 0x5}, {&(0x7f0000000540)=""/209, 0xd1}, {&(0x7f0000000680)=""/102, 0x66}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/13, 0xd}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x7, &(0x7f0000003700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000037c0)=""/253, 0xfd}], 0x1, &(0x7f0000003900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f00000039c0), 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003a40)=""/98, 0x62}, {&(0x7f0000003ac0)=""/104, 0x68}], 0x2, &(0x7f0000003b80)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003c40)=""/120, 0x78}], 0x1}}], 0x4, 0x80, 0x0) (async) fchdir(r9) 1.693327349s ago: executing program 0 (id=356): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffd, 0x1) fcntl$lock(r1, 0x6, &(0x7f0000000140)={0x0, 0x1, 0x4, 0xfffe}) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000000)=0xbe) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x10, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x200007f, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x0, 0x0, 0xa, 0x0}, {0x3, 0x0, 0x7f, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x0, 0x0, 0xfffffff7, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x37, 0x0}, {0x0, 0x0, 0x2, 0x0}]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f00000000c0)=""/102, &(0x7f00000001c0)=0x66) 1.692661549s ago: executing program 0 (id=357): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfc}}}}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x0, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x3], 0x3332d000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0x9, 0xd, 0x87}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x4, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x7000, 0x3, 0xeb, 0xff, 0x0, 0x0, 0xbf, 0x7, 0xfc, 0x3}, {0x80a0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x8, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x1, 0x3, 0x0, 0x9, 0xfc}, {0x0, 0x8000000, 0x8, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xc000, 0x1, 0xe, 0x7f, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x19}, {0xffffffff, 0xdddd1000, 0xa, 0x87, 0x0, 0x0, 0x7, 0x20, 0x0, 0x83}, {0x25000, 0x6000, 0x4, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x4000, 0x9}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x2, 0xf801, 0xdddd1000, [0x9, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0x9, "b0f44cdd"}, @global=@item_012={0x1, 0x1, 0x3, '\x00'}, @global=@item_012={0x1, 0x1, 0x8, "ff"}, @local=@item_012={0x1, 0x2, 0x8, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x3, "173b81d3"}]}}, 0x0}, 0x0) 1.461175027s ago: executing program 5 (id=360): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x20000000000001e5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @sched_cls}, 0x94) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x8001, 0x4) write$FUSE_CREATE_OPEN(r0, &(0x7f0000004500)={0xa0, 0x0, 0x0, {{0x9, 0x1, 0x7fff, 0x1, 0x73, 0x7, {0x3, 0x8, 0x8, 0x87b1, 0x1, 0x10000, 0x5, 0x1, 0x80, 0x8000, 0x3ff, 0x0, 0x0, 0x9, 0x2}}, {0x0, 0x4}}}, 0xa0) r1 = socket$inet(0x2, 0x80000, 0x4) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f00000108c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28442, 0x31) unshare(0x8000000) llistxattr(&(0x7f0000000280)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', &(0x7f0000000540)=""/206, 0xce) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(r3, 0x0, 0x0, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x808000, 0x40000004, 0x20300, 0xfc, 0x0, 0x10008000}, 0x1c) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'team_slave_0\x00', &(0x7f0000002fc0)=@ethtool_stats}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0xa, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r7) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8d400000001000e32700000000fbdbdf25000500", @ANYRES32=r8, @ANYBLOB="01990000419a04002000128008000100736974001400028008000300ac1414bb0500040000000000"], 0x40}}, 0x0) timerfd_gettime(r0, 0x0) pipe2$watch_queue(0x0, 0x80) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14) creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46"], 0x120) close(r1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.333248753s ago: executing program 1 (id=361): r0 = socket$inet6(0xa, 0x2, 0x8000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000035ef790ec0225a78254c113d92", @ANYRES32, @ANYBLOB="022000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001500)={r1, &(0x7f0000001640), 0x0}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0xc, 0x6, 0x1, 0x200004}, {0x6, 0xfa, 0x3, 0x5}]}) setresuid(0xee01, 0xee00, 0x0) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000080)={[{@journal_async_commit}]}, 0xff, 0x495, &(0x7f00000017c0)="$eJzs3M1vVFUbAPDn3rZA+WpfXkRF0SoaiR8tLagsXKjRnQsTXbCtbUFkAENrIqSJ1RhcGhP3xqWJf4E7N0RdGBO3mrg0GKKNCcXVmPtF2+lMaUvL2M7vl0znnHvPzDnP3Htmzr2n9wbQsQayP0nE7oj4JSL6iuziAgPF09zs9NjN2emxJOr1N/5M8nI3ZqfHqqLV63aVmSNpRPpxEi8mS+udvHT57GitNnGxzA9NnXt3aPLS5WfOnBs9PXF64vzIiRPHjw0//9zIs+sSZxbXjYP1riI3dvKzt77/OmvWgUPFkoVx3NbNJgE1MZB9an/Vc43rHl9xZZvDngXppLuNDWFVsg6Rba6evP/3RVfMb7y+ePWjtjYO2FDZb9P21qtn6sAWlkS7WwC0R/VDnx3/Vo+7NPT4T7j+UsS2Mj03Oz02dyv+7kjL5T0bWP9ARJyc+eeL7BGrPQ8BALAG+djm6WbjvzQO5M/FXMfecg6lPyL+FxH7IuL/EbE/Iu6JyMveGxH3ZYWvRr1vhfUPNOSXjn/Sa03bvE6y8d8LC8Z+cwviL5/6u8rcnjz+nuTUmdrE0fIzORI927P88DJ1fPvKz5+2Wrdw/Jc9svqrsWDZgGvdDSfoxkenRtfrQ7j+YcTB7mbxJ7dmArI94P6IOLi6t95bJc48+dWDrQrdPv5lrMM8U/3LiCeK7T8TDfFXkuXnJ4d2RG3i6FC1Vyz1w09XXm9V/x3Fvw6y7b9z8f7fUKLv76SYr+2JWm3i4uTq67jy6yctj2nWuv9vS97M56x/fLtY9v7o1NTF4YhtyWt5vjqmy5ePzL+2ylfls/iPHG7e//eVr8nifyAisp34UEQ8FBEPl21/JCIejYjDy8T/3cuPvbNM/Ekk0dbtP970++/W/t+fLJyvX0Oi6+zVb1rNmK9s+x+Pmfy7tpB//93GSht4hx8fAAAAbAppROyOJB0s0gO7I00HB4v/4d8fO9Pahcmpp05deO/8eHGNQH/0pNWZrr4F50OHk5nyHYv8SHmuuFp/rDxv/HlXb54fHLtQG29z7NDpdi3u/1H1/8zvXe1uHbDhXK8Fnaux/6dtagdw963k99+xAGxNTfp/bzvaAdx9qzv+ry/3v87AJtOs/3/QkDf+h61paf//rckt64CtyPwfdC79HzqX/g8d6U6u6197orpYYNGq3hVftH/p8tkdqyncEYnqjhcbWVdvzC+JtO0hd1Ai6zHr9oZ/tF41f6+P+XuoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbGb/BgAA///qd+U/") r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2b00, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xfffffffffffffff9, 0x80000000000000, 0xe, 0x4, 0x101000, 0x3, 0x11002, 0x3, 0x3, 0x83, 0x3, 0x6, 0x8bda, 0xfffebffffffffeff, 0x3fb, 0xffffffffffffffff], 0x24fff}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_emit_ethernet(0x1f, &(0x7f0000000600)=ANY=[@ANYBLOB="19e0ffffffff006c000000000011424203a8"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000000c0000000400000001000004010000000a0000000300000006000000000000000000000105000000200000000000000000000003000000000200000002000000000000000061002e2e61612e61005f00"], 0x0, 0x64}, 0x28) (async) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) (async) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180cc, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xff, 0x242, &(0x7f0000000300)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x10, &(0x7f0000000100)={[{@nomblk_io_submit}, {@i_version}, {@block_validity}]}, 0x5, 0x7e5, &(0x7f0000000fc0)="$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") open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10) (async) setresuid(0xee01, r2, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@private0, @in=@private}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) (async) open$dir(&(0x7f0000000000)='./bus\x00', 0x10200, 0x84) r5 = syz_io_uring_complete(0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r6, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) 1.293243072s ago: executing program 5 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0xa8013, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r1, &(0x7f00000005c0)='- 1 3 0 1 1', 0xb) 1.153243311s ago: executing program 5 (id=363): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsopen(&(0x7f0000001340)='qnx4\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) shutdown(r1, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) getsockopt$inet_tcp_int(r3, 0x6, 0x3, 0x0, &(0x7f0000000040)=0xfffffffffffffd44) prlimit64(0x0, 0xc, &(0x7f0000000240)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000002400)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/205, 0xcd, 0x0, &(0x7f0000001400)=""/4096, 0x1000}, &(0x7f0000002440)=0x40) recvmmsg(r2, &(0x7f0000003900)=[{{&(0x7f0000000400)=@ll, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000640)=""/53, 0x35}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/166, 0xa6}, {&(0x7f0000000940)=""/80, 0x50}, {&(0x7f00000009c0)=""/235, 0xeb}, {&(0x7f0000000ac0)=""/207, 0xcf}], 0x9, &(0x7f0000000c80)=""/181, 0xb5}, 0x7fff}, {{&(0x7f0000000d40)=@ax25={{0x3, @rose}, [@bcast, @remote, @default, @null, @rose, @bcast, @netrom]}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000dc0)=""/48, 0x30}, {&(0x7f0000000e00)=""/33, 0x21}, {&(0x7f0000000e40)=""/136, 0x88}, {&(0x7f0000002480)=""/191, 0xbf}, {&(0x7f0000002540)=""/223, 0xdf}, {&(0x7f0000002640)=""/162, 0xa2}, {&(0x7f0000002700)=""/230, 0xe6}, {&(0x7f0000002800)=""/68, 0x44}], 0x8, &(0x7f0000002900)=""/4096, 0x1000}, 0x200}], 0x2, 0x60, &(0x7f0000003980)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f00000000c0)=0x30) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000001c0)=0x28) 1.034079546s ago: executing program 5 (id=364): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 914.412891ms ago: executing program 5 (id=365): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0xb, 0x8}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) r1 = syz_io_uring_complete(0x0, 0x0) readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/16, 0x10) r2 = syz_io_uring_complete(0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'devices'}, {0x2b, 'rdma'}, {0x2b, 'net'}, {0x2b, 'perf_event'}, {0x2b, 'net'}, {0x2b, 'perf_event'}]}, 0x31) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=0x0, 0x32, 0x0, 0x1000, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r1, r1, 0xa, 0x12, r1, @void, @value=r1, @void, @void, r4}, 0x20) sendto$inet6(r2, &(0x7f0000000340)="fb4bdfcc26fbedff697e4e1be5494d127885809157233e428d1e17f2a64e5c9e9558f1ce2528e1916e6454f3e6c8b760eb9f8085fb251878ad03bed44bdfb255866ba2576ff2403d5a7ad089ddf1ed", 0x4f, 0x84, &(0x7f00000003c0)={0xa, 0x4e23, 0x3, @mcast2, 0xe5}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x21, 0xd8, 0x8, 0x101, 0x100, r1, 0x5, '\x00', r3, r2, 0x0, 0x2, 0x2}, 0x50) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000007c0)={&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000540)="c3abfbff4e3f00e189033e40c34daedf0612f8ee300a329616bbf5e411ae638b850456e178aa03c4296f575768d1429f2f4b51ed8f00cb4f27a13b663424fdf3e29fcd53a47f3b2c58e3be3e4c07dd497d80caff48b4b58bcfda5bae67c4e7e67c55eabdd2fda2a96b6656d912c5b3c5254a53eb2cafba561226e7d998b33069bafb93595fbde44cf904b72dcbbe1be66a534c6a6ecf3847865d43b7c5c0075f579eac3c2b5ef09b0e9cb59cf858e8a1d1e1e9b877cf67d0505ec13138a7", 0xbe}, {&(0x7f0000000600)="c0602f19c4b00f", 0x7}, {&(0x7f0000000640)="bbd10aac264ef23c75eab1953d897b6b3b6c896f1f13969d9c8e368f34db7843afcaadd1242247b88a028a15371f2acaf0ab2a2e3c5810448ba115c98263f70471edd9a98246832e1adde3ced4b121aa2d0a4e9a8acfb7db167115b7e73689608a425fd3d97c301679cd43c6a3c034bb90989298ebffe9d153d2e09db7d05ec2ab5673ebd107fce7ba661799fa1255b17e0a183b74364211658ded04b1d6aea682aa55c45165ca71cf06200f1b2fecf7adfd500840e33d3df939884d50ae03f40d027a449ecd0eef7922171dcfec7a89b252e437c8e92828974a2124beb229b4b2aa06fe62d928288a2d190bdf0ad5d6cad9", 0xf2}], 0x3, &(0x7f0000000780)=[@rights={{0x18, 0x1, 0x1, [r5, r1]}}], 0x18, 0x44041}, 0x4008041) r7 = fsmount(r1, 0x0, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) flistxattr(r0, &(0x7f0000000800)=""/247, 0xf7) syz_clone(0x0, &(0x7f0000000900)="7517ce06f3238fd963bef75ca0d93833e34c2c7522a6060a3d2c240a83e6dd670468f1c1b4cc9d261063ec7e7820b13de355b2e45e28a2c72f4466be89f70e087331ae7c03fb36f966f823fe519674ccb9f742872e304170c0831b6ccc92b7300de14955bbacea7a09e4388a87435f7f3ff0378b", 0x74, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="d775f2e96a") ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000a40)={'vcan0\x00'}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r7}, 0x20) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r9}, &(0x7f0000000b40), &(0x7f0000000c00)=r10}, 0x20) close_range(r10, r1, 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000000c80)={0x1, 0x800}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x103842, 0x61, 0x5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=@getqdisc={0x38, 0x26, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0xb}, {0xfff2, 0x1c}, {0xfff5, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x4000000) 857.320443ms ago: executing program 5 (id=366): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x11, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf25140000004800078008000100390a00000c000400000000000000000008000100080000000c0004004000000000000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) nanosleep(0x0, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x39, 0x30, 0x36, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x36], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x38]}}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mprotect(&(0x7f00002c4000/0x3000)=nil, 0x3000, 0x2000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 308.618166ms ago: executing program 1 (id=367): r0 = inotify_init1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x202810, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r4}, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000000540)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', r5, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1000, 0x3}}}]}, 0x38}}, 0x0) r11 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) ptrace(0x10, r11) waitid(0x1, r11, 0x0, 0x4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x100) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x8, 0x4}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x7, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000140)={0x2018}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x532, &(0x7f0000000840)="$eJzs3c9vG1kdAPDvTJI6m81usrAHQMtSloWCqtpJuhut9sJyWiG0EqJHDm1InCjEiaPYKU3oIRUn7khU4gQn/gGQOCD1xBEJiQPcuJQDEj8qUIMEkpHH4+D8cBNCbLfx5yNN/Oa9jL/vxZr33DfTeQEMravZz9Hs552ImMrzk3yLD1pb8/eePrm/uP/k/mISjcatvyZZeTMvOo5pejki9iJiPCK+8WHEt5IjQX8bUdvZXVuoVMpbeVapvr5Zqu3s3lhdX1gpr5Q35kbmZ+dn3rv57twFtfRnB6lf/uLTj3+z96XvNqs1med1tuMitZo+dhAn8r/213oRbABG8vZcOc/B5zqIi5RGxMci4q3s/J+Kkbwv6HT4Y/py5Kc2APCCajSmojHVuQ8AXHZpNgeWpMV8LmAy0rRYbM3hvR4TaaVaq19frm5vLLXmyqZjLF1erZRn8rnC6RhLlldHy7NZur1fKc8d2b8ZEa9FxA8KL2X7xcVqZWmQX3wAYIi9fGT8/0ehNf4DAJdcx9X8wiDrAQD0zznv5jt+pyAA8MJwNz8ADJ+Tx/+D3Olv97MyAEBf+Pc/AAwf4z8ADB/jPwAMla9/9FFza+znz79euruzvVa9e2OpXFsrrm8vFherW5vFlWp1JXtmz/pp71epVjdn34nte6V6uVYv1XZ2b69Xtzfqt7Pnet8uj/WlVQDAs7z2mUe/TyJi7/2Xsi06nvd/6lj9Rq9rB/RSOugKAAMzMugKAAPTfobH4UuAM28OpDJAX5mPBzqW6H3QkT1+LHHUwzO9fZqvGwo8R6598tj8/0FX4LsBXG7m/2F4nW/+33d5uAw8wxuGV6ORWPMfAIaMOX4gOaW88/r/TKNjp9v1fzcWAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAQmsy1Ji/la4JORpsVixCsRMR1jyfJqpTwTEa9GxO8KY4Xm/mxEWDcIAF5k6Z+SfP2va1NvTx4tvVL4ZyF7jYjv/OjWD+8t1OtbsxFXkr8d5Ncf5vlzg6g/AHCa9jjdHsfbnj65v9je+lmfP3+ltbhoM+5+vrVKRmM0ex3P5hom/p7k+y3JBS0xuvcgIj5xUvuTbG5kOl/59Gj8ZuxX+ho/PRQ/zcpar82/xccvoC4wbB41+58PTjr/0riavZ58/o9nPdT/r93/7R/r/9KD/m+kS/939awx3vnVV49lNqZaZQ8iPjUasd9+847+px0/6RL/7TPG/8Mbb77Vrazx44hrcVL7k0OxSvX1zVJtZ/fG6vrCSnmlvDE3Nz87P/PezXfnStkcdak9U33cX96//mq3+M32T3SJP35K+z9/xvb/5F93vvnZZ8T/4udO/vxff0b85pj4hTPGX5j4+Xi3smb8pS7tP+3zv37G+I//uLt0xl8FAPqgtrO7tlCplLd6nUh7HyJLJBF75zu8+XXufzyq8NPvf9indvUyEc9HNS4g8b1fPxfV6FMi+Xcj05MQg+6ZgF7770k/6JoAAAAAAAAAAAAAAADdXNj/GUoi9rq84aDbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOX1nwAAAP//onvSqw==") 0s ago: executing program 6 (id=368): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x80000000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x20, 0x0, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r3, 0xfffffffffffffe31}, 0x0, &(0x7f0000000780)="cb44032c2a3a518de9000000c11a5398279744e0e74f3def1a4992f9a2675b2853d82c107d0fd00990b531004a81e95a372f8f5f682f5f7a27f0395fdb7d3b545b60ff5be75bcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf7f7999797e2aa4cded671e374a4a28c257d43f67e86244beee88b1e3e5bac3ad4dea44fc08db9f741b76996bf785358bc3b20816471f5254e6e9e7a9ccd90d32ebcea2c79482fb0e0cfb8bf19da1095e6b47db92921f0adffeafb4747c5853fdaca77fe20bbb66b8e86486c2ea7e519a50fb23e48e6cec9abcbf97d60de6c9d205a4e26b68fd5d7c3d516dce08adf9b56f1b52064b2c41eb07799a24f8e80f676428a27963412330fc44e27ce9c2df2983484651bd673f0b4ae438e545faeb6887c9dd0736317787b8babedf991b1e17fc2689c4776db3de36a", 0x0) kernel console output (not intermixed with test programs): audit: type=1400 audit(1790731519.593:179): avc: denied { write } for pid=479 comm="syz.3.41" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 343.685421][ T24] audit: type=1400 audit(1790731519.593:180): avc: denied { add_name } for pid=479 comm="syz.3.41" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 343.706972][ T283] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 343.707071][ T24] audit: type=1400 audit(1790731519.593:181): avc: denied { setattr } for pid=479 comm="syz.3.41" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 343.721172][ T283] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 343.741552][ T24] audit: type=1400 audit(1790731519.593:182): avc: denied { remove_name } for pid=479 comm="syz.3.41" name="#1" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 343.771819][ T283] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 343.771981][ T24] audit: type=1400 audit(1790731519.593:183): avc: denied { rename } for pid=479 comm="syz.3.41" name="#1" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 343.788477][ T283] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 343.804017][ T24] audit: type=1400 audit(1790731519.593:184): avc: denied { unlink } for pid=479 comm="syz.3.41" name="#1" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 343.815218][ T283] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 343.846868][ T302] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.847755][ T283] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 343.856282][ T302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.867138][ T283] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 343.875533][ T302] usb 3-1: Product: syz [ 343.886662][ T283] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 343.890177][ T302] usb 3-1: Manufacturer: syz [ 343.905523][ T302] usb 3-1: SerialNumber: syz [ 343.908347][ T283] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 343.919076][ T487] Zero length message leads to an empty skb [ 343.921236][ T283] EXT4-fs error (device loop3): ext4_empty_dir:3074: inode #12: comm syz-executor: invalid size [ 344.072775][ T359] uvcvideo: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 344.102705][ T359] uvcvideo: Failed to query (129) UVC probe control : -71 (exp. 26). [ 344.110932][ T359] uvcvideo: Failed to initialize the device (-5). [ 344.121492][ T359] usb 5-1: USB disconnect, device number 3 [ 344.198650][ T491] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.44: missing EA_INODE flag [ 344.223239][ T491] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.44: error while reading EA inode 2 err=-117 [ 344.242770][ T491] EXT4-fs (loop0): 1 orphan inode deleted [ 344.243233][ T302] usb 3-1: bad CDC descriptors [ 344.248708][ T491] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,nogrpid,,errors=continue [ 344.259623][ T302] usb 3-1: USB disconnect, device number 3 [ 344.394212][ T497] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.402803][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.416344][ T497] device bridge_slave_0 entered promiscuous mode [ 344.435675][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.444334][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.453153][ T497] device bridge_slave_1 entered promiscuous mode [ 344.476532][ T507] fuse: Bad value for 'fd' [ 344.526741][ T303] device bridge_slave_1 left promiscuous mode [ 344.533143][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.541336][ T303] device bridge_slave_0 left promiscuous mode [ 344.547943][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.557387][ T303] device veth1_macvtap left promiscuous mode [ 344.563686][ T303] device veth0_vlan left promiscuous mode [ 344.572714][ T359] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 344.604549][ T514] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 344.632754][ T514] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 344.658044][ T514] EXT4-fs (loop1): 1 truncate cleaned up [ 344.663766][ T514] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 344.733031][ T514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 344.782125][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.789211][ T497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.796549][ T497] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.803594][ T497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.884207][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.894458][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.903164][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.918659][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.933105][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 345.095278][ T497] device veth0_vlan entered promiscuous mode [ 345.159863][ T15] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 345.169515][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.178009][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.186520][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.194263][ T359] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.202359][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 345.213807][ T497] device veth1_macvtap entered promiscuous mode [ 345.223522][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 345.231046][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 345.239517][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 345.248020][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 345.256796][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 345.272665][ T359] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.287348][ T359] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 345.304832][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 345.317472][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 345.330318][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 345.343108][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 345.380007][ T526] netlink: 'syz.5.47': attribute type 3 has an invalid length. [ 345.387683][ T526] netlink: 32 bytes leftover after parsing attributes in process `syz.5.47'. [ 345.398769][ T526] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 345.474524][ T529] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 345.483723][ T529] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 345.497280][ T533] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 345.511288][ T533] EXT4-fs error (device loop0): ext4_dirty_inode:6181: inode #2: comm syz.0.55: mark_inode_dirty error [ 345.522745][ T15] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 345.523003][ T533] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 345.532722][ T359] usb 5-1: string descriptor 0 read error: -22 [ 345.538662][ T533] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #2: comm syz.0.55: mark_inode_dirty error [ 345.552904][ T359] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 345.557525][ T533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59074 sclass=netlink_route_socket pid=533 comm=syz.0.55 [ 345.564189][ T529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59074 sclass=netlink_route_socket pid=529 comm=syz.0.55 [ 345.589247][ T359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.622876][ T15] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.634148][ T359] usb 5-1: selecting invalid altsetting 1 [ 345.640074][ T359] usb 5-1: unit 3 not found! [ 345.645961][ T359] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 345.720521][ T539] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,,errors=continue [ 345.882729][ T15] usb 3-1: string descriptor 0 read error: -22 [ 345.889206][ T15] usb 3-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 345.898578][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.922643][ T359] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 345.943331][ T15] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 346.012763][ T397] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 346.149637][ T518] udc-core: couldn't find an available UDC or it's busy [ 346.157983][ T518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 346.168820][ T302] usb 3-1: USB disconnect, device number 4 [ 346.392660][ T397] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.405073][ T397] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 346.418483][ T397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.434220][ T397] usb 2-1: config 0 descriptor?? [ 346.442699][ T359] usb 1-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice= 0.40 [ 346.451887][ T359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.470339][ T359] usb 1-1: Product: syz [ 346.474757][ T359] usb 1-1: Manufacturer: syz [ 346.479359][ T359] usb 1-1: SerialNumber: syz [ 346.493276][ T397] usb 2-1: bad CDC descriptors [ 346.696345][ T302] usb 2-1: USB disconnect, device number 4 [ 346.707679][ T554] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 458786)! [ 346.740504][ T554] EXT4-fs (loop2): group descriptors corrupted! [ 346.813459][ T359] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 346.823294][ T359] usb 1-1: USB disconnect, device number 4 [ 346.840233][ T554] capability: warning: `syz.2.61' uses deprecated v2 capabilities in a way that may be insecure [ 347.068702][ T551] EXT4-fs (loop5): Ignoring removed bh option [ 347.076109][ T551] EXT4-fs (loop5): Test dummy encryption mode enabled [ 347.084433][ T551] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.60: inode #1: comm syz.5.60: iget: illegal inode # [ 347.089780][ T561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 347.097748][ T551] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.60: error while reading EA inode 1 err=-117 [ 347.119484][ T551] EXT4-fs (loop5): 1 orphan inode deleted [ 347.125452][ T551] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,usrquota,bh,sb=0x00000000000000c4,init_itable=0x0000000000000000,minixdf,usrjquota=,grpjquota=,test_dummy_encryption,dioread_lock,block_validity,bsddf,,errors=continue [ 347.126871][ T561] EXT4-fs (loop2): 1 truncate cleaned up [ 347.150567][ T550] netlink: 24 bytes leftover after parsing attributes in process `syz.5.60'. [ 347.155140][ T561] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 347.164214][ T548] netlink: 24 bytes leftover after parsing attributes in process `syz.5.60'. [ 347.183759][ T551] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 347.200996][ T561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 347.215429][ T359] usb 5-1: USB disconnect, device number 4 [ 347.329481][ T567] EXT4-fs (loop4): Ignoring removed nobh option [ 347.358006][ T567] EXT4-fs (loop4): orphan cleanup on readonly fs [ 347.376573][ T567] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 347.392005][ T567] EXT4-fs (loop4): Remounting filesystem read-only [ 347.407275][ T567] EXT4-fs error (device loop4) in ext4_orphan_del:3292: error 27 [ 347.423010][ T567] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 347.438675][ T567] EXT4-fs error (device loop4): ext4_evict_inode:333: inode #15: comm syz.4.65: mark_inode_dirty error [ 347.452095][ T567] EXT4-fs (loop4): 1 orphan inode deleted [ 347.460339][ T567] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,acl,debug_want_extra_isize=0x0000000000000024,barrier,nobh,errors=remount-ro,block_validity, [ 347.509408][ T587] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 347.536416][ T587] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 347.549444][ T587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6055c01c, mo2=0002] [ 347.557659][ T587] System zones: 0-1, 3-36 [ 347.571068][ T587] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,noinit_itable,debug,dioread_nolock,bsddf,acl,noauto_da_alloc,,errors=continue [ 347.572265][ T24] kauditd_printk_skb: 60 callbacks suppressed [ 347.572275][ T24] audit: type=1400 audit(1790731523.523:245): avc: denied { create } for pid=596 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.613021][ T24] audit: type=1400 audit(1790731523.573:246): avc: denied { write } for pid=596 comm="syz.4.72" path="socket:[16739]" dev="sockfs" ino=16739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.636533][ T24] audit: type=1400 audit(1790731523.573:247): avc: denied { mmap_zero } for pid=596 comm="syz.4.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 347.667809][ T24] audit: type=1400 audit(1790731523.573:248): avc: denied { read } for pid=596 comm="syz.4.72" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 347.691824][ T24] audit: type=1400 audit(1790731523.573:249): avc: denied { open } for pid=596 comm="syz.4.72" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 347.703084][ T595] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,nodelalloc,,errors=continue [ 347.719374][ T24] audit: type=1400 audit(1790731523.573:250): avc: denied { ioctl } for pid=596 comm="syz.4.72" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 347.725881][ T595] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.760476][ T359] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 347.760672][ T24] audit: type=1400 audit(1790731523.613:251): avc: denied { write } for pid=586 comm="syz.0.71" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 347.790170][ T24] audit: type=1400 audit(1790731523.613:252): avc: denied { add_name } for pid=586 comm="syz.0.71" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 347.811899][ T24] audit: type=1400 audit(1790731523.613:253): avc: denied { create } for pid=586 comm="syz.0.71" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 347.832838][ T24] audit: type=1400 audit(1790731523.613:254): avc: denied { read append } for pid=586 comm="syz.0.71" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 347.863986][ T608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1081 sclass=netlink_route_socket pid=608 comm=syz.4.75 [ 348.002146][ T606] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 348.023404][ T606] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 348.032133][ T606] FAT-fs (loop0): Filesystem has been set read-only [ 348.162703][ T359] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 348.192728][ T359] usb 6-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 348.206714][ T15] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 348.252747][ T302] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 348.303038][ T617] exfat: Deprecated parameter 'utf8' [ 348.308531][ T617] exfat: Deprecated parameter 'utf8' [ 348.313892][ T617] exfat: Deprecated parameter 'utf8' [ 348.319267][ T617] exfat: Deprecated parameter 'namecase' [ 348.322740][ T359] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.334021][ T359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 348.341990][ T359] usb 6-1: SerialNumber: syz [ 348.394897][ T619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 348.403704][ T617] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 348.406338][ T619] EXT4-fs (loop0): 1 truncate cleaned up [ 348.424424][ T619] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 348.447047][ T619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 348.472806][ T15] usb 5-1: Using ep0 maxpacket: 8 [ 348.643329][ T15] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.683081][ T359] rndis_host 6-1:253.0: skipping garbage [ 348.693616][ T359] usb 6-1: USB disconnect, device number 2 [ 348.712660][ T302] usb 3-1: unable to get BOS descriptor or descriptor too short [ 348.722706][ T15] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 348.731157][ T15] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 348.741440][ T15] usb 5-1: config 4 has no interface number 0 [ 348.822842][ T302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.833256][ T302] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.902866][ T15] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 348.912215][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.921012][ T15] usb 5-1: Product: syz [ 348.925420][ T15] usb 5-1: Manufacturer: syz [ 348.930135][ T15] usb 5-1: SerialNumber: syz [ 349.028581][ T637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 349.036789][ T637] System zones: 1-12 [ 349.041418][ T637] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.81: missing EA_INODE flag [ 349.053557][ T637] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.81: error while reading EA inode 12 err=-117 [ 349.066146][ T637] EXT4-fs (loop1): 1 orphan inode deleted [ 349.072200][ T637] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue [ 349.112934][ T302] usb 3-1: string descriptor 0 read error: -22 [ 349.119263][ T302] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 349.128473][ T302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.164875][ T641] kvm [640]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0x0 [ 349.174754][ T302] usb 3-1: selecting invalid altsetting 1 [ 349.180814][ T302] usb 3-1: unit 3 not found! [ 349.190227][ T302] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 349.315572][ T648] tipc: Started in network mode [ 349.320615][ T648] tipc: Own node identity ac14140f, cluster identity 4711 [ 349.328582][ T648] tipc: New replicast peer: 255.255.255.255 [ 349.336081][ T648] tipc: Enabled bearer , priority 10 [ 349.348310][ T653] overlayfs: unrecognized mount option "hash" or missing value [ 349.362753][ T15] uvcvideo: Found UVC 0.02 device syz (04f2:b746) [ 349.369505][ T15] uvcvideo: No valid video chain found. [ 349.383047][ T15] usb 5-1: USB disconnect, device number 5 [ 349.403706][ T648] using random self ethernet address [ 349.422334][ T648] using random host ethernet address [ 349.430564][ T648] Need at least one configuration in g1. [ 349.436584][ T648] udc dummy_udc.0: failed to start g1: -22 [ 349.462631][ T359] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 349.823277][ T665] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 349.834839][ T665] EXT4-fs (loop4): 1 truncate cleaned up [ 349.840565][ T665] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 349.865567][ T665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 349.882698][ T359] usb 2-1: Using ep0 maxpacket: 32 [ 349.939578][ T669] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 350.042648][ T359] usb 2-1: unable to get BOS descriptor or descriptor too short [ 350.143174][ T359] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 350.154509][ T359] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 350.223007][ T676] exfat: Deprecated parameter 'utf8' [ 350.228439][ T676] exfat: Deprecated parameter 'utf8' [ 350.233915][ T676] exfat: Deprecated parameter 'utf8' [ 350.239209][ T676] exfat: Deprecated parameter 'namecase' [ 350.264450][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 350.276866][ T676] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 350.303779][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 350.362858][ T359] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 350.373943][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.387869][ T359] usb 2-1: Product: syz [ 350.394509][ T359] usb 2-1: Manufacturer: syz [ 350.401275][ T359] usb 2-1: SerialNumber: syz [ 350.452805][ T15] tipc: 32-bit node address hash set to f1414ac [ 350.462817][ T645] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 350.862927][ T359] usb 2-1: MIDIStreaming interface descriptor not found [ 350.887955][ T359] usb 2-1: USB disconnect, device number 5 [ 350.933854][ T439] udevd[439]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 350.992732][ T20] usb 3-1: USB disconnect, device number 5 [ 351.024914][ T683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 351.037495][ T683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=683 comm=syz.2.94 [ 351.050887][ T684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 351.051627][ T687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=687 comm=syz.2.94 [ 351.133236][ T679] F2FS-fs (loop0): invalid crc value [ 351.153891][ T679] F2FS-fs (loop0): Found nat_bits in checkpoint [ 351.183673][ T315] udevd[315]: symlink '../../loop0' '/dev/disk/by-uuid/0dc345c3-ee38-4114-bfc6-1d471003262c.tmp-b7:0' failed: Read-only file system [ 351.207431][ T699] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:980: inode #11: comm syz.2.97: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 351.223163][ T699] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1173: inode #11: comm syz.2.97: ea_inode dec ref err=-117 [ 351.224236][ T439] udevd[439]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 351.247412][ T699] EXT4-fs (loop2): 1 orphan inode deleted [ 351.247519][ T315] udevd[315]: symlink '../../loop0' '/dev/disk/by-uuid/0dc345c3-ee38-4114-bfc6-1d471003262c.tmp-b7:0' failed: Read-only file system [ 351.253480][ T301] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 351.274713][ T699] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,nombcache,resgid=0x0000000000000000,,errors=continue [ 351.297384][ T679] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 351.325538][ T315] udevd[315]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 351.463244][ T710] F2FS-fs (loop1): invalid crc value [ 351.476552][ T315] udevd[315]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 351.497993][ T710] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 351.538298][ T710] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 351.552719][ T301] usb 6-1: Using ep0 maxpacket: 8 [ 351.693017][ T301] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.800622][ T315] udevd[315]: symlink '../../loop1' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:1' failed: Read-only file system [ 351.832052][ T439] udevd[439]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 351.850478][ T727] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 351.888116][ T727] EXT4-fs (loop2): 1 truncate cleaned up [ 351.902825][ T301] usb 6-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 351.923326][ T727] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 351.945916][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.975008][ T301] usb 6-1: Product: syz [ 351.988445][ T301] usb 6-1: Manufacturer: syz [ 352.009006][ T727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 352.021117][ T301] usb 6-1: SerialNumber: syz [ 352.273484][ T681] netlink: 'syz.5.93': attribute type 3 has an invalid length. [ 352.304179][ T681] netlink: 20 bytes leftover after parsing attributes in process `syz.5.93'. [ 352.447121][ T739] ip_tables: iptables: counters copy to user failed while replacing table [ 352.533848][ T301] hub 6-1:1.2: Invalid hub with more than one config or interface [ 352.552105][ T301] hub: probe of 6-1:1.2 failed with error -22 [ 352.579657][ T301] usb 6-1: USB disconnect, device number 3 [ 352.597530][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 352.597538][ T24] audit: type=1400 audit(1790731528.553:326): avc: denied { setopt } for pid=738 comm="syz.4.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 352.632644][ T302] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 352.704005][ T747] exfat: Deprecated parameter 'utf8' [ 352.709426][ T747] exfat: Deprecated parameter 'utf8' [ 352.715050][ T747] exfat: Deprecated parameter 'utf8' [ 352.721349][ T747] exfat: Deprecated parameter 'namecase' [ 352.737905][ T747] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 352.938011][ T24] audit: type=1400 audit(1790731528.893:327): avc: denied { mount } for pid=751 comm="syz.5.107" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 352.962735][ T24] audit: type=1400 audit(1790731528.893:328): avc: denied { mounton } for pid=751 comm="syz.5.107" path="/9/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 353.032654][ T302] usb 3-1: unable to get BOS descriptor or descriptor too short [ 353.143446][ T755] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 353.153894][ T302] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 353.161579][ T302] usb 3-1: can't read configurations, error -71 [ 353.282085][ T757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 353.403578][ T764] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 353.416006][ T764] EXT4-fs (loop4): 1 truncate cleaned up [ 353.421653][ T764] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 353.436406][ T763] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 353.455079][ T763] EXT4-fs (loop1): 1 truncate cleaned up [ 353.466280][ T763] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,min_batch_time=0x0000000000000000,,errors=continue [ 353.499629][ T764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 353.565215][ T24] audit: type=1400 audit(1790731529.523:329): avc: denied { read write } for pid=783 comm="syz.2.115" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 353.590863][ T24] audit: type=1400 audit(1790731529.543:330): avc: denied { open } for pid=783 comm="syz.2.115" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 353.617721][ T24] audit: type=1400 audit(1790731529.543:331): avc: denied { ioctl } for pid=783 comm="syz.2.115" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 353.696815][ T24] audit: type=1400 audit(1790731529.653:332): avc: denied { block_suspend } for pid=796 comm="syz.2.116" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.762642][ T20] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 353.801427][ T24] audit: type=1400 audit(1790731529.753:333): avc: denied { unmount } for pid=497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 353.822023][ T24] audit: type=1400 audit(1790731529.753:334): avc: denied { read } for pid=799 comm="syz.2.117" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 353.845319][ T24] audit: type=1400 audit(1790731529.753:335): avc: denied { open } for pid=799 comm="syz.2.117" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 353.846984][ T803] netlink: 'syz.5.118': attribute type 16 has an invalid length. [ 353.879158][ T804] rtc_cmos 00:00: Alarms can be up to one day in the future [ 354.032633][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 354.153230][ T20] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 354.162124][ T20] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 354.172309][ T20] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 354.182523][ T20] usb 2-1: config 250 has no interface number 0 [ 354.190004][ T20] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 354.203177][ T20] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 354.212959][ T818] exfat: Deprecated parameter 'utf8' [ 354.220374][ T818] exfat: Deprecated parameter 'utf8' [ 354.220561][ T20] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 354.226344][ T818] exfat: Deprecated parameter 'utf8' [ 354.242812][ T818] exfat: Deprecated parameter 'namecase' [ 354.246899][ T20] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 354.259260][ T20] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 354.273156][ T20] usb 2-1: config 250 interface 228 has no altsetting 0 [ 354.284613][ T818] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 354.392810][ T20] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 354.401971][ T20] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 354.410337][ T20] usb 2-1: Product: syz [ 354.414997][ T20] usb 2-1: SerialNumber: syz [ 354.453631][ T20] hub 2-1:250.228: bad descriptor, ignoring hub [ 354.460070][ T20] hub: probe of 2-1:250.228 failed with error -5 [ 354.467875][ T828] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 354.478995][ T828] EXT4-fs (loop4): 1 truncate cleaned up [ 354.484790][ T828] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 354.506350][ T828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 354.602652][ T359] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 354.663431][ T20] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 354.838003][ T844] netlink: 94 bytes leftover after parsing attributes in process `syz.2.128'. [ 354.964414][ T840] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 354.975088][ T840] F2FS-fs (loop5): invalid crc value [ 354.981442][ T840] F2FS-fs (loop5): invalid crc value [ 354.987711][ T840] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 354.992766][ T359] usb 1-1: unable to get BOS descriptor or descriptor too short [ 355.014733][ T360] usb 2-1: USB disconnect, device number 6 [ 355.022911][ T360] usblp0: removed [ 355.062882][ T359] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 355.071320][ T359] usb 1-1: can't read configurations, error -71 [ 355.372650][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 355.380469][ T302] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 355.454849][ T864] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.462134][ T864] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.481020][ T866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 355.495583][ T866] EXT4-fs (loop4): 1 truncate cleaned up [ 355.501442][ T866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 355.527237][ T869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 355.527538][ T866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 355.565587][ T315] udevd[315]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 355.646965][ T302] usb 2-1: Using ep0 maxpacket: 8 [ 355.743896][ T874] exfat: Deprecated parameter 'utf8' [ 355.749454][ T874] exfat: Deprecated parameter 'utf8' [ 355.755017][ T874] exfat: Deprecated parameter 'utf8' [ 355.760359][ T874] exfat: Deprecated parameter 'namecase' [ 355.782199][ T874] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 355.887376][ T315] udevd[315]: symlink '../../loop4' '/dev/disk/by-uuid/1234-1234.tmp-b7:4' failed: Read-only file system [ 355.892799][ T25] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 355.906976][ T302] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 355.915331][ T302] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 355.923834][ T25] usb 3-1: config 1 has no interface number 0 [ 355.930035][ T302] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 355.930117][ T315] udevd[315]: symlink '../../loop4' '/dev/disk/by-uuid/1234-1234.tmp-b7:4' failed: Read-only file system [ 355.939127][ T302] usb 2-1: config 250 has no interface number 0 [ 355.956765][ T302] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 355.968466][ T302] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 355.978946][ T302] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 355.989402][ T302] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 356.000358][ T302] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 356.014064][ T302] usb 2-1: config 250 interface 228 has no altsetting 0 [ 356.092730][ T25] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 356.101899][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.109819][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 356.110270][ T25] usb 3-1: Product: syz [ 356.125917][ T25] usb 3-1: Manufacturer: syz [ 356.130572][ T25] usb 3-1: SerialNumber: syz [ 356.131915][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 356.135436][ T302] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 356.149626][ T884] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nouid32,noinit_itable,grpquota,nogrpid,,errors=continue [ 356.156230][ T302] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 356.177715][ T302] usb 2-1: Product: syz [ 356.182205][ T302] usb 2-1: SerialNumber: syz [ 356.223468][ T302] hub 2-1:250.228: bad descriptor, ignoring hub [ 356.230256][ T302] hub: probe of 2-1:250.228 failed with error -5 [ 356.403568][ T302] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 356.438648][ T439] udevd[439]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 356.482397][ T302] usb 2-1: USB disconnect, device number 7 [ 356.490523][ T302] usblp0: removed [ 356.494429][ T25] usb 3-1: 3:0 : does not exist [ 356.499299][ T25] usb 3-1: 3:0 : does not exist [ 356.510654][ T25] usb 3-1: USB disconnect, device number 8 [ 356.524838][ T475] udevd[475]: symlink '../../loop4' '/dev/disk/by-uuid/1234-1234.tmp-b7:4' failed: Read-only file system [ 356.524937][ T894] exFAT-fs (loop4): failed to load upcase table [ 356.542448][ T894] exFAT-fs (loop4): failed to recognize exfat type [ 356.723350][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.3/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 356.763246][ T907] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 356.775977][ T907] EXT4-fs (loop4): 1 truncate cleaned up [ 356.778561][ T439] udevd[439]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 356.781681][ T907] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 356.812081][ T315] udevd[315]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 356.812760][ T907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 356.826688][ T904] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 356.922661][ T52] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 356.971663][ T913] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 356.993166][ T913] exFAT-fs (loop4): hint_cluster is invalid (17) [ 357.006633][ T916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23841 sclass=netlink_route_socket pid=916 comm=syz.2.150 [ 357.253691][ T925] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 357.472706][ T52] usb 1-1: unable to get BOS descriptor or descriptor too short [ 357.521930][ T944] FAULT_INJECTION: forcing a failure. [ 357.521930][ T944] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 357.532629][ T52] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 357.536237][ T944] CPU: 1 PID: 944 Comm: syz.1.155 Not tainted syzkaller #0 [ 357.550966][ T944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.553869][ T52] usb 1-1: can't read configurations, error -71 [ 357.561318][ T944] Call Trace: [ 357.561439][ T944] __dump_stack+0x21/0x24 [ 357.575689][ T944] dump_stack_lvl+0x1a7/0x208 [ 357.580526][ T944] ? show_regs_print_info+0x18/0x18 [ 357.585741][ T944] dump_stack+0x15/0x1c [ 357.589905][ T944] should_fail+0x3ab/0x500 [ 357.594315][ T944] should_fail_alloc_page+0x4f/0x60 [ 357.599670][ T944] __alloc_pages_nodemask+0x11a/0x640 [ 357.605042][ T944] ? __kernel_text_address+0xa0/0x100 [ 357.610410][ T944] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 357.616042][ T944] new_slab+0x84/0x3f0 [ 357.620140][ T944] ? sched_clock_cpu+0x1b/0x3d0 [ 357.625540][ T944] ___slab_alloc+0x2f8/0x4c0 [ 357.630236][ T944] ? kvm_vm_ioctl_create_vcpu+0x10e/0x7f0 [ 357.636396][ T944] __slab_alloc+0x63/0xa0 [ 357.640812][ T944] ? kvm_vm_ioctl_create_vcpu+0x10e/0x7f0 [ 357.646534][ T944] ? kvm_vm_ioctl_create_vcpu+0x10e/0x7f0 [ 357.652266][ T944] kmem_cache_alloc+0x1a4/0x2d0 [ 357.657126][ T944] ? kvm_vm_ioctl_create_vcpu+0x10e/0x7f0 [ 357.662844][ T944] kvm_vm_ioctl_create_vcpu+0x10e/0x7f0 [ 357.668982][ T944] ? kstrtouint_from_user+0x1c4/0x220 [ 357.674352][ T944] kvm_vm_ioctl+0x2ae/0xab0 [ 357.678852][ T944] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 357.685024][ T944] ? ioctl_has_perm+0x1b8/0x4f0 [ 357.689868][ T944] ? __asan_set_shadow_00+0xe/0x10 [ 357.695725][ T944] ? do_vfs_ioctl+0x1403/0x15d0 [ 357.700582][ T944] ? ioctl_has_perm+0x40f/0x4f0 [ 357.705434][ T944] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 357.712207][ T944] ? has_cap_mac_admin+0x370/0x370 [ 357.717951][ T944] ? native_set_ldt+0x370/0x370 [ 357.723124][ T944] ? kernel_write+0x3c0/0x3c0 [ 357.727906][ T944] ? selinux_file_ioctl+0x3ad/0x4c0 [ 357.733105][ T944] ? mutex_trylock+0xb0/0xb0 [ 357.738388][ T944] ? __fget_files+0x2e1/0x340 [ 357.743082][ T944] ? selinux_file_alloc_security+0x120/0x120 [ 357.749064][ T944] ? __fget_files+0x2e1/0x340 [ 357.753742][ T944] ? security_file_ioctl+0x84/0xa0 [ 357.758856][ T944] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 357.764496][ T944] __se_sys_ioctl+0x121/0x1a0 [ 357.769170][ T944] __x64_sys_ioctl+0x7b/0x90 [ 357.773758][ T944] do_syscall_64+0x31/0x40 [ 357.778181][ T944] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 357.785277][ T944] RIP: 0033:0x7f1099f51159 [ 357.789758][ T944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.809588][ T944] RSP: 002b:00007f10989aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.818193][ T944] RAX: ffffffffffffffda RBX: 00007f109a1d8fa0 RCX: 00007f1099f51159 [ 357.826370][ T944] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 357.834434][ T944] RBP: 00007f10989aa090 R08: 0000000000000000 R09: 0000000000000000 [ 357.842495][ T944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.851509][ T944] R13: 00007f109a1d9038 R14: 00007f109a1d8fa0 R15: 00007fffb58d67c8 [ 357.911610][ T949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.157'. [ 357.922318][ T949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 358.004721][ T953] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 358.014694][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 358.014705][ T24] audit: type=1400 audit(1790731533.963:366): avc: denied { write } for pid=957 comm="syz.4.161" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 358.056397][ T953] EXT4-fs (loop2): 1 truncate cleaned up [ 358.062481][ T953] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 358.084104][ T24] audit: type=1400 audit(1790731534.043:367): avc: denied { mount } for pid=957 comm="syz.4.161" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 358.121127][ T24] audit: type=1400 audit(1790731534.073:368): avc: denied { mounton } for pid=957 comm="syz.4.161" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 358.225588][ T970] EXT4-fs (loop2): Unrecognized mount option "fsuuid=šQ895e29-0c92-20f1-44ee-586c573" or missing value [ 358.241094][ T360] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 358.263635][ T971] exfat: Unknown parameter '' [ 358.387092][ T24] audit: type=1400 audit(1790731534.343:369): avc: denied { view } for pid=967 comm="syz.1.164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 358.415665][ T981] FAULT_INJECTION: forcing a failure. [ 358.415665][ T981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.429184][ T981] CPU: 1 PID: 981 Comm: syz.1.167 Not tainted syzkaller #0 [ 358.437376][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 358.447705][ T981] Call Trace: [ 358.450984][ T981] __dump_stack+0x21/0x24 [ 358.455659][ T981] dump_stack_lvl+0x1a7/0x208 [ 358.461287][ T981] ? show_regs_print_info+0x18/0x18 [ 358.466769][ T981] dump_stack+0x15/0x1c [ 358.471009][ T981] should_fail+0x3ab/0x500 [ 358.472658][ T284] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 358.475430][ T981] should_fail_alloc_page+0x4f/0x60 [ 358.475439][ T981] __alloc_pages_nodemask+0x11a/0x640 [ 358.475457][ T981] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 358.499397][ T981] ? kvm_vm_ioctl_create_vcpu+0x10e/0x7f0 [ 358.505378][ T981] ? kmem_cache_alloc+0x15a/0x2d0 [ 358.510856][ T981] ? kvm_vm_ioctl_create_vcpu+0x10e/0x7f0 [ 358.517034][ T981] kvm_vm_ioctl_create_vcpu+0x132/0x7f0 [ 358.522748][ T981] ? kstrtouint_from_user+0x1c4/0x220 [ 358.529018][ T981] kvm_vm_ioctl+0x2ae/0xab0 [ 358.533530][ T981] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 358.539154][ T981] ? ioctl_has_perm+0x1b8/0x4f0 [ 358.544092][ T981] ? __asan_set_shadow_00+0xe/0x10 [ 358.549375][ T981] ? do_vfs_ioctl+0x1403/0x15d0 [ 358.554238][ T981] ? ioctl_has_perm+0x40f/0x4f0 [ 358.559175][ T981] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 358.564880][ T981] ? has_cap_mac_admin+0x370/0x370 [ 358.570062][ T981] ? kernel_write+0x3c0/0x3c0 [ 358.575700][ T981] ? selinux_file_ioctl+0x3ad/0x4c0 [ 358.581142][ T981] ? mutex_trylock+0xb0/0xb0 [ 358.585830][ T981] ? __fget_files+0x2e1/0x340 [ 358.590498][ T981] ? selinux_file_alloc_security+0x120/0x120 [ 358.598341][ T981] ? __fget_files+0x2e1/0x340 [ 358.603093][ T981] ? security_file_ioctl+0x84/0xa0 [ 358.608804][ T981] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 358.614596][ T981] __se_sys_ioctl+0x121/0x1a0 [ 358.620924][ T981] __x64_sys_ioctl+0x7b/0x90 [ 358.626051][ T981] do_syscall_64+0x31/0x40 [ 358.630565][ T981] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 358.636450][ T981] RIP: 0033:0x7f1099f51159 [ 358.640855][ T981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.660636][ T981] RSP: 002b:00007f10989aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.669317][ T981] RAX: ffffffffffffffda RBX: 00007f109a1d8fa0 RCX: 00007f1099f51159 [ 358.677284][ T981] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 358.685377][ T981] RBP: 00007f10989aa090 R08: 0000000000000000 R09: 0000000000000000 [ 358.693345][ T981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.701359][ T981] R13: 00007f109a1d9038 R14: 00007f109a1d8fa0 R15: 00007fffb58d67c8 [ 358.709925][ T15] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 359.028558][ T360] usb 6-1: unable to get BOS descriptor or descriptor too short [ 359.112764][ T360] usb 6-1: config 189 has an invalid interface number: 37 but max is 0 [ 359.121180][ T360] usb 6-1: config 189 has no interface number 0 [ 359.129520][ T360] usb 6-1: config 189 interface 37 has no altsetting 0 [ 359.133035][ T990] EXT4-fs (loop0): Test dummy encryption mode enabled [ 359.144268][ T990] EXT4-fs (loop0): Ignoring removed oldalloc option [ 359.154112][ T990] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,oldalloc,,errors=continue [ 359.172928][ T24] audit: type=1400 audit(1790731535.133:370): avc: denied { remove_name } for pid=989 comm="syz.0.170" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.174019][ T990] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 359.201273][ T24] audit: type=1400 audit(1790731535.133:371): avc: denied { unlink } for pid=989 comm="syz.0.170" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 359.233759][ T284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.246221][ T284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 359.256111][ T284] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.256166][ T990] EXT4-fs error (device loop0): ext4_dirty_inode:6181: inode #15: comm syz.0.170: mark_inode_dirty error [ 359.269873][ T284] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 359.292628][ T284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.300994][ T990] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 359.310141][ T990] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #15: comm syz.0.170: mark_inode_dirty error [ 359.321931][ T990] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 359.331573][ T15] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 359.331879][ T990] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #15: comm syz.0.170: mark_inode_dirty error [ 359.343621][ T360] usb 6-1: New USB device found, idVendor=1901, idProduct=0006, bcdDevice=1a.7c [ 359.355392][ T990] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 359.370826][ T15] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 359.372743][ T990] EXT4-fs error (device loop0): ext4_truncate:4403: inode #15: comm syz.0.170: mark_inode_dirty error [ 359.381892][ T360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.392784][ T990] EXT4-fs error (device loop0): ext4_evict_inode:296: comm syz.0.170: couldn't truncate inode 15 (err -27) [ 359.401144][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.422653][ T360] usb 6-1: Product: syz [ 359.428112][ T360] usb 6-1: Manufacturer: syz [ 359.434579][ T360] usb 6-1: SerialNumber: syz [ 359.452848][ T970] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 359.545291][ T24] audit: type=1400 audit(1790731535.503:372): avc: denied { getopt } for pid=969 comm="syz.4.165" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.545458][ T974] udc-core: couldn't find an available UDC or it's busy [ 359.574304][ T974] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 359.585201][ T1006] udc-core: couldn't find an available UDC or it's busy [ 359.598185][ T1013] udc-core: couldn't find an available UDC or it's busy [ 359.605674][ T1006] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 359.615458][ T1013] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 359.628179][ T301] usb 5-1: USB disconnect, device number 6 [ 359.631543][ T1017] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 359.649649][ T1017] EXT4-fs (loop1): 1 truncate cleaned up [ 359.656044][ T1017] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 359.682809][ T15] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 359.691734][ T15] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6 [ 359.703489][ T360] cdc_acm 6-1:189.37: More than one union descriptor, skipping ... [ 359.718256][ T15] usb 3-1: USB disconnect, device number 9 [ 359.724655][ T360] usb 6-1: USB disconnect, device number 4 [ 359.734931][ T1021] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,bsdgroups, [ 359.746856][ T1021] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.762057][ T24] audit: type=1400 audit(1790731535.723:373): avc: denied { bind } for pid=1025 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.813837][ T1027] sch_tbf: burst 3727 is lower than device lo mtu (65550) ! [ 360.214486][ T24] audit: type=1400 audit(1790731536.173:374): avc: denied { sys_admin } for pid=1032 comm="syz.2.177" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 360.242169][ T24] audit: type=1400 audit(1790731536.203:375): avc: denied { remount } for pid=1032 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 360.265079][ T1035] FAULT_INJECTION: forcing a failure. [ 360.265079][ T1035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.283814][ T1035] CPU: 1 PID: 1035 Comm: syz.5.178 Not tainted syzkaller #0 [ 360.291135][ T1035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.301205][ T1035] Call Trace: [ 360.304506][ T1035] __dump_stack+0x21/0x24 [ 360.309198][ T1035] dump_stack_lvl+0x1a7/0x208 [ 360.314060][ T1035] ? show_regs_print_info+0x18/0x18 [ 360.319356][ T1035] dump_stack+0x15/0x1c [ 360.323616][ T1035] should_fail+0x3ab/0x500 [ 360.328335][ T1035] should_fail_alloc_page+0x4f/0x60 [ 360.333605][ T1035] __alloc_pages_nodemask+0x11a/0x640 [ 360.338971][ T1035] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 360.344897][ T1035] ? preempt_count_add+0x90/0x1b0 [ 360.350371][ T1035] kvm_arch_vcpu_create+0x256/0x990 [ 360.355556][ T1035] kvm_vm_ioctl_create_vcpu+0x378/0x7f0 [ 360.361625][ T1035] ? kstrtouint_from_user+0x1c4/0x220 [ 360.366984][ T1035] kvm_vm_ioctl+0x2ae/0xab0 [ 360.371474][ T1035] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 360.377397][ T1035] ? ioctl_has_perm+0x1b8/0x4f0 [ 360.382407][ T1035] ? __asan_set_shadow_00+0xe/0x10 [ 360.388175][ T1035] ? do_vfs_ioctl+0x1403/0x15d0 [ 360.393021][ T1035] ? ioctl_has_perm+0x40f/0x4f0 [ 360.397856][ T1035] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 360.403468][ T1035] ? has_cap_mac_admin+0x370/0x370 [ 360.408558][ T1035] ? kernel_write+0x3c0/0x3c0 [ 360.413223][ T1035] ? selinux_file_ioctl+0x3ad/0x4c0 [ 360.418672][ T1035] ? mutex_trylock+0xb0/0xb0 [ 360.423511][ T1035] ? __fget_files+0x2e1/0x340 [ 360.428210][ T1035] ? selinux_file_alloc_security+0x120/0x120 [ 360.434186][ T1035] ? __fget_files+0x2e1/0x340 [ 360.438848][ T1035] ? security_file_ioctl+0x84/0xa0 [ 360.443978][ T1035] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 360.449603][ T1035] __se_sys_ioctl+0x121/0x1a0 [ 360.454268][ T1035] __x64_sys_ioctl+0x7b/0x90 [ 360.458936][ T1035] do_syscall_64+0x31/0x40 [ 360.463512][ T1035] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 360.469383][ T1035] RIP: 0033:0x7f038853c159 [ 360.473843][ T1035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.493438][ T1035] RSP: 002b:00007f0386f95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.501942][ T1035] RAX: ffffffffffffffda RBX: 00007f03887c3fa0 RCX: 00007f038853c159 [ 360.509989][ T1035] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 360.518060][ T1035] RBP: 00007f0386f95090 R08: 0000000000000000 R09: 0000000000000000 [ 360.526025][ T1035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.534076][ T1035] R13: 00007f03887c4038 R14: 00007f03887c3fa0 R15: 00007fffd6c9e528 [ 360.612679][ T397] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 360.686592][ T1045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 360.699804][ T315] udevd[315]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 360.714732][ T1045] EXT4-fs (loop0): 1 truncate cleaned up [ 360.721046][ T1045] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,min_batch_time=0x0000000000000000,,errors=continue [ 360.773071][ T1048] exfat: Deprecated parameter 'utf8' [ 360.778431][ T1048] exfat: Deprecated parameter 'utf8' [ 360.783793][ T1048] exfat: Deprecated parameter 'utf8' [ 360.789091][ T1048] exfat: Deprecated parameter 'namecase' [ 360.800881][ T1048] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 360.818247][ T315] udevd[315]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 360.835743][ T315] udevd[315]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 361.002623][ T20] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 361.072670][ T397] usb 5-1: unable to get BOS descriptor or descriptor too short [ 361.152723][ T397] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.171963][ T397] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.292600][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 361.368074][ T397] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 361.386431][ T397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.413690][ T20] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 361.425613][ T397] usb 5-1: Product: syz [ 361.431208][ T20] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 361.458836][ T397] usb 5-1: Manufacturer: syz [ 361.479912][ T397] usb 5-1: SerialNumber: syz [ 361.484930][ T20] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 361.495076][ T20] usb 1-1: config 250 has no interface number 0 [ 361.502204][ T20] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 361.515074][ T20] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 361.525903][ T20] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 361.537255][ T20] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 361.551248][ T20] usb 1-1: config 250 interface 228 has no altsetting 0 [ 361.672920][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 361.689416][ T439] udevd[439]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 361.701486][ T20] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 361.710362][ T1062] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 361.723205][ T20] usb 1-1: Product: syz [ 361.727665][ T20] usb 1-1: SerialNumber: syz [ 361.735772][ T439] udevd[439]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 361.754297][ T1062] EXT4-fs (loop1): 1 truncate cleaned up [ 361.761122][ T1062] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 361.794377][ T20] hub 1-1:250.228: bad descriptor, ignoring hub [ 361.801273][ T20] hub: probe of 1-1:250.228 failed with error -5 [ 361.819567][ T475] udevd[475]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 361.896946][ T439] udevd[439]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 361.911970][ T439] udevd[439]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 361.926497][ T1068] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,nolazytime,,errors=continue [ 361.959425][ T475] udevd[475]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 361.995263][ T397] usb 5-1: selecting invalid altsetting 1 [ 362.004179][ T397] usb 5-1: unit 3 not found! [ 362.036645][ T397] usb 5-1: cannot request logical cluster ID: 0 (err: -71) [ 362.049359][ T397] usb 5-1: invalid MIXER UNIT descriptor 6 [ 362.056800][ T397] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 362.076536][ T397] usb 5-1: USB disconnect, device number 7 [ 362.124932][ T315] udevd[315]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 362.140786][ T1083] FAULT_INJECTION: forcing a failure. [ 362.140786][ T1083] name failslab, interval 1, probability 0, space 0, times 1 [ 362.153828][ T1083] CPU: 1 PID: 1083 Comm: syz.1.191 Not tainted syzkaller #0 [ 362.161150][ T1083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.171320][ T1083] Call Trace: [ 362.174617][ T1083] __dump_stack+0x21/0x24 [ 362.179023][ T1083] dump_stack_lvl+0x1a7/0x208 [ 362.184075][ T1083] ? show_regs_print_info+0x18/0x18 [ 362.189438][ T1083] dump_stack+0x15/0x1c [ 362.193580][ T1083] should_fail+0x3ab/0x500 [ 362.197981][ T1083] ? kvm_arch_vcpu_create+0x35d/0x990 [ 362.203332][ T1083] __should_failslab+0xa4/0xe0 [ 362.208100][ T1083] should_failslab+0x9/0x20 [ 362.212677][ T1083] kmem_cache_alloc+0x3d/0x2d0 [ 362.217456][ T1083] ? kvm_arch_vcpu_create+0x2c9/0x990 [ 362.222818][ T1083] kvm_arch_vcpu_create+0x35d/0x990 [ 362.228000][ T1083] kvm_vm_ioctl_create_vcpu+0x378/0x7f0 [ 362.233530][ T1083] ? kstrtouint_from_user+0x1c4/0x220 [ 362.238881][ T1083] kvm_vm_ioctl+0x2ae/0xab0 [ 362.243540][ T1083] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 362.249187][ T1083] ? ioctl_has_perm+0x1b8/0x4f0 [ 362.254041][ T1083] ? __asan_set_shadow_00+0xe/0x10 [ 362.259150][ T1083] ? do_vfs_ioctl+0x1403/0x15d0 [ 362.263986][ T1083] ? ioctl_has_perm+0x40f/0x4f0 [ 362.268820][ T1083] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 362.274447][ T1083] ? has_cap_mac_admin+0x370/0x370 [ 362.279542][ T1083] ? kernel_write+0x3c0/0x3c0 [ 362.284204][ T1083] ? selinux_file_ioctl+0x3ad/0x4c0 [ 362.289818][ T1083] ? mutex_trylock+0xb0/0xb0 [ 362.294402][ T1083] ? __fget_files+0x2e1/0x340 [ 362.299059][ T1083] ? selinux_file_alloc_security+0x120/0x120 [ 362.305025][ T1083] ? __fget_files+0x2e1/0x340 [ 362.309682][ T1083] ? security_file_ioctl+0x84/0xa0 [ 362.314839][ T1083] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 362.320458][ T1083] __se_sys_ioctl+0x121/0x1a0 [ 362.325121][ T1083] __x64_sys_ioctl+0x7b/0x90 [ 362.329697][ T1083] do_syscall_64+0x31/0x40 [ 362.334103][ T1083] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 362.340496][ T1083] RIP: 0033:0x7f1099f51159 [ 362.344899][ T1083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.364940][ T1083] RSP: 002b:00007f10989aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.373540][ T1083] RAX: ffffffffffffffda RBX: 00007f109a1d8fa0 RCX: 00007f1099f51159 [ 362.381499][ T1083] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 362.389533][ T1083] RBP: 00007f10989aa090 R08: 0000000000000000 R09: 0000000000000000 [ 362.397524][ T1083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.405479][ T1083] R13: 00007f109a1d9038 R14: 00007f109a1d8fa0 R15: 00007fffb58d67c8 [ 362.413724][ T1083] kvm: failed to allocate vcpu's emulator [ 362.482655][ T15] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 362.620980][ T1086] udc-core: couldn't find an available UDC or it's busy [ 362.628040][ T1086] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 362.722687][ T15] usb 6-1: Using ep0 maxpacket: 8 [ 362.852900][ T1099] exfat: Deprecated parameter 'utf8' [ 362.858266][ T1099] exfat: Deprecated parameter 'utf8' [ 362.863906][ T1099] exfat: Deprecated parameter 'utf8' [ 362.869220][ T1099] exfat: Deprecated parameter 'namecase' [ 362.892704][ T15] usb 6-1: unable to get BOS descriptor or descriptor too short [ 362.903497][ T1099] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 362.965516][ T1102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 362.975526][ T15] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.976881][ T1102] EXT4-fs (loop2): 1 truncate cleaned up [ 362.986172][ T15] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.991805][ T1102] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 363.152803][ T15] usb 6-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 363.162004][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.170102][ T15] usb 6-1: Product: syz [ 363.174333][ T15] usb 6-1: Manufacturer: syz [ 363.178955][ T15] usb 6-1: SerialNumber: syz [ 363.342656][ T302] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 363.424013][ T1078] udc-core: couldn't find an available UDC or it's busy [ 363.431938][ T1078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 363.552717][ T15] usb 6-1: 0:1 : does not exist [ 363.558074][ T15] usb 6-1: unit 5 not found! [ 363.564955][ T15] usb 6-1: USB disconnect, device number 5 [ 363.722681][ T20] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 363.782666][ T302] usb 3-1: not running at top speed; connect to a high speed hub [ 363.962860][ T397] usb 1-1: USB disconnect, device number 9 [ 364.092705][ T20] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.122780][ T302] usb 3-1: language id specifier not provided by device, defaulting to English [ 364.252941][ T302] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 364.263486][ T20] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice= 0.00 [ 364.273991][ T397] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 364.282304][ T302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.293719][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.303661][ T302] usb 3-1: Product: ଯ歰䳻䕳亶꺲≑夤㷽ã“ç©ã¢¨Ô°è£§îŸ®à¯§ë—™å…€è—¿ì¬½äº©âœ£í‹“籲原뒅ꗤ䴩巛팣缗ᅨ홊ï—䔬⤦업粢޽䥹ᨾ尩狼ꎪ [ 364.320379][ T20] usb 2-1: Product: syz [ 364.324923][ T20] usb 2-1: Manufacturer: syz [ 364.330397][ T20] usb 2-1: SerialNumber: syz [ 364.335130][ T302] usb 3-1: Manufacturer: ꉄ韰ⅶ㑠쫻쒦듧㰗斾䩔酣攑ì묃㦫︮ç›ï¹±æ½ªë¥Œï«Ÿå‰‰Ö‘ꕽ礬垂谮꧎å¹æ»“溪ꖀ軜ᘯè”휾뺾ᰘ澋̫곇ì„錷í’á”´Ì°ë¼ªç­“ì—˜è—ªá¶žä¼Ÿë¡³îš²á’“ê¸Šà¿¬îŒ™è©žåª“èŒ™ã‹”êž™æ§’ê’¥â®·á½–é¼›íˆ©ë“¡ã°“Å—åž›á«ªì°—ë¹Žè‡½à½¹ï¿—á€²í“¶ä¾¤â’¸æ€ [ 364.363385][ T302] usb 3-1: SerialNumber: ≠[ 364.522706][ T397] usb 6-1: Using ep0 maxpacket: 32 [ 364.533257][ T1128] exfat: Deprecated parameter 'utf8' [ 364.538786][ T1128] exfat: Deprecated parameter 'namecase' [ 364.544978][ T1128] exfat: Deprecated parameter 'namecase' [ 364.551349][ T1128] exfat: Deprecated parameter 'utf8' [ 364.604664][ T360] usb 2-1: USB disconnect, device number 8 [ 364.605463][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 364.605475][ T24] audit: type=1400 audit(1790731540.563:386): avc: denied { read } for pid=1105 comm="syz.2.198" name="event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 364.662269][ T24] audit: type=1400 audit(1790731540.563:387): avc: denied { open } for pid=1105 comm="syz.2.198" path="/dev/input/event2" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 364.695298][ T24] audit: type=1400 audit(1790731540.563:388): avc: denied { ioctl } for pid=1105 comm="syz.2.198" path="/dev/input/event2" dev="devtmpfs" ino=268 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 364.742758][ T397] usb 6-1: unable to get BOS descriptor or descriptor too short [ 364.787787][ T1128] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 364.805369][ T1133] tipc: Started in network mode [ 364.810700][ T1133] tipc: Own node identity 7e0f8fbb01c6, cluster identity 4711 [ 364.819301][ T1133] tipc: Enabled bearer , priority 10 [ 364.822734][ T24] audit: type=1400 audit(1790731540.783:389): avc: denied { write } for pid=1127 comm="syz.4.204" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 364.826307][ T1134] tipc: Enabling of bearer rejected, already enabled [ 364.848227][ T397] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.859700][ T24] audit: type=1400 audit(1790731540.783:390): avc: denied { add_name } for pid=1127 comm="syz.4.204" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 364.894052][ T24] audit: type=1400 audit(1790731540.783:391): avc: denied { create } for pid=1127 comm="syz.4.204" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 364.900434][ T397] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.918048][ T24] audit: type=1400 audit(1790731540.783:392): avc: denied { associate } for pid=1127 comm="syz.4.204" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 364.953220][ T24] audit: type=1400 audit(1790731540.843:393): avc: denied { mounton } for pid=1127 comm="syz.4.204" path="/35/file0/bus" dev="loop4" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 364.984749][ T24] audit: type=1400 audit(1790731540.943:394): avc: denied { append } for pid=1127 comm="syz.4.204" path="/35/file0/blkio.bfq.io_wait_time_recursive" dev="loop4" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 365.024459][ T24] audit: type=1400 audit(1790731540.943:395): avc: denied { lock } for pid=1127 comm="syz.4.204" path="/35/file0/blkio.bfq.io_wait_time_recursive" dev="loop4" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 365.092836][ T397] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 365.105524][ T397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.122100][ T397] usb 6-1: Product: syz [ 365.127642][ T397] usb 6-1: Manufacturer: syz [ 365.137082][ T397] usb 6-1: SerialNumber: syz [ 365.172428][ T1140] Illegal XDP return value 420904960, expect packet loss! [ 365.198486][ T1142] FAULT_INJECTION: forcing a failure. [ 365.198486][ T1142] name failslab, interval 1, probability 0, space 0, times 0 [ 365.217773][ T1142] CPU: 0 PID: 1142 Comm: syz.2.207 Not tainted syzkaller #0 [ 365.227081][ T1142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.238822][ T1142] Call Trace: [ 365.243386][ T1142] __dump_stack+0x21/0x24 [ 365.249265][ T1142] dump_stack_lvl+0x1a7/0x208 [ 365.255308][ T1142] ? show_regs_print_info+0x18/0x18 [ 365.263081][ T1142] dump_stack+0x15/0x1c [ 365.268625][ T1142] should_fail+0x3ab/0x500 [ 365.273408][ T1142] ? kvm_arch_vcpu_create+0x35d/0x990 [ 365.278917][ T1142] __should_failslab+0xa4/0xe0 [ 365.283688][ T1142] should_failslab+0x9/0x20 [ 365.288643][ T1142] kmem_cache_alloc+0x3d/0x2d0 [ 365.293580][ T1142] ? kvm_arch_vcpu_create+0x2c9/0x990 [ 365.299660][ T1142] kvm_arch_vcpu_create+0x35d/0x990 [ 365.305554][ T1142] kvm_vm_ioctl_create_vcpu+0x378/0x7f0 [ 365.311391][ T1142] ? kstrtouint_from_user+0x1c4/0x220 [ 365.316935][ T1142] kvm_vm_ioctl+0x2ae/0xab0 [ 365.322833][ T1142] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 365.328655][ T1142] ? ioctl_has_perm+0x1b8/0x4f0 [ 365.334551][ T1142] ? __asan_set_shadow_00+0xe/0x10 [ 365.340826][ T1142] ? do_vfs_ioctl+0x1403/0x15d0 [ 365.346886][ T1142] ? ioctl_has_perm+0x40f/0x4f0 [ 365.353086][ T1142] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 365.359577][ T1142] ? has_cap_mac_admin+0x370/0x370 [ 365.364873][ T1142] ? kernel_write+0x3c0/0x3c0 [ 365.369733][ T1142] ? selinux_file_ioctl+0x3ad/0x4c0 [ 365.376244][ T1142] ? mutex_trylock+0xb0/0xb0 [ 365.380920][ T1142] ? __fget_files+0x2e1/0x340 [ 365.385685][ T1142] ? selinux_file_alloc_security+0x120/0x120 [ 365.392645][ T1142] ? __fget_files+0x2e1/0x340 [ 365.397975][ T1142] ? security_file_ioctl+0x84/0xa0 [ 365.404025][ T1142] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 365.410154][ T1142] __se_sys_ioctl+0x121/0x1a0 [ 365.415590][ T1142] __x64_sys_ioctl+0x7b/0x90 [ 365.420429][ T1142] do_syscall_64+0x31/0x40 [ 365.425547][ T1142] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 365.433368][ T1142] RIP: 0033:0x7fbaa04ef159 [ 365.437925][ T1142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.460982][ T1142] RSP: 002b:00007fba9ef48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.469745][ T1142] RAX: ffffffffffffffda RBX: 00007fbaa0776fa0 RCX: 00007fbaa04ef159 [ 365.478534][ T1142] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 365.486773][ T1142] RBP: 00007fba9ef48090 R08: 0000000000000000 R09: 0000000000000000 [ 365.495856][ T1142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.505267][ T1142] R13: 00007fbaa0777038 R14: 00007fbaa0776fa0 R15: 00007ffc694f2d58 [ 365.521746][ T1142] kvm: failed to allocate vcpu's emulator [ 365.541282][ T1146] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 365.556819][ T1146] EXT4-fs (loop1): 1 truncate cleaned up [ 365.563586][ T1146] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 365.578966][ T302] usb 3-1: USB disconnect, device number 10 [ 365.584973][ T1121] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.610024][ T1121] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 365.632761][ T1121] EXT4-fs error (device loop5): ext4_iget_extra_inode:4692: inode #15: comm syz.5.203: corrupted in-inode xattr [ 365.651608][ T1160] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 365.652070][ T1121] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.203: couldn't read orphan inode 15 (err -117) [ 365.671660][ T1160] EXT4-fs (loop2): 1 truncate cleaned up [ 365.681002][ T1160] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,min_batch_time=0x0000000000000000,,errors=continue [ 365.682792][ T1121] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x000000000000004b,dioread_nolock,bsdgroups,jqfmt=vfsold,bsdgroups,nobarrier,i_version,abort,bsddf,inode_readahead_blks=0x0000000000008000,nobarrier,nodiscard,,errors=continue [ 365.728166][ T439] udevd[439]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 365.756199][ T1162] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 365.799085][ T439] udevd[439]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 365.816779][ T360] tipc: 32-bit node address hash set to bb8fc97f [ 365.833919][ T1162] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.210: Failed to acquire dquot type 1 [ 365.861644][ T1162] EXT4-fs warning (device loop4): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 365.925182][ T1177] exfat: Deprecated parameter 'utf8' [ 365.931674][ T1177] exfat: Deprecated parameter 'utf8' [ 365.941227][ T1177] exfat: Deprecated parameter 'utf8' [ 365.947850][ T1177] exfat: Deprecated parameter 'namecase' [ 365.956677][ T1177] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 365.973143][ T397] usb 6-1: 0:1 : does not exist [ 365.973173][ T397] usb 6-1: BAAD HEADSET c_chmask mismatch [ 365.973275][ T397] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 365.976100][ T397] usb 6-1: USB disconnect, device number 6 [ 366.003340][ T439] udevd[439]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 366.028095][ T315] udevd[315]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 366.159334][ T1201] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.169852][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.182187][ T1201] device bridge_slave_0 entered promiscuous mode [ 366.192630][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.201287][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.212688][ T302] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 366.221150][ T1201] device bridge_slave_1 entered promiscuous mode [ 366.296621][ T1201] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.307417][ T1201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.315536][ T1201] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.323403][ T1201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.365151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.375089][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.383409][ T1230] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 366.394192][ T1230] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 366.404339][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.417383][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 366.436192][ T1230] EXT4-fs (loop5): mounted filesystem without journal. Opts: mblk_io_submit,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,inlinecrypt,max_batch_time=0x000000000000186b,,errors=continue [ 366.442354][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 366.480771][ T302] usb 3-1: Using ep0 maxpacket: 8 [ 366.498552][ T1230] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.217: bg 0: block 2: invalid block bitmap [ 366.498574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.536613][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 366.551532][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.560605][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.579724][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 366.643938][ T1201] device veth0_vlan entered promiscuous mode [ 366.652522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.662851][ T302] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 366.685442][ T302] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 367.018534][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.133512][ T302] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 367.160784][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.298693][ T302] usb 3-1: config 250 has no interface number 0 [ 367.310843][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.333173][ T302] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 367.356477][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.376863][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.391737][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.400629][ T302] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 367.432662][ T302] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.452859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.465565][ T302] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 367.488912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.505494][ T302] usb 3-1: config 250 interface 228 has no altsetting 0 [ 367.526413][ T1201] device veth1_macvtap entered promiscuous mode [ 367.549558][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.574613][ T1274] FAULT_INJECTION: forcing a failure. [ 367.574613][ T1274] name failslab, interval 1, probability 0, space 0, times 0 [ 367.592714][ T1274] CPU: 0 PID: 1274 Comm: syz.1.221 Not tainted syzkaller #0 [ 367.602817][ T1274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.614252][ T1274] Call Trace: [ 367.617643][ T1274] __dump_stack+0x21/0x24 [ 367.622051][ T1274] dump_stack_lvl+0x1a7/0x208 [ 367.626826][ T1274] ? show_regs_print_info+0x18/0x18 [ 367.632296][ T1274] dump_stack+0x15/0x1c [ 367.637069][ T1274] should_fail+0x3ab/0x500 [ 367.641474][ T1274] ? kvm_arch_vcpu_create+0x3e5/0x990 [ 367.646933][ T1274] __should_failslab+0xa4/0xe0 [ 367.651801][ T1274] should_failslab+0x9/0x20 [ 367.656321][ T1274] kmem_cache_alloc+0x3d/0x2d0 [ 367.661079][ T1274] ? kvm_arch_vcpu_create+0x35d/0x990 [ 367.666449][ T1274] kvm_arch_vcpu_create+0x3e5/0x990 [ 367.671674][ T1274] kvm_vm_ioctl_create_vcpu+0x378/0x7f0 [ 367.677205][ T1274] ? kstrtouint_from_user+0x1c4/0x220 [ 367.682679][ T1274] kvm_vm_ioctl+0x2ae/0xab0 [ 367.687304][ T1274] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 367.693279][ T1274] ? ioctl_has_perm+0x1b8/0x4f0 [ 367.698493][ T1274] ? __asan_set_shadow_00+0xe/0x10 [ 367.704467][ T1274] ? do_vfs_ioctl+0x1403/0x15d0 [ 367.709446][ T1274] ? ioctl_has_perm+0x40f/0x4f0 [ 367.714380][ T1274] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 367.720623][ T1274] ? has_cap_mac_admin+0x370/0x370 [ 367.726028][ T1274] ? kernel_write+0x3c0/0x3c0 [ 367.731351][ T1274] ? selinux_file_ioctl+0x3ad/0x4c0 [ 367.736949][ T1274] ? mutex_trylock+0xb0/0xb0 [ 367.743334][ T1274] ? __fget_files+0x2e1/0x340 [ 367.749706][ T1274] ? selinux_file_alloc_security+0x120/0x120 [ 367.756242][ T1274] ? __fget_files+0x2e1/0x340 [ 367.762289][ T1274] ? security_file_ioctl+0x84/0xa0 [ 367.769010][ T1274] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 367.776563][ T1274] __se_sys_ioctl+0x121/0x1a0 [ 367.781534][ T1274] __x64_sys_ioctl+0x7b/0x90 [ 367.786311][ T1274] do_syscall_64+0x31/0x40 [ 367.791708][ T1274] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 367.799084][ T1274] RIP: 0033:0x7f1099f51159 [ 367.803717][ T1274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.828484][ T1274] RSP: 002b:00007f10989aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.837552][ T1274] RAX: ffffffffffffffda RBX: 00007f109a1d8fa0 RCX: 00007f1099f51159 [ 367.847559][ T1274] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 367.860877][ T1274] RBP: 00007f10989aa090 R08: 0000000000000000 R09: 0000000000000000 [ 367.870320][ T1274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.881495][ T1274] R13: 00007f109a1d9038 R14: 00007f109a1d8fa0 R15: 00007fffb58d67c8 [ 367.903335][ T1279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.222'. [ 367.917103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.926574][ T302] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 367.941730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.953080][ T302] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 367.961543][ T302] usb 3-1: Product: syz [ 367.971848][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 367.989232][ T302] usb 3-1: SerialNumber: syz [ 367.999407][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.026176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.026197][ T1274] kvm: failed to allocate userspace's fpu [ 368.044619][ T302] hub 3-1:250.228: bad descriptor, ignoring hub [ 368.052393][ T302] hub: probe of 3-1:250.228 failed with error -5 [ 368.059794][ T1279] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 368.072485][ T1279] EXT4-fs (loop5): orphan cleanup on readonly fs [ 368.088990][ T1284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.222'. [ 368.106679][ T387] udevd[387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 368.143240][ T1279] EXT4-fs warning (device loop5): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 368.176907][ T1279] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 368.202855][ T1303] device syzkaller0 entered promiscuous mode [ 368.213950][ T1301] xt_NFQUEUE: number of total queues is 0 [ 368.221651][ T1279] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.222: bg 0: block 40: padding at end of block bitmap is not set [ 368.242727][ T9] device bridge_slave_1 left promiscuous mode [ 368.252179][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.262485][ T9] device bridge_slave_0 left promiscuous mode [ 368.269468][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.273675][ T1264] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 368.289970][ T1279] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 368.300306][ T9] device veth1_macvtap left promiscuous mode [ 368.300688][ T1264] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 368.309186][ T1279] EXT4-fs (loop5): 1 truncate cleaned up [ 368.319614][ T1264] F2FS-fs (loop0): invalid crc value [ 368.331092][ T9] device veth0_vlan left promiscuous mode [ 368.339279][ T1279] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 368.351269][ T1312] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 368.375912][ T1264] F2FS-fs (loop0): Found nat_bits in checkpoint [ 368.410135][ T1312] EXT4-fs (loop6): 1 truncate cleaned up [ 368.419281][ T1312] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 368.459577][ T1264] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 368.468385][ T1264] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 368.502314][ T1264] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 368.518764][ T1335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.228'. [ 368.544292][ T1264] F2FS-fs (loop0): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 368.743610][ T1356] exfat: Deprecated parameter 'utf8' [ 368.750539][ T1356] exfat: Deprecated parameter 'utf8' [ 368.757851][ T1356] exfat: Deprecated parameter 'utf8' [ 368.765692][ T1356] exfat: Deprecated parameter 'namecase' [ 368.781757][ T1356] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 368.800306][ T1348] udc-core: couldn't find an available UDC or it's busy [ 368.813006][ T1348] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 368.846359][ T1366] FAULT_INJECTION: forcing a failure. [ 368.846359][ T1366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 368.861503][ T1366] CPU: 0 PID: 1366 Comm: syz.1.234 Not tainted syzkaller #0 [ 368.871045][ T1366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.881782][ T1366] Call Trace: [ 368.885302][ T1366] __dump_stack+0x21/0x24 [ 368.890931][ T1366] dump_stack_lvl+0x1a7/0x208 [ 368.897930][ T1366] ? show_regs_print_info+0x18/0x18 [ 368.904581][ T1366] ? stack_trace_save+0xa6/0xf0 [ 368.910008][ T1366] ? stack_trace_snprint+0xe0/0xe0 [ 368.915467][ T1366] dump_stack+0x15/0x1c [ 368.919696][ T1366] should_fail+0x3ab/0x500 [ 368.924236][ T1366] should_fail_alloc_page+0x4f/0x60 [ 368.930057][ T1366] __alloc_pages_nodemask+0x11a/0x640 [ 368.935636][ T1366] ? do_syscall_64+0x31/0x40 [ 368.940918][ T1366] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 368.947342][ T1366] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 368.956166][ T1366] new_slab+0x84/0x3f0 [ 368.960550][ T1366] ___slab_alloc+0x2f8/0x4c0 [ 368.965500][ T1366] ? kvm_arch_vcpu_create+0x3e5/0x990 [ 368.970952][ T1366] __slab_alloc+0x63/0xa0 [ 368.975385][ T1366] ? kvm_arch_vcpu_create+0x3e5/0x990 [ 368.986040][ T1366] ? kvm_arch_vcpu_create+0x3e5/0x990 [ 368.991783][ T1366] kmem_cache_alloc+0x1a4/0x2d0 [ 368.996923][ T1366] ? kvm_arch_vcpu_create+0x3e5/0x990 [ 369.002895][ T1366] kvm_arch_vcpu_create+0x3e5/0x990 [ 369.008629][ T1366] kvm_vm_ioctl_create_vcpu+0x378/0x7f0 [ 369.015987][ T1366] ? kstrtouint_from_user+0x1c4/0x220 [ 369.022832][ T1366] kvm_vm_ioctl+0x2ae/0xab0 [ 369.028394][ T1366] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 369.034909][ T1366] ? ioctl_has_perm+0x1b8/0x4f0 [ 369.039802][ T1366] ? __asan_set_shadow_00+0xe/0x10 [ 369.044908][ T1366] ? do_vfs_ioctl+0x1403/0x15d0 [ 369.050062][ T1366] ? ioctl_has_perm+0x40f/0x4f0 [ 369.054925][ T1366] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 369.061662][ T1366] ? has_cap_mac_admin+0x370/0x370 [ 369.067573][ T1366] ? kernel_write+0x3c0/0x3c0 [ 369.073146][ T1366] ? selinux_file_ioctl+0x3ad/0x4c0 [ 369.078435][ T1366] ? mutex_trylock+0xb0/0xb0 [ 369.083885][ T1366] ? __fget_files+0x2e1/0x340 [ 369.088989][ T1366] ? selinux_file_alloc_security+0x120/0x120 [ 369.096194][ T1366] ? __fget_files+0x2e1/0x340 [ 369.100892][ T1366] ? security_file_ioctl+0x84/0xa0 [ 369.107042][ T1366] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 369.113669][ T1366] __se_sys_ioctl+0x121/0x1a0 [ 369.119153][ T1366] __x64_sys_ioctl+0x7b/0x90 [ 369.124105][ T1366] do_syscall_64+0x31/0x40 [ 369.129782][ T1366] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 369.137558][ T1366] RIP: 0033:0x7f1099f51159 [ 369.142317][ T1366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.167281][ T1366] RSP: 002b:00007f10989aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.178395][ T1366] RAX: ffffffffffffffda RBX: 00007f109a1d8fa0 RCX: 00007f1099f51159 [ 369.187897][ T1366] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 369.196424][ T1366] RBP: 00007f10989aa090 R08: 0000000000000000 R09: 0000000000000000 [ 369.205515][ T1366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.215449][ T1366] R13: 00007f109a1d9038 R14: 00007f109a1d8fa0 R15: 00007fffb58d67c8 [ 369.337379][ T1382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 369.392000][ T1390] syz.1.240 uses obsolete (PF_INET,SOCK_PACKET) [ 369.413490][ T1395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 369.450200][ T1400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=1400 comm=syz.6.241 [ 369.573874][ T1400] EXT4-fs (loop6): Ignoring removed oldalloc option [ 369.581929][ T1400] EXT4-fs (loop6): Ignoring removed oldalloc option [ 369.588859][ T1400] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 369.604271][ T1400] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000004,usrquota,block_validity,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue [ 369.642374][ T24] kauditd_printk_skb: 40 callbacks suppressed [ 369.642385][ T24] audit: type=1400 audit(1790731545.593:433): avc: denied { mounton } for pid=1399 comm="syz.6.241" path="/4/file1/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 369.709159][ T24] audit: type=1400 audit(1790731545.663:434): avc: denied { bind } for pid=1408 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.738000][ T24] audit: type=1400 audit(1790731545.683:435): avc: denied { setopt } for pid=1408 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 369.765427][ T1405] EXT4-fs (loop5): Test dummy encryption mode enabled [ 369.773261][ T1405] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 369.785209][ T1405] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 369.788834][ T1412] FAULT_INJECTION: forcing a failure. [ 369.788834][ T1412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 369.816779][ T1405] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,inlinecrypt,jqfmt=vfsv1,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008, [ 369.828510][ T24] audit: type=1400 audit(1790731545.773:436): avc: denied { bind } for pid=1413 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 369.852896][ T1412] CPU: 0 PID: 1412 Comm: syz.0.245 Not tainted syzkaller #0 [ 369.882033][ T1412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.893817][ T1412] Call Trace: [ 369.898813][ T1412] __dump_stack+0x21/0x24 [ 369.903521][ T1412] dump_stack_lvl+0x1a7/0x208 [ 369.909718][ T1412] ? show_regs_print_info+0x18/0x18 [ 369.915714][ T1412] ? search_extable+0x8c/0xd0 [ 369.920520][ T1412] dump_stack+0x15/0x1c [ 369.925073][ T1412] should_fail+0x3ab/0x500 [ 369.931408][ T1412] should_fail_alloc_page+0x4f/0x60 [ 369.937145][ T1412] __alloc_pages_nodemask+0x11a/0x640 [ 369.944595][ T1412] ? exc_general_protection+0x1ca/0x250 [ 369.953353][ T1412] ? kmem_cache_alloc+0x15a/0x2d0 [ 369.961924][ T1412] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 369.968199][ T1412] ? asm_exc_general_protection+0x1e/0x30 [ 369.975059][ T1412] alloc_loaded_vmcs+0x4b/0x4b0 [ 369.980387][ T1412] ? __static_call_text_end+0x131/0x1c4 [ 369.987367][ T1412] vmx_create_vcpu+0x598/0x3850 [ 369.992834][ T1412] ? memset+0x35/0x40 [ 369.997391][ T1412] ? vmx_vm_init+0x260/0x260 [ 370.005119][ T1412] ? memset+0x35/0x40 [ 370.010448][ T1412] ? kvm_hv_vcpu_init+0x578/0x7f0 [ 370.016979][ T1412] kvm_arch_vcpu_create+0x698/0x990 [ 370.023485][ T1412] kvm_vm_ioctl_create_vcpu+0x378/0x7f0 [ 370.030063][ T1412] ? kstrtouint_from_user+0x1c4/0x220 [ 370.038969][ T1412] kvm_vm_ioctl+0x2ae/0xab0 [ 370.044945][ T1412] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 370.051671][ T1412] ? ioctl_has_perm+0x1b8/0x4f0 [ 370.057304][ T1412] ? __asan_set_shadow_00+0xe/0x10 [ 370.063611][ T1412] ? do_vfs_ioctl+0x1403/0x15d0 [ 370.069531][ T1412] ? ioctl_has_perm+0x40f/0x4f0 [ 370.076024][ T1412] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 370.083856][ T1412] ? has_cap_mac_admin+0x370/0x370 [ 370.090694][ T1412] ? kernel_write+0x3c0/0x3c0 [ 370.100046][ T1412] ? selinux_file_ioctl+0x3ad/0x4c0 [ 370.107452][ T1412] ? mutex_trylock+0xb0/0xb0 [ 370.113537][ T1412] ? __fget_files+0x2e1/0x340 [ 370.118943][ T1412] ? selinux_file_alloc_security+0x120/0x120 [ 370.127194][ T1412] ? __fget_files+0x2e1/0x340 [ 370.133009][ T1412] ? security_file_ioctl+0x84/0xa0 [ 370.142284][ T1412] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 370.150268][ T1412] __se_sys_ioctl+0x121/0x1a0 [ 370.156822][ T1412] __x64_sys_ioctl+0x7b/0x90 [ 370.162571][ T1412] do_syscall_64+0x31/0x40 [ 370.168600][ T1412] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 370.178786][ T1412] RIP: 0033:0x7f6478f9b159 [ 370.185818][ T1412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.212050][ T1412] RSP: 002b:00007f64779f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.224109][ T1412] RAX: ffffffffffffffda RBX: 00007f6479222fa0 RCX: 00007f6478f9b159 [ 370.234901][ T1412] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 370.248427][ T1412] RBP: 00007f64779f4090 R08: 0000000000000000 R09: 0000000000000000 [ 370.259715][ T1412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.269380][ T1412] R13: 00007f6479223038 R14: 00007f6479222fa0 R15: 00007ffcde8106b8 [ 370.309996][ T1431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 370.322300][ T24] audit: type=1400 audit(1790731545.813:437): avc: denied { watch_reads } for pid=1404 comm="syz.5.242" path="/32/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 370.330981][ T1431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 370.374695][ T24] audit: type=1400 audit(1790731546.333:438): avc: denied { map } for pid=1438 comm="syz.0.251" path="socket:[33112]" dev="sockfs" ino=33112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 370.410777][ T52] usb 3-1: USB disconnect, device number 11 [ 370.426086][ T24] audit: type=1400 audit(1790731546.353:439): avc: denied { read } for pid=1438 comm="syz.0.251" path="socket:[33112]" dev="sockfs" ino=33112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 370.459938][ T24] audit: type=1400 audit(1790731546.383:440): avc: denied { wake_alarm } for pid=1430 comm="syz.1.250" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 370.536173][ T24] audit: type=1400 audit(1790731546.463:441): avc: denied { mounton } for pid=1404 comm="syz.5.242" path="/32/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 370.568284][ T24] audit: type=1400 audit(1790731546.463:442): avc: denied { getopt } for pid=1446 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 370.643448][ T1452] exfat: Deprecated parameter 'utf8' [ 370.651227][ T1452] exfat: Deprecated parameter 'utf8' [ 370.657331][ T1452] exfat: Deprecated parameter 'utf8' [ 370.663987][ T1452] exfat: Deprecated parameter 'namecase' [ 370.674412][ T1452] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 370.965117][ T1489] FAULT_INJECTION: forcing a failure. [ 370.965117][ T1489] name failslab, interval 1, probability 0, space 0, times 0 [ 370.979507][ T1489] CPU: 1 PID: 1489 Comm: syz.1.262 Not tainted syzkaller #0 [ 370.987146][ T1489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.998113][ T1489] Call Trace: [ 371.002137][ T1489] __dump_stack+0x21/0x24 [ 371.006672][ T1489] dump_stack_lvl+0x1a7/0x208 [ 371.012432][ T1489] ? show_regs_print_info+0x18/0x18 [ 371.018267][ T1489] ? search_extable+0xd0/0xd0 [ 371.023523][ T1489] dump_stack+0x15/0x1c [ 371.028141][ T1489] should_fail+0x3ab/0x500 [ 371.032673][ T1489] ? __d_alloc+0x2d/0x690 [ 371.040125][ T1489] __should_failslab+0xa4/0xe0 [ 371.045306][ T1489] should_failslab+0x9/0x20 [ 371.050199][ T1489] kmem_cache_alloc+0x3d/0x2d0 [ 371.055733][ T1489] ? __alloc_fd+0x570/0x570 [ 371.060785][ T1489] __d_alloc+0x2d/0x690 [ 371.066003][ T1489] ? _raw_spin_lock+0x94/0xf0 [ 371.071104][ T1489] d_alloc_pseudo+0x1d/0x70 [ 371.076318][ T1489] alloc_file_pseudo+0xe0/0x200 [ 371.081831][ T1489] ? alloc_empty_file_noaccount+0x80/0x80 [ 371.089091][ T1489] __anon_inode_getfd+0x26b/0x3d0 [ 371.094827][ T1489] ? snprintf+0xe5/0x140 [ 371.099669][ T1489] ? anon_inode_getfd+0x40/0x40 [ 371.105583][ T1489] ? vscnprintf+0x80/0x80 [ 371.111532][ T1489] ? vmx_vcpu_reset+0x8af/0xfa0 [ 371.117658][ T1489] anon_inode_getfd+0x31/0x40 [ 371.124759][ T1489] create_vcpu_fd+0xd2/0x140 [ 371.131782][ T1489] ? kvm_get_vcpu_by_id+0x380/0x380 [ 371.139956][ T1489] ? __kasan_check_read+0x11/0x20 [ 371.147715][ T1489] ? __kasan_check_write+0x14/0x20 [ 371.156039][ T1489] kvm_vm_ioctl_create_vcpu+0x536/0x7f0 [ 371.163767][ T1489] kvm_vm_ioctl+0x2ae/0xab0 [ 371.168477][ T1489] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 371.175490][ T1489] ? ioctl_has_perm+0x1b8/0x4f0 [ 371.181658][ T1489] ? __asan_set_shadow_00+0xe/0x10 [ 371.190509][ T1489] ? do_vfs_ioctl+0x1403/0x15d0 [ 371.199626][ T1489] ? ioctl_has_perm+0x40f/0x4f0 [ 371.205516][ T1489] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 371.212697][ T1489] ? has_cap_mac_admin+0x370/0x370 [ 371.218648][ T1489] ? kernel_write+0x3c0/0x3c0 [ 371.226154][ T1489] ? selinux_file_ioctl+0x3ad/0x4c0 [ 371.232178][ T1489] ? mutex_trylock+0xb0/0xb0 [ 371.237283][ T1489] ? __fget_files+0x2e1/0x340 [ 371.243314][ T1489] ? selinux_file_alloc_security+0x120/0x120 [ 371.249985][ T1489] ? __fget_files+0x2e1/0x340 [ 371.255864][ T1489] ? security_file_ioctl+0x84/0xa0 [ 371.263246][ T1489] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 371.270179][ T1489] __se_sys_ioctl+0x121/0x1a0 [ 371.276062][ T1489] __x64_sys_ioctl+0x7b/0x90 [ 371.281835][ T1489] do_syscall_64+0x31/0x40 [ 371.287219][ T1489] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 371.294192][ T1489] RIP: 0033:0x7f1099f51159 [ 371.298790][ T1489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.319440][ T1489] RSP: 002b:00007f10989aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.328801][ T1489] RAX: ffffffffffffffda RBX: 00007f109a1d8fa0 RCX: 00007f1099f51159 [ 371.339598][ T1489] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 371.349791][ T1489] RBP: 00007f10989aa090 R08: 0000000000000000 R09: 0000000000000000 [ 371.358819][ T1489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.368384][ T1489] R13: 00007f109a1d9038 R14: 00007f109a1d8fa0 R15: 00007fffb58d67c8 [ 371.507136][ T1509] EXT4-fs (loop2): Test dummy encryption mode enabled [ 371.515791][ T1509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 371.523412][ T315] udevd[315]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 371.533229][ T1509] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.268: bad orphan inode 131083 [ 371.544494][ T315] udevd[315]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 371.550813][ T1509] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue [ 371.594176][ T1509] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 371.642800][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 371.661672][ T315] udevd[315]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 371.705977][ T1517] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 371.706361][ T439] udevd[439]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 371.721732][ T1517] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.891453][ T315] udevd[315]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 371.909676][ T1532] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,grpquota, [ 371.920648][ T52] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 371.923573][ T315] udevd[315]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 371.929277][ T1532] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.965833][ T439] udevd[439]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 372.030313][ T1543] process 'syz.5.274' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 372.032281][ T439] udevd[439]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 372.215848][ T1560] FAULT_INJECTION: forcing a failure. [ 372.215848][ T1560] name failslab, interval 1, probability 0, space 0, times 0 [ 372.231170][ T1560] CPU: 0 PID: 1560 Comm: syz.1.279 Not tainted syzkaller #0 [ 372.238506][ T1560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.250484][ T1560] Call Trace: [ 372.254079][ T1560] __dump_stack+0x21/0x24 [ 372.259392][ T1560] dump_stack_lvl+0x1a7/0x208 [ 372.264528][ T1560] ? thaw_kernel_threads+0x220/0x220 [ 372.270083][ T1560] ? show_regs_print_info+0x18/0x18 [ 372.276494][ T1560] dump_stack+0x15/0x1c [ 372.280655][ T1560] should_fail+0x3ab/0x500 [ 372.285265][ T1560] ? __alloc_file+0x28/0x320 [ 372.290245][ T1560] __should_failslab+0xa4/0xe0 [ 372.295761][ T1560] should_failslab+0x9/0x20 [ 372.300875][ T1560] kmem_cache_alloc+0x3d/0x2d0 [ 372.306552][ T1560] __alloc_file+0x28/0x320 [ 372.312327][ T1560] alloc_empty_file+0x97/0x180 [ 372.317796][ T1560] alloc_file+0x59/0x580 [ 372.322236][ T1560] alloc_file_pseudo+0x180/0x200 [ 372.327617][ T1560] ? alloc_empty_file_noaccount+0x80/0x80 [ 372.333918][ T1560] __anon_inode_getfd+0x26b/0x3d0 [ 372.339674][ T1560] ? snprintf+0xe5/0x140 [ 372.343926][ T1560] ? anon_inode_getfd+0x40/0x40 [ 372.349791][ T1560] ? vscnprintf+0x80/0x80 [ 372.355315][ T1560] ? vmx_vcpu_reset+0x8af/0xfa0 [ 372.360309][ T1560] anon_inode_getfd+0x31/0x40 [ 372.365605][ T1560] create_vcpu_fd+0xd2/0x140 [ 372.370483][ T1560] ? kvm_get_vcpu_by_id+0x380/0x380 [ 372.376184][ T1560] ? __kasan_check_read+0x11/0x20 [ 372.381717][ T1560] ? __kasan_check_write+0x14/0x20 [ 372.387057][ T1560] kvm_vm_ioctl_create_vcpu+0x536/0x7f0 [ 372.393145][ T1560] kvm_vm_ioctl+0x2ae/0xab0 [ 372.397646][ T1560] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 372.403387][ T1560] ? ioctl_has_perm+0x1b8/0x4f0 [ 372.408543][ T1560] ? __asan_set_shadow_00+0xe/0x10 [ 372.413757][ T1560] ? do_vfs_ioctl+0x1403/0x15d0 [ 372.419806][ T1560] ? ioctl_has_perm+0x40f/0x4f0 [ 372.428559][ T1560] ? __ia32_compat_sys_ioctl+0x8c0/0x8c0 [ 372.434692][ T1560] ? has_cap_mac_admin+0x370/0x370 [ 372.440174][ T1560] ? kernel_write+0x3c0/0x3c0 [ 372.445767][ T1560] ? selinux_file_ioctl+0x3ad/0x4c0 [ 372.452718][ T1560] ? mutex_trylock+0xb0/0xb0 [ 372.458191][ T1560] ? __fget_files+0x2e1/0x340 [ 372.463979][ T1560] ? selinux_file_alloc_security+0x120/0x120 [ 372.470535][ T1560] ? __fget_files+0x2e1/0x340 [ 372.475601][ T1560] ? security_file_ioctl+0x84/0xa0 [ 372.482657][ T1560] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 372.489535][ T1560] __se_sys_ioctl+0x121/0x1a0 [ 372.495655][ T1560] __x64_sys_ioctl+0x7b/0x90 [ 372.501746][ T1560] do_syscall_64+0x31/0x40 [ 372.506439][ T1560] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 372.512502][ T1560] RIP: 0033:0x7f1099f51159 [ 372.517763][ T1560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.539867][ T1560] RSP: 002b:00007f10989aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.550207][ T1560] RAX: ffffffffffffffda RBX: 00007f109a1d8fa0 RCX: 00007f1099f51159 [ 372.558537][ T1560] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 372.566645][ T1560] RBP: 00007f10989aa090 R08: 0000000000000000 R09: 0000000000000000 [ 372.575113][ T1560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.583332][ T1560] R13: 00007f109a1d9038 R14: 00007f109a1d8fa0 R15: 00007fffb58d67c8 [ 372.672686][ T52] usb 1-1: not running at top speed; connect to a high speed hub [ 372.673248][ T315] udevd[315]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 372.762739][ T52] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.775895][ T52] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 372.785710][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.852923][ T52] uvcvideo: Found UVC 1.00 device (046d:0825) [ 372.860818][ T52] uvcvideo: No streaming interface found for terminal 2. [ 372.882886][ T1579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.286'. [ 372.892765][ T360] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 372.915131][ T1581] ip_tables: iptables: counters copy to user failed while replacing table [ 372.957012][ T1587] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=1587 comm=syz.2.289 [ 372.969638][ T1587] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=1587 comm=syz.2.289 [ 372.983280][ T1587] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=1587 comm=syz.2.289 [ 373.034455][ T52] usb 1-1: USB disconnect, device number 10 [ 373.282710][ T360] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.293341][ T360] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 373.302636][ T360] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.315993][ T360] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 373.492928][ T360] usb 7-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 373.503403][ T360] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.511807][ T360] usb 7-1: Product: syz [ 373.516236][ T360] usb 7-1: Manufacturer: syz [ 373.521589][ T360] usb 7-1: SerialNumber: syz [ 373.686919][ T1601] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,grpquota, [ 373.686980][ T1598] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.698224][ T1601] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.763348][ T1566] capability: warning: `syz.6.280' uses 32-bit capabilities (legacy support in use) [ 374.055519][ T1619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 374.202754][ T360] usb 7-1: cannot find UAC_HEADER [ 374.209381][ T360] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 374.250218][ T360] usb 7-1: USB disconnect, device number 2 [ 374.879292][ T1630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 374.887955][ T1630] System zones: 0-1, 3-36 [ 374.899361][ T1630] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.301: bad orphan inode 134217728 [ 374.913388][ T1630] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000010001,debug,journal_dev=0x0000000000001007,,errors=continue [ 375.244634][ T1634] x_tables: unsorted underflow at hook 3 [ 375.540066][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 375.540076][ T24] audit: type=1400 audit(1790731551.493:459): avc: denied { mounton } for pid=1639 comm="syz.6.304" path="/14/mnt/mnt" dev="sda1" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mnt_t tclass=dir permissive=1 [ 375.823913][ T1648] exfat: Deprecated parameter 'utf8' [ 375.830615][ T1648] exfat: Deprecated parameter 'utf8' [ 375.836626][ T1648] exfat: Deprecated parameter 'utf8' [ 375.842127][ T1648] exfat: Deprecated parameter 'namecase' [ 375.852046][ T1648] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 376.041197][ T1690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.314'. [ 376.076020][ T1690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.314'. [ 376.085883][ T1690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 376.256365][ T1707] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 376.293837][ T24] audit: type=1400 audit(1790731552.253:460): avc: denied { relabelto } for pid=1672 comm="syz.2.310" name="file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 376.326163][ T1706] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,grpquota, [ 376.341053][ T1710] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 376.344440][ T1706] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.367742][ T1710] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 376.386621][ T24] audit: type=1400 audit(1790731552.283:461): avc: denied { associate } for pid=1672 comm="syz.2.310" name="file0" dev="tmpfs" ino=353 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 376.435777][ T1710] EXT4-fs (loop6): failed to open journal device unknown-block(0,194) -6 [ 376.594787][ T1710] FAT-fs (loop6): bogus logical sector size 2134 [ 376.604802][ T1710] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 376.643431][ T1710] FAT-fs (loop6): Can't find a valid FAT filesystem [ 376.962980][ T1723] exfat: Deprecated parameter 'utf8' [ 376.968540][ T1723] exfat: Deprecated parameter 'utf8' [ 376.974548][ T1723] exfat: Deprecated parameter 'utf8' [ 376.980032][ T1723] exfat: Deprecated parameter 'namecase' [ 376.988503][ T1723] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 377.062651][ T397] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 377.264645][ T24] audit: type=1400 audit(1790731553.223:462): avc: denied { unlink } for pid=281 comm="syz-executor" name="file0" dev="tmpfs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 377.632105][ T1731] F2FS-fs (loop5): invalid crc value [ 377.660857][ T1731] F2FS-fs (loop5): Found nat_bits in checkpoint [ 377.676680][ T1750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 377.693587][ T1731] F2FS-fs (loop5): Start checkpoint disabled! [ 377.700899][ T1731] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 377.714562][ T7] attempt to access beyond end of device [ 377.714562][ T7] loop5: rw=2049, want=45104, limit=40427 [ 377.732966][ T397] usb 7-1: unable to get BOS descriptor or descriptor too short [ 377.813579][ T397] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.825153][ T397] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.943013][ T1766] exfat: Deprecated parameter 'utf8' [ 377.948736][ T1766] exfat: Deprecated parameter 'utf8' [ 377.955289][ T1766] exfat: Deprecated parameter 'utf8' [ 377.961599][ T1766] exfat: Deprecated parameter 'namecase' [ 378.013491][ T1766] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 378.036889][ T24] audit: type=1400 audit(1790731553.993:463): avc: denied { create } for pid=1772 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 378.160927][ T397] usb 7-1: string descriptor 0 read error: -22 [ 378.167923][ T397] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 378.191436][ T397] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.268180][ T397] usb 7-1: selecting invalid altsetting 1 [ 378.275633][ T397] usb 7-1: unit 3 not found! [ 378.527296][ T397] usb 7-1: cannot request logical cluster ID: 0 (err: -71) [ 378.547512][ T397] usb 7-1: invalid MIXER UNIT descriptor 6 [ 378.558679][ T397] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 378.577606][ T397] usb 7-1: USB disconnect, device number 3 [ 378.809329][ T24] audit: type=1400 audit(1790731554.763:464): avc: denied { write } for pid=1789 comm="syz.5.339" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 378.890821][ T24] audit: type=1400 audit(1790731554.843:465): avc: denied { create } for pid=1795 comm="syz.1.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 378.920356][ T1790] exfat: Deprecated parameter 'utf8' [ 378.930875][ T1790] exfat: Deprecated parameter 'namecase' [ 378.937956][ T1790] exfat: Unknown parameter 'keep_last_dots' [ 379.150307][ T24] audit: type=1400 audit(1790731555.103:466): avc: denied { ioctl } for pid=1798 comm="syz.1.342" path="socket:[33867]" dev="sockfs" ino=33867 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 379.201308][ T1790] erofs: (device loop5): mounted with root inode @ nid 36. [ 379.303598][ T1819] EXT4-fs (loop0): Ignoring removed nobh option [ 379.310094][ T1819] EXT4-fs (loop0): Ignoring removed bh option [ 379.316476][ T1819] EXT4-fs (loop0): Unrecognized mount option "hash" or missing value [ 379.325689][ T1823] exfat: Deprecated parameter 'utf8' [ 379.331474][ T1823] exfat: Deprecated parameter 'utf8' [ 379.337281][ T1823] exfat: Deprecated parameter 'utf8' [ 379.342654][ T1823] exfat: Deprecated parameter 'namecase' [ 379.385093][ T1823] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 379.790319][ T1834] bridge0: port 3(veth0_to_team) entered blocking state [ 379.797534][ T1834] bridge0: port 3(veth0_to_team) entered disabled state [ 379.805244][ T1834] device veth0_to_team entered promiscuous mode [ 379.812780][ T286] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 379.813572][ T24] audit: type=1400 audit(1790731555.773:467): avc: denied { execute_no_trans } for pid=1833 comm="syz.0.351" path="/67/file0" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 379.896178][ T24] audit: type=1326 audit(1790731555.853:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1833 comm="syz.0.351" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6478f9b159 code=0x7ffc0000 [ 380.052656][ T286] usb 7-1: Using ep0 maxpacket: 32 [ 380.172690][ T286] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 380.201942][ T286] usb 7-1: config 0 has no interface number 0 [ 380.292811][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 380.346339][ T1856] F2FS-fs (loop5): invalid crc value [ 380.353575][ T1856] F2FS-fs (loop5): Found nat_bits in checkpoint [ 380.362773][ T286] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 380.373052][ T286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.381425][ T286] usb 7-1: Product: syz [ 380.386237][ T286] usb 7-1: Manufacturer: syz [ 380.394721][ T1856] F2FS-fs (loop5): Start checkpoint disabled! [ 380.395488][ T286] usb 7-1: SerialNumber: syz [ 380.407148][ T1856] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 380.408006][ T286] usb 7-1: config 0 descriptor?? [ 380.440191][ T7] attempt to access beyond end of device [ 380.440191][ T7] loop5: rw=2049, want=40976, limit=40427 [ 380.453719][ T286] smsc95xx v2.0.0 [ 380.532802][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 380.576725][ T1869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 380.589116][ T1869] System zones: 1-12 [ 380.594368][ T1869] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.363: missing EA_INODE flag [ 380.607079][ T1869] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.363: error while reading EA inode 12 err=-117 [ 380.620796][ T1869] EXT4-fs (loop5): 1 orphan inode deleted [ 380.628851][ T1869] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue [ 380.645085][ T24] kauditd_printk_skb: 39 callbacks suppressed [ 380.645095][ T24] audit: type=1400 audit(1790731556.603:508): avc: denied { read } for pid=1868 comm="syz.5.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 380.652723][ T20] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.687247][ T20] usb 1-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.701699][ T20] usb 1-1: config 0 interface 0 has no altsetting 0 [ 380.708498][ T20] usb 1-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 380.718105][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.728059][ T20] usb 1-1: config 0 descriptor?? [ 380.734001][ T286] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 380.745182][ T286] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 380.862702][ T286] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 380.877191][ T1883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 380.878606][ T286] smsc95xx: probe of 7-1:0.67 failed with error -32 [ 380.892371][ T1883] System zones: 1-12 [ 380.898154][ T1883] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.366: missing EA_INODE flag [ 380.910123][ T1883] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.366: error while reading EA inode 12 err=-117 [ 380.924490][ T1883] EXT4-fs (loop5): 1 orphan inode deleted [ 380.930240][ T1883] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue [ 380.991456][ T1850] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 381.000638][ T52] usb 7-1: USB disconnect, device number 4 [ 381.095724][ T1888] netlink: 20 bytes leftover after parsing attributes in process `syz.5.366'. [ 381.328788][ T20] elecom 0003:056E:00FD.0002: unbalanced collection at end of report description [ 381.401656][ T20] elecom: probe of 0003:056E:00FD.0002 failed with error -22 [ 381.731286][ T1891] ================================================================== [ 381.739899][ T1891] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3160 [ 381.748566][ T1891] Read of size 8 at addr ffff8881144d24d8 by task syz.1.367/1891 [ 381.756560][ T1891] [ 381.758997][ T1891] CPU: 1 PID: 1891 Comm: syz.1.367 Not tainted syzkaller #0 [ 381.767231][ T1891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.778141][ T1891] Call Trace: [ 381.781552][ T1891] __dump_stack+0x21/0x24 [ 381.786154][ T1891] dump_stack_lvl+0x1a7/0x208 [ 381.792233][ T1891] ? show_regs_print_info+0x18/0x18 [ 381.798774][ T1891] ? thaw_kernel_threads+0x220/0x220 [ 381.804541][ T1891] print_address_description+0x7f/0x2c0 [ 381.810465][ T1891] ? tc_setup_flow_action+0x88e/0x3160 [ 381.816503][ T1891] kasan_report+0x100/0x140 [ 381.822696][ T1891] ? tc_setup_flow_action+0x88e/0x3160 [ 381.829540][ T1891] __asan_report_load8_noabort+0x14/0x20 [ 381.837985][ T1891] tc_setup_flow_action+0x88e/0x3160 [ 381.844510][ T1891] mall_replace_hw_filter+0x2db/0x8c0 [ 381.852093][ T1891] ? pcpu_block_update_hint_alloc+0x8b7/0xc50 [ 381.859089][ T1891] ? mall_set_parms+0x450/0x450 [ 381.867202][ T1891] ? tcf_exts_destroy+0xb0/0xb0 [ 381.872630][ T1891] ? pcpu_alloc+0xf8d/0x16c0 [ 381.877803][ T1891] ? mall_set_parms+0x1a0/0x450 [ 381.883556][ T1891] mall_change+0x546/0x770 [ 381.888825][ T1891] ? __kasan_check_write+0x14/0x20 [ 381.894667][ T1891] ? mall_get+0xa0/0xa0 [ 381.899912][ T1891] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 381.906641][ T1891] tc_new_tfilter+0x1487/0x1ab0 [ 381.912857][ T1891] ? mall_get+0xa0/0xa0 [ 381.919720][ T1891] ? tcf_gate_entry_destructor+0x20/0x20 [ 381.927128][ T1891] ? __kasan_record_aux_stack+0xd2/0x100 [ 381.933288][ T1891] ? security_capable+0x87/0xb0 [ 381.939456][ T1891] ? ns_capable+0x8c/0xf0 [ 381.944537][ T1891] ? netlink_net_capable+0x125/0x160 [ 381.951100][ T1891] ? tcf_gate_entry_destructor+0x20/0x20 [ 381.957366][ T1891] rtnetlink_rcv_msg+0x811/0xca0 [ 381.962426][ T1891] ? unwind_get_return_address+0x4d/0x90 [ 381.968790][ T1891] ? rtnetlink_bind+0x80/0x80 [ 381.973488][ T1891] ? stack_trace_save+0xa6/0xf0 [ 381.978530][ T1891] ? stack_trace_snprint+0xe0/0xe0 [ 381.984018][ T1891] ? avc_has_perm+0x168/0x3d0 [ 381.988893][ T1891] ? memcpy+0x56/0x70 [ 381.993167][ T1891] ? avc_has_perm+0x27f/0x3d0 [ 381.997836][ T1891] ? __kasan_slab_alloc+0xc9/0xe0 [ 382.003164][ T1891] ? avc_has_perm_noaudit+0x260/0x260 [ 382.008533][ T1891] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 382.014594][ T1891] ? selinux_nlmsg_lookup+0x398/0x430 [ 382.020196][ T1891] netlink_rcv_skb+0x1e9/0x430 [ 382.025242][ T1891] ? rtnetlink_bind+0x80/0x80 [ 382.029912][ T1891] ? netlink_ack+0xb30/0xb30 [ 382.034641][ T1891] ? __netlink_lookup+0x387/0x3b0 [ 382.039668][ T1891] rtnetlink_rcv+0x1c/0x20 [ 382.044528][ T1891] netlink_unicast+0x86c/0xa30 [ 382.049316][ T1891] netlink_sendmsg+0x949/0xb70 [ 382.054207][ T1891] ? netlink_getsockopt+0x530/0x530 [ 382.059492][ T1891] ? security_socket_sendmsg+0x82/0xa0 [ 382.065334][ T1891] ? netlink_getsockopt+0x530/0x530 [ 382.071157][ T1891] ____sys_sendmsg+0x5be/0x8f0 [ 382.076123][ T1891] ? __sys_sendmsg_sock+0x40/0x40 [ 382.081890][ T1891] ? import_iovec+0x7c/0xb0 [ 382.086948][ T1891] ___sys_sendmsg+0x236/0x2e0 [ 382.092063][ T1891] ? __sys_sendmsg+0x280/0x280 [ 382.097552][ T1891] ? __x64_sys_newfstatat+0xb0/0xb0 [ 382.103072][ T1891] ? __fdget+0x1a1/0x230 [ 382.107348][ T1891] __x64_sys_sendmsg+0x201/0x2d0 [ 382.112694][ T1891] ? __kasan_check_write+0x14/0x20 [ 382.118349][ T1891] ? ___sys_sendmsg+0x2e0/0x2e0 [ 382.123573][ T1891] ? __kasan_check_read+0x11/0x20 [ 382.129260][ T1891] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 382.135607][ T1891] do_syscall_64+0x31/0x40 [ 382.140105][ T1891] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 382.147893][ T1891] RIP: 0033:0x7f1099f51159 [ 382.154711][ T1891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.176752][ T1891] RSP: 002b:00007f10989aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.186040][ T1891] RAX: ffffffffffffffda RBX: 00007f109a1d8fa0 RCX: 00007f1099f51159 [ 382.194606][ T1891] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 000000000000000a [ 382.202928][ T1891] RBP: 00007f1099fe806b R08: 0000000000000000 R09: 0000000000000000 [ 382.211517][ T1891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.222147][ T1891] R13: 00007f109a1d9038 R14: 00007f109a1d8fa0 R15: 00007fffb58d67c8 [ 382.230123][ T1891] [ 382.232520][ T1891] Allocated by task 1891: [ 382.236860][ T1891] __kasan_kmalloc+0xd4/0x100 [ 382.241518][ T1891] __kmalloc+0x19f/0x330 [ 382.245752][ T1891] tcf_idr_create+0x5f/0x790 [ 382.250330][ T1891] tcf_idr_create_from_flags+0x61/0x70 [ 382.255775][ T1891] tcf_gact_init+0x2e6/0x560 [ 382.260356][ T1891] tcf_action_init_1+0x443/0x6d0 [ 382.265309][ T1891] tcf_action_init+0x227/0x780 [ 382.270053][ T1891] tcf_exts_validate+0x23c/0x540 [ 382.274983][ T1891] mall_set_parms+0x4a/0x450 [ 382.279553][ T1891] mall_change+0x47a/0x770 [ 382.283954][ T1891] tc_new_tfilter+0x1487/0x1ab0 [ 382.288783][ T1891] rtnetlink_rcv_msg+0x811/0xca0 [ 382.293789][ T1891] netlink_rcv_skb+0x1e9/0x430 [ 382.299462][ T1891] rtnetlink_rcv+0x1c/0x20 [ 382.304708][ T1891] netlink_unicast+0x86c/0xa30 [ 382.310455][ T1891] netlink_sendmsg+0x949/0xb70 [ 382.316147][ T1891] ____sys_sendmsg+0x5be/0x8f0 [ 382.322344][ T1891] ___sys_sendmsg+0x236/0x2e0 [ 382.327835][ T1891] __x64_sys_sendmsg+0x201/0x2d0 [ 382.332891][ T1891] do_syscall_64+0x31/0x40 [ 382.337568][ T1891] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 382.344078][ T1891] [ 382.346550][ T1891] Last potentially related work creation: [ 382.352389][ T1891] kasan_save_stack+0x3a/0x60 [ 382.357137][ T1891] __kasan_record_aux_stack+0xd2/0x100 [ 382.362858][ T1891] kasan_record_aux_stack_noalloc+0xb/0x10 [ 382.368966][ T1891] kvfree_call_rcu+0x117/0x670 [ 382.373834][ T1891] drop_sysctl_table+0x2f5/0x430 [ 382.378753][ T1891] drop_sysctl_table+0x2e4/0x430 [ 382.383674][ T1891] unregister_sysctl_table+0x75/0x120 [ 382.389376][ T1891] unregister_net_sysctl_table+0x15/0x20 [ 382.395079][ T1891] ipv6_sysctl_net_exit+0x13d/0x190 [ 382.400345][ T1891] cleanup_net+0x589/0xb80 [ 382.405399][ T1891] process_one_work+0x6fd/0xbc0 [ 382.410412][ T1891] worker_thread+0xa8e/0x13c0 [ 382.415076][ T1891] kthread+0x324/0x3b0 [ 382.419126][ T1891] ret_from_fork+0x1f/0x30 [ 382.423514][ T1891] [ 382.425830][ T1891] The buggy address belongs to the object at ffff8881144d2400 [ 382.425830][ T1891] which belongs to the cache kmalloc-256 of size 256 [ 382.439959][ T1891] The buggy address is located 216 bytes inside of [ 382.439959][ T1891] 256-byte region [ffff8881144d2400, ffff8881144d2500) [ 382.454114][ T1891] The buggy address belongs to the page: [ 382.459945][ T1891] page:ffffea0004513480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1144d2 [ 382.471205][ T1891] head:ffffea0004513480 order:1 compound_mapcount:0 [ 382.478064][ T1891] flags: 0x4000000000010200(slab|head) [ 382.483699][ T1891] raw: 4000000000010200 ffffea00042f2d80 0000000600000006 ffff888100043200 [ 382.493406][ T1891] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 382.504532][ T1891] page dumped because: kasan: bad access detected [ 382.511480][ T1891] page_owner tracks the page as allocated [ 382.517494][ T1891] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 100, ts 9314567247, free_ts 0 [ 382.535945][ T1891] prep_new_page+0x176/0x190 [ 382.540625][ T1891] get_page_from_freelist+0x225f/0x23f0 [ 382.548473][ T1891] __alloc_pages_nodemask+0x29a/0x640 [ 382.555940][ T1891] new_slab+0x84/0x3f0 [ 382.560274][ T1891] ___slab_alloc+0x2f8/0x4c0 [ 382.564937][ T1891] __slab_alloc+0x63/0xa0 [ 382.569263][ T1891] kmem_cache_alloc_trace+0x1a8/0x2e0 [ 382.574624][ T1891] inode_doinit_use_xattr+0x5d/0x400 [ 382.579897][ T1891] inode_doinit_with_dentry+0x93a/0xd70 [ 382.585547][ T1891] selinux_d_instantiate+0x27/0x40 [ 382.590640][ T1891] security_d_instantiate+0x9e/0xf0 [ 382.595912][ T1891] d_splice_alias+0x6d/0x390 [ 382.600535][ T1891] kernfs_iop_lookup+0x2c5/0x310 [ 382.605760][ T1891] __lookup_slow+0x2b8/0x410 [ 382.610520][ T1891] lookup_slow+0x57/0x70 [ 382.614920][ T1891] walk_component+0x326/0x460 [ 382.619579][ T1891] page_owner free stack trace missing [ 382.625059][ T1891] [ 382.628703][ T1891] Memory state around the buggy address: [ 382.634612][ T1891] ffff8881144d2380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 382.642771][ T1891] ffff8881144d2400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 382.650985][ T1891] >ffff8881144d2480: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 382.659130][ T1891] ^ [ 382.666177][ T1891] ffff8881144d2500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 382.674420][ T1891] ffff8881144d2580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 382.682467][ T1891] ================================================================== [ 382.690506][ T1891] Disabling lock debugging due to kernel taint [ 382.707798][ T24] audit: type=1400 audit(1790731558.663:509): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 382.732887][ T52] usb 1-1: USB disconnect, device number 11 [ 382.740998][ T24] audit: type=1400 audit(1790731558.663:510): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.776488][ T24] audit: type=1400 audit(1790731558.663:511): avc: denied { write } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.805137][ T24] audit: type=1400 audit(1790731558.663:512): avc: denied { add_name } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.829534][ T24] audit: type=1400 audit(1790731558.663:513): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 382.883870][ T24] audit: type=1400 audit(1790731558.663:514): avc: denied { append open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 382.909754][ T24] audit: type=1400 audit(1790731558.663:515): avc: denied { getattr } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1