last executing test programs: 8.440548984s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400d8d"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x2e) 8.268389393s ago: executing program 1 (id=2): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000380)={0x0, 0x200, 0x1, 0x3, 0x1, "6fedc7f9798c0ca2"}) r2 = dup(r1) bind$bt_l2cap(r2, &(0x7f0000000080), 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) splice(r4, &(0x7f00000002c0)=0x2, r4, &(0x7f0000000300)=0x9, 0x10000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2}, {0x4, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xe33}]}, 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) listen(r1, 0x9) accept4$vsock_stream(r2, 0x0, 0x0, 0x80000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.813603591s ago: executing program 2 (id=9): creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="000000b7080000000000007b8af8ff00000000020000000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) 6.802644581s ago: executing program 1 (id=10): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400d8d"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x2e) 5.876539569s ago: executing program 2 (id=13): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/29, 0x1d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$incfs(r3, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x63) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'wg0\x00', 0x200}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000003c0)=0x8) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160005000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) 4.422995637s ago: executing program 0 (id=15): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='lon\x00', 0x0) 4.412392107s ago: executing program 0 (id=16): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff0100fffc000000000000200000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200030000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) 4.396676547s ago: executing program 0 (id=17): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) r1 = socket$inet6(0xa, 0x802, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = inotify_init1(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xe5000067) close(r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pselect6(0x96, &(0x7f00000000c0)={0x3f, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') lseek(r7, 0x8000, 0x1) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f00000003c0)={{0x0, 0x0, 0x80}}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000004dc0)={'syztnl2\x00', &(0x7f0000002740)={'syztnl2\x00', 0x0, 0x4, 0x9, 0xd, 0xdf, 0x839db408b6ba6c94, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, 0x7800, 0x1, 0xbc2, 0x81}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000006140)=[{{&(0x7f00000006c0)={0xa, 0x4e21, 0x1, @loopback, 0x26d121a1}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="24000000000000002900000032e0000000000000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) accept$inet6(r1, &(0x7f0000004b40)={0xa, 0x0, 0x0, @mcast1}, 0x0) 4.354621617s ago: executing program 2 (id=18): creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000c"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0xd, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0xd) 4.334134056s ago: executing program 4 (id=19): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2074, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1010b9, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r7 = dup2(r0, r0) write$tun(r7, &(0x7f0000000240)=ANY=[], 0x46) recvmmsg(r7, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2000, 0x0) 3.856551556s ago: executing program 3 (id=20): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @remote, 0x6}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) unshare(0x22020600) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) pidfd_send_signal(0xffffffffffffffff, 0x22, 0x0, 0x0) 3.803869756s ago: executing program 3 (id=21): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000000), 0x1, 0x457, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x80) socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x4804, &(0x7f0000000600)=ANY=[], 0x1, 0x27c, &(0x7f0000000440)="$eJzs3cFKY1cYB/AvGptEKMmiIC2F3tJNV0Et3UeKhdJAS0sW7apSIy3GCgaEdqHupO/QvkK77KKbgVkMs50XGAYGZ2A246xcCBniNSHRJGNkYobx99v4ce7355wTL/fiwpOfPtzaXN9ubhwfH0U+n4lsJSpxkolSzMRspA4CAHibnLRa8byVmvZaAICb4f0PALdP9/1/fPn9nznojn178ysDACblGn//57vVzMSWBQBM0Pc//Pj1SrW6+l2S5CO2Dndru7X0Z3p9ZSN+jUbUYzGKcVqIVlec1V9+VV1dTNqelCK/tT+T5vd3a7P9+aUoRikG5peSVNTauU5+LubP8w/nox7LUYz3BueXB+bfiU8/6Zm/HMV48HNsRyPWo51N87mI2FtKki++qV7I5876AAAAAAAAAAAAAAAAAAAAAABgEspJV6n//Jv0/J5yedj1NN97PlDhdPD5PGfnA7X2L5yvk40PstPdOwAAAAAAAAAAAAAAAAAAALwpmr//sbnWaNR3RhW/3f/n7lEuDbyyeXSROZ93vNThyJ7C1XZxoXj348d/DbqUi9y4n8/1irmI6B1Jzqe889EEJ31dxb2jX97/rLnw+bCeyPaO/Nneal/PkBspO6kP/FkxYmhPfuwbsrf4t1NUXlzq6dxK9Z3CtH9xC39X1v7be/T0qqkRD43W7CQeRQAAAAAAAAAAAAAAAAAAcOt1/un3/+a0VwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA09P5/v+dsYtc9I3khzYfTHuPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwMgAA//8ydJVx") write(r1, &(0x7f0000000d00)="fa1bec4b240986766b9e861ba4deb96d1d26ece12a12f69c6508752d16c25243655238a893bd281967604a4a80d1bbcc00837fecdc07f9d449c8cd9c07c934df347a8092ca505e84edf10d7ac494521fd784676451a29778252a5b33fbf88b8a597c74718aebac7430c25afd8729bc827fb4a6014edb744321f373e95511d85d6b1132488c26797174023e5089c942ede11cfca18b49bebf55d1be597c8b73ff470b7dc008b6ee500b779d13023dc754eb4525e362a2fe0947ca8439f8d6e988d177b1549808dd8fa91f2a841a6881246497eb9c602b5b07258f08f71d18b10d2a224c28dfed87299f8175f73ce86bf868eb7f966a49d22698dda9d540524f49763e8c8921dbbd525a862d02e916cd9b8cb419b9c110f7f3cf2a6792acb70319905c0c004ac91821e51180594507015d1be8a2e97e624739866f92f3a2905d302dda2b829338c58b2a841886d0d70a820d17b8cada858b99c4a32a4bb61f907c4187a624a908e72e71ffed17fbf9fa29bd0bb7221e1b566af681dffd1206b224bfe778edbc891bb0a77122c02eb94a5d8972fd705b4de82395465074eea309bdeceafc386095ac97c5b766e39fe2a173415f62721e20d15886122f6a9e1d1fcb956b6d69fd9206895c1bfd57e464f0fd78e4ca1c7a1de1d4a07518acfba64915e247550ce563e60dd3988d769ab2654374f7b4b6c5b3961463d9be10fce7e42163a24126d0cf8165032d916c2d80f4a46484aed3e8adf1dcc49f4dd2177cb456903d1a4f5860fc46c436efd7dd1e6f6fa69e78408647e417907c5c18103ab572744e717a2adfd47f07ab2fe2c5a9e8a71322fdab5173d23a412bcfb6350bd3059dfa63dcd461fbf6384abfce2a708dada32e68d037a0a44c37e72d03da4e3d607bf6b34ae04735bdcb41cb5fcfcdd3b3a83ed455f4b55d6478740e298962987fd70904c8c0b9d1d514a3c0150941c2e042544e4ddbf80ed1c120ea61dc2a6dfaefb5d0ed5eca95021ae10fb6945a9f9f803c6dbc4572d5287ccf055369bdc15b0eab2c5643f48e55d7dec6a2763d932a32dee8e155a4223cdf91f10a010db1ac4ef2b8bd6cb404a28b00ecc14dc33bcf668885a3c9cfd8c930886689431709c61b16d947dcc63d9afbee24683b99a018ee7bda7b7ab46722d5cd2e0cf08f2c9991f3c6572e0d718499067498007c331d5ef3e4dbc3fd056d5cb081703514f25fe6a0ab1f870fc52cc16f2eb9cc03a65fb9b6b324edcb55ca21a0dd6b862e891d0aaf2eb39a50c2895eb740720bdbac58481ddf31ad2880bc2c5d346def2cfe008ed3c1688eba4188e991fbde0094e4a69690d4df4d4c5396793fee773499be0468e879f855c22780d0af38e65ad7532b06a7d8ef08b4358b83f9df21bc477f5f87f92a2a4560227d999e8f330cb31a4ace0c1b88a42b17249c2753b5457ffb80142e174977013be7f3457591eda280f30cb164d6dd3e0c8bb4ba6b8adf6d8fd13bd4f28336d05834e52ddf4aed331581aae6335464be9bdd0f149b1f0e84ae83604487bfde60c13bba6343c8be55d2a09046a98c0bc522d45d5816707fe59d96bf9f1ab4aa4562099bee1daef02ab957e4947394cd78eb89cc0f4145358059379dd4050b84ea111a011077bb89f59d30bc82f0b4fb7e675206bad050adc04e20a6b998091182a788675c40f917d8d411228c7f12db60f583b3b94731ead49a82a0f96da84148428ce1380e18e7c2476132d0b9b099fa0f5e67feb212349737cf21b9f1b9373e7200cd4e59aeef8ffb279e5b4f1fe0a2c49bf2a8c71995a533f254d3d5dc4276002cc75d3d5cf608603dd5637bf24185d2fd07dea652bb5a9d70a8dc9ec2a17240276cc37100e57e0d0f0ea99037f50bf8d404ea814807ae8f242cd73c7649f21472bcd6b6115da2aee0614925dd63019ca0cdac6e44d570012192480316411067add54a196333bbb4041f4543e483820f9291017760c6f9f0d46dbedb505a0a12e678f0777cded69948b2775080c0ec0ce7e72f1d674ab68f2e2383da1ec26c0200587a53d1cce0ddac148b945b0616ef0439e8cc750e0a37bab1ceab0621a18db7f2e172133491345339541e5b739713642dbfa3944671e05111608453005b836e16a870bdede0f080ed00eb9ee1b7fa9e5e01bc48daed9089fb5fc3ddd9212bae2cee87c8ae7a4bca8328b32228950c7a6bb6d572f6b40cc8254f5bd1b56906a3ac3fc401290f85a31781cca777d6fec3204ce52d4764de940838d3d69818899273931e8efc22f95d314760e1a16016b09a0f8bfb915823c30f79929cde9fe890e5433d5be756630dd2f61fe1554d9b1b6840d5f8d1c38df0d812c879b5dcb6f4c0704c6493dc7a9bbba012400ff6e722fa131085008d59f98c3a372fe18127c74b2af8dbbc1d561f75cd0fe5e4e44160596fead3b669779c4c2f3f3fa1691f8af25697bd9fc7611c4f2562787e0c2a59c63327a8948ec8d2283f60a24585b11574a47a2d8ae3a29dd301157fd268ae8929e6f91d7e3c019639850afd20893f62fb9efbd320aefeb3167a729f3dcea5de67731f719c48fcecc4f0d1f46b6b22eeb279cfbc343d163e99df00f5cbc5c76da15f52f89961dfa65d093a03e5e9d7cb1279fad4bd428c7cef5857b4795db37b3b3badb4332f154e300623a258a28dde0ed76c8204f195f8268a6bd422b19cef6e8c95f9b685c60cea70b9c154957408dfd940ba77ded29b99694abe85adb1badf41b954132200a772f7175b322368a4f9b1256d27af6ebb42b1179b307d21f473b96fce4cbe3ee86879e450f54b9216ab72d31e8e6b6e97e29014c3c1b0fcb18c6ab65eb6909ccfda2b76bc8391f3a34a3daf067e2dd67a4a78bf208e516d9845920cc4e31912c520ad20d8ecd56906047cb7c6fe5be81621cee11013108d784bc81409de5869b081c1809340ca8597c0da875403d19c3540e24b448c7ecf4fad550e162e158f279f1d3301504f33de16121d3fd989e1cca748a81cbbdf8835cdcec2d5c24dcc87dcb33531d6a40be069c2045c2e7ffa9877e4284c38641df995e349633610b9bb48815c213d2855492f328ebf093c28de8db717309853599554c507881f5573dbd46d3fe2d70e40254efdcfb6760d8031efd3d9b9bc49d403b484adb6c54a727d34d54ef63a180e0737b0145724afcb11df885a399e9167fb56806aa4e11c5b46aaab09c9a078a5bc22d8ce4a3b312b5770ec6b85b26bb4eeb65bc2b094d72763b581a7a0a1b618b8c23d6dc8e2393987932f9305bd2d36c276ee4f6e2f76f83546610e827a339b80cfe385b4d03f74b9d6e33affa06b244bcbe7821be2cba3c474a18590ca3d9444f4278399fad0b26329b59c0669fed95cc40f309b7bdb201b51b145c8a5fb4183d4c8a2e384c100e2014e5272ff7b8273548934a1a42b6bbe8948d993b75a52cf7364a07ea04d4f539b487627e70596f7a8812b2821e8e385e7c8bbfd1a6f1f6b0f4f99c4cbabd262332b21b83f8a8a7b60fcb103e58b5bb1371275315b4a27e2db2006b1a85b439808a0aa70a7d7087c94cda9cbdcebbcb681984aafce139a47d5973be183b4b8f5aff46a8f77513385fedb2ce26d3bd99e4f87489ea81b0fad9fdcc8e95f03936a15cc1cd81ec3aa8b71320bba872022a200778089514f43e135490dded99d0edbc55a25cf3376e527ea85413b446d0f4ee44ca0bd90940e6f887bee0149b946ed3d34c114e237d5d9d600ec66b30d96d2104a8d89dcd305ddd87cd52ef764f141ea33c259d933748c4be8d2803cee7182a482e2933d8513424ddbdd37724161aca0d48d651286aaff25817bce943075ee70ce49c7771ae3ac09c6c105b102b48ace90e476dca2a5ec3ad2255c129732af16695df75c4a6bf43e6558e082e024d395605fad967943bcc525843dc262168b1a64c2e899fd2037af238cb30704ca496d99c9e20228a9ef0cdc1f5b37f68f8c62efd6419eb7778282cd91a3f0ed6dc871284005e77d1fc3314c928e34d180c73f63c257f02ccbe23c868930695331022a5bb11f1bb84b9a629fedeefb34e4b886ce24c648d9320700b9cf7c6d70c47f3b50d252294583c5ca4b2c82d9701cfb6fe5d462cafbef981644c9cea0ec952a02a44f4bb612967bcc28ea05a5f09938a3f8b63c8d75b44370d09da2c0b1a74765df8183ff62d1df2acff7c0031505d64d256557a2a6ca9e27a81b759e46939fa40dd5b3c65177a8bc39613de0d11d063c14588a711e2679b5dcb5aa1d137a34fe69db5c73dfbdbf7d7206fd0cee9ead1b6ef41608e848b62166a3248b11b5b2d3918ca9ed2ff4c9b9db4bad9beb8ab2122996e3522294b93ea6a1ea060a59c3b884a716cc2833d77e34d1772e4c9fa5dbe6599c4f0f5ffae438fe3bea776a8967ead46a2ef8a95fafe652651b2509b39b740b7f33b50020329d8171a2b32994acf05e9b187c5e30e22c9c3db8460e130684ee7b6e38f223a193358b856cda31c78bbdf326758761ca21fe50efc38f96a1832da09afaf4cbc4d907c4a3b3cb5e92c9c8eab3729d9fc8b10ce110cfff8c94059d12180ed1595a18d0417a4a02430a0f39488f7780a19f130fce833519a4e93296b186cc2e5024926859a1d213073aff6d32bee5ab7262875cf1988e951eb6e0fd19e286220b9a5baa783e6d9b3e82a8d4079cb2e86e379d343755000026801c5803c3d1dbfe8f7ae0fcb050765842f79f7386f70ece8b6402b48239b96f2c157c0461371c713cd7155457531f34063a94ef1592cc251f6875c09e010384ed29d26d674e3058833c995a69e66f774d65570ea8dda40cfd51f8b96732408c838332fc538ffee1fe74cf8c2a260e7f3b4789d6f88dfc24703422695d06331a958ae3ad1ff157c3e8535168a321c5b9f152a34959e695566ab2c802f9886c512db78f10c3e5799d58982e7a51d44e3bdc6658c6579bd39ca4869baab196457128df7203437e1096e568e1afbb185f1b48397d4dc31d47fb780f970d493b0ab700f03cfba772291b43ff2a1ca23fd6fafd3864fc7cb3664cda921bae8d4444e963e80076ae675110165212d37ee89fa43355d01f553a799838f1b8c1cece56b26c9b811192ac70c4aa400e1fc7fc6eb7d80872efe41ff69ae343d52142f5013ba3fa509cd85e48ed8bc38d01d253b3d6157ad2c09c5c18ea33cee93545f49882a0e448a9303c96e3b29f3cffc3c1f6f9102b99fe2486667d16cfebfed8c9cbe96695e3d8e55888e15c6e700ce1c78f9b0469f411a6c85106aa3ab86d8eadd4612efdd2d6fe5906c7f3ec246bb5231c18428b52a78c22165cc9f5d5e7c060e755bfcbe1c6fe4abe7530d91220168cc80dfde5d29878cae0dab8e3b9d0734aae019f76d91847b7e80cd480d33bc114999d80c8daef6e4411f2cd50e13aeca2cb6b", 0xf00) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000940)=ANY=[@ANYBLOB="12015001020000402505a1a44000010203010902640002010070000904000001020d0000052406000105240000000d240f01ff000000fdff08000006241a02000808241c8bbc816c1309058103080004fd000904010000020d00000904010102020d000009058202100008040009050302ff"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x20, 0x80, 0x1c, {0x800, 0x6, 0x0, 0x10, 0x9cea, 0x2d1b, 0x9, 0x7, 0x7fff, 0xc6, 0x4, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.495076445s ago: executing program 2 (id=22): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="ce", 0x1}], 0x1, 0x7800, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) read$FUSE(r1, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x4) syz_fuse_handle_req(r0, &(0x7f0000003800)="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", 0x2000, &(0x7f0000005a40)={&(0x7f0000000180)={0x50, 0x0, 0xffffffff, {0x7, 0x29, 0x101, 0x50000442, 0x2, 0x7ff, 0x8, 0x9, 0x0, 0x0, 0xa2, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x5000000000000, {0x0, 0x3, 0x200, 0x27, 0x8c7, 0x4, {0x2, 0xe22f, 0x1, 0x7, 0x8, 0x2, 0x3, 0x3, 0x2e, 0xa000, 0x2959, r2, r3, 0x0, 0x7ff}}}, 0x0, &(0x7f00000009c0)={0x10, 0x0, 0x6}, &(0x7f0000005800)={0xa0, 0xfffffffffffffff5, 0x3, {{0x5, 0x0, 0x0, 0x3, 0x8000, 0x3, {0x6, 0x823, 0x2, 0x7, 0xc0, 0x5, 0x1, 0x401, 0xffff, 0xc000, 0x9, r2, r3, 0x1, 0x2}}, {0x0, 0x4}}}, 0x0, 0x0}) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r5, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 3.451862545s ago: executing program 0 (id=23): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000022) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x20, 0x40, 0x401, 0x3, {{0x9, 0x4, 0x0, 0x5, 0x24, 0x65, 0x0, 0x12, 0x4, 0x0, @loopback, @empty, {[@generic={0x0, 0xe, "2f3d512d72b1c866c75441ce"}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r0, 0x4}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffe, 0x4000000000000000}, {0xfffffffffffffffc, 0x0, 0x0, 0xffffffffe}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x2, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffc, 0x1002}}, 0xe8) 3.395285675s ago: executing program 4 (id=24): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) inotify_init() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) capget(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000200)={{0x7, 0xc}, {0x1008, 0x1ff}, 0xfffffffa, 0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 3.394606625s ago: executing program 1 (id=25): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x374, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="400d8d"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x2e) 2.381531583s ago: executing program 0 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000300)='bpf_lsm_sem_alloc_security\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat$incfs(r4, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000001db, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r8}, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000006c0)="c6", 0x1, r14) keyctl$search(0xa, r14, &(0x7f00000000c0)='user\x00', 0x0, r14) syz_genetlink_get_family_id$ieee802154(0x0, r13) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, 0x0, 0x4000) 2.310971143s ago: executing program 4 (id=27): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffdb, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 2.243990323s ago: executing program 2 (id=28): socket$inet6(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3f1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) lseek(r2, 0x7, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYRES32=r3], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r4}, 0x18) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) recvmsg(r2, &(0x7f0000000a00)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000680)=""/106, 0x6a}, {&(0x7f0000000780)=""/8, 0x8}, {&(0x7f00000007c0)=""/74, 0x4a}, {&(0x7f0000000840)=""/186, 0xba}], 0x6, &(0x7f0000000980)=""/87, 0x57}, 0x100) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, &(0x7f0000000500)) 1.934599822s ago: executing program 4 (id=29): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7f61000000000007b8af8ff000007020000f8ffffffb7030000083973000000b70400000017000085000000010000009500000000000000000000b26fa307e2ab90e8d43e0deaf4b6c461"], &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2e) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, 0x0, 0x3a}}], 0x1, 0x2000c044) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r6, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) 1.354043002s ago: executing program 0 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x48, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1, 0x1}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, &(0x7f0000000500)={0x20, 0x11, 0xc1, {0xc1, 0x22, "8a3a1184f4c5f21e9fa0285b75f5a09ae3ba9c9466dcad75c3ff5df6f611e7e5dd11bb3e155441456a03abbeda155728adc9a99b18e126097c9a9812dc8fb87ad1cb00ea44301fddf08a216027ed66852ebddeafce087ce3e80090a46bbdb8781132fb642affe104ebce3ab7422c3ae125f816076a5ea1425ff6d164ba8b76f6977caa9e30d6af8da1f39149c6276f5d401d33c4037ef18ca5bae2d81256bca52838f700a3d80f31dc100f8fee4ebd474c5dd20c5b129f732a44725a597462"}}, &(0x7f0000000600)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "43e906b159b044aa869c3c5cd651c024a1b474d59b67a390ed7d5b82fcd11b5c37152541fa534f6d33d0e2adaf3e0b252c4a7d7d877560ddda65daa1ce04c742c537e6bcd0d54d583707f2be691c1825290d2b155542d65081a6d1dc023bb169409a60e98f7010576d4a9d40f0a651785eb544c825accf94eef4dbb29a4792cae0dbeed8bc9f5cf88219c399b1afde2fa19bf4ab9b46c3b03e70501644e94c9d977fec228a1dfa919262c7a3425bef90f352f567e0ef8fe68aecbd988463f4a3a3b7fdba325361d569038706f451c45eb75fd47ada"}}, &(0x7f0000000180)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x1, "e9"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xcea, 0x0, 0x1, {0x22, 0xafa}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000700)={0x20, 0x0, 0xc3, "4641396440c383f73ffb98c726b6a424525c46755b4e71fd29a9b8f9b6afc3cec9ffe9d9631b40bbc06de158873de59a37a25854308814e0e464460ee3819d41f66429c86634cdc149ccadafe25b0bb63d93f2fed015ec0a2b27efaff5a6a6a319597de4f34290e1e829da75f941d348f5926fd095ff482fb5f165451e3eb2670f8d21c8e21e45785c390045e7f5dc09490dafc527394abe84964dd4c333d2f593ba934cc3a239a5de0b34d0e07eb37a44f4af21e714f1a37a48a4b5fe9904e4349860"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x1, 0x89, "54ca653d64227e59d1f53c098fd63cc505fbd91d0f3ba3f2218743272666db4bd36533ab6bd999d8cf98e7057497e75f3502f809209bfd8eb6b79f47fbfa89a12f35a47d0f6d36931571c4e67bd4e0fe3906a514986d86e9d62d7bb241c055a5a3bb3c2d96786696194f88e0bdaa687f6864bf77639d2bb0a3e0f0dcb0e1698e6e3bc18d4123793569"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0xfb}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x4000}, 0x10) 1.108616701s ago: executing program 1 (id=31): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r0 = gettid() r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000006a40)=""/161, 0xa1}], 0x1) tkill(r0, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) move_mount(r1, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x40) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$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") 1.065599441s ago: executing program 2 (id=32): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000010000000000000000000000711235000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fallocate(r0, 0x10, 0xcf7, 0x2c03) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x800452d3, 0x0) 1.019030441s ago: executing program 4 (id=33): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xfe, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @private=0xa010101}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x40}, 0x1, 0x7}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) timerfd_create(0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r6 = eventfd(0x103) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/68, &(0x7f0000000880)=""/72, 0x8080000}) 756.11912ms ago: executing program 1 (id=34): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xfe, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @private=0xa010101}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x40}, 0x1, 0x7}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) timerfd_create(0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x103) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/68, &(0x7f0000000880)=""/72, 0x8080000}) 0s ago: executing program 4 (id=35): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1e383100000000000109022400010000800009040000010300000009210000000122050009058103"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f0000000b00)=[{{&(0x7f0000000640)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x1a, 0x2, 0x1) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) clock_settime(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xb, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000013000100"/20, @ANYRES32=r7, @ANYBLOB="000000000000000005002700000000001c001a8018000a80140007"], 0x44}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x200000, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/344], 0x3, 0x377, &(0x7f00000002c0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r9 = io_uring_setup(0x7fdb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffff, 0x8}) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmmsg(r10, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x101}], 0x1, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(r8) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000350000003508d3"], 0x0, 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. [ 20.611842][ T28] audit: type=1400 audit(1741053203.414:66): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.613292][ T281] cgroup: Unknown subsys name 'net' [ 20.634360][ T28] audit: type=1400 audit(1741053203.414:67): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.661240][ T28] audit: type=1400 audit(1741053203.444:68): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.661383][ T281] cgroup: Unknown subsys name 'devices' [ 20.804060][ T281] cgroup: Unknown subsys name 'hugetlb' [ 20.809476][ T281] cgroup: Unknown subsys name 'rlimit' [ 20.912229][ T28] audit: type=1400 audit(1741053203.714:69): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.935218][ T28] audit: type=1400 audit(1741053203.714:70): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.951584][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.960029][ T28] audit: type=1400 audit(1741053203.724:71): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.991002][ T28] audit: type=1400 audit(1741053203.784:72): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.016395][ T28] audit: type=1400 audit(1741053203.784:73): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.022036][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.041735][ T28] audit: type=1400 audit(1741053203.824:74): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.075484][ T28] audit: type=1400 audit(1741053203.824:75): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.120991][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.127874][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.135161][ T291] device bridge_slave_0 entered promiscuous mode [ 22.147903][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.154771][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.162014][ T291] device bridge_slave_1 entered promiscuous mode [ 22.200186][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.207135][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.214335][ T293] device bridge_slave_0 entered promiscuous mode [ 22.221950][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.229050][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.236473][ T293] device bridge_slave_1 entered promiscuous mode [ 22.329037][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.336006][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.343166][ T292] device bridge_slave_0 entered promiscuous mode [ 22.356830][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.363725][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.370994][ T292] device bridge_slave_1 entered promiscuous mode [ 22.415636][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.422571][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.429745][ T295] device bridge_slave_0 entered promiscuous mode [ 22.438021][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.444957][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.451994][ T295] device bridge_slave_1 entered promiscuous mode [ 22.505063][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.511910][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.519285][ T294] device bridge_slave_0 entered promiscuous mode [ 22.527866][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.534812][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.541842][ T294] device bridge_slave_1 entered promiscuous mode [ 22.585413][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.592256][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.599426][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.606315][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.616668][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.623533][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.630616][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.637435][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.701267][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.708156][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.715253][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.722017][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.759776][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.767015][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.774647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.781982][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.789084][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.796298][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.803543][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.813241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.821208][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.828058][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.851655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.858940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.866273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.874594][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.881415][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.910003][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.918342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.926332][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.933170][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.940447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.948926][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.955772][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.974389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.982372][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.989196][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.996415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.004351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.012868][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.019687][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.026934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.034678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.057225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.065363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.073194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.080898][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.089158][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.096064][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.103680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.111687][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.118441][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.125749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.133975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.155180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.163272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.171028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.179276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.196164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.204811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.213066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.220654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.228752][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.236086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.244767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.253219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.266976][ T291] device veth0_vlan entered promiscuous mode [ 23.278873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.287136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.295535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.303743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.311722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.319249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.326605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.334699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.342729][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.349550][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.356888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.364290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.371477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.379490][ T293] device veth0_vlan entered promiscuous mode [ 23.390287][ T292] device veth0_vlan entered promiscuous mode [ 23.398801][ T291] device veth1_macvtap entered promiscuous mode [ 23.407414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.415662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.423976][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.430799][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.438221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.446013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.453873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.461782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.469800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.477312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.484683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.498185][ T293] device veth1_macvtap entered promiscuous mode [ 23.514148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.522535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.530665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.538682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.546825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.554473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.562071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.569926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.578075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.586463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.594438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.602216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.610359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.618489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.626421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.634247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.641504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.649635][ T295] device veth0_vlan entered promiscuous mode [ 23.662262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.670607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.683241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.691369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.699723][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.707863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.720567][ T292] device veth1_macvtap entered promiscuous mode [ 23.729179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.736842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.744997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.754444][ T295] device veth1_macvtap entered promiscuous mode [ 23.768525][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.776829][ T291] request_module fs-gadgetfs succeeded, but still no fs? [ 23.777320][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.792125][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.800741][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.808997][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.839315][ T316] loop0: detected capacity change from 0 to 512 [ 23.847252][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.859821][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.874575][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.883338][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.891508][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.906900][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.915388][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.923551][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.931751][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.939471][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.947638][ T294] device veth0_vlan entered promiscuous mode [ 23.976902][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.996519][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.193181][ T294] device veth1_macvtap entered promiscuous mode [ 25.112308][ C0] sched: RT throttling activated [ 25.448763][ T339] loop0: detected capacity change from 0 to 1024 [ 25.455869][ T339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.471587][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.482420][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.488557][ T339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.490850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.521274][ T291] EXT4-fs (loop0): unmounting filesystem. [ 25.577317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.609131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.918738][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 26.002858][ T28] audit: type=1400 audit(1741053208.514:127): avc: denied { write } for pid=340 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.022615][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 26.033375][ T60] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.122149][ T60] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.159382][ T28] audit: type=1400 audit(1741053208.514:128): avc: denied { wake_alarm } for pid=340 comm="syz.4.7" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.180183][ T28] audit: type=1400 audit(1741053208.794:129): avc: denied { read write } for pid=350 comm="syz.0.8" name="event2" dev="devtmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.196067][ T60] usb 4-1: config 0 interface 0 has no altsetting 0 [ 26.203964][ T28] audit: type=1400 audit(1741053208.794:130): avc: denied { open } for pid=350 comm="syz.0.8" path="/dev/input/event2" dev="devtmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 26.210329][ T60] usb 4-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 26.242044][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.249911][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.259849][ T60] usb 4-1: config 0 descriptor?? [ 26.369768][ T28] audit: type=1400 audit(1741053209.174:131): avc: denied { read } for pid=367 comm="syz.4.11" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.392255][ T28] audit: type=1400 audit(1741053209.174:132): avc: denied { open } for pid=367 comm="syz.4.11" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.412794][ T368] sch_fq: defrate 0 ignored. [ 26.416384][ T28] audit: type=1400 audit(1741053209.174:133): avc: denied { ioctl } for pid=367 comm="syz.4.11" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.451501][ T28] audit: type=1400 audit(1741053209.174:134): avc: denied { set_context_mgr } for pid=367 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 26.471178][ T28] audit: type=1400 audit(1741053209.174:135): avc: denied { read } for pid=367 comm="syz.4.11" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.509916][ T373] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.527264][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 26.527455][ T28] audit: type=1400 audit(1741053209.174:136): avc: denied { open } for pid=367 comm="syz.4.11" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 26.608761][ T24] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.707646][ T60] sony 0003:054C:0374.0001: unknown main item tag 0x0 [ 26.714305][ T24] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.724047][ T60] sony 0003:054C:0374.0001: unknown main item tag 0x0 [ 26.730583][ T60] sony 0003:054C:0374.0001: unknown main item tag 0x0 [ 26.737353][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 26.744135][ T60] sony 0003:054C:0374.0001: unknown main item tag 0x0 [ 26.750853][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 26.761073][ T60] sony 0003:054C:0374.0001: unknown main item tag 0x0 [ 26.768796][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.836109][ T382] loop4: detected capacity change from 0 to 512 [ 27.623384][ T382] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 27.653108][ T60] sony 0003:054C:0374.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:0374] on usb-dummy_hcd.3-1/input0 [ 27.717423][ T24] usb 2-1: config 0 descriptor?? [ 27.769961][ T382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec119, mo2=0002] [ 27.771012][ T375] netlink: 'syz.2.13': attribute type 4 has an invalid length. [ 27.777851][ T382] System zones: 1-12 [ 27.785207][ T375] netlink: 'syz.2.13': attribute type 5 has an invalid length. [ 27.796264][ T375] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.13'. [ 27.818051][ T60] sony 0003:054C:0374.0001: failed to claim input [ 27.824932][ T382] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.12: corrupted in-inode xattr [ 27.836833][ T382] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.12: couldn't read orphan inode 15 (err -117) [ 27.848549][ T382] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.861849][ T60] usb 4-1: USB disconnect, device number 2 [ 28.067199][ T295] EXT4-fs (loop4): unmounting filesystem. [ 28.263665][ T24] sony 0003:054C:0374.0002: unknown main item tag 0x0 [ 28.274789][ T24] sony 0003:054C:0374.0002: unknown main item tag 0x0 [ 28.361282][ T24] sony 0003:054C:0374.0002: unknown main item tag 0x0 [ 28.400343][ T24] sony 0003:054C:0374.0002: unknown main item tag 0x0 [ 28.452836][ T24] sony 0003:054C:0374.0002: unknown main item tag 0x0 [ 28.467155][ T24] sony 0003:054C:0374.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:0374] on usb-dummy_hcd.1-1/input0 [ 28.479243][ T24] sony 0003:054C:0374.0002: failed to claim input [ 28.552760][ T24] usb 2-1: USB disconnect, device number 2 [ 28.605335][ T410] loop3: detected capacity change from 0 to 512 [ 28.612235][ T410] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.626282][ T410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 28.653635][ T410] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.21: iget: bad extended attribute block 512 [ 28.666293][ T410] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.21: couldn't read orphan inode 15 (err -117) [ 28.678057][ T410] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.972356][ T19] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.053910][ T414] loop2: detected capacity change from 0 to 2048 [ 29.109488][ T414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.148913][ T428] loop4: detected capacity change from 0 to 512 [ 29.155919][ T428] ======================================================= [ 29.155919][ T428] WARNING: The mand mount option has been deprecated and [ 29.155919][ T428] and is ignored by this kernel. Remove the mand [ 29.155919][ T428] option from the mount to silence this warning. [ 29.155919][ T428] ======================================================= [ 29.214444][ T428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.226732][ T19] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 22527, setting to 64 [ 29.294652][ T428] EXT4-fs (loop4): orphan cleanup on readonly fs [ 29.304936][ T428] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.24: bg 0: block 248: padding at end of block bitmap is not set [ 29.320497][ T428] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.24: Failed to acquire dquot type 1 [ 29.334541][ T428] EXT4-fs (loop4): 1 truncate cleaned up [ 29.342901][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.361008][ T428] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.441584][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.509601][ T414] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.526608][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.535978][ T19] usb 4-1: Product: syz [ 29.540131][ T19] usb 4-1: Manufacturer: syz [ 29.549513][ T414] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 29.562237][ T19] usb 4-1: SerialNumber: syz [ 29.577399][ T414] EXT4-fs (loop2): This should not happen!! Data will be lost [ 29.577399][ T414] [ 29.605871][ T417] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 29.618674][ T414] EXT4-fs (loop2): Total free blocks count 0 [ 29.624885][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 29.633513][ T414] EXT4-fs (loop2): Free/Dirty block details [ 29.640358][ T6] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.652683][ T417] EXT4-fs (loop2): This should not happen!! Data will be lost [ 29.652683][ T417] [ 29.662447][ T6] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.677205][ T414] EXT4-fs (loop2): free_blocks=2415919504 [ 29.684224][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 29.695641][ T431] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 29.708352][ T6] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 29.719433][ T417] EXT4-fs (loop2): Total free blocks count 0 [ 29.727123][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.774769][ T6] usb 2-1: config 0 descriptor?? [ 29.808007][ T410] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 30.055543][ T428] syz.4.24 (428) used greatest stack depth: 20104 bytes left [ 30.118930][ T295] EXT4-fs (loop4): unmounting filesystem. [ 30.453961][ T6] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 30.460596][ T6] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 30.486629][ T443] loop4: detected capacity change from 0 to 512 [ 30.514440][ T6] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 30.521131][ T6] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 30.528166][ T6] sony 0003:054C:0374.0003: unknown main item tag 0x0 [ 30.536320][ T6] sony 0003:054C:0374.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:0374] on usb-dummy_hcd.1-1/input0 [ 30.550084][ T6] sony 0003:054C:0374.0003: failed to claim input [ 30.563057][ T443] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.572021][ T443] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.635477][ T447] loop2: detected capacity change from 0 to 16 [ 30.648638][ T447] erofs: (device loop2): mounted with root inode @ nid 36. [ 30.675968][ T6] usb 2-1: USB disconnect, device number 3 [ 30.785890][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 30.971117][ T410] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 31.180109][ T19] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 31.186491][ T19] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 31.193788][ T19] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 31.352378][ T458] loop2: detected capacity change from 0 to 1024 [ 31.362977][ T458] EXT4-fs: Ignoring removed oldalloc option [ 31.368715][ T458] EXT4-fs: Ignoring removed bh option [ 31.380195][ T451] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.385873][ T456] loop1: detected capacity change from 0 to 2048 [ 31.391811][ T458] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.405376][ T295] EXT4-fs (loop4): unmounting filesystem. [ 31.419411][ T458] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.420016][ T456] Alternate GPT is invalid, using primary GPT. [ 31.436572][ T456] loop1: p1 p2 p3 [ 31.437927][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 31.437941][ T28] audit: type=1400 audit(1741053214.244:170): avc: denied { map } for pid=409 comm="syz.3.21" path="socket:[15890]" dev="sockfs" ino=15890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 31.448579][ T103] Alternate GPT is invalid, using primary GPT. [ 31.475958][ T19] cdc_ncm 4-1:1.0: setting tx_max = 28 [ 31.483439][ T19] cdc_ncm 4-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 31.494787][ T103] loop1: p1 p2 p3 [ 31.507357][ T19] usb 4-1: USB disconnect, device number 3 [ 31.574735][ T19] cdc_ncm 4-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 31.595062][ T28] audit: type=1400 audit(1741053214.284:171): avc: denied { append } for pid=457 comm="syz.2.32" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.617265][ T451] usb 1-1: Using ep0 maxpacket: 32 [ 31.622724][ T28] audit: type=1400 audit(1741053214.384:172): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.630107][ T451] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.657059][ T451] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.666735][ T451] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 32.390844][ T464] udevd[464]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 32.401280][ T334] udevd[334]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 32.406975][ T317] udevd[317]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 32.420163][ T451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.421234][ T423] ================================================================== [ 32.436167][ T423] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 32.443801][ T423] Read of size 8 at addr ffff888116f64cf0 by task kworker/0:3/423 [ 32.451577][ T423] [ 32.456507][ T423] CPU: 0 PID: 423 Comm: kworker/0:3 Not tainted 6.1.128-syzkaller-00041-g471a10d3af3b #0 [ 32.466318][ T423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 32.476217][ T423] Workqueue: events destroy_super_work [ 32.481542][ T423] Call Trace: [ 32.484637][ T423] [ 32.487445][ T423] dump_stack_lvl+0x151/0x1b7 [ 32.491931][ T423] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 32.497223][ T423] ? _printk+0xd1/0x111 [ 32.501221][ T423] ? __virt_addr_valid+0x242/0x2f0 [ 32.506164][ T423] print_report+0x158/0x4e0 [ 32.510609][ T423] ? __virt_addr_valid+0x242/0x2f0 [ 32.515561][ T423] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 32.521632][ T423] ? __list_del_entry_valid+0xa6/0x130 [ 32.526926][ T423] kasan_report+0x13c/0x170 [ 32.531265][ T423] ? __list_del_entry_valid+0xa6/0x130 [ 32.536558][ T423] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 32.542203][ T423] __asan_report_load8_noabort+0x14/0x20 [ 32.547667][ T423] __list_del_entry_valid+0xa6/0x130 [ 32.552780][ T423] process_one_work+0x4d7/0xcb0 [ 32.557469][ T423] worker_thread+0xa60/0x1260 [ 32.561983][ T423] kthread+0x26d/0x300 [ 32.565883][ T423] ? worker_clr_flags+0x1a0/0x1a0 [ 32.570745][ T423] ? kthread_blkcg+0xd0/0xd0 [ 32.575174][ T423] ret_from_fork+0x1f/0x30 [ 32.579435][ T423] [ 32.582291][ T423] [ 32.584463][ T423] Allocated by task 19: [ 32.588456][ T423] kasan_set_track+0x4b/0x70 [ 32.592891][ T423] kasan_save_alloc_info+0x1f/0x30 [ 32.597826][ T423] __kasan_kmalloc+0x9c/0xb0 [ 32.602394][ T423] __kmalloc_node+0xb4/0x1e0 [ 32.606894][ T423] kvmalloc_node+0x221/0x640 [ 32.611310][ T423] alloc_netdev_mqs+0x8c/0xf90 [ 32.615927][ T423] alloc_etherdev_mqs+0x36/0x40 [ 32.620592][ T423] usbnet_probe+0x213/0x28a0 [ 32.625018][ T423] usb_probe_interface+0x5b6/0xa90 [ 32.629965][ T423] really_probe+0x2b8/0x920 [ 32.634308][ T423] __driver_probe_device+0x1a0/0x310 [ 32.639426][ T423] driver_probe_device+0x54/0x3d0 [ 32.644287][ T423] __device_attach_driver+0x2e3/0x490 [ 32.649497][ T423] bus_for_each_drv+0x183/0x200 [ 32.654180][ T423] __device_attach+0x312/0x510 [ 32.658783][ T423] device_initial_probe+0x1a/0x20 [ 32.663729][ T423] bus_probe_device+0xbe/0x1e0 [ 32.668330][ T423] device_add+0xb60/0xf10 [ 32.672495][ T423] usb_set_configuration+0x190f/0x1e80 [ 32.677789][ T423] usb_generic_driver_probe+0x8b/0x150 [ 32.683083][ T423] usb_probe_device+0x144/0x260 [ 32.687771][ T423] really_probe+0x2b8/0x920 [ 32.692118][ T423] __driver_probe_device+0x1a0/0x310 [ 32.697234][ T423] driver_probe_device+0x54/0x3d0 [ 32.702090][ T423] __device_attach_driver+0x2e3/0x490 [ 32.707361][ T423] bus_for_each_drv+0x183/0x200 [ 32.711989][ T423] __device_attach+0x312/0x510 [ 32.716586][ T423] device_initial_probe+0x1a/0x20 [ 32.721458][ T423] bus_probe_device+0xbe/0x1e0 [ 32.726063][ T423] device_add+0xb60/0xf10 [ 32.730214][ T423] usb_new_device+0xf2f/0x1820 [ 32.734818][ T423] hub_event+0x2db1/0x4830 [ 32.739067][ T423] process_one_work+0x73d/0xcb0 [ 32.743749][ T423] worker_thread+0xa60/0x1260 [ 32.748269][ T423] kthread+0x26d/0x300 [ 32.752179][ T423] ret_from_fork+0x1f/0x30 [ 32.756428][ T423] [ 32.758597][ T423] Freed by task 19: [ 32.762242][ T423] kasan_set_track+0x4b/0x70 [ 32.766666][ T423] kasan_save_free_info+0x2b/0x40 [ 32.771526][ T423] ____kasan_slab_free+0x131/0x180 [ 32.776471][ T423] __kasan_slab_free+0x11/0x20 [ 32.781072][ T423] __kmem_cache_free+0x21d/0x410 [ 32.785843][ T423] kfree+0x7a/0xf0 [ 32.789402][ T423] kvfree+0x35/0x40 [ 32.793047][ T423] netdev_freemem+0x3f/0x60 [ 32.797388][ T423] netdev_release+0x7f/0xb0 [ 32.801727][ T423] device_release+0x95/0x1c0 [ 32.806151][ T423] kobject_put+0x178/0x260 [ 32.810405][ T423] put_device+0x1f/0x30 [ 32.814398][ T423] free_netdev+0x393/0x480 [ 32.818654][ T423] usbnet_disconnect+0x25f/0x3b0 [ 32.823425][ T423] usb_unbind_interface+0x1fa/0x8c0 [ 32.828461][ T423] device_release_driver_internal+0x53e/0x870 [ 32.834362][ T423] device_release_driver+0x19/0x20 [ 32.839308][ T423] bus_remove_device+0x2fa/0x360 [ 32.844168][ T423] device_del+0x663/0xe90 [ 32.848353][ T423] usb_disable_device+0x380/0x720 [ 32.853198][ T423] usb_disconnect+0x32a/0x890 [ 32.857707][ T423] hub_event+0x1ed8/0x4830 [ 32.861968][ T423] process_one_work+0x73d/0xcb0 [ 32.866658][ T423] worker_thread+0xd71/0x1260 [ 32.871172][ T423] kthread+0x26d/0x300 [ 32.875068][ T423] ret_from_fork+0x1f/0x30 [ 32.879346][ T423] [ 32.881492][ T423] Last potentially related work creation: [ 32.887061][ T423] kasan_save_stack+0x3b/0x60 [ 32.891561][ T423] __kasan_record_aux_stack+0xb4/0xc0 [ 32.896771][ T423] kasan_record_aux_stack_noalloc+0xb/0x10 [ 32.902414][ T423] insert_work+0x56/0x310 [ 32.906572][ T423] __queue_work+0x9b6/0xd70 [ 32.910910][ T423] queue_work_on+0x105/0x170 [ 32.915346][ T423] usbnet_link_change+0x182/0x1a0 [ 32.920199][ T423] usbnet_probe+0x1e1e/0x28a0 [ 32.924714][ T423] usb_probe_interface+0x5b6/0xa90 [ 32.929659][ T423] really_probe+0x2b8/0x920 [ 32.934129][ T423] __driver_probe_device+0x1a0/0x310 [ 32.939226][ T423] driver_probe_device+0x54/0x3d0 [ 32.944083][ T423] __device_attach_driver+0x2e3/0x490 [ 32.949291][ T423] bus_for_each_drv+0x183/0x200 [ 32.953974][ T423] __device_attach+0x312/0x510 [ 32.958577][ T423] device_initial_probe+0x1a/0x20 [ 32.963436][ T423] bus_probe_device+0xbe/0x1e0 [ 32.968034][ T423] device_add+0xb60/0xf10 [ 32.972205][ T423] usb_set_configuration+0x190f/0x1e80 [ 32.977504][ T423] usb_generic_driver_probe+0x8b/0x150 [ 32.982814][ T423] usb_probe_device+0x144/0x260 [ 32.987486][ T423] really_probe+0x2b8/0x920 [ 32.991938][ T423] __driver_probe_device+0x1a0/0x310 [ 32.997060][ T423] driver_probe_device+0x54/0x3d0 [ 33.002044][ T423] __device_attach_driver+0x2e3/0x490 [ 33.007331][ T423] bus_for_each_drv+0x183/0x200 [ 33.012042][ T423] __device_attach+0x312/0x510 [ 33.016618][ T423] device_initial_probe+0x1a/0x20 [ 33.021483][ T423] bus_probe_device+0xbe/0x1e0 [ 33.026077][ T423] device_add+0xb60/0xf10 [ 33.030239][ T423] usb_new_device+0xf2f/0x1820 [ 33.034858][ T423] hub_event+0x2db1/0x4830 [ 33.039131][ T423] process_one_work+0x73d/0xcb0 [ 33.043786][ T423] worker_thread+0xa60/0x1260 [ 33.048304][ T423] kthread+0x26d/0x300 [ 33.052211][ T423] ret_from_fork+0x1f/0x30 [ 33.056941][ T423] [ 33.059113][ T423] The buggy address belongs to the object at ffff888116f64000 [ 33.059113][ T423] which belongs to the cache kmalloc-4k of size 4096 [ 33.073016][ T423] The buggy address is located 3312 bytes inside of [ 33.073016][ T423] 4096-byte region [ffff888116f64000, ffff888116f65000) [ 33.086525][ T423] [ 33.088697][ T423] The buggy address belongs to the physical page: [ 33.094948][ T423] page:ffffea00045bd800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116f60 [ 33.105571][ T423] head:ffffea00045bd800 order:3 compound_mapcount:0 compound_pincount:0 [ 33.113803][ T423] flags: 0x4000000000010200(slab|head|zone=1) [ 33.119853][ T423] raw: 4000000000010200 ffffea00045bd200 dead000000000002 ffff888100043380 [ 33.128271][ T423] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 33.136669][ T423] page dumped because: kasan: bad access detected [ 33.142940][ T423] page_owner tracks the page as allocated [ 33.148475][ T423] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 113, tgid 113 (udevd), ts 4869194841, free_ts 0 [ 33.167924][ T423] post_alloc_hook+0x213/0x220 [ 33.172533][ T423] prep_new_page+0x1b/0x110 [ 33.176851][ T423] get_page_from_freelist+0x3a98/0x3b10 [ 33.182271][ T423] __alloc_pages+0x234/0x610 [ 33.186662][ T423] alloc_slab_page+0x6c/0xf0 [ 33.191086][ T423] new_slab+0x90/0x3e0 [ 33.194990][ T423] ___slab_alloc+0x6f9/0xb80 [ 33.199418][ T423] __slab_alloc+0x5d/0xa0 [ 33.203582][ T423] __kmem_cache_alloc_node+0x207/0x2a0 [ 33.208879][ T423] __kmalloc_node+0xa3/0x1e0 [ 33.213304][ T423] kvmalloc_node+0x221/0x640 [ 33.217729][ T423] seq_read_iter+0x1ff/0xd00 [ 33.222156][ T423] kernfs_fop_read_iter+0x145/0x470 [ 33.227190][ T423] vfs_read+0x801/0xae0 [ 33.231183][ T423] ksys_read+0x199/0x2c0 [ 33.235264][ T423] __x64_sys_read+0x7b/0x90 [ 33.239607][ T423] page_owner free stack trace missing [ 33.244809][ T423] [ 33.246979][ T423] Memory state around the buggy address: [ 33.252452][ T423] ffff888116f64b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.260348][ T423] ffff888116f64c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.268248][ T423] >ffff888116f64c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.276143][ T423] ^ [ 33.283701][ T423] ffff888116f64d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.291604][ T423] ffff888116f64d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.299498][ T423] ================================================================== [ 33.307393][ T423] Disabling lock debugging due to kernel taint [ 33.320549][ T293] EXT4-fs (loop3): unmounting filesystem. [ 33.327346][ T451] hub 1-1:4.0: USB hub found [ 33.363383][ T28] audit: type=1400 audit(1741053216.174:173): avc: denied { append } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.393433][ T294] EXT4-fs (loop2): unmounting filesystem. [ 33.434535][ T28] audit: type=1400 audit(1741053216.234:174): avc: denied { open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.512667][ T60] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 33.579318][ T28] audit: type=1400 audit(1741053216.234:175): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.601860][ T28] audit: type=1400 audit(1741053216.354:176): avc: denied { setopt } for pid=452 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.644060][ T451] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 33.803436][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.814449][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.824006][ T60] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 33.832846][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.841727][ T60] usb 5-1: config 0 descriptor?? [ 33.992607][ T495] usb 1-1: USB disconnect, device number 2 [ 34.048383][ T28] audit: type=1400 audit(1741053216.854:177): avc: denied { create } for pid=477 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.067558][ T28] audit: type=1400 audit(1741053216.854:178): avc: denied { write } for pid=477 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.251523][ T28] audit: type=1400 audit(1741053217.054:179): avc: denied { create } for pid=477 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 34.283534][ T478] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 34.301324][ T478] loop4: detected capacity change from 0 to 256 [ 34.312209][ T478] FAT-fs (loop4): Directory bread(block 64) failed [ 34.319186][ T478] FAT-fs (loop4): Directory bread(block 65) failed [ 34.325613][ T478] FAT-fs (loop4): Directory bread(block 66) failed [ 34.331867][ T478] FAT-fs (loop4): Directory bread(block 67) failed [ 34.338434][ T478] FAT-fs (loop4): Directory bread(block 68) failed [ 34.344822][ T478] FAT-fs (loop4): Directory bread(block 69) failed [ 34.351189][ T478] FAT-fs (loop4): Directory bread(block 70) failed [ 34.357489][ T478] FAT-fs (loop4): Directory bread(block 71) failed [ 34.363871][ T478] FAT-fs (loop4): Directory bread(block 72) failed [ 34.370164][ T478] FAT-fs (loop4): Directory bread(block 73) failed [ 34.502985][ T478] syz.4.35: attempt to access beyond end of device [ 34.502985][ T478] loop4: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 34.516746][ T478] syz.4.35: attempt to access beyond end of device [ 34.516746][ T478] loop4: rw=2049, sector=1288, nr_sectors = 544 limit=256 [ 34.539316][ T478] syz.4.35: attempt to access beyond end of device [ 34.539316][ T478] loop4: rw=2049, sector=1864, nr_sectors = 14784 limit=256 [ 34.608122][ T60] ryos 0003:1E7D:3138.0004: item fetching failed at offset 2/5 [ 34.615634][ T60] ryos 0003:1E7D:3138.0004: parse failed [ 34.621067][ T60] ryos: probe of 0003:1E7D:3138.0004 failed with error -22 [ 35.312722][ T19] usb 5-1: USB disconnect, device number 2 [ 35.325995][ T318] kworker/u4:4: attempt to access beyond end of device [ 35.325995][ T318] loop4: rw=1, sector=16648, nr_sectors = 17152 limit=256