last executing test programs: 31.551058614s ago: executing program 0 (id=149): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000000)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc9}}}, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x1, 0x2, 0x4, 0x0, 0xfffffffffffffff4, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0x8, 0x3, 0xb, 0xfffffffffffffff8, 0xffffffffffffffff}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="74000000000201040000000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000080180001"], 0x74}}, 0x800) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.539155534s ago: executing program 0 (id=152): getxattr(0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x32840810}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES16=r4, @ANYBLOB="000326bd7000fcdbdf25310000000c009900070000003c000000080001000200000008005200", @ANYRES32=r2, @ANYBLOB="0c009900a24400002f000000080001007900000008000100240000000c009900ffff00004a0000000800db00c74a95b2db40cdeec04fbdea525b0fedc117f9655ce5f97902a875ee46c8e5d15dbbd914f584596f2ed64a7a8f20eb52c3cd4e570e6ff05c", @ANYRES32=r4, @ANYBLOB="0c009900070000006d000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4008080) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x28, 0x2, 0x28, &(0x7f0000000040)) (async) setns(r1, 0x24020000) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 30.186054045s ago: executing program 0 (id=153): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x9d) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xfffffeff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 29.878098223s ago: executing program 0 (id=156): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x10}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r3 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x7, &(0x7f0000000300)={0x0, 0x1, 0x6c7, 0x1000, r3}) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000340)=0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xeda7e077f973c3aa, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000280)={'veth0\x00', {0x2, 0x0, @initdev}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r4, @ANYRESHEX=r2, @ANYBLOB="080f49588e5b64c529aaef0ac3f6fd254ab213cbffa711d25504e16ec51298ad059c9220f26ea43b8849dc8a27c6091682c42d62dbe9e8f6b94b1f5b5c539c94ac5ce12532183af9f27b17bf15cba0c142d1a79e129ec56aebb8316a1b47d3833638efa88fcadf043e00b7d063259e7cdaea15744fb6f7f7d62d88d8ae835d1adff9cbf5ad4b56927a4e540e1889632e3a4f7196386df67fdfb62791e07a7ddb103e4a5d683b3cf9814d0292902c2e595ad279aee89a85115e31a947c86158f77ba1cf9b0c7552882d776897181a77cde2c3a92304da490e6458fbee6f7c7e5e2b9bea53dc9854fa302e21818426e6532702a828f2"], 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, &(0x7f00000003c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @in_dx={0x69, 0x20, {0xaeb5, 0x4}}], 0x50}) fstat(0xffffffffffffffff, &(0x7f0000000100)) 28.841849035s ago: executing program 0 (id=162): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="8fdcede3fb1b75332266f1276936c5579e9d78dd02dcfd43256e3051a1017cabf9bcc3593c93b8a3e59175b2f197fc8647aec6bed7088573d81be3a3651caa4bf264f3df31c9dc41ff3a1ae7ac79ddf7ac97f3b86dbcc6b1c4433d521900ab8eb6515857d75f8da721c455ebd98e6a3443ef7ce5782fda70cba2cf71a9e4feb55084313fe698a5da0ddd92b6991b5da391ccc5dbb107b5bbcb0916a4292b11c89da324e2a6ddbc1af94fe856fb84bb0b52d63441bb52c9e7823847c0ae783cc0618cb9c584e5", 0xc6}], 0x1, 0xe, 0xd9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x1400, &(0x7f00000003c0)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) inotify_init() socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000280)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000dc0)="bbff", 0x2}], 0x1}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 28.596712906s ago: executing program 0 (id=164): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r1, &(0x7f0000004800)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x7, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0x20}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) syz_usb_control_io$uac1(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) syz_usb_control_io$uac1(r4, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000180)=@id={0x1e, 0x3, 0x4, {0x4e22}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000200)=[0x7, 0x0, 0x2, 0xe35a, 0x7, 0x0, 0x0, 0xfffff000]) bind$tipc(r0, 0x0, 0x0) close(r0) 27.771258349s ago: executing program 32 (id=164): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r1, &(0x7f0000004800)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x7, 0x208, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x782, &(0x7f0000000880)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0x20}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000021) syz_usb_control_io$uac1(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) syz_usb_control_io$uac1(r4, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000180)=@id={0x1e, 0x3, 0x4, {0x4e22}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000200)=[0x7, 0x0, 0x2, 0xe35a, 0x7, 0x0, 0x0, 0xfffff000]) bind$tipc(r0, 0x0, 0x0) close(r0) 17.256742101s ago: executing program 4 (id=235): r0 = socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000017"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) syz_clone3(&(0x7f0000000540)={0x4000, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000002c0), {0x17}, &(0x7f0000000380)=""/220, 0xdc, &(0x7f0000000480)=""/170, &(0x7f0000000300)}, 0x58) syz_emit_ethernet(0x2b, &(0x7f0000000600)={@local, @remote, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@arp={0x806, @generic={0x320, 0xdada, 0x6, 0x5, 0x2, @broadcast, "f328a37485"}}}}, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017ddca82918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 17.048654419s ago: executing program 4 (id=237): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00V\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000d00001400000000f7ffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r2}, &(0x7f0000000b40), &(0x7f0000000b80)=r5}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd39d3645f1a1f7ca, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000300)='tlb_flush\x00', r7}, 0x18) mremap(&(0x7f0000a0a000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000676000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r8 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000005c0)=r0, 0x12) syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}, 0xfffffff8}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x3}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r13, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 16.506518728s ago: executing program 4 (id=244): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x78f, &(0x7f0000001940)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de"], 0xa, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZHOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZndk1uyayWXH382n24Xl+33meJxmySZEnH74823+Qx6OnX/wSWZZEbxzjOExiFL1ofBUnjL8JAOD/7LAo4vdiYZ1cEhHZ5pYFAGzQav//+23zp0tZFgCwQffffe/tnd3du+9kkcW92dcHk/KTffl3Mb7zKD6OaTyM12IYRxHV+4T6g3/ZvlcUxbyfl0ZxazY/mJTJ2QfP6uvv/BZR5bdjGKPjWPVuo8q/tXt3u4rng05+Xq7j+Xr+cZm/E8N48Th8In9nkc+7+Zik8eornfXfjmH8/FF8EtN4UC2izX+5nedvFt/+8fn75fLKfDI/mAyqulaxdZnPCwAAAAAAAAAAAAAAAAAAAAAAV9vtvDl8J78Zt2ZlV33+ztZRWtfUJaM2VY4vWknT1TkfqDQv4vvOkYJ5URe25/v046V+92BBAAAAAAAAAAAAAAAAAAAAuL6efPrZ/t50+vDxhTSa0wD6EfHn/Yh/e51xp+dmnF88qOfcm057dfNEzbO02xNbTU0Sce4yyk1c0MPyT43nTq+5afzwY7nBdS6YdXpeX77BG5vfV3N37e8ly+caRNOT1TfJd2lEW5PGinOlZw0Vsc7tly4dGq699/SFqjE/s6Y5B+Os67zx62K87klO7yKtHtWls9+oG534qXtjpec9skX8768VSXVax2BDr0QAAAAAAAAAAAAAAAAAAED77d8lg0/PjfYKXwUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ipof/9/jca8Dq9QnMbjJ//xFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgG/goAAP///CFRHg==") openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x8084) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f00000002c0)="c656ae7327c4f0a440da9470f5c95d035ac8891652f13808c7c5e1c8", &(0x7f0000000480)=""/248}, 0x20) write$nbd(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="6744664eb163df987fa298000000000d5fe10bed55484536b2141b19b54fc3bf2b4a"], 0x10) 15.623341676s ago: executing program 4 (id=251): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa048c1, &(0x7f0000000340)={[{@fat=@quiet}, {@shortname_winnt}, {@rodir}, {@fat=@showexec}, {@shortname_mixed}, {@shortname_winnt}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x2}}, {@fat=@tz_utc}, {@uni_xlate}, {@uni_xlateno}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000a00)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000c00b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 15.492876677s ago: executing program 4 (id=252): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000640), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x0, 0x7, 0x8, 0x652, 0x7, 0x8000009657, 0x1, 0x6, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x80003, 0xf64d}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='pmap_register\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x204012, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000dc0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000140012800900010076657468000000000400008008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x3, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r7 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f00002e0000/0x400000)=nil) r8 = syz_kvm_add_vcpu$x86(r7, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d00, 0x0, 0x4}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 15.373857988s ago: executing program 4 (id=253): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f0000000280)="0f", 0x1, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0xe0, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) shutdown(r3, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x28, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, r7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x24, 0x2c, 0xc33, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {0xfff2, 0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c804}, 0x40080d0) 15.33961807s ago: executing program 33 (id=253): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$packet(r1, &(0x7f0000000280)="0f", 0x1, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x2, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x108, 0x1f0, 0x0, 0x108, 0xe0, 0xe0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) shutdown(r3, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x28, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0xe, &(0x7f0000003540)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, r7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@delchain={0x24, 0x2c, 0xc33, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {0xfff2, 0xffff}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c804}, 0x40080d0) 1.996240993s ago: executing program 6 (id=442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) 1.989348864s ago: executing program 6 (id=443): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0xc550, 0x40000000000002, 0x10, 0xb, 0x5, 0x1}) 1.770344983s ago: executing program 1 (id=450): syz_usb_connect(0x2, 0x24, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x190) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x700, 0x7, 0x8, 0x8}}) 1.770034023s ago: executing program 6 (id=451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f0000000500)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xe64, 0x5, 0x50, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000852}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd8}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4, 0x0, 0x7ec4}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x7, 0x7ffc0001}]}) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.746884965s ago: executing program 2 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7e6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) 1.669941362s ago: executing program 2 (id=457): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) stat(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000003c0)) mount$9p_rdma(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='tran3=rdma,port=0x0000000000004e23,access=', @ANYRESDEC=r0, @ANYBLOB=',rq=0x0000000000000009,timeout=0x0000000000000007,func=FIRMWARE_CHECK,\x00']) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) symlinkat(&(0x7f0000000400)='./bus\x00', r2, &(0x7f0000000640)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") 1.650425044s ago: executing program 3 (id=458): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$TIOCSSOFTCAR(r0, 0x89f2, &(0x7f0000000080)=0x59b) 1.639609935s ago: executing program 3 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 1.47005372s ago: executing program 3 (id=460): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@resuid}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}, {@errors_continue}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 1.181976786s ago: executing program 1 (id=463): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) open$dir(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0, 0x4) 1.140664379s ago: executing program 1 (id=464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x47}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 1.032249378s ago: executing program 1 (id=465): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 958.295305ms ago: executing program 1 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 958.063005ms ago: executing program 6 (id=467): open(0x0, 0x0, 0x0) mlock2(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x0) flock(0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0xb0024000) 869.477433ms ago: executing program 5 (id=468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000700000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd7e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r1, 0x0, 0x3}, 0x18) get_robust_list(0x0, 0x0, 0x0) 824.221957ms ago: executing program 6 (id=469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r1, &(0x7f00000000c0)=@known='system.sockprotoname\x00', 0x0, 0x0) 678.351ms ago: executing program 5 (id=470): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3700000000000000bfba00000000f5ff00000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x28}}, 0x8000) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000500)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x33}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYRES64], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000880)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_tgsigqueueinfo(0x0, 0x0, 0x2b, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2080000, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) 677.93158ms ago: executing program 6 (id=471): openat$hwrng(0xffffffffffffff9c, 0x0, 0x80800, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 653.711002ms ago: executing program 5 (id=472): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4890) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 608.848217ms ago: executing program 2 (id=473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) 462.163409ms ago: executing program 5 (id=474): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@orlov}, {@test_dummy_encryption_v1}, {@delalloc}, {@delalloc}, {@commit={'commit', 0x3d, 0xffffffffffffffff}}, {@noblock_validity}, {@data_err_ignore}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x482, &(0x7f0000002700)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r2, 0x400, 0x0) 372.766637ms ago: executing program 2 (id=475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='rpm_return_int\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 254.216138ms ago: executing program 2 (id=476): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000600000008000000", @ANYRES32, @ANYBLOB="0000001c93"], 0x50) 154.379436ms ago: executing program 3 (id=477): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448df, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 101.998841ms ago: executing program 3 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), 0x0}, 0x20) 82.980203ms ago: executing program 5 (id=479): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nfsfs\x00') getdents(r0, 0x0, 0x0) 18.398049ms ago: executing program 3 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r2, 0x400, 0x0) close(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 18.235699ms ago: executing program 5 (id=481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001630400030000000100050000000c00018008000100", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 17.870849ms ago: executing program 1 (id=482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x5, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 0s ago: executing program 2 (id=483): r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0xc0a81, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, 0x0, 0x8080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x6, 0x8012, r1, 0x0) kernel console output (not intermixed with test programs): 5][ T285] device bridge_slave_0 entered promiscuous mode [ 27.442988][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.450037][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.457530][ T285] device bridge_slave_1 entered promiscuous mode [ 27.472951][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.480019][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.487367][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.494421][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.564132][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.571220][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.578496][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.585548][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.645776][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.652886][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.660166][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.667248][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.697400][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.706052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.715052][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.722795][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.730000][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.738045][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.745250][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.753371][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.760792][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.792570][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.800839][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.807952][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.815576][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.824087][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.832405][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.839447][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.846869][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.855055][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.863314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.891731][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.900194][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.908598][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.916423][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.932398][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.940362][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.948652][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.955703][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.963194][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.971997][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.979041][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.988403][ T281] device veth0_vlan entered promiscuous mode [ 28.006762][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.015325][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.023633][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.031720][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.040540][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.048229][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.057180][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.064795][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.074000][ T282] device veth0_vlan entered promiscuous mode [ 28.082595][ T281] device veth1_macvtap entered promiscuous mode [ 28.090038][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.098568][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.106919][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.114885][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.123168][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.134529][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.143019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.154888][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.163627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.182046][ T282] device veth1_macvtap entered promiscuous mode [ 28.192434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.200106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.207795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.215401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.224038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.233416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.241857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.250038][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.257124][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.274422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.282116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.290403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.298691][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.305740][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.314287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.322726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.330856][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.337930][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.345321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.353999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.362388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.370554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.379001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.387488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.396231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.406471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.414986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.423110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.431620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.442909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.451626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.459993][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.467066][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.483640][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 28.497216][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.506020][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.514578][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.522805][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.531448][ T283] device veth0_vlan entered promiscuous mode [ 28.547163][ T285] device veth0_vlan entered promiscuous mode [ 28.566478][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.577195][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.584902][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.592653][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.600735][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.608981][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.617192][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.625177][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.633605][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.642099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.650254][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.667181][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.675786][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.688601][ T283] device veth1_macvtap entered promiscuous mode [ 28.696208][ T339] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 28.717253][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.725704][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.734374][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.748034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.757174][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.766029][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.774242][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.783658][ T284] device veth0_vlan entered promiscuous mode [ 28.794594][ T285] device veth1_macvtap entered promiscuous mode [ 28.802102][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.822049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.830384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.848168][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.861614][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.872465][ T61] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.882280][ T284] device veth1_macvtap entered promiscuous mode [ 28.901303][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.909618][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.922546][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.941533][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.953144][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.971790][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.985781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.011706][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.064848][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 29.064863][ T30] audit: type=1400 audit(1767663932.290:112): avc: denied { create } for pid=340 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.106263][ T26] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 29.114478][ T61] usb 2-1: Using ep0 maxpacket: 32 [ 29.132447][ T26] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 29.140093][ T30] audit: type=1400 audit(1767663932.320:113): avc: denied { setopt } for pid=340 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.173837][ T30] audit: type=1400 audit(1767663932.320:114): avc: denied { map_read map_write } for pid=348 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.215364][ T360] loop0: detected capacity change from 0 to 512 [ 29.231171][ T61] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 29.241167][ T61] usb 2-1: config 0 has no interface number 0 [ 29.243811][ T30] audit: type=1400 audit(1767663932.330:115): avc: denied { create } for pid=348 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.247588][ T61] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 29.301412][ T360] EXT4-fs (loop0): Test dummy encryption mode enabled [ 29.313392][ T30] audit: type=1400 audit(1767663932.330:116): avc: denied { setopt } for pid=348 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.352077][ T360] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.1: invalid block [ 29.363791][ T30] audit: type=1400 audit(1767663932.330:117): avc: denied { read write } for pid=348 comm="syz.2.3" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.363823][ T30] audit: type=1400 audit(1767663932.330:118): avc: denied { open } for pid=348 comm="syz.2.3" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 29.363847][ T30] audit: type=1400 audit(1767663932.340:119): avc: denied { bind } for pid=340 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.441503][ T360] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 29.460171][ T360] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1: attempt to clear invalid blocks 983261 len 1 [ 29.488412][ T30] audit: type=1400 audit(1767663932.710:120): avc: denied { write } for pid=348 comm="syz.2.3" name="hidraw0" dev="devtmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.501558][ T61] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 29.512172][ T360] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1: invalid indirect mapped block 2683928664 (level 0) [ 29.527130][ T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.542206][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.549918][ T360] EXT4-fs error (device loop0): __ext4_get_inode_loc:4358: comm syz.0.1: Invalid inode table block 0 in block_group 0 [ 29.571095][ T360] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5881: Corrupt filesystem [ 29.572659][ T61] usb 2-1: Product: syz [ 29.596425][ T61] usb 2-1: Manufacturer: syz [ 29.601112][ T61] usb 2-1: SerialNumber: syz [ 29.605916][ T360] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 29.621870][ T61] usb 2-1: config 0 descriptor?? [ 29.630742][ T360] EXT4-fs error (device loop0): __ext4_get_inode_loc:4358: comm syz.0.1: Invalid inode table block 0 in block_group 0 [ 29.643582][ T335] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.661861][ T360] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5881: Corrupt filesystem [ 29.681349][ T360] EXT4-fs error (device loop0): ext4_truncate:4310: inode #13: comm syz.0.1: mark_inode_dirty error [ 29.711297][ T360] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 29.740860][ T360] EXT4-fs error (device loop0): __ext4_get_inode_loc:4358: comm syz.0.1: Invalid inode table block 0 in block_group 0 [ 29.760500][ T360] EXT4-fs (loop0): 1 truncate cleaned up [ 29.774047][ T360] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,test_dummy_encryption,,errors=continue. Quota mode: none. [ 29.788018][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 29.821801][ T30] audit: type=1400 audit(1767663933.050:121): avc: denied { mount } for pid=345 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.865655][ T335] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 29.977715][ T369] Zero length message leads to an empty skb [ 30.061224][ T26] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 30.080524][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.090619][ T26] usb 5-1: Product: syz [ 30.097803][ T380] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.098527][ T26] usb 5-1: Manufacturer: syz [ 30.127703][ T26] usb 5-1: SerialNumber: syz [ 30.132761][ T61] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 30.149460][ T26] r8152-cfgselector 5-1: config 0 descriptor?? [ 30.156614][ T61] asix: probe of 2-1:0.188 failed with error -61 [ 30.258023][ T378] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11'. [ 30.420781][ T388] loop0: detected capacity change from 0 to 8192 [ 30.447611][ T388] FAT-fs (loop0): Unrecognized mount option "18446744073709551615ÿ" or missing value [ 30.522331][ T390] overlayfs: failed to resolve './file1': -2 [ 30.641185][ T26] r8152-cfgselector 5-1: Unknown version 0x0000 [ 30.648108][ T26] r8152-cfgselector 5-1: bad CDC descriptors [ 30.654496][ T391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13'. [ 30.681191][ T26] r8152-cfgselector 5-1: Unknown version 0x0000 [ 30.688261][ T26] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 30.798220][ T394] loop2: detected capacity change from 0 to 512 [ 30.831798][ T394] ======================================================= [ 30.831798][ T394] WARNING: The mand mount option has been deprecated and [ 30.831798][ T394] and is ignored by this kernel. Remove the mand [ 30.831798][ T394] option from the mount to silence this warning. [ 30.831798][ T394] ======================================================= [ 30.892573][ T394] EXT4-fs (loop2): Ignoring removed nobh option [ 30.899082][ T394] EXT4-fs (loop2): Test dummy encryption mode enabled [ 30.919464][ T394] EXT4-fs error (device loop2): __ext4_iget:4939: inode #11: block 1: comm syz.2.14: invalid block [ 30.930572][ T394] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.14: couldn't read orphan inode 11 (err -117) [ 30.942650][ T398] fuse: Unknown parameter 'æd' [ 30.947906][ T394] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,sysvgroups,noload,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 31.119519][ T409] capability: warning: `syz.2.18' uses deprecated v2 capabilities in a way that may be insecure [ 31.135649][ T409] loop2: detected capacity change from 0 to 512 [ 31.150619][ T412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19'. [ 31.159797][ T412] netlink: 3 bytes leftover after parsing attributes in process `syz.4.19'. [ 31.168668][ T412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.19'. [ 31.177903][ T412] device vlan0 entered promiscuous mode [ 31.185879][ T412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 31.318580][ T409] process 'syz.2.18' launched '/dev/fd/7' with NULL argv: empty string added [ 31.559408][ T434] loop2: detected capacity change from 0 to 128 [ 32.061846][ T26] usb 2-1: USB disconnect, device number 2 [ 32.801191][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.842776][ T462] loop2: detected capacity change from 0 to 40427 [ 32.861236][ T462] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 32.882427][ T462] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 32.893772][ T464] loop0: detected capacity change from 0 to 40427 [ 32.906977][ T462] F2FS-fs (loop2): invalid crc value [ 32.910376][ T464] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 32.926561][ T464] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.937220][ T464] F2FS-fs (loop0): invalid crc value [ 32.943293][ T462] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 32.975486][ T462] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 32.982956][ T462] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 32.991285][ T464] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.001603][ T462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.33'. [ 33.015011][ T462] attempt to access beyond end of device [ 33.015011][ T462] loop2: rw=2049, want=53256, limit=40427 [ 33.034391][ T285] attempt to access beyond end of device [ 33.034391][ T285] loop2: rw=2049, want=45104, limit=40427 [ 33.069877][ T464] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 33.077113][ T464] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.292391][ T500] loop2: detected capacity change from 0 to 512 [ 34.406523][ T500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.532472][ T500] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.705951][ T500] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.39: bad orphan inode 131083 [ 34.717986][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 34.718003][ T30] audit: type=1400 audit(1767663937.920:234): avc: denied { name_bind } for pid=503 comm="syz.0.41" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 34.734136][ T500] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,init_itable,noload,,errors=continue. Quota mode: none. [ 34.746548][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.770823][ T26] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 34.786408][ T30] audit: type=1400 audit(1767663938.010:235): avc: denied { append } for pid=499 comm="syz.2.39" path="/8/bus/cpuacct.usage_sys" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.809859][ T30] audit: type=1400 audit(1767663938.020:236): avc: denied { map } for pid=499 comm="syz.2.39" path="/8/bus/cpuacct.usage_sys" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.834675][ T30] audit: type=1326 audit(1767663938.060:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=503 comm="syz.0.41" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c14bcf749 code=0x0 [ 34.886814][ T508] loop0: detected capacity change from 0 to 512 [ 34.903003][ T511] loop4: detected capacity change from 0 to 512 [ 34.917309][ T30] audit: type=1326 audit(1767663938.140:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=512 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af672a749 code=0x7ffc0000 [ 34.941427][ T30] audit: type=1326 audit(1767663938.140:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=512 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af672a749 code=0x7ffc0000 [ 34.966281][ T30] audit: type=1326 audit(1767663938.150:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=512 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0af672a749 code=0x7ffc0000 [ 34.990140][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.000414][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.010460][ T511] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 35.021978][ T30] audit: type=1400 audit(1767663938.170:241): avc: denied { remount } for pid=503 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.041858][ T30] audit: type=1326 audit(1767663938.190:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=512 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0af672a749 code=0x7ffc0000 [ 35.051055][ T26] usb 2-1: Product: syz [ 35.065727][ T511] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.079925][ T30] audit: type=1326 audit(1767663938.190:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=512 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0af672a749 code=0x7ffc0000 [ 35.106817][ T511] xt_hashlimit: size too large, truncated to 1048576 [ 35.123562][ T26] usb 2-1: Manufacturer: syz [ 35.140432][ T26] usb 2-1: SerialNumber: syz [ 35.170059][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 35.180438][ T521] EXT4-fs (loop4): shut down requested (1) [ 35.191712][ T26] cdc_mbim 2-1:1.0: skipping garbage [ 35.351217][ T26] cdc_mbim 2-1:1.0: bind() failure [ 35.357475][ T26] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 35.371127][ T26] cdc_ncm 2-1:1.1: bind() failure [ 35.402734][ T26] usb 2-1: USB disconnect, device number 3 [ 35.433661][ T531] tipc: Started in network mode [ 35.438739][ T531] tipc: Node identity 4, cluster identity 4711 [ 35.444959][ T531] tipc: Node number set to 4 [ 35.709232][ T528] loop1: detected capacity change from 0 to 1024 [ 35.748795][ T533] kvm: pic: non byte write [ 35.753410][ T488] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.780393][ T537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 36.006514][ T547] loop3: detected capacity change from 0 to 2048 [ 36.151111][ T453] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 36.220262][ T488] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.235371][ T488] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.321166][ T488] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.333372][ T488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.349702][ T488] usb 3-1: SerialNumber: syz [ 36.391193][ T453] usb 5-1: Using ep0 maxpacket: 32 [ 36.411788][ T559] loop0: detected capacity change from 0 to 2048 [ 36.446444][ T559] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,bsdgroups,inode_readahead_blks=0x0000000000002000,. Quota mode: none. [ 36.467838][ T559] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.484647][ T559] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.56: bg 0: block 345: padding at end of block bitmap is not set [ 36.499049][ T559] EXT4-fs (loop0): Remounting filesystem read-only [ 36.507338][ T559] fs-verity (loop0, inode 13): Unknown hash algorithm number: 0 [ 36.521196][ T453] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 36.535119][ T453] usb 5-1: config 2 has no interface number 0 [ 36.544335][ T453] usb 5-1: config 2 interface 88 has no altsetting 0 [ 36.610690][ T563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.57'. [ 36.683418][ T566] loop1: detected capacity change from 0 to 1024 [ 36.741159][ T453] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 36.750790][ T453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.759178][ T453] usb 5-1: Product: syz [ 36.774236][ T453] usb 5-1: Manufacturer: syz [ 36.779319][ T453] usb 5-1: SerialNumber: syz [ 36.805670][ T555] loop3: detected capacity change from 0 to 131072 [ 36.861945][ T555] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 36.871345][ T555] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 36.887298][ T555] F2FS-fs (loop3): invalid crc value [ 36.895508][ T555] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.175582][ T555] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.191338][ T555] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 37.364033][ T583] 9pnet: Could not find request transport: 0xffffffffffffffff [ 37.751671][ T540] UDC core: couldn't find an available UDC or it's busy: -16 [ 37.759269][ T540] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.151187][ T453] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 38.166625][ T453] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 38.189679][ T453] asix: probe of 5-1:2.88 failed with error -71 [ 38.213634][ T453] usb 5-1: USB disconnect, device number 3 [ 38.336776][ T596] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 38.470217][ T599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 38.473373][ T488] usb 3-1: 0:2 : does not exist [ 38.492303][ T488] usb 3-1: unit 5: unexpected type 0x0c [ 38.507828][ T488] usb 3-1: USB disconnect, device number 2 [ 38.529790][ T599] netlink: 'syz.2.63': attribute type 12 has an invalid length. [ 38.637083][ T619] loop2: detected capacity change from 0 to 128 [ 38.672135][ T619] EXT4-fs (loop2): Test dummy encryption mode enabled [ 38.703142][ T619] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 38.729585][ T619] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.740792][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.810242][ T619] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 38.856900][ T619] fuse: Bad value for 'group_id' [ 38.926939][ T619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'. [ 39.067479][ T619] fuse: Bad value for 'fd' [ 39.310732][ T639] UDC core: couldn't find an available UDC or it's busy: -16 [ 39.318834][ T639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.621036][ T343] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 39.745588][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 39.745603][ T30] audit: type=1400 audit(1767663942.970:331): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.821089][ C0] sched: RT throttling activated [ 39.836596][ T30] audit: type=1400 audit(1767663943.060:332): avc: denied { create } for pid=644 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 39.899463][ T30] audit: type=1326 audit(1767663943.120:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5309a749 code=0x7ffc0000 [ 39.923175][ T30] audit: type=1326 audit(1767663943.130:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=649 comm="syz.4.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5309a749 code=0x7ffc0000 [ 39.927350][ T653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.75'. [ 40.011215][ T343] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 40.028862][ T343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.048714][ T343] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 40.076821][ T343] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 40.086823][ T30] audit: type=1400 audit(1767663943.310:335): avc: denied { mount } for pid=663 comm="syz.1.78" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 40.097631][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.220612][ T343] usb 4-1: config 0 descriptor?? [ 40.329094][ T657] loop4: detected capacity change from 0 to 40427 [ 40.369088][ T657] F2FS-fs (loop4): invalid crc value [ 40.391955][ T657] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.475885][ T657] F2FS-fs (loop4): Start checkpoint disabled! [ 40.487164][ T657] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 40.672794][ T30] audit: type=1400 audit(1767663943.900:336): avc: denied { getopt } for pid=970 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.694268][ T343] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 40.718565][ T343] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 40.742606][ T30] audit: type=1326 audit(1767663943.950:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c14bcf749 code=0x7ffc0000 [ 40.748400][ T343] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 40.767612][ T30] audit: type=1326 audit(1767663943.950:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c14bcf749 code=0x7ffc0000 [ 40.796421][ T343] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 40.797776][ T30] audit: type=1400 audit(1767663943.950:339): avc: denied { watch } for pid=970 comm="syz.0.79" path="/13" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.825343][ T30] audit: type=1326 audit(1767663943.950:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=970 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0c14bcf749 code=0x7ffc0000 [ 40.933708][ T343] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 40.941128][ T343] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 40.948452][ T343] holtek_kbd 0003:04D9:A055.0002: item fetching failed at offset 6/7 [ 40.957694][ T343] holtek_kbd: probe of 0003:04D9:A055.0002 failed with error -22 [ 41.299956][ T987] loop1: detected capacity change from 0 to 512 [ 41.321462][ T987] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 41.331226][ T987] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 41.341797][ T987] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 41.355809][ T987] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.81: corrupted in-inode xattr [ 41.368266][ T987] EXT4-fs (loop1): Remounting filesystem read-only [ 41.374872][ T987] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.81: couldn't read orphan inode 15 (err -117) [ 41.387791][ T987] EXT4-fs (loop1): Remounting filesystem read-only [ 41.394375][ T987] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000000,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,nodiscard,. Quota mode: writeback. [ 41.417963][ T987] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop1, type ext3) errno=-22 [ 41.483287][ T972] attempt to access beyond end of device [ 41.483287][ T972] loop4: rw=2049, want=45104, limit=40427 [ 41.637728][ T994] syz.2.84[994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.637778][ T994] syz.2.84[994] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.867349][ T969] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.931132][ T61] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.171269][ T61] usb 3-1: Using ep0 maxpacket: 32 [ 42.233295][ T1037] loop1: detected capacity change from 0 to 512 [ 42.286243][ T39] usb 4-1: USB disconnect, device number 2 [ 42.292290][ T61] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 42.300387][ T61] usb 3-1: config 0 has no interface number 0 [ 42.335859][ T1037] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 42.349951][ T1037] FAT-fs (loop1): Filesystem has been set read-only [ 42.501286][ T61] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 42.571806][ T61] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.579862][ T61] usb 3-1: Product: syz [ 42.584400][ T61] usb 3-1: Manufacturer: syz [ 42.590514][ T61] usb 3-1: SerialNumber: syz [ 42.600950][ T61] usb 3-1: config 0 descriptor?? [ 42.641798][ T61] smsc95xx v2.0.0 [ 42.674075][ T1060] loop1: detected capacity change from 0 to 2048 [ 42.712696][ T1060] Alternate GPT is invalid, using primary GPT. [ 42.719046][ T1060] loop1: p1 p2 p3 [ 42.985113][ T1073] loop0: detected capacity change from 0 to 512 [ 42.993434][ T1073] EXT4-fs (loop0): Ignoring removed nobh option [ 43.003796][ T1073] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 43.017519][ T1073] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.034706][ T1073] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.101: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 43.341103][ T1083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 43.682360][ T1095] incfs: ino conflict with backing FS 1 [ 43.741186][ T61] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 43.757188][ T61] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 43.791201][ T61] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 43.807376][ T61] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 43.823460][ T61] usb 3-1: USB disconnect, device number 3 [ 43.931105][ T347] Bluetooth: hci0: command 0x1003 tx timeout [ 43.947402][ T1015] Bluetooth: hci0: sending frame failed (-49) [ 43.991109][ T453] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 44.361119][ T343] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 44.371235][ T453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 44.382534][ T453] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 44.391648][ T453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.410174][ T453] usb 2-1: config 0 descriptor?? [ 44.441184][ T1099] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 44.739823][ T343] usb 1-1: Using ep0 maxpacket: 8 [ 44.881258][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.892302][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.902216][ T343] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 44.911542][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.920180][ T343] usb 1-1: config 0 descriptor?? [ 44.993276][ T453] wacom 0003:056A:00F0.0003: hidraw0: USB HID v1.01 Device [HID 056a:00f0] on usb-dummy_hcd.1-1/input0 [ 45.196429][ T347] usb 2-1: USB disconnect, device number 4 [ 45.391996][ T343] isku 0003:1E7D:319C.0004: item fetching failed at offset 3/5 [ 45.400124][ T343] isku 0003:1E7D:319C.0004: parse failed [ 45.405901][ T343] isku: probe of 0003:1E7D:319C.0004 failed with error -22 [ 45.592811][ T343] usb 1-1: USB disconnect, device number 2 [ 46.011161][ T343] Bluetooth: hci0: command 0x1001 tx timeout [ 46.017712][ T1015] Bluetooth: hci0: sending frame failed (-49) [ 46.117538][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 46.117552][ T30] audit: type=1400 audit(1767663949.340:394): avc: denied { mount } for pid=1120 comm="syz.0.116" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 46.677533][ T30] audit: type=1400 audit(1767663949.900:395): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 46.704238][ T1127] loop0: detected capacity change from 0 to 128 [ 46.785847][ T1129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.119'. [ 46.794869][ T1129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 46.803832][ T1129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 47.365932][ T1134] loop2: detected capacity change from 0 to 512 [ 47.460267][ T1134] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.531377][ T1145] loop1: detected capacity change from 0 to 512 [ 47.562960][ T30] audit: type=1400 audit(1767663950.790:396): avc: denied { bind } for pid=1146 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.591166][ T30] audit: type=1400 audit(1767663950.790:397): avc: denied { listen } for pid=1146 comm="syz.2.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.626720][ T1145] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.638066][ T1145] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.656702][ T30] audit: type=1400 audit(1767663950.880:398): avc: denied { map } for pid=1144 comm="syz.1.125" path="/30/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.693465][ T30] audit: type=1400 audit(1767663950.880:399): avc: denied { execute } for pid=1144 comm="syz.1.125" path="/30/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.695949][ T1155] loop2: detected capacity change from 0 to 512 [ 47.727329][ T1155] EXT4-fs (loop2): Ignoring removed bh option [ 47.742940][ T1155] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 47.755893][ T1155] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.849241][ T30] audit: type=1400 audit(1767663951.070:400): avc: denied { read write } for pid=1162 comm="syz.2.128" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.876901][ T30] audit: type=1400 audit(1767663951.100:401): avc: denied { open } for pid=1162 comm="syz.2.128" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.901153][ T30] audit: type=1400 audit(1767663951.100:402): avc: denied { ioctl } for pid=1162 comm="syz.2.128" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf7c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.927017][ T30] audit: type=1400 audit(1767663951.100:403): avc: denied { setattr } for pid=1162 comm="syz.2.128" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.971088][ T347] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 48.091130][ T343] Bluetooth: hci0: command 0x1009 tx timeout [ 48.133585][ T1172] loop2: detected capacity change from 0 to 128 [ 48.176204][ T1172] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.186978][ T1172] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.351190][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 48.362244][ T347] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 48.371805][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.382007][ T347] usb 2-1: config 0 descriptor?? [ 48.401259][ T1145] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 48.423512][ T1183] 9pnet: Insufficient options for proto=fd [ 48.691133][ T453] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 48.861977][ T347] ryos 0003:1E7D:3138.0005: item fetching failed at offset 1/5 [ 48.869800][ T347] ryos 0003:1E7D:3138.0005: parse failed [ 48.875546][ T347] ryos: probe of 0003:1E7D:3138.0005 failed with error -22 [ 49.051232][ T453] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 49.063057][ T347] usb 2-1: USB disconnect, device number 5 [ 49.131251][ T453] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.140471][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 49.148863][ T453] usb 4-1: SerialNumber: syz [ 49.155025][ T453] usb 4-1: config 0 descriptor?? [ 49.635132][ T1203] loop1: detected capacity change from 0 to 512 [ 49.672829][ T1203] SELinux: security_context_str_to_sid(sy) failed for (dev ?, type ?) errno=-22 [ 49.682561][ T1203] EXT4-fs (loop1): Ignoring removed orlov option [ 49.690855][ T1203] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.140: inode #1: comm syz.1.140: iget: illegal inode # [ 49.706025][ T1203] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.140: error while reading EA inode 1 err=-117 [ 49.718720][ T1203] EXT4-fs (loop1): 1 orphan inode deleted [ 49.724660][ T1203] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,orlov,norecovery,journal_ioprio=0x0000000000000005,min_batch_time=0x000000000000f09d,errors=continue,dioread_lock,noblock_validity,noquota,nolazytime,errors=continue. Quota mode: none. [ 49.746687][ T1205] UDC core: couldn't find an available UDC or it's busy: -16 [ 49.756239][ T1203] SELinux: security_context_str_to_sid(sy) failed for (dev loop1, type ext4) errno=-22 [ 49.763347][ T1205] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.788864][ T1207] loop0: detected capacity change from 0 to 1024 [ 49.801287][ T1207] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 49.810793][ T1207] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c018, mo2=0003] [ 49.819118][ T1207] System zones: 0-1, 3-36 [ 49.825165][ T1207] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,usrjquota=,bsddf,nomblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback. [ 49.923784][ T1212] EXT4-fs (loop0): shut down requested (2) [ 49.948717][ T1212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 49.981231][ T1212] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 50.091250][ T1214] netlink: 'syz.0.143': attribute type 3 has an invalid length. [ 50.099478][ T1214] netlink: 'syz.0.143': attribute type 1 has an invalid length. [ 50.239118][ T1220] loop0: detected capacity change from 0 to 512 [ 50.351726][ T1220] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.385335][ T1220] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.144: bg 0: block 248: padding at end of block bitmap is not set [ 50.409604][ T1210] loop1: detected capacity change from 0 to 131072 [ 50.424747][ T1220] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.144: Failed to acquire dquot type 1 [ 50.447930][ T1220] EXT4-fs (loop0): 1 truncate cleaned up [ 50.458234][ T1220] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 50.479049][ T1210] F2FS-fs (loop1): Found nat_bits in checkpoint [ 50.598457][ T1210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 50.984629][ T1220] syz.0.144 (1220) used greatest stack depth: 21344 bytes left [ 51.434019][ T39] usb 4-1: USB disconnect, device number 3 [ 51.481502][ T1238] loop3: detected capacity change from 0 to 1024 [ 51.561185][ T343] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 51.571258][ T1238] EXT4-fs (loop3): Ignoring removed orlov option [ 51.589088][ T1238] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 51.631100][ T453] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 51.658746][ T30] kauditd_printk_skb: 411 callbacks suppressed [ 51.658762][ T30] audit: type=1400 audit(1767663954.880:813): avc: denied { write } for pid=1241 comm="syz.0.149" path="socket:[17839]" dev="sockfs" ino=17839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.690463][ T30] audit: type=1400 audit(1767663954.910:814): avc: denied { create } for pid=1241 comm="syz.0.149" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 51.716350][ T30] audit: type=1400 audit(1767663954.940:815): avc: denied { bind } for pid=1237 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.844309][ T1244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.149'. [ 51.951226][ T343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.961559][ T343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.011169][ T453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.022191][ T453] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 52.031592][ T453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.040417][ T453] usb 3-1: config 0 descriptor?? [ 52.041464][ T343] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.054668][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.062902][ T343] usb 2-1: SerialNumber: syz [ 52.316447][ T1234] loop1: detected capacity change from 0 to 1024 [ 52.362186][ T1234] EXT4-fs (loop1): Ignoring removed bh option [ 52.378121][ T1234] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.404517][ T1246] loop3: detected capacity change from 0 to 4096 [ 52.415138][ T1234] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 52.432909][ T1246] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: writeback. [ 52.542179][ T453] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 52.554853][ T453] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 52.576807][ T30] audit: type=1400 audit(1767663955.800:816): avc: denied { unlink } for pid=283 comm="syz-executor" name="file0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 52.596669][ T453] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 53.342812][ T1271] loop0: detected capacity change from 0 to 512 [ 53.577545][ T1271] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 53.619443][ T1276] loop2: detected capacity change from 0 to 128 [ 53.675625][ T1061] udevd[1061]: incorrect ext4 checksum on /dev/loop2 [ 53.687777][ T1276] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 53.699516][ T1271] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.824194][ T30] audit: type=1400 audit(1767663957.050:817): avc: denied { lock } for pid=1270 comm="syz.0.156" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.829254][ T453] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 53.854620][ T453] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 53.995622][ T453] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 54.003297][ T453] hid-picolcd 0003:04D8:C002.0006: unbalanced collection at end of report description [ 54.013177][ T453] hid-picolcd 0003:04D8:C002.0006: device report parse failed [ 54.020685][ T453] hid-picolcd: probe of 0003:04D8:C002.0006 failed with error -22 [ 54.040114][ T30] audit: type=1400 audit(1767663957.250:818): avc: denied { read write } for pid=1280 comm="syz.4.158" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.043034][ T453] usb 3-1: USB disconnect, device number 4 [ 54.065034][ T30] audit: type=1400 audit(1767663957.250:819): avc: denied { open } for pid=1280 comm="syz.4.158" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.149029][ T30] audit: type=1400 audit(1767663957.370:820): avc: denied { mounton } for pid=1270 comm="syz.0.156" path="/30/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.149216][ T1271] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x000000000000006dIXŽ[dÅ)ªï [ 54.149216][ T1271] Ãöý%J²Ëÿ§ÒUánŘ­œ’ òn¤;ˆIÜŠ'Æ ‚Ä-bÛéèö¹K[\Sœ”¬\á%2:ùò{¿Ë ÁBѧžžÅjë¸1jGÓƒ68ï¨Êß>' [ 54.226407][ T1276] loop2: detected capacity change from 0 to 4096 [ 54.261593][ T1276] EXT4-fs (loop2): Test dummy encryption mode enabled [ 54.285948][ T1276] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 54.322731][ T488] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.330392][ T30] audit: type=1400 audit(1767663957.540:821): avc: denied { create } for pid=1274 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.372301][ T30] audit: type=1400 audit(1767663957.540:822): avc: denied { connect } for pid=1274 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.395274][ T1299] EXT4-fs (loop2): Test dummy encryption mode enabled [ 54.406229][ T1299] EXT4-fs (loop2): re-mounted. Opts: test_dummy_encryption=v1,dioread_nolock,. Quota mode: writeback. [ 54.681589][ T488] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.770700][ T1302] loop2: detected capacity change from 0 to 16 [ 54.778868][ T488] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.873035][ T1302] erofs: (device loop2): mounted with root inode @ nid 36. [ 54.971472][ T488] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 55.015566][ T905] device bridge_slave_1 left promiscuous mode [ 55.324469][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.332795][ T343] usb 2-1: 0:2 : does not exist [ 55.338687][ T488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 55.359255][ T488] usb 5-1: SerialNumber: syz [ 55.374444][ T905] device bridge_slave_0 left promiscuous mode [ 55.381000][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.402030][ T905] device veth1_macvtap left promiscuous mode [ 55.408091][ T905] device veth0_vlan left promiscuous mode [ 55.418393][ T343] usb 2-1: USB disconnect, device number 6 [ 55.606183][ T1310] loop1: detected capacity change from 0 to 1024 [ 55.622988][ T1310] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 55.630826][ T1312] syz.3.167[1312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.631780][ T1312] syz.3.167[1312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.711772][ T336] udevd[336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.840140][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.847420][ T1308] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.855546][ T1308] device bridge_slave_0 entered promiscuous mode [ 55.863028][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.870207][ T1308] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.878679][ T1308] device bridge_slave_1 entered promiscuous mode [ 55.885540][ T1313] netlink: 'syz.1.166': attribute type 12 has an invalid length. [ 55.973404][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.980540][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.987894][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.994962][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.030567][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.038930][ T972] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.051663][ T972] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.077146][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.087760][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.094909][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.107800][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.116597][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.121512][ T343] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 56.123683][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.141606][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.159842][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.175926][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.185713][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.195030][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.251094][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.270212][ T1308] device veth0_vlan entered promiscuous mode [ 56.376742][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.387192][ T1308] device veth1_macvtap entered promiscuous mode [ 56.399007][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.413025][ T972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.474029][ T1337] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 56.642365][ T343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.653316][ T343] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.667285][ T343] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 56.676498][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.689056][ T343] usb 3-1: config 0 descriptor?? [ 56.781804][ T1353] syz.1.174[1353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.782168][ T1353] syz.1.174[1353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.989971][ T1355] loop4: detected capacity change from 0 to 1024 [ 57.008505][ T488] usb 5-1: 0:2 : does not exist [ 57.013883][ T488] usb 5-1: unit 5 not found! [ 57.022392][ T488] usb 5-1: USB disconnect, device number 4 [ 57.036175][ T1355] EXT4-fs (loop4): Ignoring removed oldalloc option [ 57.052985][ T1355] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000001,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 57.091145][ T453] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 57.101140][ T347] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 57.221575][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.262320][ T343] uclogic 0003:5543:0064.0007: item fetching failed at offset 0/1 [ 57.270354][ T343] uclogic 0003:5543:0064.0007: parse failed [ 57.276684][ T343] uclogic: probe of 0003:5543:0064.0007 failed with error -22 [ 57.471246][ T453] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 57.482352][ T347] usb 6-1: No LPM exit latency info found, disabling LPM. [ 57.491609][ T453] usb 4-1: config 0 interface 0 has no altsetting 0 [ 57.498282][ T453] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 57.507680][ T453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.517259][ T453] usb 4-1: config 0 descriptor?? [ 57.541267][ T1347] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 57.561189][ T347] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 57.572864][ T347] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 57.583832][ T347] usb 6-1: config 1 interface 0 has no altsetting 0 [ 57.724520][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 57.724534][ T30] audit: type=1400 audit(1767663960.950:827): avc: denied { write } for pid=1374 comm="syz.1.181" path="socket:[18204]" dev="sockfs" ino=18204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.773771][ T1346] syz.3.173 (1346) used greatest stack depth: 21216 bytes left [ 57.826089][ T30] audit: type=1400 audit(1767663961.050:828): avc: denied { accept } for pid=1380 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 57.850450][ T30] audit: type=1400 audit(1767663961.070:829): avc: denied { accept } for pid=1380 comm="syz.3.182" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.889021][ T1384] loop3: detected capacity change from 0 to 2048 [ 57.891560][ T453] usbhid 4-1:0.0: can't add hid device: -71 [ 57.902652][ T453] usbhid: probe of 4-1:0.0 failed with error -71 [ 57.910540][ T453] usb 4-1: USB disconnect, device number 4 [ 57.932508][ T1384] Alternate GPT is invalid, using primary GPT. [ 57.938900][ T1384] loop3: p1 p2 p3 [ 57.954841][ T1383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 58.003003][ T1387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 58.037487][ T1387] loop3: detected capacity change from 0 to 256 [ 58.048533][ T1387] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 58.062752][ T30] audit: type=1400 audit(1767663961.290:830): avc: denied { write } for pid=1386 comm="syz.3.184" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.086830][ T336] udevd[336]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 58.097335][ T337] udevd[337]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 58.102947][ T1061] udevd[1061]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 58.116984][ T30] audit: type=1400 audit(1767663961.310:831): avc: denied { add_name } for pid=1386 comm="syz.3.184" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.140405][ T30] audit: type=1400 audit(1767663961.340:832): avc: denied { associate } for pid=1386 comm="syz.3.184" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 58.162371][ T30] audit: type=1400 audit(1767663961.340:833): avc: denied { read write } for pid=1386 comm="syz.3.184" name="file1" dev="loop3" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.186782][ T30] audit: type=1400 audit(1767663961.340:834): avc: denied { open } for pid=1386 comm="syz.3.184" path="/38/file0/file1" dev="loop3" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.255584][ T30] audit: type=1400 audit(1767663961.480:835): avc: denied { ioctl } for pid=1388 comm="syz.3.185" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.588951][ T1404] loop1: detected capacity change from 0 to 512 [ 58.633170][ T1404] EXT4-fs (loop1): mounted filesystem without journal. Opts: nolazytime,norecovery,,errors=continue. Quota mode: writeback. [ 58.646217][ T1404] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.662243][ T1404] xt_CT: No such helper "snmp_trap" [ 58.671061][ T30] audit: type=1326 audit(1767663961.890:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1403 comm="syz.1.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 58.729618][ T1409] netlink: 128 bytes leftover after parsing attributes in process `syz.1.190'. [ 58.851446][ T453] usb 3-1: USB disconnect, device number 5 [ 58.889244][ T1414] netlink: 'syz.2.192': attribute type 12 has an invalid length. [ 59.371095][ T453] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 59.560179][ T1425] loop2: detected capacity change from 0 to 2048 [ 59.580826][ T1427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 59.589915][ T1427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'. [ 59.661116][ T453] usb 4-1: device descriptor read/64, error -71 [ 59.809607][ T1427] loop1: detected capacity change from 0 to 40427 [ 59.826158][ T1427] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 59.840692][ T1427] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 59.841520][ T347] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.40 [ 59.858482][ T347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.868121][ T1427] F2FS-fs (loop1): Found nat_bits in checkpoint [ 59.881212][ T347] usb 6-1: can't set config #1, error -71 [ 59.898074][ T347] usb 6-1: USB disconnect, device number 2 [ 59.918710][ T1427] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 59.926048][ T1427] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.051111][ T453] usb 4-1: device descriptor read/64, error -71 [ 60.261154][ T347] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.331155][ T453] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 60.536865][ T343] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 60.791277][ T453] usb 4-1: device descriptor read/64, error -71 [ 60.792050][ T343] usb 5-1: Using ep0 maxpacket: 32 [ 60.828125][ T1449] loop1: detected capacity change from 0 to 512 [ 60.855097][ T1449] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 60.871233][ T347] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 60.981288][ T343] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 60.989309][ T343] usb 5-1: can't read configurations, error -61 [ 61.041236][ T347] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 61.050388][ T347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.058494][ T347] usb 6-1: Product: syz [ 61.062767][ T347] usb 6-1: Manufacturer: syz [ 61.067362][ T347] usb 6-1: SerialNumber: syz [ 61.072696][ T347] usb 6-1: config 0 descriptor?? [ 61.151130][ T343] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 61.181124][ T453] usb 4-1: device descriptor read/64, error -71 [ 61.301165][ T453] usb usb4-port1: attempt power cycle [ 61.431238][ T343] usb 5-1: Using ep0 maxpacket: 32 [ 62.001584][ T343] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 62.009743][ T343] usb 5-1: can't read configurations, error -61 [ 62.016799][ T343] usb usb5-port1: attempt power cycle [ 62.171395][ T453] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 62.231529][ T332] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 62.546645][ T1460] loop3: detected capacity change from 0 to 1024 [ 62.571718][ T1460] EXT4-fs (loop3): Ignoring removed orlov option [ 62.585059][ T1460] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 62.601188][ T343] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 62.691285][ T343] usb 5-1: Using ep0 maxpacket: 32 [ 62.731379][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 62.731396][ T30] audit: type=1326 audit(1767663965.960:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f5309a34b code=0x7ffc0000 [ 62.763757][ T30] audit: type=1326 audit(1767663965.980:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f5309a34b code=0x7ffc0000 [ 62.786726][ T453] usb 4-1: device not accepting address 7, error -71 [ 62.793830][ T30] audit: type=1326 audit(1767663966.000:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f5309a34b code=0x7ffc0000 [ 62.816996][ T30] audit: type=1326 audit(1767663966.020:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f5309a34b code=0x7ffc0000 [ 62.839961][ T30] audit: type=1326 audit(1767663966.040:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f5309a34b code=0x7ffc0000 [ 62.862875][ T343] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 62.863939][ T30] audit: type=1326 audit(1767663966.060:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f5309a34b code=0x7ffc0000 [ 62.870476][ T343] usb 5-1: can't read configurations, error -61 [ 62.903892][ T30] audit: type=1326 audit(1767663966.090:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1440 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f5309a34b code=0x7ffc0000 [ 62.931158][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.944241][ T1483] 9pnet: Insufficient options for proto=fd [ 62.950739][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.961602][ T30] audit: type=1400 audit(1767663966.190:915): avc: denied { sys_module } for pid=1482 comm="syz.2.211" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.990942][ T30] audit: type=1326 audit(1767663966.210:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa807b74749 code=0x7ffc0000 [ 63.021406][ T30] audit: type=1326 audit(1767663966.210:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1482 comm="syz.2.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa807b74749 code=0x7ffc0000 [ 63.031414][ T332] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 63.072000][ T332] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 63.080087][ T332] usb 2-1: Manufacturer: syz [ 63.086290][ T332] usb 2-1: config 0 descriptor?? [ 63.091382][ T343] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 63.179068][ T1493] loop2: detected capacity change from 0 to 256 [ 63.185702][ T343] usb 5-1: Using ep0 maxpacket: 32 [ 63.311131][ T343] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 63.337094][ T343] usb 5-1: can't read configurations, error -71 [ 63.345104][ T343] usb usb5-port1: unable to enumerate USB device [ 63.656905][ T332] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 63.674365][ T347] usb 6-1: USB disconnect, device number 3 [ 63.688724][ T332] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 63.698087][ T332] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 63.705148][ T332] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 63.712095][ T332] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 63.718966][ T332] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 63.726223][ T332] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 63.734156][ T332] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 63.798535][ T1523] loop4: detected capacity change from 0 to 128 [ 63.821781][ T1523] EXT4-fs (loop4): Ignoring removed nobh option [ 63.829762][ T1523] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 63.844059][ T1523] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.910593][ T1526] loop5: detected capacity change from 0 to 512 [ 63.920682][ T1061] udevd[1061]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.940264][ T1526] EXT4-fs (loop5): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 64.382282][ T1458] UDC core: couldn't find an available UDC or it's busy: -16 [ 64.396139][ T1458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.151952][ T1536] xt_hashlimit: max too large, truncated to 1048576 [ 65.169033][ T1538] netlink: 'syz.2.230': attribute type 29 has an invalid length. [ 65.181903][ T1540] loop3: detected capacity change from 0 to 128 [ 65.216247][ T1545] loop4: detected capacity change from 0 to 128 [ 65.256104][ T1540] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 65.711396][ T332] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 65.745190][ T332] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 65.799972][ T332] pyra: probe of 0003:1E7D:2CF6.0008 failed with error -71 [ 65.864917][ T332] usb 2-1: USB disconnect, device number 7 [ 65.897697][ T1563] loop4: detected capacity change from 0 to 2048 [ 65.917731][ T1560] fido_id[1560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 65.975315][ T337] Alternate GPT is invalid, using primary GPT. [ 65.981667][ T337] loop4: p2 p3 p7 [ 65.993754][ T1563] Alternate GPT is invalid, using primary GPT. [ 66.002038][ T1563] loop4: p2 p3 p7 [ 66.083677][ T1567] loop3: detected capacity change from 0 to 128 [ 66.115163][ T1567] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.134227][ T1567] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.170278][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 66.201102][ T488] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.247527][ T1548] udevd[1548]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 66.260003][ T1549] udevd[1549]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 66.281600][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 66.306470][ T1548] udevd[1548]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 66.328222][ T1549] udevd[1549]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 66.340433][ T337] udevd[337]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 66.402338][ T1572] loop2: detected capacity change from 0 to 40427 [ 66.441916][ T1572] F2FS-fs (loop2): invalid crc value [ 66.444056][ T1585] xt_hashlimit: size too large, truncated to 1048576 [ 66.471153][ T488] usb 6-1: device descriptor read/64, error -71 [ 66.482175][ T1572] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.549568][ T1572] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.657972][ T1598] loop4: detected capacity change from 0 to 1024 [ 66.696276][ T1598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.913358][ T1610] syz.4.244[1610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.913454][ T1610] syz.4.244[1610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.924610][ T1609] tipc: Enabled bearer , priority 0 [ 66.937143][ T488] usb 6-1: device descriptor read/64, error -71 [ 66.983552][ T1608] tipc: Resetting bearer [ 67.011117][ T347] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 67.037475][ T1608] tipc: Disabling bearer [ 67.221115][ T488] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.381119][ T332] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 67.391180][ T347] usb 4-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 67.402437][ T347] usb 4-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 67.415473][ T347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 67.422247][ T347] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 67.431338][ T453] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 67.438838][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.447887][ T347] usb 4-1: config 0 descriptor?? [ 67.471176][ T1607] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 67.501120][ T488] usb 6-1: device descriptor read/64, error -71 [ 67.567256][ T1619] loop4: detected capacity change from 0 to 128 [ 67.741263][ T332] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 67.750446][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.759528][ T332] usb 2-1: config 0 descriptor?? [ 67.832138][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.839271][ T1621] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.846779][ T1621] device bridge_slave_0 entered promiscuous mode [ 67.851365][ T453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.857815][ T1621] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.864270][ T453] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 67.870270][ T1621] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.879717][ T453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.887753][ T1621] device bridge_slave_1 entered promiscuous mode [ 67.897594][ T453] usb 3-1: config 0 descriptor?? [ 67.900731][ T488] usb 6-1: device descriptor read/64, error -71 [ 67.923245][ T347] itetech 0003:06CB:73F5.0009: hidraw0: USB HID vff.ed Device [HID 06cb:73f5] on usb-dummy_hcd.3-1/input0 [ 67.982956][ T1621] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.990055][ T1621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.997404][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.004475][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.029759][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.037852][ T969] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.045567][ T488] usb usb6-port1: attempt power cycle [ 68.051427][ T969] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.063168][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.072118][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.080440][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.087546][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.106409][ T1632] loop1: detected capacity change from 0 to 4096 [ 68.113084][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.122674][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.131948][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.139281][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.146814][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.155439][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.159995][ T1634] loop2: detected capacity change from 0 to 1024 [ 68.170465][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.172751][ T1632] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 68.180751][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.192007][ T1632] EXT4-fs (loop1): Test dummy encryption mode enabled [ 68.207555][ T1632] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 68.245653][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.254251][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.284893][ T347] usb 4-1: USB disconnect, device number 9 [ 68.300485][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.308905][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.317645][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.325339][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.340294][ T1621] device veth0_vlan entered promiscuous mode [ 68.355480][ T1621] device veth1_macvtap entered promiscuous mode [ 68.361579][ T453] usbhid 3-1:0.0: can't add hid device: -71 [ 68.368207][ T453] usbhid: probe of 3-1:0.0 failed with error -71 [ 68.375572][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.380039][ T453] usb 3-1: USB disconnect, device number 6 [ 68.392212][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.400546][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.417394][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.425981][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.451691][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.467046][ T969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.479325][ T332] lenovo 0003:17EF:6009.000A: hidraw0: USB HID v1.01 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 68.490689][ T488] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 68.499608][ T905] device bridge_slave_1 left promiscuous mode [ 68.516907][ T905] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.531433][ T905] device bridge_slave_0 left promiscuous mode [ 68.547755][ T905] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.571251][ T905] device veth1_macvtap left promiscuous mode [ 68.638192][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 68.638207][ T30] audit: type=1400 audit(1767663971.860:1025): avc: denied { map } for pid=1641 comm="syz.6.254" path="socket:[19834]" dev="sockfs" ino=19834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.691141][ T488] usb 6-1: device descriptor read/8, error -71 [ 68.699656][ T30] audit: type=1400 audit(1767663971.890:1026): avc: denied { read } for pid=1641 comm="syz.6.254" path="socket:[19834]" dev="sockfs" ino=19834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.852968][ T1650] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.941769][ T1654] xt_bpf: check failed: parse error [ 68.991331][ T488] usb 6-1: device descriptor read/8, error -71 [ 69.491138][ T488] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 69.661159][ T488] usb 6-1: device descriptor read/8, error -71 [ 69.690411][ T1660] loop6: detected capacity change from 0 to 128 [ 69.803250][ T1660] attempt to access beyond end of device [ 69.803250][ T1660] loop6: rw=0, want=1041, limit=128 [ 69.997801][ T488] usb 6-1: device descriptor read/8, error -71 [ 70.127768][ T453] usb 2-1: USB disconnect, device number 8 [ 70.182655][ T488] usb usb6-port1: unable to enumerate USB device [ 70.228633][ T1676] cgroup: name respecified [ 70.234543][ T1676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'. [ 70.243865][ T1676] netlink: 36 bytes leftover after parsing attributes in process `syz.1.263'. [ 70.255618][ T1676] bridge0: port 3(vlan2) entered blocking state [ 70.262246][ T1676] bridge0: port 3(vlan2) entered disabled state [ 70.333770][ T1682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 70.342759][ T1682] device bridge_slave_1 left promiscuous mode [ 70.348971][ T1682] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.357489][ T1682] device bridge_slave_0 left promiscuous mode [ 70.363751][ T1682] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.481075][ T1272] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 70.503414][ T1684] loop6: detected capacity change from 0 to 40427 [ 70.528163][ T1686] kvm [1685]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc1 data 0xfffffc00 [ 70.538112][ T1686] kvm [1685]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0xc2 data 0xfffffc00 [ 70.550611][ T1686] kvm [1685]: vcpu2, guest rIP: 0x9135 ignored wrmsr: 0x11e data 0xfffffc00 [ 70.561089][ T1684] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 70.566013][ T1686] kvm [1685]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0x186 data 0xfffffc00 [ 70.570097][ T1684] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 70.582371][ T1686] kvm [1685]: vcpu2, guest rIP: 0x9135 disabled perfctr wrmsr: 0x187 data 0xfffffc00 [ 70.600499][ T1684] F2FS-fs (loop6): invalid crc value [ 70.625775][ T1684] F2FS-fs (loop6): Found nat_bits in checkpoint [ 70.667041][ T1684] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 70.674492][ T1684] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 70.751801][ T30] audit: type=1326 audit(1767663973.980:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 70.777521][ T30] audit: type=1326 audit(1767663974.000:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 70.781225][ T1272] usb 6-1: device descriptor read/64, error -71 [ 70.802346][ T30] audit: type=1326 audit(1767663974.000:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 70.824608][ T1704] loop1: detected capacity change from 0 to 512 [ 70.832273][ T30] audit: type=1326 audit(1767663974.000:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 70.862496][ T30] audit: type=1326 audit(1767663974.000:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 70.886276][ T30] audit: type=1326 audit(1767663974.000:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 70.910061][ T30] audit: type=1326 audit(1767663974.000:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 70.933825][ T30] audit: type=1326 audit(1767663974.000:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 70.962854][ T1704] EXT4-fs (loop1): Ignoring removed nobh option [ 70.974320][ T1704] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.998900][ T1704] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.271: iget: bad i_size value: 38620345925642 [ 71.012038][ T1704] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.271: couldn't read orphan inode 15 (err -117) [ 71.024785][ T1704] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 71.035985][ T1701] loop3: detected capacity change from 0 to 40427 [ 71.082844][ T1701] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 71.090801][ T1701] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 71.100494][ T1701] F2FS-fs (loop3): invalid crc value [ 71.120430][ T1701] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.168567][ T1701] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 71.175762][ T1701] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.217677][ T1701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 71.238338][ T1701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 71.305308][ T1272] usb 6-1: device descriptor read/64, error -71 [ 71.437184][ T1693] incfs_lookup_dentry err:-107 [ 71.442350][ T1693] incfs: Can't find or create .index dir in ./file0 [ 71.449170][ T1693] incfs: mount failed -107 [ 71.491956][ T1734] loop3: detected capacity change from 0 to 512 [ 71.500141][ T1733] loop2: detected capacity change from 0 to 512 [ 71.531450][ T1734] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 71.541123][ T1734] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 71.555518][ T1734] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 71.583338][ T1734] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2229: inode #15: comm syz.3.276: corrupted in-inode xattr [ 71.595571][ T1734] EXT4-fs (loop3): Remounting filesystem read-only [ 71.602948][ T1734] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.276: couldn't read orphan inode 15 (err -117) [ 71.615615][ T1734] EXT4-fs (loop3): Remounting filesystem read-only [ 71.622184][ T1734] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000000,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpquota,nodiscard,. Quota mode: writeback. [ 71.645689][ T1734] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop3, type ext3) errno=-22 [ 71.659850][ T1733] EXT4-fs (loop2): Ignoring removed oldalloc option [ 71.670887][ T1733] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 71.694657][ T1733] EXT4-fs error (device loop2): ext4_do_update_inode:5249: inode #16: comm syz.2.277: corrupted inode contents [ 71.707157][ T1733] EXT4-fs error (device loop2): ext4_dirty_inode:6085: inode #16: comm syz.2.277: mark_inode_dirty error [ 71.718987][ T1733] EXT4-fs error (device loop2): ext4_do_update_inode:5249: inode #16: comm syz.2.277: corrupted inode contents [ 71.731362][ T1733] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.277: mark_inode_dirty error [ 71.743096][ T1733] EXT4-fs error (device loop2): ext4_do_update_inode:5249: inode #16: comm syz.2.277: corrupted inode contents [ 71.755304][ T1733] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 71.764152][ T1733] EXT4-fs error (device loop2): ext4_do_update_inode:5249: inode #16: comm syz.2.277: corrupted inode contents [ 71.776346][ T1733] EXT4-fs error (device loop2): ext4_truncate:4310: inode #16: comm syz.2.277: mark_inode_dirty error [ 71.787888][ T1733] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 71.797375][ T1733] EXT4-fs (loop2): 1 truncate cleaned up [ 71.803347][ T1733] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,oldalloc,data=journal,resgid=0x0000000000000000,grpjquota=./mnt,,errors=continue. Quota mode: writeback. [ 71.821296][ T1733] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.226544][ T453] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 73.017311][ T453] usb 3-1: Using ep0 maxpacket: 16 [ 73.042620][ T1763] loop1: detected capacity change from 0 to 128 [ 73.094035][ T1763] FAT-fs (loop1): bogus sectors per cluster 0 [ 73.100284][ T1763] FAT-fs (loop1): Can't find a valid FAT filesystem [ 73.112051][ T1763] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 73.141156][ T453] usb 3-1: config 0 interface 0 has no altsetting 0 [ 73.149190][ T453] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 73.165115][ T453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.196284][ T453] usb 3-1: config 0 descriptor?? [ 73.281251][ T1771] incfs: Options parsing error. -22 [ 73.286600][ T1771] incfs: mount failed -22 [ 73.310922][ T1775] loop6: detected capacity change from 0 to 512 [ 73.403244][ T1780] loop1: detected capacity change from 0 to 256 [ 73.413962][ T1780] exfat: Deprecated parameter 'utf8' [ 73.431338][ T1782] loop3: detected capacity change from 0 to 512 [ 73.440026][ T1780] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 73.472794][ T1782] EXT4-fs (loop3): Ignoring removed bh option [ 73.488620][ T1780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.289'. [ 73.514372][ T1782] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 73.548779][ T1782] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.644281][ T1775] loop6: detected capacity change from 0 to 40427 [ 73.662244][ T1775] F2FS-fs (loop6): invalid crc value [ 73.736095][ T453] hid (null): invalid report_size 24940 [ 73.743581][ T453] hid (null): unknown global tag 0xe [ 73.749041][ T453] hid (null): unknown global tag 0xd [ 73.754671][ T453] hid (null): bogus close delimiter [ 74.058383][ T1775] F2FS-fs (loop6): Found nat_bits in checkpoint [ 74.072006][ T453] hid (null): unknown global tag 0xc9 [ 74.137098][ T1775] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 74.153523][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 74.153542][ T30] audit: type=1400 audit(1767663977.380:1082): avc: denied { read write } for pid=1732 comm="syz.2.277" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.205959][ T343] usb 3-1: USB disconnect, device number 7 [ 74.209545][ T30] audit: type=1400 audit(1767663977.410:1083): avc: denied { open } for pid=1732 comm="syz.2.277" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.334785][ T1801] loop3: detected capacity change from 0 to 128 [ 74.345990][ T1801] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.357301][ T1801] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.938940][ T1803] attempt to access beyond end of device [ 74.938940][ T1803] loop6: rw=2049, want=77960, limit=40427 [ 75.100763][ T1621] attempt to access beyond end of device [ 75.100763][ T1621] loop6: rw=2049, want=45104, limit=40427 [ 75.271119][ T453] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 75.476492][ T30] audit: type=1400 audit(1767663978.700:1084): avc: denied { write } for pid=1853 comm="syz.6.302" name="mcfilter6" dev="proc" ino=4026532517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 75.566090][ T1863] loop2: detected capacity change from 0 to 8192 [ 75.581270][ T453] usb 6-1: device descriptor read/64, error -71 [ 75.618799][ T1549] loop2: p1 < > p2 < > p3 p4 < > [ 75.623885][ T1549] loop2: partition table partially beyond EOD, truncated [ 75.631199][ T1549] loop2: p1 start 67108864 is beyond EOD, truncated [ 75.637810][ T1549] loop2: p2 start 4278190080 is beyond EOD, truncated [ 75.644619][ T1549] loop2: p3 start 100859904 is beyond EOD, truncated [ 75.653028][ T1863] loop2: p1 < > p2 < > p3 p4 < > [ 75.658077][ T1863] loop2: partition table partially beyond EOD, truncated [ 75.665173][ T20] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 75.666383][ T1863] loop2: p1 start 67108864 is beyond EOD, truncated [ 75.679620][ T1863] loop2: p2 start 4278190080 is beyond EOD, truncated [ 75.686549][ T1863] loop2: p3 start 100859904 is beyond EOD, truncated [ 75.707392][ T1867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1867 comm=syz.2.306 [ 75.738748][ T30] audit: type=1326 audit(1767663978.960:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa807b74749 code=0x7ffc0000 [ 75.739523][ T1549] udevd[1549]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 75.767725][ T30] audit: type=1326 audit(1767663978.960:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa807b74749 code=0x7ffc0000 [ 75.798810][ T1549] udevd[1549]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 75.818376][ T30] audit: type=1326 audit(1767663978.990:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa807b74749 code=0x7ffc0000 [ 75.842293][ T984] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 75.850459][ T30] audit: type=1326 audit(1767663978.990:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa807b74749 code=0x7ffc0000 [ 75.874849][ T30] audit: type=1326 audit(1767663978.990:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa807b74749 code=0x7ffc0000 [ 75.899222][ T30] audit: type=1326 audit(1767663978.990:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa807b74749 code=0x7ffc0000 [ 75.922882][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 75.928064][ T30] audit: type=1326 audit(1767663978.990:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1871 comm="syz.2.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa807b74749 code=0x7ffc0000 [ 75.994897][ T1875] loop2: detected capacity change from 0 to 256 [ 76.021144][ T453] usb 6-1: device descriptor read/64, error -71 [ 76.039647][ T1875] FAT-fs (loop2): Directory bread(block 64) failed [ 76.046359][ T1875] FAT-fs (loop2): Directory bread(block 65) failed [ 76.053011][ T1875] FAT-fs (loop2): Directory bread(block 66) failed [ 76.059585][ T1875] FAT-fs (loop2): Directory bread(block 67) failed [ 76.066222][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.066549][ T1875] FAT-fs (loop2): Directory bread(block 68) failed [ 76.077535][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.084727][ T1875] FAT-fs (loop2): Directory bread(block 69) failed [ 76.094134][ T20] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 76.102791][ T1875] FAT-fs (loop2): Directory bread(block 70) failed [ 76.109476][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.116906][ T1875] FAT-fs (loop2): Directory bread(block 71) failed [ 76.126439][ T20] usb 4-1: config 0 descriptor?? [ 76.135561][ T1875] FAT-fs (loop2): Directory bread(block 72) failed [ 76.141602][ T984] usb 7-1: device descriptor read/64, error -71 [ 76.142534][ T1875] FAT-fs (loop2): Directory bread(block 73) failed [ 76.291106][ T453] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 76.481135][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 76.534111][ T984] usb 7-1: device descriptor read/64, error -71 [ 76.561095][ T453] usb 6-1: device descriptor read/64, error -71 [ 76.593402][ T1841] UDC core: couldn't find an available UDC or it's busy: -16 [ 76.600867][ T1841] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 76.612464][ T1889] device bridge0 entered promiscuous mode [ 76.671143][ T20] usbhid 4-1:0.0: can't add hid device: -71 [ 76.677364][ T20] usbhid: probe of 4-1:0.0 failed with error -71 [ 76.685264][ T20] usb 4-1: USB disconnect, device number 10 [ 76.740621][ T1894] loop3: detected capacity change from 0 to 40427 [ 76.781718][ T1894] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 76.789577][ T1894] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 76.798786][ T1894] F2FS-fs (loop3): invalid crc value [ 76.806262][ T1894] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.811378][ T984] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 76.844862][ T1894] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 76.852026][ T1894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 76.871197][ T6] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 76.881441][ T6] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 76.891691][ T6] usb 3-1: config 1 interface 0 has no altsetting 0 [ 76.957216][ T1900] netlink: 64 bytes leftover after parsing attributes in process `syz.3.315'. [ 76.971373][ T453] usb 6-1: device descriptor read/64, error -71 [ 77.061232][ T6] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 77.073315][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.081835][ T6] usb 3-1: Product: syz [ 77.086111][ T6] usb 3-1: Manufacturer: syz [ 77.090766][ T6] usb 3-1: SerialNumber: syz [ 77.096008][ T453] usb usb6-port1: attempt power cycle [ 77.111184][ T984] usb 7-1: device descriptor read/64, error -71 [ 77.121162][ T1877] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 77.128189][ T1877] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 77.511153][ T453] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 77.531275][ T984] usb 7-1: device descriptor read/64, error -71 [ 77.651147][ T984] usb usb7-port1: attempt power cycle [ 77.681219][ T453] usb 6-1: device descriptor read/8, error -71 [ 77.824203][ T1877] loop2: detected capacity change from 0 to 512 [ 77.951228][ T453] usb 6-1: device descriptor read/8, error -71 [ 78.015355][ T1925] netlink: 44 bytes leftover after parsing attributes in process `syz.5.321'. [ 78.024563][ T1925] netem: unknown loss type 12 [ 78.029274][ T1925] netem: change failed [ 78.034186][ T1925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.321'. [ 78.061179][ T984] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 78.204177][ T1948] loop1: detected capacity change from 0 to 128 [ 78.228433][ T1950] loop5: detected capacity change from 0 to 512 [ 78.234886][ T984] usb 7-1: device descriptor read/8, error -71 [ 78.242414][ T1948] attempt to access beyond end of device [ 78.242414][ T1948] loop1: rw=2049, want=1041, limit=128 [ 78.264020][ T1950] EXT4-fs (loop5): 1 orphan inode deleted [ 78.269800][ T1950] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.280583][ T1950] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.335921][ T1957] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 78.343539][ T20] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 78.382206][ T1961] netlink: 3 bytes leftover after parsing attributes in process `syz.5.336'. [ 78.514127][ T1976] loop5: detected capacity change from 0 to 128 [ 78.521385][ T984] usb 7-1: device descriptor read/8, error -71 [ 78.553992][ T1976] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.566236][ T1979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.343'. [ 78.583169][ T1976] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.623051][ T1981] 9pnet: Insufficient options for proto=fd [ 78.656810][ T1985] netlink: 'syz.1.347': attribute type 29 has an invalid length. [ 78.721243][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 57504, setting to 64 [ 78.735726][ T2000] loop6: detected capacity change from 0 to 128 [ 78.772487][ T2000] FAT-fs (loop6): Directory bread(block 524322) failed [ 78.779439][ T2000] FAT-fs (loop6): Directory bread(block 524323) failed [ 78.786968][ T2000] FAT-fs (loop6): Directory bread(block 524324) failed [ 78.796908][ T2000] FAT-fs (loop6): Directory bread(block 524325) failed [ 78.803954][ T2000] FAT-fs (loop6): Directory bread(block 524326) failed [ 78.816544][ T2000] FAT-fs (loop6): Directory bread(block 524327) failed [ 78.825255][ T2000] FAT-fs (loop6): Directory bread(block 524328) failed [ 78.832459][ T2000] FAT-fs (loop6): Directory bread(block 524329) failed [ 78.842722][ T2000] FAT-fs (loop6): Directory bread(block 524322) failed [ 78.853997][ T2000] FAT-fs (loop6): Directory bread(block 524323) failed [ 78.891231][ T20] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 78.907678][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.921144][ T20] usb 4-1: Product: syz [ 78.925357][ T20] usb 4-1: Manufacturer: syz [ 78.935993][ T20] usb 4-1: SerialNumber: syz [ 78.957387][ T20] usb 4-1: config 0 descriptor?? [ 78.981160][ T1930] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.000172][ T2025] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.008766][ T20] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 79.166159][ T2040] loop1: detected capacity change from 0 to 8192 [ 79.209538][ T453] usb 4-1: USB disconnect, device number 11 [ 79.276520][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 79.276537][ T30] audit: type=1326 audit(1767663982.500:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 79.312135][ T30] audit: type=1326 audit(1767663982.530:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 79.335902][ T30] audit: type=1326 audit(1767663982.530:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 79.359705][ T30] audit: type=1326 audit(1767663982.530:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 79.384027][ T30] audit: type=1326 audit(1767663982.530:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 79.432775][ T30] audit: type=1326 audit(1767663982.530:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 79.464339][ T30] audit: type=1326 audit(1767663982.530:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 79.495191][ T30] audit: type=1326 audit(1767663982.530:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2055 comm="syz.1.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 79.518894][ T30] audit: type=1326 audit(1767663982.680:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 79.545334][ T30] audit: type=1326 audit(1767663982.680:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7ff45793f749 code=0x7ffc0000 [ 79.707658][ T2079] loop1: detected capacity change from 0 to 8192 [ 79.742340][ T984] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.752015][ T984] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.759762][ T984] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.771206][ T282] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 79.782532][ T282] FAT-fs (loop1): Filesystem has been set read-only [ 79.796741][ T984] rtc_cmos 00:00: Alarms can be up to one day in the future [ 79.812087][ T984] rtc rtc0: __rtc_set_alarm: err=-22 [ 79.840375][ T2091] bridge: RTM_NEWNEIGH with invalid ether address [ 79.965981][ T2113] loop3: detected capacity change from 0 to 1024 [ 80.016156][ T2126] loop5: detected capacity change from 0 to 512 [ 80.032803][ T2113] EXT4-fs (loop3): Ignoring removed bh option [ 80.051353][ T2126] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 80.071149][ T2126] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.091133][ T6] rtl8150 3-1:1.0: couldn't reset the device [ 80.098732][ T6] rtl8150: probe of 3-1:1.0 failed with error -5 [ 80.106194][ T2113] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 80.116941][ T2126] FAT-fs (loop5): FAT read failed (blocknr 128) [ 80.237171][ T6] usb 3-1: USB disconnect, device number 8 [ 80.292166][ T2154] syz.3.418[2154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.292241][ T2154] syz.3.418[2154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.507337][ T2159] loop3: detected capacity change from 0 to 1024 [ 80.581968][ T2167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2167 comm=syz.1.428 [ 80.597356][ T2159] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 80.631305][ T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 80.632497][ T2159] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 80.668335][ T2159] EXT4-fs (loop3): orphan cleanup on readonly fs [ 80.678703][ T2159] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.424: Inode bitmap for bg 0 marked uninitialized [ 80.692920][ T2159] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.722293][ T2159] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 80.971265][ T6] usb 3-1: device descriptor read/all, error -71 [ 81.083141][ T2176] capability: warning: `syz.5.432' uses 32-bit capabilities (legacy support in use) [ 81.111974][ T2194] 9pnet_virtio: no channels available for device [ 81.122599][ T2190] loop1: detected capacity change from 0 to 1024 [ 81.162080][ T2199] loop6: detected capacity change from 0 to 128 [ 81.176596][ T2190] EXT4-fs (loop1): Ignoring removed bh option [ 81.200997][ T2203] loop3: detected capacity change from 0 to 1024 [ 81.208866][ T2190] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,errors=continue,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 81.240114][ T2190] EXT4-fs error (device loop1): mb_free_blocks:1860: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 81.262199][ T2203] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.288851][ T2203] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 81.298794][ T2190] EXT4-fs (loop1): Remounting filesystem read-only [ 81.299790][ T2199] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue. Quota mode: none. [ 81.325718][ T2199] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.331192][ T2203] JBD2: no valid journal superblock found [ 81.350688][ T2203] EXT4-fs (loop3): error loading journal [ 81.428870][ T2227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.455'. [ 81.434786][ T2221] loop6: detected capacity change from 0 to 1024 [ 81.469423][ T2231] 9pnet_virtio: no channels available for device 127.0.0.1 [ 81.489045][ T2231] loop2: detected capacity change from 0 to 512 [ 81.509971][ T2231] ------------[ cut here ]------------ [ 81.516470][ T2231] EA inode 11 i_nlink=2 [ 81.516686][ T2231] WARNING: CPU: 0 PID: 2231 at fs/ext4/xattr.c:1022 ext4_xattr_inode_update_ref+0x4ad/0x510 [ 81.531612][ T2221] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.545006][ T2231] Modules linked in: [ 81.548944][ T2231] CPU: 0 PID: 2231 Comm: syz.2.457 Not tainted syzkaller #0 [ 81.556579][ T2231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.566934][ T2231] RIP: 0010:ext4_xattr_inode_update_ref+0x4ad/0x510 [ 81.573752][ T2231] Code: 8d 7d 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 d4 99 be ff 49 8b 37 48 c7 c7 c0 2f 4f 85 89 da e8 f3 44 b7 02 <0f> 0b 4c 8b 6c 24 10 4c 8b 7c 24 08 4c 8d 64 24 60 e9 b4 fe ff ff [ 81.593811][ T2231] RSP: 0018:ffffc900023f6ee0 EFLAGS: 00010246 [ 81.600315][ T2231] RAX: 0d79968a47de8200 RBX: 0000000000000002 RCX: 0000000000080000 [ 81.608647][ T2231] RDX: ffffc90002740000 RSI: 00000000000071c6 RDI: 00000000000071c7 [ 81.616858][ T2231] RBP: ffffc900023f6fd0 R08: dffffc0000000000 R09: ffffed103ee04e93 [ 81.625115][ T2231] R10: ffffed103ee04e93 R11: 1ffff1103ee04e92 R12: ffffc900023f6f40 [ 81.633455][ T2231] R13: ffff888138e7d900 R14: dffffc0000000000 R15: ffff888138e7d940 [ 81.641698][ T2231] FS: 00007fa8065dc6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 81.650692][ T2231] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.657587][ T2231] CR2: 00007f216d55fd58 CR3: 0000000127c32000 CR4: 00000000003506b0 [ 81.665783][ T2231] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.674048][ T2231] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.682209][ T2231] Call Trace: [ 81.685597][ T2231] [ 81.689955][ T2231] ? ext4_xattr_block_csum+0x530/0x530 [ 81.695827][ T2231] ? __kasan_check_write+0x14/0x20 [ 81.707399][ T2243] bridge0: port 3(gretap0) entered blocking state [ 81.711440][ T2231] ? ext4_xattr_inode_iget+0x266/0x350 [ 81.728165][ T2231] ext4_xattr_set_entry+0xee1/0x37d0 [ 81.733747][ T2243] bridge0: port 3(gretap0) entered disabled state [ 81.740706][ T2231] ? mb_cache_entry_create+0x6bf/0x8a0 [ 81.746997][ T2243] device gretap0 entered promiscuous mode [ 81.752984][ T2231] ? ext4_xattr_ibody_set+0x360/0x360 [ 81.758420][ T2231] ? ext4_xattr_block_set+0x1d82/0x2cb0 [ 81.764469][ T2243] bridge0: port 3(gretap0) entered blocking state [ 81.770964][ T2243] bridge0: port 3(gretap0) entered forwarding state [ 81.778249][ T2231] ? __kasan_check_write+0x14/0x20 [ 81.783569][ T2231] ? __ext4_xattr_check_block+0x7ea/0x8e0 [ 81.789394][ T2231] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 81.795744][ T2231] ext4_xattr_ibody_set+0x122/0x360 [ 81.801966][ T2231] ext4_expand_extra_isize_ea+0x1169/0x1a10 [ 81.808118][ T2231] __ext4_expand_extra_isize+0x2fe/0x3e0 [ 81.814643][ T2231] __ext4_mark_inode_dirty+0x3d4/0x610 [ 81.820591][ T2231] ext4_evict_inode+0xc01/0x1450 [ 81.833133][ T2231] ? _raw_spin_unlock+0x4d/0x70 [ 81.841711][ T2231] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 81.850394][ T2247] loop5: detected capacity change from 0 to 512 [ 81.857433][ T2231] ? unlock_new_inode+0x97/0xc0 [ 81.862713][ T2231] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 81.872693][ T2231] evict+0x485/0x870 [ 81.876990][ T2231] ? proc_nr_inodes+0x310/0x310 [ 81.882091][ T2231] ? _raw_spin_lock+0x8e/0xe0 [ 81.886981][ T2231] ? _raw_spin_trylock_bh+0x130/0x130 [ 81.892664][ T2231] ? __kasan_check_write+0x14/0x20 [ 81.898336][ T2231] iput+0x635/0x7c0 [ 81.914861][ T2231] ext4_process_orphan+0x2b1/0x320 [ 81.919796][ T2247] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.921418][ T2231] ext4_orphan_cleanup+0x9d1/0x10c0 [ 81.937165][ T2231] ? ext4_orphan_del+0xb90/0xb90 [ 81.942314][ T2231] ? ext4_register_sysfs+0x285/0x2c0 [ 81.947849][ T2231] ? errseq_check_and_advance+0x66/0x130 [ 81.953723][ T2231] ext4_fill_super+0x8974/0x9090 [ 81.959195][ T2231] ? ext4_mount+0x40/0x40 [ 81.963830][ T2231] ? set_blocksize+0x1fc/0x380 [ 81.968763][ T2231] ? sb_set_blocksize+0xaa/0xf0 [ 81.974063][ T2231] ? ext4_mount+0x40/0x40 [ 81.978574][ T2231] mount_bdev+0x2ae/0x3e0 [ 81.983105][ T2231] ? ext4_mount+0x40/0x40 [ 81.987666][ T2231] ext4_mount+0x34/0x40 [ 81.992047][ T2231] legacy_get_tree+0xed/0x190 [ 81.997111][ T2231] ? ext4_errno_to_code+0x160/0x160 [ 82.003073][ T2231] vfs_get_tree+0x89/0x260 [ 82.007658][ T2231] do_new_mount+0x25a/0xa20 [ 82.012574][ T2231] path_mount+0x675/0x1020 [ 82.017222][ T2231] ? user_path_at_empty+0x161/0x1c0 [ 82.022623][ T2231] __se_sys_mount+0x318/0x380 [ 82.027512][ T2231] ? __x64_sys_mount+0xd0/0xd0 [ 82.031788][ T2247] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.032833][ T2231] __x64_sys_mount+0xbf/0xd0 [ 82.047528][ T2231] x64_sys_call+0x6bf/0x9a0 [ 82.052228][ T2231] do_syscall_64+0x4c/0xa0 [ 82.056818][ T2231] ? clear_bhb_loop+0x50/0xa0 [ 82.061782][ T2231] ? clear_bhb_loop+0x50/0xa0 [ 82.066614][ T2231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.072803][ T2231] RIP: 0033:0x7fa807b75eea [ 82.077398][ T2231] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.111785][ T2247] SELinux: Context @ is not valid (left unmapped). [ 82.113098][ T2231] RSP: 002b:00007fa8065dbe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.152201][ T2231] RAX: ffffffffffffffda RBX: 00007fa8065dbef0 RCX: 00007fa807b75eea [ 82.161871][ T2231] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa8065dbeb0 [ 82.170163][ T2231] RBP: 0000200000000180 R08: 00007fa8065dbef0 R09: 0000000000800700 [ 82.191002][ T2231] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 82.199197][ T2231] R13: 00007fa8065dbeb0 R14: 000000000000046f R15: 000000000000002c [ 82.207592][ T2231] [ 82.210649][ T2231] ---[ end trace e2ab65e3b8010c57 ]--- [ 82.216524][ T2231] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #18: comm syz.2.457: iget: bad extra_isize 90 (inode size 256) [ 82.230245][ T2231] EXT4-fs (loop2): Remounting filesystem read-only [ 82.248684][ T2231] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.457: error while reading EA inode 18 err=-117 [ 82.286061][ T2242] loop3: detected capacity change from 0 to 512 [ 82.292588][ T2231] EXT4-fs (loop2): Remounting filesystem read-only [ 82.299308][ T2231] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #18: comm syz.2.457: iget: bad extra_isize 90 (inode size 256) [ 82.313853][ T2231] EXT4-fs (loop2): Remounting filesystem read-only [ 82.320791][ T2231] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.457: error while reading EA inode 18 err=-117 [ 82.334474][ T2231] EXT4-fs (loop2): Remounting filesystem read-only [ 82.344192][ T2231] EXT4-fs (loop2): 1 orphan inode deleted [ 82.350061][ T2231] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 82.474090][ T2242] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.460: error while reading EA inode 32 err=-116 [ 82.492178][ T2242] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.522815][ T2242] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.460: error while reading EA inode 32 err=-116 [ 82.536722][ T2242] EXT4-fs (loop3): 1 orphan inode deleted [ 82.542983][ T2242] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,discard,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,jqfmt=vfsv1,abort,data_err=ignore,errors=continue,,errors=continue. Quota mode: none. [ 82.757531][ T2277] loop5: detected capacity change from 0 to 512 [ 82.806185][ T2277] EXT4-fs (loop5): Ignoring removed orlov option [ 82.837987][ T2277] EXT4-fs (loop5): Test dummy encryption mode enabled [ 82.849508][ T2277] EXT4-fs (loop5): Encoding requested by superblock is unknown [ 83.156857][ T2291] ================================================================== [ 83.164998][ T2291] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 83.173196][ T2291] Read of size 8 at addr ffff88811c12c4c0 by task syz.1.482/2291 [ 83.180939][ T2291] [ 83.183300][ T2291] CPU: 1 PID: 2291 Comm: syz.1.482 Tainted: G W syzkaller #0 [ 83.192003][ T2291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.202090][ T2291] Call Trace: [ 83.205392][ T2291] [ 83.208346][ T2291] __dump_stack+0x21/0x30 [ 83.212715][ T2291] dump_stack_lvl+0xee/0x150 [ 83.217331][ T2291] ? show_regs_print_info+0x20/0x20 [ 83.222554][ T2291] ? load_image+0x3a0/0x3a0 [ 83.227091][ T2291] print_address_description+0x7f/0x2c0 [ 83.232677][ T2291] ? tc_setup_flow_action+0x870/0x3240 [ 83.238170][ T2291] kasan_report+0xf1/0x140 [ 83.242619][ T2291] ? tc_setup_flow_action+0x870/0x3240 [ 83.248098][ T2291] __asan_report_load8_noabort+0x14/0x20 [ 83.253772][ T2291] tc_setup_flow_action+0x870/0x3240 [ 83.259252][ T2291] mall_replace_hw_filter+0x293/0x820 [ 83.264657][ T2291] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 83.270752][ T2291] ? mall_set_parms+0x520/0x520 [ 83.275631][ T2291] ? tcf_exts_destroy+0xb0/0xb0 [ 83.280511][ T2291] ? mall_set_parms+0x1e8/0x520 [ 83.285385][ T2291] mall_change+0x526/0x740 [ 83.289837][ T2291] ? __kasan_check_write+0x14/0x20 [ 83.294995][ T2291] ? mall_get+0xa0/0xa0 [ 83.299208][ T2291] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 83.305137][ T2291] tc_new_tfilter+0x12a2/0x1870 [ 83.310006][ T2291] ? tcf_gate_entry_destructor+0x20/0x20 [ 83.315658][ T2291] ? security_capable+0x87/0xb0 [ 83.320522][ T2291] ? ns_capable+0x8c/0xf0 [ 83.324871][ T2291] ? netlink_net_capable+0x125/0x160 [ 83.330167][ T2291] ? tcf_gate_entry_destructor+0x20/0x20 [ 83.335857][ T2291] rtnetlink_rcv_msg+0x81b/0xb90 [ 83.340818][ T2291] ? rtnetlink_bind+0x80/0x80 [ 83.345515][ T2291] ? memcpy+0x56/0x70 [ 83.349694][ T2291] ? avc_has_perm_noaudit+0x2f4/0x460 [ 83.355090][ T2291] ? arch_stack_walk+0xee/0x140 [ 83.359971][ T2291] ? avc_denied+0x1b0/0x1b0 [ 83.364490][ T2291] ? stack_trace_save+0x98/0xe0 [ 83.369352][ T2291] ? avc_has_perm+0x158/0x240 [ 83.374040][ T2291] ? avc_has_perm_noaudit+0x460/0x460 [ 83.379433][ T2291] ? x64_sys_call+0x4b/0x9a0 [ 83.384036][ T2291] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 83.389421][ T2291] netlink_rcv_skb+0x1e0/0x430 [ 83.394197][ T2291] ? rtnetlink_bind+0x80/0x80 [ 83.398895][ T2291] ? netlink_ack+0xb60/0xb60 [ 83.403497][ T2291] ? __netlink_lookup+0x387/0x3b0 [ 83.408530][ T2291] rtnetlink_rcv+0x1c/0x20 [ 83.412954][ T2291] netlink_unicast+0x876/0xa40 [ 83.417732][ T2291] netlink_sendmsg+0x86a/0xb70 [ 83.422508][ T2291] ? netlink_getsockopt+0x530/0x530 [ 83.427722][ T2291] ? security_socket_sendmsg+0x82/0xa0 [ 83.433187][ T2291] ? netlink_getsockopt+0x530/0x530 [ 83.438393][ T2291] ____sys_sendmsg+0x5a2/0x8c0 [ 83.443167][ T2291] ? __sys_sendmsg_sock+0x40/0x40 [ 83.448199][ T2291] ? import_iovec+0x7c/0xb0 [ 83.452718][ T2291] ___sys_sendmsg+0x1f0/0x260 [ 83.457420][ T2291] ? __sys_sendmsg+0x250/0x250 [ 83.462197][ T2291] ? sock_show_fdinfo+0xa0/0xa0 [ 83.467063][ T2291] ? __fdget+0x1a1/0x230 [ 83.471322][ T2291] __x64_sys_sendmsg+0x1e2/0x2a0 [ 83.476269][ T2291] ? ___sys_sendmsg+0x260/0x260 [ 83.481130][ T2291] ? __kasan_check_write+0x14/0x20 [ 83.486256][ T2291] ? switch_fpu_return+0x15d/0x2c0 [ 83.491415][ T2291] x64_sys_call+0x4b/0x9a0 [ 83.495852][ T2291] do_syscall_64+0x4c/0xa0 [ 83.500290][ T2291] ? clear_bhb_loop+0x50/0xa0 [ 83.504974][ T2291] ? clear_bhb_loop+0x50/0xa0 [ 83.509699][ T2291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.515606][ T2291] RIP: 0033:0x7ff45793f749 [ 83.520030][ T2291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.539651][ T2291] RSP: 002b:00007ff4563a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.548091][ T2291] RAX: ffffffffffffffda RBX: 00007ff457b95fa0 RCX: 00007ff45793f749 [ 83.556070][ T2291] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 83.564049][ T2291] RBP: 00007ff4579c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 83.572058][ T2291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.580048][ T2291] R13: 00007ff457b96038 R14: 00007ff457b95fa0 R15: 00007ffecd829e78 [ 83.588030][ T2291] [ 83.591054][ T2291] [ 83.593389][ T2291] Allocated by task 2291: [ 83.597723][ T2291] __kasan_kmalloc+0xda/0x110 [ 83.602416][ T2291] __kmalloc+0x13d/0x2c0 [ 83.606667][ T2291] tcf_idr_create+0x5f/0x790 [ 83.611272][ T2291] tcf_idr_create_from_flags+0x61/0x70 [ 83.616739][ T2291] tcf_gact_init+0x346/0x580 [ 83.621343][ T2291] tcf_action_init_1+0x3f7/0x6a0 [ 83.626295][ T2291] tcf_action_init+0x1e9/0x710 [ 83.631068][ T2291] tcf_exts_validate+0x217/0x520 [ 83.636020][ T2291] mall_set_parms+0x48/0x520 [ 83.640620][ T2291] mall_change+0x45a/0x740 [ 83.645048][ T2291] tc_new_tfilter+0x12a2/0x1870 [ 83.649912][ T2291] rtnetlink_rcv_msg+0x81b/0xb90 [ 83.654861][ T2291] netlink_rcv_skb+0x1e0/0x430 [ 83.659631][ T2291] rtnetlink_rcv+0x1c/0x20 [ 83.664056][ T2291] netlink_unicast+0x876/0xa40 [ 83.668848][ T2291] netlink_sendmsg+0x86a/0xb70 [ 83.673623][ T2291] ____sys_sendmsg+0x5a2/0x8c0 [ 83.678399][ T2291] ___sys_sendmsg+0x1f0/0x260 [ 83.683087][ T2291] __x64_sys_sendmsg+0x1e2/0x2a0 [ 83.688040][ T2291] x64_sys_call+0x4b/0x9a0 [ 83.692474][ T2291] do_syscall_64+0x4c/0xa0 [ 83.696908][ T2291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.702827][ T2291] [ 83.705171][ T2291] The buggy address belongs to the object at ffff88811c12c400 [ 83.705171][ T2291] which belongs to the cache kmalloc-192 of size 192 [ 83.719230][ T2291] The buggy address is located 0 bytes to the right of [ 83.719230][ T2291] 192-byte region [ffff88811c12c400, ffff88811c12c4c0) [ 83.732861][ T2291] The buggy address belongs to the page: [ 83.738502][ T2291] page:ffffea0004704b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c12c [ 83.748790][ T2291] flags: 0x4000000000000200(slab|zone=1) [ 83.754453][ T2291] raw: 4000000000000200 ffffea0004a4e500 0000000700000003 ffff888100042c00 [ 83.763053][ T2291] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 83.771634][ T2291] page dumped because: kasan: bad access detected [ 83.778062][ T2291] page_owner tracks the page as allocated [ 83.783785][ T2291] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 648, ts 40420094953, free_ts 40215200633 [ 83.799687][ T2291] post_alloc_hook+0x192/0x1b0 [ 83.804470][ T2291] prep_new_page+0x1c/0x110 [ 83.808983][ T2291] get_page_from_freelist+0x2cc5/0x2d50 [ 83.814540][ T2291] __alloc_pages+0x18f/0x440 [ 83.819143][ T2291] new_slab+0xa1/0x4d0 [ 83.823225][ T2291] ___slab_alloc+0x381/0x810 [ 83.827830][ T2291] __slab_alloc+0x49/0x90 [ 83.832172][ T2291] kmem_cache_alloc_trace+0x146/0x270 [ 83.837557][ T2291] __se_sys_io_uring_setup+0x1319/0x29a0 [ 83.843194][ T2291] __x64_sys_io_uring_setup+0x5b/0x70 [ 83.848570][ T2291] x64_sys_call+0x5f4/0x9a0 [ 83.853084][ T2291] do_syscall_64+0x4c/0xa0 [ 83.857513][ T2291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.863418][ T2291] page last free stack trace: [ 83.868097][ T2291] free_unref_page_prepare+0x542/0x550 [ 83.873583][ T2291] free_unref_page+0xa2/0x550 [ 83.878282][ T2291] free_compound_page+0x78/0xa0 [ 83.883136][ T2291] io_ring_exit_work+0xed3/0x15e0 [ 83.888174][ T2291] process_one_work+0x6be/0xba0 [ 83.893036][ T2291] worker_thread+0xa59/0x1200 [ 83.897728][ T2291] kthread+0x411/0x500 [ 83.901811][ T2291] ret_from_fork+0x1f/0x30 [ 83.906239][ T2291] [ 83.908568][ T2291] Memory state around the buggy address: [ 83.914199][ T2291] ffff88811c12c380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 83.922260][ T2291] ffff88811c12c400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 83.930327][ T2291] >ffff88811c12c480: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 83.938383][ T2291] ^ [ 83.944548][ T2291] ffff88811c12c500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.952659][ T2291] ffff88811c12c580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 83.960732][ T2291] ================================================================== [ 83.968796][ T2291] Disabling lock debugging due to kernel taint