last executing test programs: 1m54.720581993s ago: executing program 2 (id=55): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000040)=""/47) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000080)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xbbec6941f68d2397) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x0, 0x664}, @window={0x3, 0x1, 0x9}, @window={0x3, 0xa1bc, 0xa}, @mss={0x2, 0x6}], 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000200), 0x7, 0x80000) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0xa, 0x1ff, 0xc3, 0x7f, &(0x7f0000000240)="653004071aefba9633b96e6c86185c1b5e42094bbc3662ff0ba624847e6c6c3bb59c93deeb1c63f212f8092a5c14cfda1073c1b244b4a636ecb9dc2572a3f69adb0a33bc1259e006e88bbd4891458ca54f82df77fddd2128e5ffadec37c46d9d6680c1e8a4ae5dd9b9e3126249cd2ff4c3d266d73ad739375fed05ea2e74596529ea02047dec80d59a68eac721483c863db840f17eb5a6b8b85eb85fe9d7f548c079821c31c76b992b19567a8b6e020dc1300ec27cfedb099c951514761ced223eb8cf"}) mmap$usbmon(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0xe, 0x10, r0, 0xb9) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0x2, 0x80000) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0xd8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000400)=0x6) syz_usb_connect$uac1(0x1, 0x10d, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8f, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfb, 0x3, 0x1, 0x9, 0x0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x5}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0xff, 0x4, 0x7f, 0x4, 0x8, 0x5b}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x3, 0x2, 0xf1}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x1, 0x2, [0x1, 0xa], 0xf7}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x2, "ae5f7aa54b02"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf9, 0x7, 0x4, 0x6, "8cc3"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x9, 0x9, "fde079"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x4, 0x8, "fae06f", "ae"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x56, 0x4, 0xfc, 0x5, "ad0053", 'S'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x9, 0x8, 0x0, "78a1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x58, 0x0, 0xe, 0x6, {0x7, 0x25, 0x1, 0x81, 0x0, 0x5c30}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x61, 0x7, 0x7, "b2e0a9f5ce187f546d"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xc, 0x1, 0x1, 0x4e, "57134abf67c4"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x5, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfb, 0x3, 0x3, 0x9, "8f64", 'p'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0xb, 0x6d, {0x7, 0x25, 0x1, 0x83, 0x3a}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x6, 0xeb, 0x4, 0x8, 0xfc}, 0xfa, &(0x7f00000005c0)={0x5, 0xf, 0xfa, 0x5, [@generic={0x2a, 0x10, 0x3, "a35723a7f0bb4f0c4f05240e050f4fd8ec99311ce5aab03cba0365d91b284d4c59a638543b1d9b"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x3, 0xff0f, 0xc}, @generic={0xa1, 0x10, 0x2, "4877cfe6dccff136585ccdc653202b4a26a603cdde0af8f48598ba5fab075db2d566cad9c0b6f7e5f97726f0a952b492f5408ff9e93b4b5bfb658ff55caa130885b640b42503f6eb1ac7fff98cc9f4582f5efcb7d49a3d2d649df373fecc6fc62c5891a2da769128214344d89c08070934f96c824f83d838fe511fc809ef4cd1fb2a459e57fc7bfed31ab4c2041c65d67c3dd2463f9c2cee0e78c8b7c399"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0782791af94a1bdbfc388fae70b1fd1a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x3, 0x5, 0x2}]}, 0x5, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x7e, &(0x7f0000000700)=@string={0x7e, 0x3, "5f9f26155b2c78d6d9f277e1721cec63125e315f57ec2c9a8b7ffc6861b28bb74a5667e03dec4b6a0375cc4fea0aef63e8d5bc5aff4a9be37924a6d9438622bf3fba7b9024f29718fbc01fd926521ce61db348cb627dc18d5f085d7418cc00bd28567476ee7c7e0c183f0969205d1bd10e6a6f34a5a52e642beeaacf"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x804}}, {0x27, &(0x7f00000007c0)=@string={0x27, 0x3, "bd8b1f8ec1966073f54f7c6e9d7d2bf41b52c89cbea4a757bee5c625ec50aed13b11aa8a76"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x406}}]}) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000008c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='i2c_read\x00', r0, 0x0, 0x5}, 0x18) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c800}, 0xc004) r5 = syz_clone(0x80c0000, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="8467c75641b27a1839eca51d9471d1aeb7df92558f0fef45ef4f512a6a383688c5d1798ad1f278ad96382fe7d72697f32002ad93f1ea67814d5858eec7a25e47cfdf8610925896a8e0f3b3ba4b561b49fac1dac0c7eb3e9caf3a1a77c970710d36e3200c737070") sched_setscheduler(r5, 0x701c1cbda2e5275f, &(0x7f0000000c00)=0x10000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'pimreg0\x00'}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004810}, 0x8040) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) syz_emit_ethernet(0x42, &(0x7f0000000dc0)={@local, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @private1={0xfc, 0x1, '\x00', 0x1}, @random="533827e6c537", @private1}}}}, &(0x7f0000000e40)={0x0, 0x4, [0x206, 0x851, 0x7a0, 0x52a]}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f00000011c0)={0x4, 0x0, [{0x4, 0x5f, &(0x7f0000000ec0)=""/95}, {0x5000, 0xc4, &(0x7f0000000f40)=""/196}, {0xeeef0000, 0xd0, &(0x7f0000001040)=""/208}, {0x180005, 0x5f, &(0x7f0000001140)=""/95}]}) write$snapshot(r1, &(0x7f0000001280)="a6769e169707b2199d970952192d0df72fb5a6ff82fced32d77d191b6e2e93a717f5bfc38be6a55f70a51bca9fab54fd812d6459a8c55100d69c1b", 0x3b) 1m51.524598571s ago: executing program 2 (id=77): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000d80)=ANY=[], 0x1, 0x550f, &(0x7f000000cf00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='writeback_bdi_register\x00', r5}, 0x18) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 40.287672569s ago: executing program 2 (id=87): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000c78fd96ddb", @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf25090000000c009900020000004400000007000a00a2f4d000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r6 = syz_open_dev$mouse(0x0, 0x3, 0x0) syz_clone3(&(0x7f0000000800)={0xa0020000, 0x0, 0x0, &(0x7f0000000440), {0x20}, &(0x7f00000006c0)=""/241, 0xf1, &(0x7f0000000480)=""/105, &(0x7f0000000500), 0x0, {r6}}, 0x58) r7 = socket$inet6(0xa, 0xa, 0x2400000) getsockopt$inet6_int(r7, 0x29, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='eid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x4, 0x98, 0x56, 0x20, 0xa5c, 0x6422, 0xee8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd0, 0x7, 0x2, 0xf7, 0x89, 0xdf, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}, {{0x9, 0x5, 0x7, 0x301151bc8652c9db, 0x200, 0x6, 0x3, 0x80}}]}}]}}]}}, 0x0) 40.285802719s ago: executing program 2 (id=90): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) 38.850848205s ago: executing program 2 (id=94): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7fff, 0x10000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfd, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="120000000c000000080000000b"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r8, &(0x7f0000000280), 0x0}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, 0x0, 0x0, 0x734, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 37.616603405s ago: executing program 2 (id=97): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) ptrace$peekuser(0x3, r0, 0x200) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x25dfdbff, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x5, [{}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x80000000, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 37.598298146s ago: executing program 32 (id=97): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) ptrace$peekuser(0x3, r0, 0x200) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x25dfdbff, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x5, [{}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x80000000, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.188659164s ago: executing program 1 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1.182040854s ago: executing program 1 (id=1317): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c61"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.072456654s ago: executing program 1 (id=1320): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000000980)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTuZ206bmWmSJjPV+XzgZs65907O+c79cc7MPdwbQN8aT//kIg5HxLtJxGhjfhIRQ/XUYMTJjfVura0W0ymJ9fWXf0nq69xcWy1G03tSBxuZ/0fEN29FHMltLre6vDJXKJdLi438ZG3+wmR1eeXo+fnCbGm2tHB8anr62ImnThzfvVh/+37l0LX3Xnj885N/vPm/q+98m8TJONRY1hzHbhmP8cZnMpR+hHd5frcL67Gk1xVgR9JDc2DjKI/DMRoD9RQA8E/2ekSsAwB9JtH+A0CfyX4HuLm2Wsym3v4i0V3Xn4uI/RvxZ9c3N5YMNq7Z7a9fBx25mdx1ZSSJiLFdKH88Ij7+8tVP0yn26DokQCtvXI6Is2Pjm8//yaYxC9v1RIdl+xqv4/fMd/6D7vkq7f883ar/l7vd/4kW/Z/hFsfuTtz3+D+wC4V0kPb/nm0a23arKf6GsYFG7l/1Pt9Qcu58uZSe2/4dERMxNJzmpzqUMXHjzxvtljX3/359/7VP0vLT1ztr5H4aHL77PTOFWuFBYm52/XLEI4Ot4k9ub/+kTf/39BbLePGZtz9qtyyNP403mzbHH43RSXtj/UrEYy23/50RbUnH8YmT9d1hMtspWvjihw9H2pXfvP3TKS0/+y7QDen2H+kc/1jSPF6zuv0yvrsy+nW7ZfePv/X+vy95pZ7O+hGXCrXa4lTEvuSlzfOP3Xlvls/WT+OfeLT18d9p/0+/E57dYvyD137+bOfx7600/pltbf/tJ67emhtoV/7Wtv90PTXRmLOV899WK/ggnx0AAAAAAAAAAAAAAAAAAAAAAAAAbFUuIg5FksvfTudy+fzGM7z/GyO5cqVaO3KusrQwE/VnZY/FUC671eVo0/1Qpxr3w8/yx+7JPxkR/4mID4YPJNl9FGd6HDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA62ef5/6sfhXtcOANgz+3tdAQCg67T/ANB/tP8A0H+0/wDQf7T/ANB/tP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADssdOnTqXT+u9rq8U0P3NxeWmucvHoTKk6l59fKuaLlcUL+dlKZbZcyhcr8/f7f+VK5cJ0LCxdmqyVqrXJ6vLKmfnK0kLtzPn5wmzpTGmoK1EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPZUl1fmCuVyaVFiB4n1h6MavU8MNHanh6U+XU0kD0c1djnR6ayR687JCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBv4K8AAAD//8yLIwE=") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 931.457185ms ago: executing program 1 (id=1328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 539.886316ms ago: executing program 0 (id=1365): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 492.62823ms ago: executing program 0 (id=1367): socket$inet6(0xa, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) 492.03866ms ago: executing program 4 (id=1371): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000380)=""/61, 0x3d}, {&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000008c0)=""/224, 0xe0}, {0x0}], 0x6) 450.513573ms ago: executing program 4 (id=1373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 450.288474ms ago: executing program 0 (id=1374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400"], 0x28}}, 0x0) 449.956624ms ago: executing program 4 (id=1376): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='ne'], 0x2a, 0x0) getitimer(0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x55, 0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@nodioread_nolock}, {}, {@data_err_abort}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x57d, &(0x7f0000001f80)="$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") read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 388.424659ms ago: executing program 0 (id=1380): r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) 388.007299ms ago: executing program 0 (id=1381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) getpriority(0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff0000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$P9_RFSYNC(r3, &(0x7f00000004c0)={0x7, 0x33, 0x2}, 0x7) 387.651589ms ago: executing program 0 (id=1383): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000010c0)=""/4096, 0x1000}], 0x1, 0x9, 0x5) 376.473729ms ago: executing program 4 (id=1385): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 308.586175ms ago: executing program 4 (id=1387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800001846a95302000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x20, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000001000080000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000185400000e000000000000000000000018000000407b0500000000000100000018120000", @ANYRES32=r0, @ANYBLOB="00a05a1f5eb009c43d03000000000000850000000c000000b700000000000000181200009ea16b7341b3452c45d90db76427573cf3908d23c72063f438c124eddb78388c34b1e4371288c30ccd3d055a137666da717f4f43078a20", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018370000030000000000000000000000ac504000020000008520000003000000184800000400000000000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xdf, &(0x7f00000007c0)=""/223, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x3, 0x6, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='snd_soc_jack_irq\x00', r2}, 0x18) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='system_u:object_r:gpg_agent_exec_t:s0 unconfined 0'], 0x46) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) r6 = socket(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() newfstatat(0xffffffffffffff9c, &(0x7f0000001840)='./file0\x00', &(0x7f0000001880), 0x6000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r6, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r6, &(0x7f00000001c0)={0x80000002}) 281.561767ms ago: executing program 5 (id=1392): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 200.836594ms ago: executing program 5 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 200.423104ms ago: executing program 3 (id=1394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000002c0)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r1) 200.075044ms ago: executing program 5 (id=1395): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 199.947274ms ago: executing program 3 (id=1396): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_ROPEN(r0, &(0x7f00000001c0)={0x18, 0x71, 0x1, {{0x2, 0x3, 0x6}, 0x3}}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}]}, 0x48}}, 0x0) 187.830335ms ago: executing program 3 (id=1397): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 172.804106ms ago: executing program 5 (id=1398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000fcdbdf250500000008000300", @ANYRES32=r0], 0x28}}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x80c0, 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000180)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@block_validity}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") 100.102942ms ago: executing program 3 (id=1399): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, &(0x7f00000001c0)={0x20, 0x3, 0x17, 0x1}, 0x8, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) 99.920682ms ago: executing program 5 (id=1400): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000380)={[{@quota}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@acl}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x3}}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") truncate(0x0, 0xfbb0) r2 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) fallocate(r2, 0x8, 0x4000, 0x4000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 99.735272ms ago: executing program 3 (id=1401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x103040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c00198008000100", @ANYRES32=r1], 0x40}}, 0x0) 83.589113ms ago: executing program 1 (id=1402): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4c051, 0x0, 0x0) 77.798364ms ago: executing program 3 (id=1403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x7, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x7, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 548.74µs ago: executing program 1 (id=1404): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x300000, &(0x7f0000000940)={[{@grpjquota_path={'grpjquota', 0x3d, './file0/file0'}}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10001}}, {@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fffffffffffffff}}, {@noacl}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x57c, &(0x7f0000001380)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfPdx+A/44N8w0MGQUfRBhMpNb7qsTZq2y0xtPh+42zm5N/nek3PPyTn3Jr0BDKzj6T+5iJcj4qskYqRlXT6ylcdXt1t+fHMqXZJYWfn4jyTOrXutJPt/OMu8FBE/fxFxKrcxbm1xabZUqZTns/xYfe7aWG1x6fSVudJMeaZ8dWJy8uybkxPvvP1Wz8r6+sW/vv3o/vtnvzyx/M2PD4/cTeJ8HM7WpeXqQYhbrZnjpX+yVCHOr9twvAfBdpOk3zvAjgxl7bwQaR8wEkNZqwf2vs8jYgUYUEnX9v+rPgL2pOY4oDm379E8+H/j0XurE6CN5c+vnhuJA4250aHl5KmZUTrfHe1B/DTGT7/fu5susfl5iINd8gDbcut2RJzJ5zf2f0nW/+3cmcbJ482tjzFonz/QT/fT8U9yK2JD+8+tjX+izfhnuE3b3Ynu7T/3sAdhOkrHf++2Hf+udV2jQ1nuhcaYr5BcvlIpn4mIFyPiZBT2p/nNruecXX6w0mld6/gvXdL4zbFgth8P8/uffs50qV56ljK3enQ74pW2499krf6TNvWfvh8XtxjjWPneq53WdS9/rIvaWys/RLzWtv6fXNFKNr8+OdY4HsaaR8VGf9459kun+Nsrf++l9X9o8/KPJq3Xa2vbj/H9gb/Lndbt9Pjfl3zSSO/LHrtRqtfnxyP2JR/mh9c/PvHkuc18c/u0/CdPtG//mx3/6eTr0y2W/87ROx033Q31P72t+t9+4sEHn33XKf7W6v+NRupk9shW+r+t7uCzvHcAAAAAAACw2+Qi4nAkueJaOpcrFle/33E0DuUq1Vr91OXqwtXpaPxWdjQKueaV7pGW70OMZ9+HbeYn1uUnI+JIRHw9dLCRL05VK9P9LjwAAAAAAAAAAAAAAAAAAADsEsMdfv+f+m2o33sHPHeNGxvs7/deAP3Q9Zb/vbjTE7ArdW3/wJ61/fbvzADsFT7/YXBp/zC4tH8YXFtt/4WR57wjwH/O5z8MLu0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAeurihQvpsrL8+OZUmp++vrgwW71+erpcmy3OLUwVp6rz14oz1epMpVycqs51e71KtXptfCIWbozVy7X6WG1x6dJcdeFq/dKVudJM+VK54I8NAwAAAAAAAAAAAAAAAAAAwAa1xaXZUqVSnpfomDgXzzdE9L+Aq3b09PxuqSaJnib63DEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIt/AwAA//8Zmy+w") utime(&(0x7f0000000100)='./file1\x00', 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfffffd16) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) unshare(0x22020600) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2002, 0x3, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='\x00', 0x1, 0x1, 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0xa) syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) 287.26µs ago: executing program 4 (id=1405): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000540)=[{}], 0x1, 0x7, 0x0, 0x0) 0s ago: executing program 5 (id=1406): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 22.007269][ T30] audit: type=1400 audit(1756715791.149:64): avc: denied { mounton } for pid=272 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.008675][ T272] cgroup: Unknown subsys name 'net' [ 22.030386][ T30] audit: type=1400 audit(1756715791.149:65): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.057642][ T30] audit: type=1400 audit(1756715791.179:66): avc: denied { unmount } for pid=272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.058026][ T272] cgroup: Unknown subsys name 'devices' [ 22.291186][ T272] cgroup: Unknown subsys name 'hugetlb' [ 22.296856][ T272] cgroup: Unknown subsys name 'rlimit' [ 22.467390][ T30] audit: type=1400 audit(1756715791.609:67): avc: denied { setattr } for pid=272 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.490585][ T30] audit: type=1400 audit(1756715791.609:68): avc: denied { mounton } for pid=272 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.515655][ T30] audit: type=1400 audit(1756715791.609:69): avc: denied { mount } for pid=272 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.516866][ T274] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.548071][ T30] audit: type=1400 audit(1756715791.689:70): avc: denied { relabelto } for pid=274 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.574347][ T30] audit: type=1400 audit(1756715791.689:71): avc: denied { write } for pid=274 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.580231][ T272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.600489][ T30] audit: type=1400 audit(1756715791.719:72): avc: denied { read } for pid=272 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.635005][ T30] audit: type=1400 audit(1756715791.719:73): avc: denied { open } for pid=272 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.819527][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.826971][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.834683][ T280] device bridge_slave_0 entered promiscuous mode [ 23.855179][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.862485][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.870277][ T280] device bridge_slave_1 entered promiscuous mode [ 23.887695][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.895058][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.902550][ T281] device bridge_slave_0 entered promiscuous mode [ 23.910248][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.917305][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.925256][ T281] device bridge_slave_1 entered promiscuous mode [ 23.939393][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.946461][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.954217][ T282] device bridge_slave_0 entered promiscuous mode [ 23.962520][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.969622][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.977068][ T282] device bridge_slave_1 entered promiscuous mode [ 24.104912][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.112039][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.119772][ T283] device bridge_slave_0 entered promiscuous mode [ 24.126490][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.133817][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.141344][ T284] device bridge_slave_0 entered promiscuous mode [ 24.148380][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.155519][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.163245][ T284] device bridge_slave_1 entered promiscuous mode [ 24.175324][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.182417][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.190106][ T283] device bridge_slave_1 entered promiscuous mode [ 24.296652][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.303857][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.311209][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.318471][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.366920][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.374025][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.381469][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.388622][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.402462][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.409674][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.416987][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.424175][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.446513][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.453617][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.460933][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.467968][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.486665][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.493760][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.501060][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.508209][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.529999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.538035][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.545533][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.553072][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.560520][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.568376][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.575712][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.583699][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.591197][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.598564][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.605864][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.630710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.638350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.646100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.655044][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.662335][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.670337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.678493][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.685567][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.715541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.724458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.733030][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.740174][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.748123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.756817][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.763909][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.771460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.779773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.787894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.812010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.819792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.827385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.835805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.844191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.852821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.861205][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.868349][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.875968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.883683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.891300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.900072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.908572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.917179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.925752][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.932861][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.940481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.949073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.957298][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.964363][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.973095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.981710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.990025][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.997047][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.014044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.022458][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.031247][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.038390][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.046239][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.054560][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.062765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.071244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.079736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.088000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.096410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.104731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.113052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.120812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.129676][ T282] device veth0_vlan entered promiscuous mode [ 25.140489][ T280] device veth0_vlan entered promiscuous mode [ 25.148024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.156744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.165296][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.172449][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.180451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.188338][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.196724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.204353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.223469][ T282] device veth1_macvtap entered promiscuous mode [ 25.231728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.240268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.248575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.265304][ T284] device veth0_vlan entered promiscuous mode [ 25.272577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.281036][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.288587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.296665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.305077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.313360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.321927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.330309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.340942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.349461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.361519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.369937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.378371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.386870][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.405507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.413666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.421747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.430184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.440342][ T280] device veth1_macvtap entered promiscuous mode [ 25.456245][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.464909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.473861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.482127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.491020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.499297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.509216][ T281] device veth0_vlan entered promiscuous mode [ 25.520672][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.529309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.537948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.549787][ T284] device veth1_macvtap entered promiscuous mode [ 25.567025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.576336][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 25.578716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.595659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.605004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.616206][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.624809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.660449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.678286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.687514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.696065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.708725][ T283] device veth0_vlan entered promiscuous mode [ 25.735005][ T283] device veth1_macvtap entered promiscuous mode [ 25.749849][ T281] device veth1_macvtap entered promiscuous mode [ 25.784697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.794932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.805007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.813049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.821808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.491080][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 27.491096][ T30] audit: type=1400 audit(1756715795.249:105): avc: denied { create } for pid=344 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.529048][ T30] audit: type=1400 audit(1756715795.299:106): avc: denied { setopt } for pid=344 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.558647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.567027][ T295] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 27.570489][ T30] audit: type=1400 audit(1756715795.329:107): avc: denied { write } for pid=344 comm="syz.4.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.575776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.602577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.648330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.658002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.669955][ T357] loop4: detected capacity change from 0 to 256 [ 27.671022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.686126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.721363][ T357] FAT-fs (loop4): Directory bread(block 64) failed [ 27.728103][ T357] FAT-fs (loop4): Directory bread(block 65) failed [ 27.734864][ T357] FAT-fs (loop4): Directory bread(block 66) failed [ 27.741950][ T357] FAT-fs (loop4): Directory bread(block 67) failed [ 27.748613][ T357] FAT-fs (loop4): Directory bread(block 68) failed [ 27.755206][ T357] FAT-fs (loop4): Directory bread(block 69) failed [ 27.761836][ T357] FAT-fs (loop4): Directory bread(block 70) failed [ 27.768522][ T357] FAT-fs (loop4): Directory bread(block 71) failed [ 27.775493][ T357] FAT-fs (loop4): Directory bread(block 72) failed [ 27.782068][ T357] FAT-fs (loop4): Directory bread(block 73) failed [ 27.794191][ T362] loop1: detected capacity change from 0 to 256 [ 27.824291][ T349] syz.3.4 (349) used greatest stack depth: 20800 bytes left [ 27.838333][ T30] audit: type=1400 audit(1756715796.959:108): avc: denied { mount } for pid=352 comm="syz.4.7" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.867307][ T362] FAT-fs (loop1): Directory bread(block 64) failed [ 27.874686][ T362] FAT-fs (loop1): Directory bread(block 65) failed [ 27.881503][ T362] FAT-fs (loop1): Directory bread(block 66) failed [ 27.888196][ T362] FAT-fs (loop1): Directory bread(block 67) failed [ 27.894886][ T362] FAT-fs (loop1): Directory bread(block 68) failed [ 27.901631][ T362] FAT-fs (loop1): Directory bread(block 69) failed [ 27.908200][ T362] FAT-fs (loop1): Directory bread(block 70) failed [ 27.914799][ T362] FAT-fs (loop1): Directory bread(block 71) failed [ 27.921403][ T362] FAT-fs (loop1): Directory bread(block 72) failed [ 27.928041][ T362] FAT-fs (loop1): Directory bread(block 73) failed [ 28.158427][ T30] audit: type=1400 audit(1756715797.269:109): avc: denied { create } for pid=360 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.179402][ T30] audit: type=1400 audit(1756715797.279:110): avc: denied { connect } for pid=360 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.259744][ T366] loop3: detected capacity change from 0 to 40427 [ 28.313991][ T366] F2FS-fs (loop3): invalid crc value [ 28.319176][ T295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.332007][ T366] F2FS-fs (loop3): Found nat_bits in checkpoint [ 28.359259][ T295] usb 1-1: not running at top speed; connect to a high speed hub [ 28.369065][ T366] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.377075][ T30] audit: type=1400 audit(1756715797.519:111): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.378123][ T8] attempt to access beyond end of device [ 28.378123][ T8] loop4: rw=1, want=1832, limit=256 [ 28.410779][ T30] audit: type=1400 audit(1756715797.539:112): avc: denied { mount } for pid=365 comm="syz.3.8" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.433735][ T8] attempt to access beyond end of device [ 28.433735][ T8] loop4: rw=1, want=17328, limit=256 [ 28.449187][ T295] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 28.451381][ T30] audit: type=1400 audit(1756715797.539:113): avc: denied { write } for pid=365 comm="syz.3.8" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.461604][ T295] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 28.479467][ T30] audit: type=1400 audit(1756715797.539:114): avc: denied { add_name } for pid=365 comm="syz.3.8" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.494782][ T8] attempt to access beyond end of device [ 28.494782][ T8] loop4: rw=1, want=28008, limit=256 [ 28.520665][ T295] usb 1-1: config 4 has no interface number 0 [ 28.535393][ T10] attempt to access beyond end of device [ 28.535393][ T10] loop1: rw=1, want=1832, limit=256 [ 28.537824][ T8] attempt to access beyond end of device [ 28.537824][ T8] loop4: rw=1, want=30656, limit=256 [ 28.566642][ T8] attempt to access beyond end of device [ 28.566642][ T8] loop4: rw=1, want=33800, limit=256 [ 28.607467][ T10] attempt to access beyond end of device [ 28.607467][ T10] loop1: rw=1, want=24512, limit=256 [ 28.680452][ T280] attempt to access beyond end of device [ 28.680452][ T280] loop3: rw=2049, want=45104, limit=40427 [ 28.693538][ T10] attempt to access beyond end of device [ 28.693538][ T10] loop1: rw=1, want=27016, limit=256 [ 28.716975][ T10] attempt to access beyond end of device [ 28.716975][ T10] loop1: rw=1, want=30072, limit=256 [ 29.229177][ T295] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 29.238298][ T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.289046][ T295] usb 1-1: Product: syz [ 29.309148][ T295] usb 1-1: can't set config #4, error -71 [ 29.329266][ T295] usb 1-1: USB disconnect, device number 2 [ 29.524059][ T376] loop0: detected capacity change from 0 to 40427 [ 29.539223][ T294] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.638264][ T391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.846321][ T376] F2FS-fs (loop0): invalid crc value [ 29.860058][ T376] F2FS-fs (loop0): Found nat_bits in checkpoint [ 29.898922][ T395] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 29.937925][ T376] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 29.979020][ T294] usb 3-1: Using ep0 maxpacket: 32 [ 30.119081][ T294] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 30.136644][ T294] usb 3-1: config 0 has no interface number 0 [ 30.206947][ T294] usb 3-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 30.242779][ T294] usb 3-1: config 0 interface 208 has no altsetting 0 [ 30.996573][ T402] netlink: 'syz.4.16': attribute type 5 has an invalid length. [ 31.132987][ T407] netlink: 'syz.0.15': attribute type 5 has an invalid length. [ 31.487310][ T294] usb 3-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 31.555963][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.579043][ T294] usb 3-1: Product: syz [ 31.583270][ T294] usb 3-1: Manufacturer: syz [ 31.587972][ T294] usb 3-1: SerialNumber: syz [ 31.599287][ T294] usb 3-1: config 0 descriptor?? [ 32.144966][ T294] usb 3-1: can't set config #0, error -71 [ 32.168783][ T419] loop2: detected capacity change from 0 to 256 [ 32.176113][ T294] usb 3-1: USB disconnect, device number 2 [ 32.202500][ T405] loop3: detected capacity change from 0 to 40427 [ 32.262437][ T414] loop0: detected capacity change from 0 to 40427 [ 32.295600][ T405] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 32.352312][ T405] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 32.370261][ T421] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.387265][ T414] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 32.429102][ T414] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.440032][ T405] F2FS-fs (loop3): Found nat_bits in checkpoint [ 32.478090][ T414] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 704461755581925) [ 32.506586][ T432] loop1: detected capacity change from 0 to 256 [ 32.521730][ T405] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 32.528868][ T405] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 32.549283][ T414] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 32.566728][ T414] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.574336][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 32.574349][ T30] audit: type=1400 audit(1756715801.709:134): avc: denied { setattr } for pid=404 comm="syz.3.17" name="" dev="pipefs" ino=13953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 32.609527][ T432] ======================================================= [ 32.609527][ T432] WARNING: The mand mount option has been deprecated and [ 32.609527][ T432] and is ignored by this kernel. Remove the mand [ 32.609527][ T432] option from the mount to silence this warning. [ 32.609527][ T432] ======================================================= [ 32.677090][ T30] audit: type=1400 audit(1756715801.759:135): avc: denied { mounton } for pid=431 comm="syz.1.24" path="/5/file0" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.726414][ T432] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 32.754008][ T423] loop4: detected capacity change from 0 to 40427 [ 32.839162][ T30] audit: type=1400 audit(1756715801.959:136): avc: denied { read } for pid=404 comm="syz.3.17" path="/3/file0/bus" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.878149][ T423] F2FS-fs (loop4): invalid crc value [ 33.037603][ T432] process 'syz.1.24' launched '/dev/fd/5' with NULL argv: empty string added [ 33.070162][ T30] audit: type=1400 audit(1756715802.219:137): avc: denied { execute_no_trans } for pid=431 comm="syz.1.24" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.183497][ T423] F2FS-fs (loop4): Found nat_bits in checkpoint [ 33.509090][ T30] audit: type=1400 audit(1756715802.649:138): avc: denied { read } for pid=444 comm="syz.0.25" dev="nsfs" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.533337][ T445] loop0: detected capacity change from 0 to 256 [ 33.540507][ T30] audit: type=1400 audit(1756715802.649:139): avc: denied { open } for pid=444 comm="syz.0.25" path="net:[4026532465]" dev="nsfs" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.572212][ T30] audit: type=1400 audit(1756715802.649:140): avc: denied { create } for pid=444 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 33.595335][ T423] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.603315][ T445] exfat: Bad value for 'uid' [ 33.634740][ T30] audit: type=1400 audit(1756715802.779:141): avc: denied { read } for pid=444 comm="syz.0.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.688598][ T30] audit: type=1400 audit(1756715802.829:142): avc: denied { read } for pid=444 comm="syz.0.25" name="event2" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.724145][ T284] handle_bad_sector: 3 callbacks suppressed [ 33.724165][ T284] attempt to access beyond end of device [ 33.724165][ T284] loop4: rw=2049, want=45104, limit=40427 [ 33.771451][ T30] audit: type=1400 audit(1756715802.829:143): avc: denied { open } for pid=444 comm="syz.0.25" path="/dev/input/event2" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.859409][ T445] syz.0.25 (445): /proc/444/oom_adj is deprecated, please use /proc/444/oom_score_adj instead. [ 34.412464][ T454] netlink: 'syz.3.27': attribute type 5 has an invalid length. [ 34.495106][ T447] loop1: detected capacity change from 0 to 40427 [ 34.531992][ T447] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 34.571773][ T447] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 34.592661][ T461] loop0: detected capacity change from 0 to 1024 [ 34.602567][ T461] EXT4-fs (loop0): Ignoring removed bh option [ 34.614663][ T461] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 34.668745][ T447] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.790084][ T461] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 34.816952][ T447] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 34.824356][ T447] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.119060][ T295] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.270143][ T506] loop1: detected capacity change from 0 to 128 [ 36.290301][ T506] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 36.302200][ T506] FAT-fs (loop1): Filesystem has been set read-only [ 36.360540][ T295] usb 3-1: Using ep0 maxpacket: 32 [ 36.428894][ T514] loop3: detected capacity change from 0 to 128 [ 36.499105][ T295] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 36.507398][ T295] usb 3-1: config 0 has no interface number 0 [ 36.513538][ T295] usb 3-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 36.524815][ T295] usb 3-1: config 0 interface 208 has no altsetting 0 [ 36.534212][ T514] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.547288][ T514] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.654315][ T517] netlink: 'syz.0.41': attribute type 5 has an invalid length. [ 37.629101][ T295] usb 3-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 37.642383][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.661165][ T295] usb 3-1: Product: syz [ 37.669229][ T295] usb 3-1: Manufacturer: syz [ 37.678553][ T295] usb 3-1: SerialNumber: syz [ 37.684510][ T295] usb 3-1: config 0 descriptor?? [ 37.804382][ T532] netlink: 'syz.0.43': attribute type 5 has an invalid length. [ 38.029094][ T295] usb 3-1: can't set config #0, error -71 [ 38.044462][ T295] usb 3-1: USB disconnect, device number 3 [ 38.290984][ T543] netlink: 'syz.2.48': attribute type 3 has an invalid length. [ 38.536733][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 38.536751][ T30] audit: type=1400 audit(1756715807.519:156): avc: denied { mounton } for pid=540 comm="syz.2.48" path="/7/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 38.566002][ T543] overlayfs: failed to resolve './file1': -2 [ 38.594858][ T534] loop4: detected capacity change from 0 to 40427 [ 38.630298][ T534] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 38.638556][ T534] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 38.658313][ T534] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.686520][ T30] audit: type=1326 audit(1756715807.829:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=551 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b04529be9 code=0x7ffc0000 [ 38.710205][ T534] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 38.717520][ T534] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 38.725313][ T30] audit: type=1326 audit(1756715807.829:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=551 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b04529be9 code=0x7ffc0000 [ 38.749882][ T30] audit: type=1326 audit(1756715807.859:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=551 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f9b04529be9 code=0x7ffc0000 [ 38.826704][ T30] audit: type=1326 audit(1756715807.859:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=551 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b04529be9 code=0x7ffc0000 [ 38.868585][ T30] audit: type=1326 audit(1756715807.859:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=551 comm="syz.0.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b04529be9 code=0x7ffc0000 [ 38.892079][ T30] audit: type=1400 audit(1756715807.919:162): avc: denied { create } for pid=554 comm="syz.0.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.912220][ T30] audit: type=1326 audit(1756715807.929:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b04529be9 code=0x7ffc0000 [ 38.967756][ T30] audit: type=1326 audit(1756715807.929:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b04529be9 code=0x7ffc0000 [ 39.019774][ T30] audit: type=1326 audit(1756715807.929:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=554 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b0452869f code=0x7ffc0000 [ 39.619023][ T332] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 39.801325][ T579] loop4: detected capacity change from 0 to 128 [ 39.831642][ T579] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.847998][ T581] netlink: 180 bytes leftover after parsing attributes in process `syz.1.60'. [ 39.859273][ T579] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.889041][ T332] usb 3-1: device descriptor read/64, error -71 [ 40.279100][ T332] usb 3-1: device descriptor read/64, error -71 [ 40.549026][ T332] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 40.663021][ T604] loop0: detected capacity change from 0 to 512 [ 40.673823][ T604] EXT4-fs (loop0): Ignoring removed nobh option [ 40.690978][ T604] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.66: iget: bad i_size value: 38620345925642 [ 40.704995][ T604] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.66: couldn't read orphan inode 15 (err -117) [ 40.719176][ T604] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 41.098921][ T619] loop3: detected capacity change from 0 to 128 [ 41.109066][ T332] usb 3-1: device descriptor read/64, error -71 [ 41.140359][ T10] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap [ 41.164235][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 41.197204][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.197204][ T10] [ 41.217123][ T10] EXT4-fs (loop0): Total free blocks count 0 [ 41.237339][ T10] EXT4-fs (loop0): Free/Dirty block details [ 41.247851][ T10] EXT4-fs (loop0): free_blocks=0 [ 41.257563][ T10] EXT4-fs (loop0): dirty_blocks=6824 [ 41.267670][ T10] EXT4-fs (loop0): Block reservation details [ 41.283940][ T10] EXT4-fs (loop0): i_reserved_data_blocks=6824 [ 41.315045][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 41.338571][ T620] loop4: detected capacity change from 0 to 40427 [ 41.345121][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.345121][ T10] [ 41.366372][ T620] F2FS-fs (loop4): invalid crc value [ 41.440337][ T620] F2FS-fs (loop4): Found nat_bits in checkpoint [ 41.499114][ T332] usb 3-1: device descriptor read/64, error -71 [ 41.577480][ T620] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 41.619527][ T332] usb usb3-port1: attempt power cycle [ 41.909247][ T284] attempt to access beyond end of device [ 41.909247][ T284] loop4: rw=2049, want=45104, limit=40427 [ 42.041538][ T644] netlink: 'syz.1.75': attribute type 5 has an invalid length. [ 42.291015][ T332] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 42.541663][ T659] loop3: detected capacity change from 0 to 2048 [ 42.581403][ T659] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.606409][ T646] loop2: detected capacity change from 0 to 40427 [ 42.646297][ T659] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.661847][ T659] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 42.684725][ T646] F2FS-fs (loop2): invalid crc value [ 42.710186][ T659] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.710186][ T659] [ 42.728259][ T646] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.746259][ T659] EXT4-fs (loop3): Total free blocks count 0 [ 42.758911][ T659] EXT4-fs (loop3): Free/Dirty block details [ 42.765367][ T659] EXT4-fs (loop3): free_blocks=2415919104 [ 42.769103][ T332] usb 3-1: device not accepting address 6, error -71 [ 42.771323][ T659] EXT4-fs (loop3): dirty_blocks=48 [ 42.783075][ T659] EXT4-fs (loop3): Block reservation details [ 42.789136][ T659] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 42.818554][ T646] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.839812][ T663] attempt to access beyond end of device [ 42.839812][ T663] loop2: rw=2049, want=45104, limit=40427 [ 42.895582][ T673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 43.759104][ T332] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.849130][ T332] usb 3-1: Using ep0 maxpacket: 32 [ 43.969115][ T332] usb 3-1: config 0 has an invalid interface number: 208 but max is 0 [ 43.977479][ T332] usb 3-1: config 0 has no interface number 0 [ 43.983820][ T332] usb 3-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 43.995504][ T332] usb 3-1: config 0 interface 208 has no altsetting 0 [ 44.159123][ T332] usb 3-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 44.168224][ T332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.176377][ T332] usb 3-1: Product: syz [ 44.180755][ T332] usb 3-1: Manufacturer: syz [ 44.185445][ T332] usb 3-1: SerialNumber: syz [ 44.190853][ T332] usb 3-1: config 0 descriptor?? [ 44.229866][ T332] ftdi_sio 3-1:0.208: FTDI USB Serial Device converter detected [ 44.238551][ T332] usb 3-1: Detected FT-X [ 46.259113][ T332] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 46.279105][ T332] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 46.299149][ T332] ftdi_sio 3-1:0.208: GPIO initialisation failed: -71 [ 46.306577][ T332] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 46.316235][ T332] usb 3-1: USB disconnect, device number 7 [ 46.324127][ T332] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 46.333888][ T332] ftdi_sio 3-1:0.208: device disconnected [ 113.532429][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 113.532448][ T30] audit: type=1326 audit(1756715882.679:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 113.588993][ T30] audit: type=1326 audit(1756715882.679:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 113.643687][ T30] audit: type=1326 audit(1756715882.679:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94e088bc23 code=0x7ffc0000 [ 113.766073][ T30] audit: type=1326 audit(1756715882.679:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94e088a69f code=0x7ffc0000 [ 113.805690][ T698] loop2: detected capacity change from 0 to 256 [ 113.867594][ T699] netlink: 'syz.4.92': attribute type 5 has an invalid length. [ 113.884767][ T698] FAT-fs (loop2): Directory bread(block 64) failed [ 113.891602][ T698] FAT-fs (loop2): Directory bread(block 65) failed [ 113.898616][ T698] FAT-fs (loop2): Directory bread(block 66) failed [ 113.905425][ T698] FAT-fs (loop2): Directory bread(block 67) failed [ 113.912335][ T698] FAT-fs (loop2): Directory bread(block 68) failed [ 113.919086][ T698] FAT-fs (loop2): Directory bread(block 69) failed [ 113.926173][ T698] FAT-fs (loop2): Directory bread(block 70) failed [ 113.933048][ T698] FAT-fs (loop2): Directory bread(block 71) failed [ 113.940068][ T698] FAT-fs (loop2): Directory bread(block 72) failed [ 113.947003][ T698] FAT-fs (loop2): Directory bread(block 73) failed [ 114.886441][ T283] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 114.919530][ T30] audit: type=1326 audit(1756715882.679:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f94e088bc77 code=0x7ffc0000 [ 114.942836][ T332] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 114.943257][ T283] FAT-fs (loop2): Filesystem has been set read-only [ 114.981578][ T283] attempt to access beyond end of device [ 114.981578][ T283] loop2: rw=2051, want=1160, limit=256 [ 114.999434][ T30] audit: type=1326 audit(1756715882.679:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94e088a550 code=0x7ffc0000 [ 115.307559][ T704] loop4: detected capacity change from 0 to 1024 [ 115.332463][ T30] audit: type=1326 audit(1756715882.679:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f94e088a84a code=0x7ffc0000 [ 115.364253][ T704] EXT4-fs (loop4): filesystem is read-only [ 115.370420][ T704] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 115.549954][ T30] audit: type=1326 audit(1756715882.679:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 115.732630][ T709] netlink: 'syz.1.93': attribute type 5 has an invalid length. [ 115.799324][ T712] loop4: detected capacity change from 0 to 256 [ 115.824520][ T30] audit: type=1326 audit(1756715882.709:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 115.877719][ T30] audit: type=1326 audit(1756715882.709:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=686 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 115.916552][ T712] FAT-fs (loop4): Directory bread(block 64) failed [ 115.923438][ T712] FAT-fs (loop4): Directory bread(block 65) failed [ 115.930145][ T712] FAT-fs (loop4): Directory bread(block 66) failed [ 115.936691][ T712] FAT-fs (loop4): Directory bread(block 67) failed [ 115.943422][ T712] FAT-fs (loop4): Directory bread(block 68) failed [ 115.950257][ T712] FAT-fs (loop4): Directory bread(block 69) failed [ 115.956941][ T712] FAT-fs (loop4): Directory bread(block 70) failed [ 115.963620][ T712] FAT-fs (loop4): Directory bread(block 71) failed [ 115.970210][ T712] FAT-fs (loop4): Directory bread(block 72) failed [ 115.976743][ T712] FAT-fs (loop4): Directory bread(block 73) failed [ 116.332614][ T332] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 116.352346][ T332] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 116.363649][ T719] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.370859][ T719] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.378108][ T332] usb 1-1: config 135 has no interface number 0 [ 116.925839][ T719] device bridge_slave_0 entered promiscuous mode [ 116.953616][ T43] attempt to access beyond end of device [ 116.953616][ T43] loop4: rw=1, want=1832, limit=256 [ 116.988025][ T332] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 116.988621][ T724] netlink: 'syz.1.99': attribute type 5 has an invalid length. [ 116.999701][ T332] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 117.028561][ T43] attempt to access beyond end of device [ 117.028561][ T43] loop4: rw=1, want=4952, limit=256 [ 117.048736][ T332] usb 1-1: config 135 interface 230 has no altsetting 0 [ 117.136880][ T719] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.149842][ T719] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.157647][ T719] device bridge_slave_1 entered promiscuous mode [ 117.165633][ T43] attempt to access beyond end of device [ 117.165633][ T43] loop4: rw=1, want=33800, limit=256 [ 117.322552][ T733] loop0: detected capacity change from 0 to 512 [ 117.696776][ T733] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 117.710072][ T733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.807959][ T332] usb 1-1: string descriptor 0 read error: -71 [ 117.882442][ T332] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 117.899684][ T733] EXT4-fs (loop0): 1 truncate cleaned up [ 117.905498][ T733] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: none. [ 118.060200][ T566] device bridge_slave_1 left promiscuous mode [ 119.529071][ T566] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.547147][ T566] device bridge_slave_0 left promiscuous mode [ 119.553514][ T566] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.570452][ T566] device veth1_macvtap left promiscuous mode [ 119.576750][ T566] device veth0_vlan left promiscuous mode [ 119.690069][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.751754][ T332] usb 1-1: can't set config #135, error -71 [ 119.760899][ T332] usb 1-1: USB disconnect, device number 3 [ 120.300920][ T749] loop0: detected capacity change from 0 to 40427 [ 120.320259][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.328084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.342732][ T749] F2FS-fs (loop0): invalid crc value [ 120.362718][ T719] device veth0_vlan entered promiscuous mode [ 120.400333][ T753] loop4: detected capacity change from 0 to 40427 [ 120.423706][ T719] device veth1_macvtap entered promiscuous mode [ 120.443378][ T6] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.484780][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.493738][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.503104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.512927][ T753] F2FS-fs (loop4): invalid crc value [ 120.519169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.527459][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.535580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.564115][ T749] F2FS-fs (loop0): Found nat_bits in checkpoint [ 120.578726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.588125][ T753] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.599446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.618193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.636871][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.644034][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.678500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 120.691367][ T753] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.699124][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 120.715663][ T749] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.723962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.744819][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.751933][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.782944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.839151][ T6] usb 4-1: config 0 has an invalid interface number: 208 but max is 0 [ 120.849395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.857983][ T6] usb 4-1: config 0 has no interface number 0 [ 120.864900][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.880328][ T6] usb 4-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.894990][ T6] usb 4-1: config 0 interface 208 has no altsetting 0 [ 120.895074][ T768] netlink: 'syz.5.98': attribute type 5 has an invalid length. [ 120.999156][ T779] syz.1.107[779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.999745][ T779] syz.1.107[779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.444534][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 121.444555][ T30] audit: type=1400 audit(1756715890.339:271): avc: denied { connect } for pid=776 comm="syz.1.107" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.513308][ T282] attempt to access beyond end of device [ 121.513308][ T282] loop0: rw=2049, want=45104, limit=40427 [ 121.542390][ T284] attempt to access beyond end of device [ 121.542390][ T284] loop4: rw=2049, want=45104, limit=40427 [ 121.864301][ T782] loop5: detected capacity change from 0 to 40427 [ 121.920846][ T782] F2FS-fs (loop5): invalid crc value [ 121.929072][ T6] usb 4-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 121.938580][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.939017][ T30] audit: type=1400 audit(1756715891.029:272): avc: denied { ioctl } for pid=787 comm="syz.4.109" path="socket:[16367]" dev="sockfs" ino=16367 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.988318][ T6] usb 4-1: Product: syz [ 121.992601][ T6] usb 4-1: Manufacturer: syz [ 121.997362][ T6] usb 4-1: SerialNumber: syz [ 122.002996][ T6] usb 4-1: config 0 descriptor?? [ 122.008005][ T782] F2FS-fs (loop5): Found nat_bits in checkpoint [ 122.336435][ T6] ftdi_sio 4-1:0.208: FTDI USB Serial Device converter detected [ 122.345017][ T6] usb 4-1: Detected FT-X [ 122.398399][ T782] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 122.486531][ T784] loop0: detected capacity change from 0 to 40427 [ 122.525770][ T719] attempt to access beyond end of device [ 122.525770][ T719] loop5: rw=2049, want=45104, limit=40427 [ 122.544647][ T784] F2FS-fs (loop0): invalid crc value [ 122.551173][ T792] loop4: detected capacity change from 0 to 40427 [ 122.570094][ T784] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.601063][ T792] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 122.619213][ T792] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 122.632533][ T784] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.638226][ T792] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.716213][ T792] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 122.727577][ T792] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.750181][ T282] attempt to access beyond end of device [ 122.750181][ T282] loop0: rw=2049, want=45104, limit=40427 [ 122.812911][ T30] audit: type=1400 audit(1756715891.939:273): avc: denied { setattr } for pid=791 comm="syz.4.112" name="" dev="pipefs" ino=13958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 123.228548][ T808] netlink: 'syz.5.113': attribute type 5 has an invalid length. [ 123.509529][ T30] audit: type=1400 audit(1756715892.649:274): avc: denied { create } for pid=814 comm="syz.0.115" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.532375][ T30] audit: type=1400 audit(1756715892.649:275): avc: denied { mounton } for pid=814 comm="syz.0.115" path="/23/file0" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.572220][ T30] audit: type=1400 audit(1756715892.719:276): avc: denied { unlink } for pid=282 comm="syz-executor" name="file0" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.810492][ T823] netlink: 'syz.0.116': attribute type 5 has an invalid length. [ 123.832878][ T284] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 123.832942][ T284] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 123.895887][ T284] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 123.992425][ T284] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 124.013314][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 124.029740][ T284] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 124.029762][ T284] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 124.037415][ T284] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 124.045637][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 124.060587][ T30] audit: type=1400 audit(1756715893.209:277): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 124.081905][ T30] audit: type=1400 audit(1756715893.229:278): avc: denied { remove_name } for pid=284 comm="syz-executor" name="bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.105634][ T6] ftdi_sio 4-1:0.208: GPIO initialisation failed: -71 [ 124.114088][ T6] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 124.124100][ T6] usb 4-1: USB disconnect, device number 2 [ 124.131255][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 124.145816][ T30] audit: type=1400 audit(1756715893.229:279): avc: denied { unlink } for pid=284 comm="syz-executor" name="bus" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.176371][ T6] ftdi_sio 4-1:0.208: device disconnected [ 124.293541][ T821] loop3: detected capacity change from 0 to 40427 [ 124.316039][ T821] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 124.331964][ T821] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.359582][ T821] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.409112][ T821] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 124.446712][ T821] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.548752][ T827] loop4: detected capacity change from 0 to 40427 [ 124.569650][ T827] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 124.577531][ T827] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.609137][ T827] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.743045][ T827] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 124.750159][ T827] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 125.039356][ T842] loop5: detected capacity change from 0 to 256 [ 125.064963][ T842] FAT-fs (loop5): Unrecognized mount option "00000000000000000003Dk98RMz=)n{.Y'@|mX"jr(HUαs@TxbIw|?r" or missing value [ 125.093029][ T834] loop0: detected capacity change from 0 to 40427 [ 125.192020][ T280] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 125.192045][ T280] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 125.200381][ T280] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 125.230735][ T834] F2FS-fs (loop0): invalid crc value [ 126.279644][ T834] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.709050][ T834] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.851568][ T30] audit: type=1400 audit(1756715895.999:280): avc: denied { create } for pid=859 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.889705][ T30] audit: type=1400 audit(1756715895.999:281): avc: denied { write } for pid=859 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.918155][ T282] attempt to access beyond end of device [ 126.918155][ T282] loop0: rw=2049, want=45104, limit=40427 [ 127.008968][ T332] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 127.017337][ T858] loop3: detected capacity change from 0 to 40427 [ 127.063602][ T858] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 127.089016][ T858] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.118994][ T736] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 127.130418][ T858] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.179440][ T858] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 127.186779][ T858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.900425][ T332] usb 6-1: Using ep0 maxpacket: 32 [ 128.019294][ T332] usb 6-1: config 0 has an invalid interface number: 208 but max is 0 [ 128.029610][ T332] usb 6-1: config 0 has no interface number 0 [ 128.035737][ T332] usb 6-1: config 0 interface 208 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.051301][ T30] audit: type=1326 audit(1756715897.189:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c3dfeba7 code=0x7ffc0000 [ 128.089431][ T332] usb 6-1: config 0 interface 208 has no altsetting 0 [ 128.096824][ T30] audit: type=1326 audit(1756715897.189:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39c3da3db9 code=0x7ffc0000 [ 128.149640][ T30] audit: type=1326 audit(1756715897.189:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c3e07be9 code=0x7ffc0000 [ 128.173086][ T30] audit: type=1326 audit(1756715897.229:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39c3dfeba7 code=0x7ffc0000 [ 128.179095][ T736] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.207042][ T30] audit: type=1326 audit(1756715897.229:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39c3da3db9 code=0x7ffc0000 [ 128.231137][ T30] audit: type=1326 audit(1756715897.229:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39c3e07be9 code=0x7ffc0000 [ 128.248989][ T736] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.255395][ T30] audit: type=1326 audit(1756715897.229:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c3e07be9 code=0x7ffc0000 [ 128.299244][ T332] usb 6-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=ee.8c [ 128.308280][ T876] loop0: detected capacity change from 0 to 40427 [ 128.308409][ T332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.315049][ T30] audit: type=1326 audit(1756715897.229:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=877 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c3e07be9 code=0x7ffc0000 [ 128.347597][ T332] usb 6-1: Product: syz [ 128.351987][ T332] usb 6-1: Manufacturer: syz [ 128.356742][ T332] usb 6-1: SerialNumber: syz [ 128.362302][ T332] usb 6-1: config 0 descriptor?? [ 128.399720][ T332] ftdi_sio 6-1:0.208: FTDI USB Serial Device converter detected [ 128.407717][ T332] usb 6-1: Detected FT-X [ 128.414880][ T876] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 128.429047][ T876] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 128.441331][ T876] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.459073][ T736] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.478416][ T736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.488537][ T736] usb 5-1: Product: syz [ 128.489048][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.498274][ T736] usb 5-1: Manufacturer: syz [ 128.505397][ T736] usb 5-1: SerialNumber: syz [ 128.514211][ T876] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 128.521366][ T876] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.318983][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 129.359182][ T736] usb 5-1: 0:2 : does not exist [ 129.364236][ T736] usb 5-1: unit 6 not found! [ 129.386843][ T736] usb 5-1: USB disconnect, device number 2 [ 129.479117][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.562235][ T895] loop0: detected capacity change from 0 to 40427 [ 129.579048][ T6] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 129.587340][ T6] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 129.596419][ T6] usb 4-1: config 4 has no interface number 0 [ 129.603768][ T895] F2FS-fs (loop0): invalid crc value [ 129.610722][ T895] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.655319][ T895] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.794849][ T332] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 129.813215][ T282] attempt to access beyond end of device [ 129.813215][ T282] loop0: rw=2049, want=45104, limit=40427 [ 129.819070][ T332] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 129.849042][ T332] ftdi_sio 6-1:0.208: GPIO initialisation failed: -71 [ 129.856588][ T332] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 129.869357][ T332] usb 6-1: USB disconnect, device number 2 [ 129.876539][ T332] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 129.886454][ T6] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 129.895912][ T332] ftdi_sio 6-1:0.208: device disconnected [ 129.902325][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.913881][ T6] usb 4-1: Product: syz [ 129.918124][ T6] usb 4-1: Manufacturer: syz [ 129.930762][ T6] usb 4-1: SerialNumber: syz [ 130.000560][ T924] loop4: detected capacity change from 0 to 1024 [ 130.019976][ T924] EXT4-fs (loop4): Ignoring removed bh option [ 130.036235][ T924] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 130.046111][ T924] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 2: comm syz.4.141: lblock 2 mapped to illegal pblock 2 (length 1) [ 130.060193][ T924] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 48: comm syz.4.141: lblock 0 mapped to illegal pblock 48 (length 1) [ 130.074422][ T924] EXT4-fs error (device loop4): ext4_acquire_dquot:6198: comm syz.4.141: Failed to acquire dquot type 0 [ 130.086276][ T924] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 130.095871][ T924] EXT4-fs error (device loop4): ext4_evict_inode:283: inode #11: comm syz.4.141: mark_inode_dirty error [ 130.107322][ T924] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 130.117647][ T924] EXT4-fs (loop4): 1 orphan inode deleted [ 130.123487][ T924] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,discard,,errors=continue. Quota mode: writeback. [ 130.141275][ T351] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.156041][ T351] EXT4-fs error (device loop4): ext4_release_dquot:6234: comm kworker/u4:4: Failed to release dquot type 0 [ 130.159693][ T925] loop0: detected capacity change from 0 to 40427 [ 130.168759][ T924] EXT4-fs error (device loop4): __ext4_get_inode_loc:4352: comm syz.4.141: Invalid inode table block 1 in block_group 0 [ 130.177449][ T882] incfs: Error accessing: ./file0. [ 130.187830][ T924] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5867: Corrupt filesystem [ 130.192092][ T882] incfs: mount failed -2 [ 130.201673][ T924] EXT4-fs error (device loop4): ext4_quota_off:6504: inode #3: comm syz.4.141: mark_inode_dirty error [ 130.219506][ T882] loop3: detected capacity change from 0 to 512 [ 130.223530][ T925] F2FS-fs (loop0): invalid crc value [ 130.232764][ T925] F2FS-fs (loop0): Found nat_bits in checkpoint [ 130.274720][ T925] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.275524][ T882] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #3: comm syz.3.131: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 130.300513][ T882] EXT4-fs error (device loop3): ext4_quota_enable:6409: comm syz.3.131: Bad quota inode: 3, type: 0 [ 130.323997][ T882] EXT4-fs warning (device loop3): ext4_enable_quotas:6450: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 130.341174][ T882] EXT4-fs (loop3): mount failed [ 130.376637][ T282] attempt to access beyond end of device [ 130.376637][ T282] loop0: rw=2049, want=45104, limit=40427 [ 130.441927][ T938] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 130.540122][ T941] loop4: detected capacity change from 0 to 1024 [ 130.557923][ T941] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 130.578856][ T941] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 130.619131][ T6] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 130.627737][ T6] usb 4-1: No valid video chain found. [ 130.634986][ T6] usb 4-1: USB disconnect, device number 3 [ 130.680814][ T946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 130.784858][ T952] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 130.913426][ T954] loop5: detected capacity change from 0 to 512 [ 130.985059][ T954] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.996631][ T954] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.043670][ T954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.146'. [ 131.052618][ T954] netlink: 32 bytes leftover after parsing attributes in process `syz.5.146'. [ 131.071725][ T954] device gretap1 entered promiscuous mode [ 131.123538][ T954] netlink: 'syz.5.146': attribute type 13 has an invalid length. [ 131.138356][ T954] gretap0: refused to change device tx_queue_len [ 131.145079][ T954] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.960529][ T966] loop0: detected capacity change from 0 to 512 [ 131.984566][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 131.984582][ T30] audit: type=1400 audit(1756715901.129:381): avc: denied { bind } for pid=967 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.012612][ T30] audit: type=1400 audit(1756715901.159:382): avc: denied { read } for pid=967 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.071155][ T30] audit: type=1400 audit(1756715901.209:383): avc: denied { setopt } for pid=967 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.097133][ T966] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noquota,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 132.113886][ T966] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.180006][ T30] audit: type=1326 audit(1756715901.329:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=975 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 132.203930][ T30] audit: type=1400 audit(1756715901.329:385): avc: denied { connect } for pid=973 comm="syz.5.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.224468][ T30] audit: type=1400 audit(1756715901.329:386): avc: denied { write } for pid=973 comm="syz.5.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.244381][ T30] audit: type=1326 audit(1756715901.349:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=975 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 132.268866][ T30] audit: type=1326 audit(1756715901.409:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=975 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 132.306378][ T30] audit: type=1326 audit(1756715901.409:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=975 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 132.343999][ T30] audit: type=1326 audit(1756715901.429:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=975 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 132.467747][ T1009] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.635649][ T1037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 132.644652][ T1037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 132.745269][ T1050] loop5: detected capacity change from 0 to 1024 [ 132.800489][ T1055] SELinux: policydb version 0 does not match my version range 15-33 [ 132.808906][ T1055] SELinux: failed to load policy [ 132.820578][ T1050] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.011992][ T1077] capability: warning: `syz.5.199' uses deprecated v2 capabilities in a way that may be insecure [ 133.112844][ T1091] loop0: detected capacity change from 0 to 1024 [ 133.161783][ T1091] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 133.182094][ T1091] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 133.192188][ T1091] EXT4-fs error (device loop0): ext4_get_journal_inode:5149: inode #32: comm syz.0.207: iget: special inode unallocated [ 133.205159][ T1091] EXT4-fs (loop0): no journal found [ 133.215315][ T1091] EXT4-fs (loop0): can't get journal size [ 133.234813][ T1091] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 133.243623][ T1091] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.207: iget: special inode unallocated [ 133.261678][ T1091] EXT4-fs (loop0): failed to initialize system zone (-117) [ 133.269891][ T1091] EXT4-fs (loop0): mount failed [ 133.295527][ T1112] hub 2-0:1.0: USB hub found [ 133.303634][ T1112] hub 2-0:1.0: 1 port detected [ 133.373546][ T1122] loop5: detected capacity change from 0 to 512 [ 133.380296][ T1124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 133.406030][ T1122] EXT4-fs (loop5): Ignoring removed bh option [ 133.427392][ T1122] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.440138][ T1122] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 133.450366][ T1130] loop0: detected capacity change from 0 to 2048 [ 133.478410][ T1122] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 133.496804][ T1122] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 133.509640][ T1122] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 133.523666][ T1130] EXT4-fs (loop0): Ignoring removed bh option [ 133.539863][ T1139] 9pnet: Could not find request transport: r [ 133.568510][ T1142] loop3: detected capacity change from 0 to 128 [ 133.570869][ T1122] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.221: bg 0: block 353: padding at end of block bitmap is not set [ 133.598006][ T1130] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 133.629546][ T1130] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 133.650732][ T1130] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 133.663196][ T1130] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.663196][ T1130] [ 133.673277][ T1130] EXT4-fs (loop0): Total free blocks count 0 [ 133.679618][ T1130] EXT4-fs (loop0): Free/Dirty block details [ 133.685653][ T1130] EXT4-fs (loop0): free_blocks=2415919104 [ 133.691709][ T1130] EXT4-fs (loop0): dirty_blocks=16 [ 133.696915][ T1130] EXT4-fs (loop0): Block reservation details [ 133.703828][ T1130] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 133.784128][ T1164] loop4: detected capacity change from 0 to 512 [ 133.869317][ T1173] hub 9-0:1.0: USB hub found [ 133.874191][ T1173] hub 9-0:1.0: 1 port detected [ 133.937149][ T1185] loop0: detected capacity change from 0 to 512 [ 133.969106][ T1190] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 133.994962][ T1185] EXT4-fs (loop0): Invalid want_extra_isize 3272 [ 134.038714][ T1195] SELinux: policydb version -2047732469 does not match my version range 15-33 [ 134.047781][ T1195] SELinux: failed to load policy [ 134.253124][ T1214] loop5: detected capacity change from 0 to 128 [ 134.816702][ T1219] loop4: detected capacity change from 0 to 512 [ 134.941984][ T1219] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.959002][ T957] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 134.981850][ T1219] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 134.981850][ T1219] [ 134.997955][ T1219] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 135.014967][ T1219] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000004,grpquota,noload,. Quota mode: writeback. [ 135.177196][ T1268] 9pnet: Insufficient options for proto=fd [ 135.249177][ T957] usb 1-1: device descriptor read/64, error -71 [ 135.256231][ T1280] Zero length message leads to an empty skb [ 135.264349][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 135.270672][ T1246] loop3: detected capacity change from 0 to 512 [ 135.346437][ T1246] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.359715][ T1246] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.278: bad orphan inode 13 [ 135.372333][ T1246] ext4_test_bit(bit=12, block=18) = 1 [ 135.377888][ T1246] is_bad_inode(inode)=0 [ 135.382413][ T1246] NEXT_ORPHAN(inode)=2130706432 [ 135.388125][ T1246] max_ino=32 [ 135.396246][ T1246] i_nlink=1 [ 135.399933][ T1246] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.417944][ T1246] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 135.468468][ T1246] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 135.648977][ T957] usb 1-1: device descriptor read/64, error -71 [ 135.919080][ T957] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.440282][ T1328] SELinux: failed to load policy [ 136.485228][ T1330] loop4: detected capacity change from 0 to 1024 [ 136.506671][ T1332] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 136.602936][ T1330] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 136.642662][ T1330] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.315: Allocating blocks 385-513 which overlap fs metadata [ 136.718869][ T1330] EXT4-fs (loop4): pa ffff888111e48bd0: logic 16, phys. 129, len 24 [ 136.727029][ T1330] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 136.909210][ T957] usb 1-1: device descriptor read/64, error -71 [ 136.958010][ T1353] loop3: detected capacity change from 0 to 128 [ 137.309391][ T957] usb 1-1: device descriptor read/64, error -71 [ 137.449497][ T957] usb usb1-port1: attempt power cycle [ 137.554041][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 137.554087][ T30] audit: type=1326 audit(1756715906.699:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.5.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6289241be9 code=0x7ffc0000 [ 137.647075][ T30] audit: type=1326 audit(1756715906.699:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.5.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6289241be9 code=0x7ffc0000 [ 137.709487][ T30] audit: type=1326 audit(1756715906.709:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.5.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6289241be9 code=0x7ffc0000 [ 137.748235][ T1380] loop0: detected capacity change from 0 to 512 [ 137.781919][ T1380] EXT4-fs (loop0): Ignoring removed nobh option [ 137.782116][ T30] audit: type=1326 audit(1756715906.709:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1372 comm="syz.5.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6289241be9 code=0x7ffc0000 [ 137.812607][ T30] audit: type=1326 audit(1756715906.709:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1375 comm="syz.5.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f62892744a5 code=0x7ffc0000 [ 137.836152][ T30] audit: type=1326 audit(1756715906.889:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1375 comm="syz.5.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6289241be9 code=0x7ffc0000 [ 137.852903][ T1380] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 137.874779][ T30] audit: type=1326 audit(1756715907.019:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1384 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 137.908205][ T30] audit: type=1326 audit(1756715907.019:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1384 comm="syz.1.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 137.937343][ T1380] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.334: iget: bad i_size value: 38620345925642 [ 137.959718][ T1380] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.334: couldn't read orphan inode 15 (err -117) [ 137.977512][ T30] audit: type=1400 audit(1756715907.119:640): avc: denied { write } for pid=1394 comm="syz.4.341" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.000699][ T1380] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 138.009722][ T30] audit: type=1400 audit(1756715907.119:641): avc: denied { ioctl } for pid=1394 comm="syz.4.341" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.019567][ T1380] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.334: bg 0: block 5: invalid block bitmap [ 138.055570][ T1398] loop3: detected capacity change from 0 to 512 [ 138.118578][ T1398] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.861083][ T1560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.418'. [ 138.888653][ T1565] mmap: syz.1.421 (1565) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 139.121629][ T1586] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 139.245724][ T1604] netlink: 96 bytes leftover after parsing attributes in process `syz.3.428'. [ 139.396779][ T1643] netlink: 87 bytes leftover after parsing attributes in process `syz.4.458'. [ 139.971209][ T1757] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.978509][ T1757] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.049808][ T1757] device gretap1 left promiscuous mode [ 140.323985][ T1851] syz.5.557 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 140.335475][ T1851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.557'. [ 141.718664][ T2074] binfmt_misc: register: failed to install interpreter file ./file0 [ 141.785299][ T2086] netlink: 96 bytes leftover after parsing attributes in process `syz.3.669'. [ 142.204911][ T2164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.707'. [ 142.480083][ T2228] 8021q: VLANs not supported on gre0 [ 142.560879][ T30] kauditd_printk_skb: 1466 callbacks suppressed [ 142.560895][ T30] audit: type=1400 audit(142.541:2108): avc: denied { read write } for pid=719 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 142.643075][ T30] audit: type=1400 audit(142.581:2109): avc: denied { map_create } for pid=2243 comm="syz.5.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.691403][ T30] audit: type=1400 audit(142.581:2110): avc: denied { prog_load } for pid=2243 comm="syz.5.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.737624][ T30] audit: type=1400 audit(142.581:2111): avc: denied { read write } for pid=2243 comm="syz.5.748" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 142.737658][ T30] audit: type=1400 audit(142.581:2112): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 142.737686][ T30] audit: type=1400 audit(142.581:2113): avc: denied { watch watch_reads } for pid=2245 comm="syz.1.749" path="/176/file0" dev="tmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 142.737714][ T30] audit: type=1400 audit(142.591:2114): avc: denied { prog_load } for pid=2242 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.737736][ T30] audit: type=1400 audit(142.591:2115): avc: denied { read write } for pid=719 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 142.737762][ T30] audit: type=1400 audit(142.601:2116): avc: denied { prog_load } for pid=2250 comm="syz.5.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 142.737787][ T30] audit: type=1400 audit(142.601:2117): avc: denied { map_create } for pid=2251 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 143.115111][ T2289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.767'. [ 143.770290][ T2366] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 144.451261][ T2457] netlink: 3 bytes leftover after parsing attributes in process `syz.0.845'. [ 144.732338][ T2487] device wireguard0 entered promiscuous mode [ 145.080537][ T2541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 145.102572][ T2541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.886'. [ 145.896357][ T2623] serio: Serial port ttyS3 [ 146.288466][ T2650] netlink: 75 bytes leftover after parsing attributes in process `syz.1.938'. [ 146.311010][ T2656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.941'. [ 146.618423][ T2736] capability: warning: `syz.5.981' uses 32-bit capabilities (legacy support in use) [ 146.855020][ T2775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.999'. [ 147.109935][ T2832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 147.121508][ T2832] device macsec1 entered promiscuous mode [ 147.330929][ T2868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'. [ 147.580168][ T30] kauditd_printk_skb: 1115 callbacks suppressed [ 147.580193][ T30] audit: type=1400 audit(147.561:3233): avc: denied { map_create } for pid=2895 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 147.636369][ T30] audit: type=1400 audit(147.561:3234): avc: denied { mount } for pid=2896 comm="syz.1.1058" name="/" dev="ramfs" ino=23006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 147.681162][ T2909] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 147.698965][ T30] audit: type=1400 audit(147.581:3235): avc: denied { read write } for pid=280 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 147.759626][ T30] audit: type=1400 audit(147.591:3236): avc: denied { prog_load } for pid=2895 comm="syz.0.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 147.800980][ T30] audit: type=1400 audit(147.591:3237): avc: denied { mounton } for pid=2895 comm="syz.0.1057" path="/197/bus" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 147.858745][ T30] audit: type=1400 audit(147.591:3238): avc: denied { map_create } for pid=2899 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 147.896520][ T30] audit: type=1400 audit(147.601:3239): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 147.963097][ T30] audit: type=1400 audit(147.611:3240): avc: denied { map_create } for pid=2903 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 147.987712][ T2939] audit: audit_backlog=65 > audit_backlog_limit=64 [ 148.004453][ T30] audit: type=1400 audit(147.611:3241): avc: denied { prog_load } for pid=2903 comm="syz.0.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 149.615219][ T3130] bridge0: port 3(veth1_vlan) entered blocking state [ 149.623007][ T3130] bridge0: port 3(veth1_vlan) entered disabled state [ 149.636981][ T3130] device veth1_vlan entered promiscuous mode [ 149.648143][ T3130] bridge0: port 3(veth1_vlan) entered blocking state [ 149.654898][ T3130] bridge0: port 3(veth1_vlan) entered forwarding state [ 150.444166][ T3258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1224'. [ 151.089921][ T3306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1247'. [ 151.517588][ T3347] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1266'. [ 151.550830][ T3347] netem: change failed [ 151.579906][ T3351] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1268'. [ 152.589864][ T30] kauditd_printk_skb: 1199 callbacks suppressed [ 152.589881][ T30] audit: type=1326 audit(152.571:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 152.625591][ T30] audit: type=1326 audit(152.571:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 152.629349][ T3457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 152.648845][ T30] audit: type=1326 audit(152.591:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 152.659557][ T3457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 152.682230][ T30] audit: type=1326 audit(152.591:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 152.721701][ T30] audit: type=1326 audit(152.591:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 152.745426][ T30] audit: type=1326 audit(152.591:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 152.779028][ T30] audit: type=1326 audit(152.591:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 152.802738][ T30] audit: type=1326 audit(152.591:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3452 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e088bbe9 code=0x7ffc0000 [ 152.826444][ T30] audit: type=1400 audit(152.601:4447): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 152.850533][ T30] audit: type=1400 audit(152.601:4448): avc: denied { map_create } for pid=3454 comm="syz.1.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 153.320126][ T3561] @0: renamed from bond_slave_1 [ 153.349735][ T3569] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3569 comm=syz.0.1374 [ 153.475649][ T3600] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 153.744678][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'. [ 153.759050][ T3630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'. [ 153.789091][ T3630] ================================================================== [ 153.797209][ T3630] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 153.805402][ T3630] Read of size 8 at addr ffff888114d801c0 by task syz.3.1403/3630 [ 153.813240][ T3630] [ 153.815601][ T3630] CPU: 0 PID: 3630 Comm: syz.3.1403 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0 [ 153.825801][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.836021][ T3630] Call Trace: [ 153.839335][ T3630] [ 153.842426][ T3630] __dump_stack+0x21/0x30 [ 153.846795][ T3630] dump_stack_lvl+0xee/0x150 [ 153.851427][ T3630] ? show_regs_print_info+0x20/0x20 [ 153.856659][ T3630] ? load_image+0x3a0/0x3a0 [ 153.861195][ T3630] print_address_description+0x7f/0x2c0 [ 153.866903][ T3630] ? tc_setup_flow_action+0x870/0x3240 [ 153.872404][ T3630] kasan_report+0xf1/0x140 [ 153.876944][ T3630] ? tc_setup_flow_action+0x870/0x3240 [ 153.882613][ T3630] __asan_report_load8_noabort+0x14/0x20 [ 153.888371][ T3630] tc_setup_flow_action+0x870/0x3240 [ 153.893711][ T3630] mall_replace_hw_filter+0x293/0x820 [ 153.899139][ T3630] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 153.905339][ T3630] ? mall_set_parms+0x520/0x520 [ 153.910232][ T3630] ? tcf_exts_destroy+0xb0/0xb0 [ 153.915122][ T3630] ? mall_set_parms+0x1e8/0x520 [ 153.920037][ T3630] mall_change+0x526/0x740 [ 153.924481][ T3630] ? __kasan_check_write+0x14/0x20 [ 153.929864][ T3630] ? mall_get+0xa0/0xa0 [ 153.934054][ T3630] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 153.940072][ T3630] tc_new_tfilter+0x12a2/0x1870 [ 153.944994][ T3630] ? tcf_gate_entry_destructor+0x20/0x20 [ 153.950777][ T3630] ? security_capable+0x87/0xb0 [ 153.955674][ T3630] ? ns_capable+0x8c/0xf0 [ 153.960238][ T3630] ? netlink_net_capable+0x125/0x160 [ 153.965553][ T3630] ? tcf_gate_entry_destructor+0x20/0x20 [ 153.971345][ T3630] rtnetlink_rcv_msg+0x81b/0xb90 [ 153.976321][ T3630] ? rtnetlink_bind+0x80/0x80 [ 153.981125][ T3630] ? memcpy+0x56/0x70 [ 153.985140][ T3630] ? avc_has_perm_noaudit+0x2f4/0x460 [ 153.990549][ T3630] ? arch_stack_walk+0xee/0x140 [ 153.995439][ T3630] ? avc_denied+0x1b0/0x1b0 [ 154.000078][ T3630] ? stack_trace_save+0x98/0xe0 [ 154.004974][ T3630] ? avc_has_perm+0x158/0x240 [ 154.009691][ T3630] ? avc_has_perm_noaudit+0x460/0x460 [ 154.015129][ T3630] ? x64_sys_call+0x4b/0x9a0 [ 154.019763][ T3630] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 154.025356][ T3630] netlink_rcv_skb+0x1e0/0x430 [ 154.030623][ T3630] ? rtnetlink_bind+0x80/0x80 [ 154.035350][ T3630] ? netlink_ack+0xb60/0xb60 [ 154.040079][ T3630] ? __netlink_lookup+0x387/0x3b0 [ 154.045151][ T3630] rtnetlink_rcv+0x1c/0x20 [ 154.049610][ T3630] netlink_unicast+0x876/0xa40 [ 154.054420][ T3630] netlink_sendmsg+0x86a/0xb70 [ 154.059224][ T3630] ? netlink_getsockopt+0x530/0x530 [ 154.064459][ T3630] ? security_socket_sendmsg+0x82/0xa0 [ 154.069967][ T3630] ? netlink_getsockopt+0x530/0x530 [ 154.075200][ T3630] ____sys_sendmsg+0x5a2/0x8c0 [ 154.080097][ T3630] ? __sys_sendmsg_sock+0x40/0x40 [ 154.085167][ T3630] ? import_iovec+0x7c/0xb0 [ 154.089707][ T3630] ___sys_sendmsg+0x1f0/0x260 [ 154.094429][ T3630] ? __sys_sendmsg+0x250/0x250 [ 154.099389][ T3630] ? sock_show_fdinfo+0xa0/0xa0 [ 154.104296][ T3630] ? __fdget+0x1a1/0x230 [ 154.108575][ T3630] __x64_sys_sendmsg+0x1e2/0x2a0 [ 154.113549][ T3630] ? ___sys_sendmsg+0x260/0x260 [ 154.118436][ T3630] ? __kasan_check_write+0x14/0x20 [ 154.123576][ T3630] ? switch_fpu_return+0x15d/0x2c0 [ 154.128854][ T3630] x64_sys_call+0x4b/0x9a0 [ 154.133301][ T3630] do_syscall_64+0x4c/0xa0 [ 154.137751][ T3630] ? clear_bhb_loop+0x50/0xa0 [ 154.142463][ T3630] ? clear_bhb_loop+0x50/0xa0 [ 154.147167][ T3630] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.153097][ T3630] RIP: 0033:0x7f39c3e07be9 [ 154.157541][ T3630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.177272][ T3630] RSP: 002b:00007f39c2870038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.185734][ T3630] RAX: ffffffffffffffda RBX: 00007f39c403efa0 RCX: 00007f39c3e07be9 [ 154.193726][ T3630] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 154.201729][ T3630] RBP: 00007f39c3e8ae19 R08: 0000000000000000 R09: 0000000000000000 [ 154.209715][ T3630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.217875][ T3630] R13: 00007f39c403f038 R14: 00007f39c403efa0 R15: 00007ffe0fa16698 [ 154.225974][ T3630] [ 154.228999][ T3630] [ 154.231336][ T3630] Allocated by task 3630: [ 154.235673][ T3630] __kasan_kmalloc+0xda/0x110 [ 154.240368][ T3630] __kmalloc+0x13d/0x2c0 [ 154.244616][ T3630] tcf_idr_create+0x5f/0x790 [ 154.249211][ T3630] tcf_idr_create_from_flags+0x61/0x70 [ 154.254676][ T3630] tcf_gact_init+0x346/0x580 [ 154.259280][ T3630] tcf_action_init_1+0x3f7/0x6a0 [ 154.264229][ T3630] tcf_action_init+0x1e9/0x710 [ 154.268995][ T3630] tcf_exts_validate+0x217/0x520 [ 154.273932][ T3630] mall_set_parms+0x48/0x520 [ 154.278532][ T3630] mall_change+0x45a/0x740 [ 154.282989][ T3630] tc_new_tfilter+0x12a2/0x1870 [ 154.287887][ T3630] rtnetlink_rcv_msg+0x81b/0xb90 [ 154.292932][ T3630] netlink_rcv_skb+0x1e0/0x430 [ 154.297716][ T3630] rtnetlink_rcv+0x1c/0x20 [ 154.302153][ T3630] netlink_unicast+0x876/0xa40 [ 154.306925][ T3630] netlink_sendmsg+0x86a/0xb70 [ 154.312044][ T3630] ____sys_sendmsg+0x5a2/0x8c0 [ 154.316830][ T3630] ___sys_sendmsg+0x1f0/0x260 [ 154.321520][ T3630] __x64_sys_sendmsg+0x1e2/0x2a0 [ 154.326646][ T3630] x64_sys_call+0x4b/0x9a0 [ 154.331093][ T3630] do_syscall_64+0x4c/0xa0 [ 154.335661][ T3630] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 154.341590][ T3630] [ 154.343941][ T3630] The buggy address belongs to the object at ffff888114d80100 [ 154.343941][ T3630] which belongs to the cache kmalloc-192 of size 192 [ 154.358774][ T3630] The buggy address is located 0 bytes to the right of [ 154.358774][ T3630] 192-byte region [ffff888114d80100, ffff888114d801c0) [ 154.372411][ T3630] The buggy address belongs to the page: [ 154.378044][ T3630] page:ffffea0004536000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888114d80000 pfn:0x114d80 [ 154.389603][ T3630] flags: 0x4000000000000200(slab|zone=1) [ 154.395259][ T3630] raw: 4000000000000200 0000000000000000 0000000100000001 ffff888100042c00 [ 154.403860][ T3630] raw: ffff888114d80000 000000008010000d 00000001ffffffff 0000000000000000 [ 154.412447][ T3630] page dumped because: kasan: bad access detected [ 154.418870][ T3630] page_owner tracks the page as allocated [ 154.424669][ T3630] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 100, ts 6899790311, free_ts 0 [ 154.439915][ T3630] post_alloc_hook+0x192/0x1b0 [ 154.444698][ T3630] prep_new_page+0x1c/0x110 [ 154.449298][ T3630] get_page_from_freelist+0x2cc5/0x2d50 [ 154.454849][ T3630] __alloc_pages+0x18f/0x440 [ 154.459443][ T3630] new_slab+0xa1/0x4d0 [ 154.463516][ T3630] ___slab_alloc+0x381/0x810 [ 154.468116][ T3630] __slab_alloc+0x49/0x90 [ 154.472451][ T3630] kmem_cache_alloc_trace+0x146/0x270 [ 154.478003][ T3630] kernfs_fop_open+0x343/0xb30 [ 154.482877][ T3630] do_dentry_open+0x834/0x1010 [ 154.487653][ T3630] vfs_open+0x73/0x80 [ 154.491645][ T3630] path_openat+0x2646/0x2f10 [ 154.496268][ T3630] do_filp_open+0x1b3/0x3e0 [ 154.500862][ T3630] do_sys_openat2+0x14c/0x7b0 [ 154.505568][ T3630] __x64_sys_openat+0x136/0x160 [ 154.510427][ T3630] x64_sys_call+0x219/0x9a0 [ 154.514936][ T3630] page_owner free stack trace missing [ 154.520302][ T3630] [ 154.522636][ T3630] Memory state around the buggy address: [ 154.528262][ T3630] ffff888114d80080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 154.536406][ T3630] ffff888114d80100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 154.544466][ T3630] >ffff888114d80180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 154.552525][ T3630] ^ [ 154.558682][ T3630] ffff888114d80200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.566851][ T3630] ffff888114d80280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 154.574908][ T3630] ================================================================== [ 154.582971][ T3630] Disabling lock debugging due to kernel taint Jan 1 00:02:34 syzkaller kern.alert kernel: [ 154.418870][ T3630] page_owner tracks the page as allocated Jan 1 00:02:34 syzkaller kern.alert kernel: [ 154.424669][ T3630] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 100, ts 6899790311, free_ts 0 Jan 1 00:02:34 syzkaller kern.alert kernel: [ 154.514936][ T3630] page_owner free stack trace missing