last executing test programs: 17m40.782455608s ago: executing program 1 (id=1211): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0600000004000000082000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) ptrace$pokeuser(0x6, 0x0, 0x6, 0x8000000000000000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x240000, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1, 0x1936, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1000000, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getuid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) 17m39.892318835s ago: executing program 1 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000440)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c1c1416c42047ca7a5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a035afc6241e25fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d", @ANYRES64, @ANYRESOCT], 0xa, 0x2c7, &(0x7f0000000bc0)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x104) pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x4) 17m38.624874564s ago: executing program 1 (id=1218): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x200000c4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d6163736563000004000280080005", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 17m36.773286318s ago: executing program 1 (id=1223): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f0000000200)=0xfffffffffffffffd, 0x12) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000840)={0x3, 0x0, [{0x1, 0xba, &(0x7f0000000580)=""/186}, {0x8000000, 0x3c, &(0x7f0000000180)=""/60}, {0x8080000, 0x84, &(0x7f0000000780)=""/132}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0xfffff801, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 17m33.175697284s ago: executing program 1 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xaa62e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x64000600) 17m31.393656597s ago: executing program 1 (id=1234): ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket(0x2a, 0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') lseek(r3, 0x8001, 0x1) 17m15.957546829s ago: executing program 32 (id=1234): ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket(0x2a, 0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') lseek(r3, 0x8001, 0x1) 17.669188234s ago: executing program 3 (id=5336): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "d3829c77f9"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 17.611958295s ago: executing program 3 (id=5339): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x20) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r1) 17.405285158s ago: executing program 3 (id=5353): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unshare(0x26020480) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_init() socket$inet6(0xa, 0x80002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000480)={0x3ff, 0x0, 0x0, 0x5, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) open(0x0, 0x143044, 0x0) syz_open_dev$MSR(0x0, 0x9, 0x0) 16.189181586s ago: executing program 3 (id=5376): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") open(0x0, 0x0, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0xffffffffdf001fff, 0x18) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 15.969113729s ago: executing program 3 (id=5378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x80, 0x10, 0x39, 0x1, 0x0, 0x0, 0x4, 0x10010}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x400c000) 15.823100792s ago: executing program 3 (id=5381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x5a9}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 15.793127572s ago: executing program 33 (id=5381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x5a9}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 10.507536642s ago: executing program 5 (id=5454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1010410, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {@noquota}]}, 0x9, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvzdp17aatIMh8KghaGUvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5+dFla9KlXZMI/XzgNOfce5tzvjn3nnuSe0kC2LPG0z+ZiMMR8VESMVpfnomIpJobiDhZ2+7O2mo+TUmsr7/5R1Jdf3ttNd94rqT+eLBeeDYifnw/4khmc73l5ZW5XLFYWKyXJyvzFybLyytHz8/nZguzhYXjU9PTx068cOL47sX61y8rh258/Noz35z8570nrn34UxIn41B9XXMcu2W89upGxGD6Et7j1d2urM+SfjeAHcnUjvBqOhyjsa+aa2O4ly0DALrl3YhYBwD2mMT5HwD2mMbnALfXVvON1N9PJHrr5isRcaAWf+P6Zm3NQP2a3YEYjIiR28k9V0aSiBjbhfrHI+KL797+Kk3RpeuQAK1cvhIRZ8fGN4//yaZ7FrbruQ62Gb+vbPyD3vk+nf+82Gr+l9mY/0SL+c9Qi2N3Jx58/Geu70I1baXzv5eb7m270xR/3di+eumR6pxvMDl3vlhIx7ZHI2IiBofS8tQWdUzc+vdWu3XN878/P3nny7T+9PHuFpnrA0P3/s9MrpJ7mJib3bwS8eRAq/iTjf5P2sx/T3dYx+svffB5u3Vp/Gm8jbQ5/u5avxrxdMv+v3tHW7Ll/YmT1d1hsrFTtPDtr5+NtKu/uf/TlNbfeC/QC2n/j2wd/1jSfL9meft1/Hx19Id26x4cf+v9f3/yVjW/v77sUq5SWZyK2J+8sXn5sbv/2yg3tk/jn3iq9fG/1f6fvic822H8Azd+/3rn8XdXGv/Mtvp/+5lrd+b2tau/s/6fruYm6ks6Gf86beDDvHYAAAAAAAAAAAAAAAAAAAAAAAAA0KlMRByKJJPdyGcy2WztN7wfj5FMsVSuHDlXWlqYiepvZY/FYKbxVZejTd+HOlX/PvxG+dh95ecj4rGI+HRouFrO5kvFmX4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9v8/n/qt6F+tw4A6JoD/W4AANBzzv8AsPds7/w/3LV2AAC94/0/AOw9zv8AsPc4/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBlp0+dStP632ur+bQ8c3F5aa508ehMoTyXnV/KZ/OlxQvZ2VJptljI5kvzbZ/ocu2hWCpdmI6FpUuTlUK5MlleXjkzX1paqJw5P5+bLZwpDPYsMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoXHl5ZS5XLBYWZWRkZDYyzaPEcP8GKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uf8CAAD//53qKtg=") ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) 10.145538777s ago: executing program 5 (id=5457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 10.122549977s ago: executing program 5 (id=5459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 10.111757898s ago: executing program 5 (id=5460): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT], 0x1, 0x36e, &(0x7f0000000c00)="$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") open(0x0, 0x0, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0xffffffffdf001fff, 0x18) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 10.041572499s ago: executing program 5 (id=5462): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000600)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB='\a'], 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_pidfd_open(r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) pipe2$watch_queue(0x0, 0x80) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.pending_reads\x00', 0x10d00, 0xa) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00'}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.910021131s ago: executing program 5 (id=5466): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 9.872300092s ago: executing program 34 (id=5466): bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 4.164426337s ago: executing program 4 (id=5516): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) io_uring_setup(0xad4, &(0x7f0000000100)={0x0, 0x3074, 0x8, 0x20000, 0x12c}) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) read(r2, &(0x7f00000013c0)=""/4089, 0xff9) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) 3.940054371s ago: executing program 4 (id=5519): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.93096126s ago: executing program 4 (id=5520): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r3}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r4}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) 3.921350391s ago: executing program 4 (id=5521): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000023c0)={0x34, &(0x7f0000002240)=ANY=[@ANYBLOB="400e06"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="40320300000035bd996c4fb5c175666d5dc6807e002e062092"], 0x0, 0x0}) 3.817541442s ago: executing program 2 (id=5522): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x22, 0x803, 0xfffffffd) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.919789446s ago: executing program 2 (id=5526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.809567718s ago: executing program 0 (id=5527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.809008347s ago: executing program 2 (id=5528): io_uring_setup(0x294d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000066a000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000580)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618ec672e660f38803d004000000f285473f61366b9800000c00f32663500400000440f20c0663507000000440f22c00f20e06635800000000f22e0f30fa6c8", 0x59}], 0x1, 0x41, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.754537888s ago: executing program 0 (id=5529): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000001000000420000004000000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r3, &(0x7f0000000040)="848bbd55b4e8906b71c01c3a3b8c45a784d0cac0395ead89da8ed410c069faf101beec524abd0f6547b941e3856d", &(0x7f0000000480)=""/199}, 0x20) 2.046784989s ago: executing program 7 (id=5532): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2.017789109s ago: executing program 7 (id=5533): syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x200001, &(0x7f0000000100)={[{}, {@jqfmt_vfsv1}, {@journal_ioprio}, {@nobarrier}, {@discard}, {@usrjquota}]}, 0x81, 0x4bc, &(0x7f0000000a00)="$eJzs3c1vG2UaAPDHdvPZ7PZjV6u2K20rdaXuhxrnQ6smu3vhBBwqISpxAamExA0lThzFTmmiHlK49cABgUBCHLjzF3ChJyokxBnuiAMqghIkQEIYeWyn+XKwaGJLmd9Pmuadead+3jfW82b8zowngNQ6V/snEzEUEZ9GxLH66tYdztV/rD+4NV1bMlGtXvkmk+xXW2/u2vx/RyNiLSL6I+LpxyNeyOyMW15ZnZsqFgtLjfV8ZX4xX15ZvXh9fmq2MFtYGJ24NDk5MTI+Nrlvfb3z2kt3Ln/wZO/7P7x6/97rH31Ya9ZQo25zP/ZTves9cWLTtiMR8f+DCNYFuUZ/BrrdEH6X2vv3p4g4n+T/scgl7yaQBtVqtfpzta9V9VoVOLSyyTFwJjscEfVyNjs8XD+G/3MMZoulcuXf10rLCzP1Y+Xj0ZO9dr1YGGl8VjgePZna+mhSfrg+tm19PCI5Bn4jN5CsD0+XijOdHeqAbY5uy//vc/X8B1LCR35Irz3zP9u5dgCd5+8/pJf8h/SS/5BeO/P/l660A+i8dv7+5zrQDqDzHP9Desl/SC/5D+kl/yGVnrp8ubZUm/e/z9xYWZ4r3bg4UyjPDc8vTw9Pl5YWh2dLpdnknp3533q9Yqm0OPqfWL6ZrxTKlXx5ZfXqfGl5oXI1ua//aqGnI70C2nHi7N3PMxGx9t+BZKnpbdTJVTjcqtVMdPseZKA7nNaH9DL1B+nlMz6wy1f0btHfqmJx/9sCdIZv94D0unD6Uc7/VQ+4dcBBMv8P6WX+H9LL/D9g/h/Sx/w/pNdQi+d//WHTs7tGIuKPEfFZrqev+awv4DDIfpVpHP9fOPb3oe21vZkfk1MEvRHx8jtX3ro5Vaksjda2f7uxvfJ2Y/tYN9oPtKuZp808BgDSa/3Brenm0sm4Xz9WvwhhZ/wjjbnJ/uQc5eB6Zsu1Cpl9unZh7XZEnNotfqbxvPP6mY/B9dyO+CcbPzP1l0jaeyR5bnpn4p/eFP9vm+KfeeTfCqTD3dr4M7Jb/mWTnI6N/Ns6/gzt07UTrce/7Mb4l2sx/p1tM8aL777yZcv4tyPO7Bq/Ga8/ibU9fq1tF9qMf/+5Z/7Sqq76Xv11dovfVCvlK/OL+fLK6sXke+RmCwujE5cmJydGxscm88kcdb45U73T/059cm+v/g+2iL9X/2vb/tlm/3/668fPntsj/j/O7/7+n9wj/kBE/KvN+N+NffF8q7pa/JkW/c/uEb+2bbzN+OU3n+hrc1cAoAPKK6tzU8ViYUlBQUFho9DtkQk4aA+TvtstAQAAAAAAAAAAANrV+jLgvn27nLjbfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAx+DQAA//+iodfy") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001d00010a00000000000000000401000008000180"], 0x1c}}, 0x20000080) 1.868628551s ago: executing program 0 (id=5534): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 1.796652423s ago: executing program 2 (id=5535): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000b00)=""/187, 0xbb}], 0x1, 0x33, 0x7) 1.779266743s ago: executing program 0 (id=5536): socket(0x10, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$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") getdents(0xffffffffffffffff, &(0x7f0000000100)=""/155, 0x9b) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = getpid() r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_procfs(0x0, &(0x7f0000003380)='net/route\x00') read$char_usb(r2, &(0x7f0000000040)=""/4122, 0x101a) preadv(r2, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) read$char_usb(r2, &(0x7f0000001080)=""/147, 0x93) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.775251323s ago: executing program 6 (id=5537): io_uring_setup(0x294d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000066a000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000580)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618ec672e660f38803d004000000f285473f61366b9800000c00f32663500400000440f20c0663507000000440f22c00f20e06635800000000f22e0f30fa6c8", 0x59}], 0x1, 0x41, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/udp\x00') 1.747554603s ago: executing program 7 (id=5538): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x22, 0x803, 0xfffffffd) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 1.746863444s ago: executing program 2 (id=5539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1.729772184s ago: executing program 2 (id=5540): syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9, 0x94, 0x73, 0x8, 0x1199, 0x6821, 0x9859, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x3, 0x37, 0x5d, 0xd2, 0x0, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x4, 0xfe, 0x7}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x3, 0x2, 0x4}}, {{0x9, 0x5, 0xa, 0x1c, 0x3ff, 0x1, 0xac, 0x8}}]}}]}}]}}, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x62f, &(0x7f0000001240)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001140)={[{@grpquota}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_lt}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '@@'}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_lt}, {@smackfsdef}, {@context={'context', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}, 0x1, 0x569, &(0x7f0000000800)="$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") ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.465245738s ago: executing program 6 (id=5541): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004180)=[{{&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}}], 0x1, 0x4000804) 1.460395558s ago: executing program 0 (id=5542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) 1.421312879s ago: executing program 6 (id=5543): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1.420684959s ago: executing program 6 (id=5544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.391016129s ago: executing program 6 (id=5545): io_uring_setup(0x5ee7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) setgid(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000100), 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000004fc0)={'team_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) 510.945622ms ago: executing program 7 (id=5546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x50, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 329.151435ms ago: executing program 0 (id=5547): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) 253.166016ms ago: executing program 6 (id=5548): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000008c0)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 224.570156ms ago: executing program 4 (id=5549): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={'veth0_macvtap\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r0, 0x1, 0x70bd2a, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}]}]}]}, 0x34}}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r6, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x100000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010dbc5462046696b3c000000000", @ANYRES32=0x0, @ANYBLOB="000000000420040024002b80080008", @ANYRES16=0x0, @ANYRES32, @ANYBLOB="86fe0800", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x4c}}, 0x24000000) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="c5bab9c6f1cb41f2240012800b0001006272696467650000140002800500180001000000050017"], 0x44}, 0x1, 0x0, 0x0, 0x20004850}, 0x10) 102.014878ms ago: executing program 7 (id=5550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018290000", @ANYRES32=r0, @ANYBLOB="00000000ffffff1f95"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 21.175879ms ago: executing program 7 (id=5551): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000009043efd1602020000052406000005240000000d240f01000000000000000000042402020905810340000000000905820200020000000905030240"], 0x0) 0s ago: executing program 4 (id=5552): io_uring_setup(0x294d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000066a000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000580)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618ec672e660f38803d004000000f285473f61366b9800000c00f32663500400000440f20c0663507000000440f22c00f20e06635800000000f22e0f30fa6c8", 0x59}], 0x1, 0x41, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/udp\x00') kernel console output (not intermixed with test programs): 8952][T17365] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.4746: Failed to acquire dquot type 1 [ 1292.373559][T17365] EXT4-fs (loop4): 1 truncate cleaned up [ 1292.380192][T17365] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1293.349820][T17380] loop3: detected capacity change from 0 to 512 [ 1293.470029][T17380] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1293.479194][T17380] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4750: bg 0: block 248: padding at end of block bitmap is not set [ 1293.494684][T17380] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.4750: Failed to acquire dquot type 1 [ 1293.508476][T17380] EXT4-fs (loop3): 1 truncate cleaned up [ 1293.514879][T17380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1294.384070][T17389] loop5: detected capacity change from 0 to 512 [ 1294.552321][T17389] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1294.561518][T17389] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4751: bg 0: block 248: padding at end of block bitmap is not set [ 1294.577287][T17389] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.4751: Failed to acquire dquot type 1 [ 1294.590713][T17389] EXT4-fs (loop5): 1 truncate cleaned up [ 1294.597182][T17389] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1295.488929][T17411] loop2: detected capacity change from 0 to 512 [ 1297.294353][T17411] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1297.301814][T17411] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4758: bg 0: block 248: padding at end of block bitmap is not set [ 1297.317740][T17411] __quota_error: 35 callbacks suppressed [ 1297.317756][T17411] Quota error (device loop2): write_blk: dquota write failed [ 1297.331134][T17411] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1298.974509][T17411] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.4758: Failed to acquire dquot type 1 [ 1298.977321][T17427] loop5: detected capacity change from 0 to 256 [ 1299.069108][T17411] EXT4-fs (loop2): 1 truncate cleaned up [ 1299.081310][T17411] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1299.128756][T17427] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1299.139434][T17427] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1299.156686][T17427] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1299.817424][T17437] loop4: detected capacity change from 0 to 512 [ 1299.882955][T17437] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1299.890229][T17437] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4762: bg 0: block 248: padding at end of block bitmap is not set [ 1299.905073][T17437] Quota error (device loop4): write_blk: dquota write failed [ 1299.912546][T17437] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1299.922495][T17437] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.4762: Failed to acquire dquot type 1 [ 1299.934983][T17437] EXT4-fs (loop4): 1 truncate cleaned up [ 1299.940996][T17437] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1300.676732][T17456] overlayfs: missing 'lowerdir' [ 1302.046562][T17468] fuse: Unknown parameter 'grou00000000000000000000' [ 1302.747732][T17481] 9pnet: Insufficient options for proto=fd [ 1302.907565][T17490] loop2: detected capacity change from 0 to 256 [ 1303.072478][T17490] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1303.083296][T17490] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1303.102849][T17490] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1304.052695][T17493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4780'. [ 1304.111563][T17497] loop2: detected capacity change from 0 to 2048 [ 1304.164558][T17497] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1304.973667][T17515] fuse: Unknown parameter 'group_i00000000000000000000' [ 1305.058671][T17519] loop0: detected capacity change from 0 to 256 [ 1305.137709][T17519] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1305.148408][T17519] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1305.161397][T17519] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1305.370265][T17525] loop4: detected capacity change from 0 to 512 [ 1305.431852][T17529] input: syz1 as /devices/virtual/input/input44 [ 1305.512516][T17525] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1305.540500][T17525] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4788: bg 0: block 248: padding at end of block bitmap is not set [ 1305.580179][T17534] loop5: detected capacity change from 0 to 256 [ 1305.606361][T17525] Quota error (device loop4): write_blk: dquota write failed [ 1305.652727][T17534] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1305.673606][T17525] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1305.713778][T17534] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1305.722443][T17525] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.4788: Failed to acquire dquot type 1 [ 1305.747109][T17534] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1305.763881][T17525] EXT4-fs (loop4): 1 truncate cleaned up [ 1305.809563][T17525] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1305.972489][ T30] audit: type=1326 audit(2000000017.180:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.3.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1306.150900][T17539] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.4792' sets config #1 [ 1306.166285][ T30] audit: type=1326 audit(2000000017.180:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.3.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1306.283581][ T30] audit: type=1326 audit(2000000017.200:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.3.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1306.345928][ T30] audit: type=1326 audit(2000000017.200:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.3.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1306.412588][ T30] audit: type=1326 audit(2000000017.200:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.3.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1306.476692][ T30] audit: type=1326 audit(2000000017.210:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.3.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1306.517315][ T30] audit: type=1326 audit(2000000017.210:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.3.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1306.564328][ T30] audit: type=1326 audit(2000000017.210:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17538 comm="syz.3.4792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1306.891667][T17548] loop0: detected capacity change from 0 to 512 [ 1306.953668][T17548] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1307.060526][T17548] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4794: bg 0: block 248: padding at end of block bitmap is not set [ 1307.166054][T17548] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.4794: Failed to acquire dquot type 1 [ 1307.198457][T17548] EXT4-fs (loop0): 1 truncate cleaned up [ 1307.216392][T17548] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1307.789039][T17560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4798'. [ 1307.825306][T17560] loop2: detected capacity change from 0 to 2048 [ 1307.856228][T17560] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1308.345460][T17567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4800'. [ 1308.375370][T17567] loop4: detected capacity change from 0 to 2048 [ 1308.472386][T17567] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1310.778878][T17602] loop2: detected capacity change from 0 to 256 [ 1310.816871][T17602] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1310.853645][T17607] 9pnet: Insufficient options for proto=fd [ 1310.892127][T17602] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1310.902414][T17602] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1311.050962][T17613] input: syz1 as /devices/virtual/input/input46 [ 1311.616712][T17618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4814'. [ 1311.633719][T17618] loop3: detected capacity change from 0 to 2048 [ 1311.634079][T17619] loop4: detected capacity change from 0 to 256 [ 1311.677764][T17619] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1311.688422][T17619] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1311.703166][T17619] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1311.727914][T17618] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1311.824669][T17625] loop5: detected capacity change from 0 to 256 [ 1311.842084][T17625] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1312.022822][T17625] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1312.051560][T17625] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1312.409260][T17634] loop5: detected capacity change from 0 to 512 [ 1312.534790][T17634] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1312.542798][T17634] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4817: bg 0: block 248: padding at end of block bitmap is not set [ 1312.558172][T17634] __quota_error: 31 callbacks suppressed [ 1312.558187][T17634] Quota error (device loop5): write_blk: dquota write failed [ 1312.571672][T17634] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1312.581617][T17634] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.4817: Failed to acquire dquot type 1 [ 1312.594798][T17634] EXT4-fs (loop5): 1 truncate cleaned up [ 1312.601749][T17634] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1313.623861][T17644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4820'. [ 1313.675459][T17644] loop3: detected capacity change from 0 to 2048 [ 1313.773797][T17644] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1315.054901][T17658] loop4: detected capacity change from 0 to 512 [ 1315.102706][T17660] loop3: detected capacity change from 0 to 256 [ 1315.138462][T17660] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1315.149197][T17660] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1315.164335][T17660] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1315.447368][T17658] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1315.467590][T17658] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1315.622604][T17658] netlink: 'syz.4.4822': attribute type 13 has an invalid length. [ 1315.819178][T17658] gretap0: refused to change device tx_queue_len [ 1315.960927][T17669] xt_CT: No such helper "pptp" [ 1316.510579][T17658] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1316.757402][ T5636] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1317.038875][T17679] loop3: detected capacity change from 0 to 256 [ 1317.079912][T17679] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1317.091366][T17679] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1317.102082][T17679] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1317.137433][ T5636] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.153981][ T5636] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1317.176170][ T5636] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1317.202701][ T5636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.230783][ T5636] usb 3-1: config 0 descriptor?? [ 1318.042467][T17693] loop3: detected capacity change from 0 to 512 [ 1318.143886][T17693] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1318.152795][T17693] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4833: bg 0: block 248: padding at end of block bitmap is not set [ 1318.168779][T17693] Quota error (device loop3): write_blk: dquota write failed [ 1318.176286][T17693] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1318.186394][T17693] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.4833: Failed to acquire dquot type 1 [ 1318.200887][T17693] EXT4-fs (loop3): 1 truncate cleaned up [ 1318.207540][T17693] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1319.025390][T17701] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4836'. [ 1319.047355][T17705] loop4: detected capacity change from 0 to 256 [ 1319.064393][T17701] loop5: detected capacity change from 0 to 2048 [ 1319.130393][T17701] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1319.136031][T17705] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1319.142242][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4840'. [ 1319.152378][T17705] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1319.179096][T17705] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1319.216553][T17714] loop0: detected capacity change from 0 to 256 [ 1319.307004][T17716] loop3: detected capacity change from 0 to 2048 [ 1319.361109][T17716] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1319.378257][T17714] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1319.389208][T17714] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1319.404012][T17714] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1319.526195][ T5636] usb 3-1: USB disconnect, device number 33 [ 1320.225649][T17727] loop5: detected capacity change from 0 to 512 [ 1320.354292][T17734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4844'. [ 1320.378430][T17727] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1320.398792][T17730] loop3: detected capacity change from 0 to 2048 [ 1320.415462][T17727] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1320.427013][T17736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4845'. [ 1320.447957][T17730] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1320.459372][T17727] netlink: 'syz.5.4842': attribute type 13 has an invalid length. [ 1320.485971][T17738] loop0: detected capacity change from 0 to 2048 [ 1320.527715][T17727] gretap0: refused to change device tx_queue_len [ 1320.538430][T17727] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1320.668320][T17738] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1321.708747][T17755] loop0: detected capacity change from 0 to 512 [ 1321.870898][T17755] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1321.880460][T17755] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4848: bg 0: block 248: padding at end of block bitmap is not set [ 1321.896390][T17755] Quota error (device loop0): write_blk: dquota write failed [ 1321.903951][T17755] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1321.914254][T17755] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.4848: Failed to acquire dquot type 1 [ 1321.929161][T17755] EXT4-fs (loop0): 1 truncate cleaned up [ 1321.936355][T17755] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1322.407350][ T30] audit: type=1326 audit(2000000006.340:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17760 comm="syz.3.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1322.514614][T17761] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.4851' sets config #1 [ 1322.555332][ T30] audit: type=1326 audit(2000000006.430:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17760 comm="syz.3.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1322.649703][ T30] audit: type=1326 audit(2000000006.430:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17760 comm="syz.3.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1322.706812][ T30] audit: type=1326 audit(2000000006.430:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17760 comm="syz.3.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1322.857476][ T30] audit: type=1326 audit(2000000006.430:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17760 comm="syz.3.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1322.924957][ T30] audit: type=1326 audit(2000000006.430:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17760 comm="syz.3.4851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d288b929 code=0x7ffc0000 [ 1323.037312][ T3525] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1323.243735][T17778] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4858'. [ 1323.296605][T17778] loop5: detected capacity change from 0 to 2048 [ 1323.304397][ T3525] usb 4-1: Using ep0 maxpacket: 32 [ 1323.330167][T17778] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1323.347380][ T5636] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1323.477597][ T3525] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD8, skipping [ 1323.887636][ T3525] usb 4-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 1324.225366][T17789] loop0: detected capacity change from 0 to 256 [ 1324.272801][T17789] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1324.283547][T17789] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1324.515769][T17793] loop4: detected capacity change from 0 to 512 [ 1324.522660][ T5636] usb 3-1: Using ep0 maxpacket: 32 [ 1324.557893][ T3525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.566809][ T3525] usb 4-1: Product: syz [ 1324.582150][ T3525] usb 4-1: Manufacturer: syz [ 1324.587064][T17789] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1324.600939][ T3525] usb 4-1: SerialNumber: syz [ 1324.685950][T17793] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1324.697231][T17793] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4862: bg 0: block 248: padding at end of block bitmap is not set [ 1324.712639][T17793] __quota_error: 32 callbacks suppressed [ 1324.712667][T17793] Quota error (device loop4): write_blk: dquota write failed [ 1324.726227][T17793] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1324.736321][T17793] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.4862: Failed to acquire dquot type 1 [ 1324.751136][T17793] EXT4-fs (loop4): 1 truncate cleaned up [ 1324.758177][T17793] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1324.840761][ T5636] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD8, skipping [ 1325.177906][ T3525] usb 4-1: config 0 descriptor?? [ 1325.416566][ T5636] usb 3-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 1325.493176][T17802] xt_CT: No such helper "pptp" [ 1326.044567][ T5636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.052899][ T5636] usb 3-1: Product: syz [ 1326.066429][ T5636] usb 3-1: Manufacturer: syz [ 1326.073297][ T5636] usb 3-1: SerialNumber: syz [ 1326.084863][T10117] usb 4-1: USB disconnect, device number 12 [ 1326.091138][ T5636] usb 3-1: config 0 descriptor?? [ 1326.107378][ T5636] usb 3-1: can't set config #0, error -71 [ 1326.114225][ T5636] usb 3-1: USB disconnect, device number 34 [ 1326.136720][T17804] 9pnet: Insufficient options for proto=fd [ 1326.339195][T17818] loop2: detected capacity change from 0 to 512 [ 1326.370527][T17817] loop4: detected capacity change from 0 to 512 [ 1326.402170][T17818] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1326.409843][T17818] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4869: bg 0: block 248: padding at end of block bitmap is not set [ 1326.425338][T17818] Quota error (device loop2): write_blk: dquota write failed [ 1326.432785][T17818] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1326.442928][T17818] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.4869: Failed to acquire dquot type 1 [ 1326.455640][T17818] EXT4-fs (loop2): 1 truncate cleaned up [ 1326.462758][T17818] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1326.776658][T17817] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1326.877799][T17817] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1326.893298][T17817] netlink: 'syz.4.4868': attribute type 13 has an invalid length. [ 1326.903718][T17817] gretap0: refused to change device tx_queue_len [ 1326.911012][T17817] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1327.051386][T17830] input: syz1 as /devices/virtual/input/input48 [ 1327.636616][T17837] fuse: Bad value for 'fd' [ 1327.883394][T17845] 9pnet: Insufficient options for proto=fd [ 1328.008623][T17852] xt_CT: No such helper "pptp" [ 1328.819384][T17867] loop5: detected capacity change from 0 to 256 [ 1328.887447][T17867] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1328.898107][T17867] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1328.909526][T17867] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1329.457332][ T5636] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1329.689853][T17872] loop5: detected capacity change from 0 to 256 [ 1329.707399][ T5636] usb 4-1: Using ep0 maxpacket: 32 [ 1329.731033][T17872] FAT-fs (loop5): Directory bread(block 64) failed [ 1329.757869][T17872] FAT-fs (loop5): Directory bread(block 65) failed [ 1329.791748][T17876] loop2: detected capacity change from 0 to 512 [ 1329.840881][T17872] FAT-fs (loop5): Directory bread(block 66) failed [ 1329.848914][T17876] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1329.856706][T17876] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4888: bg 0: block 248: padding at end of block bitmap is not set [ 1329.871426][ T5636] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD8, skipping [ 1329.871634][T17876] Quota error (device loop2): write_blk: dquota write failed [ 1329.889846][T17876] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1329.899760][T17876] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.4888: Failed to acquire dquot type 1 [ 1329.911429][T17872] FAT-fs (loop5): Directory bread(block 67) failed [ 1329.918536][T17872] FAT-fs (loop5): Directory bread(block 68) failed [ 1329.925174][T17876] EXT4-fs (loop2): 1 truncate cleaned up [ 1329.931129][T17872] FAT-fs (loop5): Directory bread(block 69) failed [ 1329.937943][T17876] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1329.977339][T17872] FAT-fs (loop5): Directory bread(block 70) failed [ 1329.984144][T17872] FAT-fs (loop5): Directory bread(block 71) failed [ 1329.991244][T17872] FAT-fs (loop5): Directory bread(block 72) failed [ 1330.010179][T17872] FAT-fs (loop5): Directory bread(block 73) failed [ 1330.067541][ T5636] usb 4-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 1330.084045][ T5636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.224505][ T5636] usb 4-1: Product: syz [ 1331.686833][T17884] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4890'. [ 1331.728921][T17884] loop0: detected capacity change from 0 to 2048 [ 1331.761200][T17886] 9pnet: Insufficient options for proto=fd [ 1331.852837][T17884] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1331.955019][ T5636] usb 4-1: Manufacturer: syz [ 1332.859256][ T5636] usb 4-1: SerialNumber: syz [ 1332.865072][ T5636] usb 4-1: config 0 descriptor?? [ 1332.896081][ T5636] usb 4-1: can't set config #0, error -71 [ 1332.908633][ T5636] usb 4-1: USB disconnect, device number 13 [ 1333.953578][T17918] loop5: detected capacity change from 0 to 256 [ 1334.000022][T17918] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1334.010919][T17918] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1334.033001][T17918] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1335.625811][T17927] loop2: detected capacity change from 0 to 512 [ 1335.640205][T17925] loop5: detected capacity change from 0 to 512 [ 1335.659220][T17925] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1335.666298][T17925] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.4901: bg 0: block 248: padding at end of block bitmap is not set [ 1335.681345][T17925] Quota error (device loop5): write_blk: dquota write failed [ 1335.688912][T17925] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1335.698965][T17925] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.4901: Failed to acquire dquot type 1 [ 1335.713004][T17925] EXT4-fs (loop5): 1 truncate cleaned up [ 1335.723802][T17925] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1335.787502][T17927] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1335.794816][T17927] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4902: bg 0: block 248: padding at end of block bitmap is not set [ 1335.809873][T17927] Quota error (device loop2): write_blk: dquota write failed [ 1335.817465][T17927] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1335.827627][T17927] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.4902: Failed to acquire dquot type 1 [ 1335.844385][T17927] EXT4-fs (loop2): 1 truncate cleaned up [ 1335.882606][T17941] xt_CT: No such helper "pptp" [ 1336.331779][T17927] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1336.398144][T17950] loop5: detected capacity change from 0 to 256 [ 1337.187599][T17950] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1337.198276][T17950] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1337.210479][T17950] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1338.136891][T17979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4921'. [ 1338.157685][T17979] loop3: detected capacity change from 0 to 2048 [ 1338.180141][T17986] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4924'. [ 1338.218734][T17979] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1338.435713][T17986] loop5: detected capacity change from 0 to 2048 [ 1338.579966][T17986] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1340.693522][T17998] loop4: detected capacity change from 0 to 256 [ 1340.808322][T17998] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1340.819142][T17998] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1340.830078][T17998] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1342.063604][T18029] loop3: detected capacity change from 0 to 2048 [ 1342.100636][T18029] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1342.790720][T18049] fuse: Bad value for 'fd' [ 1342.879703][T18054] syz.2.4944[18054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1342.880214][T18054] syz.2.4944[18054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1343.281576][T18066] loop3: detected capacity change from 0 to 512 [ 1343.399313][T18066] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1343.411932][T18066] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4948: bg 0: block 248: padding at end of block bitmap is not set [ 1343.429020][T18066] Quota error (device loop3): write_blk: dquota write failed [ 1343.436774][T18066] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1343.446982][T18066] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.4948: Failed to acquire dquot type 1 [ 1343.462360][T18066] EXT4-fs (loop3): 1 truncate cleaned up [ 1343.469156][T18066] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1344.335392][T18066] syz.3.4948 (18066) used greatest stack depth: 20256 bytes left [ 1344.477646][T18073] loop3: detected capacity change from 0 to 2048 [ 1344.573426][T18073] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1345.082142][T18085] loop0: detected capacity change from 0 to 512 [ 1345.209031][T18085] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1345.233126][T18085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4953: bg 0: block 248: padding at end of block bitmap is not set [ 1345.257474][T18085] Quota error (device loop0): write_blk: dquota write failed [ 1345.265063][T18085] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1345.275172][T18085] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.4953: Failed to acquire dquot type 1 [ 1345.289551][T18085] EXT4-fs (loop0): 1 truncate cleaned up [ 1345.298811][T18085] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1346.807788][T18110] loop3: detected capacity change from 0 to 256 [ 1346.892232][T18110] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1346.902933][T18110] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1346.997842][T18110] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1348.603055][T18124] syz.5.4963[18124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1348.603123][T18124] syz.5.4963[18124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1348.621957][T18122] loop0: detected capacity change from 0 to 2048 [ 1348.684005][T18122] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1348.830767][T18135] loop3: detected capacity change from 0 to 512 [ 1349.006713][T18135] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1349.031727][T18135] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.4966: bg 0: block 248: padding at end of block bitmap is not set [ 1349.047072][T18135] Quota error (device loop3): write_blk: dquota write failed [ 1349.054854][T18135] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1349.065274][T18135] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.4966: Failed to acquire dquot type 1 [ 1349.077137][T18135] EXT4-fs (loop3): 1 truncate cleaned up [ 1349.089529][T18135] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1349.577321][ T39] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1349.817348][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 1349.929866][T18158] loop0: detected capacity change from 0 to 256 [ 1349.949971][T18158] FAT-fs (loop0): Directory bread(block 64) failed [ 1349.959617][T18158] FAT-fs (loop0): Directory bread(block 65) failed [ 1349.972327][T18158] FAT-fs (loop0): Directory bread(block 66) failed [ 1349.977399][ T39] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD8, skipping [ 1349.985127][T18158] FAT-fs (loop0): Directory bread(block 67) failed [ 1349.997481][T18158] FAT-fs (loop0): Directory bread(block 68) failed [ 1350.004260][T18158] FAT-fs (loop0): Directory bread(block 69) failed [ 1350.012087][T18158] FAT-fs (loop0): Directory bread(block 70) failed [ 1350.018835][T18158] FAT-fs (loop0): Directory bread(block 71) failed [ 1350.025621][T18158] FAT-fs (loop0): Directory bread(block 72) failed [ 1350.032489][T18158] FAT-fs (loop0): Directory bread(block 73) failed [ 1350.180462][T18162] xt_CT: No such helper "pptp" [ 1350.777933][ T39] usb 6-1: New USB device found, idVendor=05e1, idProduct=1008, bcdDevice=25.11 [ 1351.947303][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.955313][ T39] usb 6-1: Product: syz [ 1351.967353][ T39] usb 6-1: Manufacturer: syz [ 1351.971956][ T39] usb 6-1: SerialNumber: syz [ 1352.081773][ T39] usb 6-1: config 0 descriptor?? [ 1352.127214][T18181] loop5: detected capacity change from 0 to 2048 [ 1352.147434][T18184] incfs_lookup_dentry err:-14 [ 1352.152277][T18184] incfs: Can't find or create .incomplete dir in ./file0 [ 1352.157851][ T39] usb 6-1: can't set config #0, error -71 [ 1352.160358][T18184] incfs: mount failed -14 [ 1352.170653][ T39] usb 6-1: USB disconnect, device number 22 [ 1352.263840][T18188] loop0: detected capacity change from 0 to 256 [ 1352.304727][T18181] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1352.329434][T18188] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1352.340193][T18188] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1352.355926][T18188] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1353.438979][T18201] loop0: detected capacity change from 0 to 512 [ 1354.326361][T18201] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1354.335915][T18201] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.4986: bg 0: block 248: padding at end of block bitmap is not set [ 1354.351345][T18201] Quota error (device loop0): write_blk: dquota write failed [ 1354.358896][T18201] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1354.368929][T18201] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.4986: Failed to acquire dquot type 1 [ 1354.382465][T18201] EXT4-fs (loop0): 1 truncate cleaned up [ 1354.389176][T18201] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1354.685672][T18210] xt_CT: No such helper "pptp" [ 1355.477657][T18224] loop0: detected capacity change from 0 to 256 [ 1355.565611][T18234] loop4: detected capacity change from 0 to 2048 [ 1355.574103][T18224] FAT-fs (loop0): Directory bread(block 64) failed [ 1355.583503][T18224] FAT-fs (loop0): Directory bread(block 65) failed [ 1355.590240][T18224] FAT-fs (loop0): Directory bread(block 66) failed [ 1355.596867][T18224] FAT-fs (loop0): Directory bread(block 67) failed [ 1355.604141][T18224] FAT-fs (loop0): Directory bread(block 68) failed [ 1355.610939][T18224] FAT-fs (loop0): Directory bread(block 69) failed [ 1355.618155][T18224] FAT-fs (loop0): Directory bread(block 70) failed [ 1355.727224][T18224] FAT-fs (loop0): Directory bread(block 71) failed [ 1355.763733][T18224] FAT-fs (loop0): Directory bread(block 72) failed [ 1355.800056][T18234] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1355.871124][T18224] FAT-fs (loop0): Directory bread(block 73) failed [ 1356.951649][T18246] loop2: detected capacity change from 0 to 256 [ 1356.997585][T18246] FAT-fs (loop2): Directory bread(block 64) failed [ 1357.019384][T18246] FAT-fs (loop2): Directory bread(block 65) failed [ 1357.035875][T18246] FAT-fs (loop2): Directory bread(block 66) failed [ 1357.065911][T18246] FAT-fs (loop2): Directory bread(block 67) failed [ 1357.086137][T18246] FAT-fs (loop2): Directory bread(block 68) failed [ 1357.106292][T18246] FAT-fs (loop2): Directory bread(block 69) failed [ 1357.123649][T18246] FAT-fs (loop2): Directory bread(block 70) failed [ 1357.137353][T18246] FAT-fs (loop2): Directory bread(block 71) failed [ 1357.147568][T18246] FAT-fs (loop2): Directory bread(block 72) failed [ 1357.164776][T18246] FAT-fs (loop2): Directory bread(block 73) failed [ 1358.172795][T18264] loop4: detected capacity change from 0 to 512 [ 1358.308250][T18258] loop3: detected capacity change from 0 to 512 [ 1358.370940][T18264] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1358.380279][T18264] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5001: bg 0: block 248: padding at end of block bitmap is not set [ 1358.396531][T18264] Quota error (device loop4): write_blk: dquota write failed [ 1358.404118][T18264] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1358.414366][T18264] EXT4-fs error (device loop4): ext4_acquire_dquot:6195: comm syz.4.5001: Failed to acquire dquot type 1 [ 1358.428402][T18264] EXT4-fs (loop4): 1 truncate cleaned up [ 1358.435041][T18264] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1358.961696][T18258] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1359.039929][T18258] ext4 filesystem being mounted at /510/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1359.148513][T18258] netlink: 'syz.3.5000': attribute type 13 has an invalid length. [ 1359.219236][T18258] gretap0: refused to change device tx_queue_len [ 1359.292924][T18278] xt_CT: No such helper "pptp" [ 1359.482130][T18258] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1362.556854][T18319] loop2: detected capacity change from 0 to 256 [ 1362.590433][T18319] FAT-fs (loop2): Directory bread(block 64) failed [ 1362.597175][T18319] FAT-fs (loop2): Directory bread(block 65) failed [ 1362.605901][T18319] FAT-fs (loop2): Directory bread(block 66) failed [ 1362.612622][T18319] FAT-fs (loop2): Directory bread(block 67) failed [ 1362.625500][T18319] FAT-fs (loop2): Directory bread(block 68) failed [ 1362.632076][T18319] FAT-fs (loop2): Directory bread(block 69) failed [ 1362.638762][T18319] FAT-fs (loop2): Directory bread(block 70) failed [ 1362.645285][T18319] FAT-fs (loop2): Directory bread(block 71) failed [ 1362.651878][T18319] FAT-fs (loop2): Directory bread(block 72) failed [ 1362.658407][T18319] FAT-fs (loop2): Directory bread(block 73) failed [ 1363.287513][ T39] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1364.525576][T18338] loop0: detected capacity change from 0 to 512 [ 1364.617505][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.669221][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.698202][T18344] loop5: detected capacity change from 0 to 256 [ 1364.716104][ T39] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1364.736452][T18338] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1364.773182][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.802471][T18338] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5020: bg 0: block 248: padding at end of block bitmap is not set [ 1364.828578][T18344] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1364.843204][ T39] usb 4-1: config 0 descriptor?? [ 1364.878288][T18344] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1364.897429][T18338] Quota error (device loop0): write_blk: dquota write failed [ 1364.904876][T18338] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1364.920469][T18344] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1364.932711][T18338] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.5020: Failed to acquire dquot type 1 [ 1364.998218][T18338] EXT4-fs (loop0): 1 truncate cleaned up [ 1365.025902][T18338] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1365.045648][T18351] loop2: detected capacity change from 0 to 256 [ 1365.088085][T18351] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1365.098799][T18351] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1365.109593][T18351] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1365.387370][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 1365.393433][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 1365.415580][ T39] usb 4-1: USB disconnect, device number 14 [ 1365.788042][T18355] xt_CT: No such helper "pptp" [ 1366.188270][T18364] loop3: detected capacity change from 0 to 256 [ 1366.252939][T18365] loop2: detected capacity change from 0 to 512 [ 1366.443075][T18364] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1366.453738][T18364] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1367.493098][T18364] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1367.588072][T18365] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1367.595571][T18365] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5029: bg 0: block 248: padding at end of block bitmap is not set [ 1367.610927][T18365] Quota error (device loop2): write_blk: dquota write failed [ 1367.618364][T18365] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1367.628304][T18365] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.5029: Failed to acquire dquot type 1 [ 1367.640527][T18365] EXT4-fs (loop2): 1 truncate cleaned up [ 1367.793882][T18365] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1368.097298][ T1110] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1368.337533][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 1368.487445][ T1110] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1369.058458][T18410] loop5: detected capacity change from 0 to 512 [ 1369.107384][ T1110] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1369.126575][ T1110] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1369.209758][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.224007][ T1110] usb 4-1: config 0 descriptor?? [ 1369.278032][T18410] EXT4-fs (loop5): 1 truncate cleaned up [ 1369.283728][T18410] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1369.346092][T18420] loop4: detected capacity change from 0 to 512 [ 1369.392021][T18420] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1369.449813][T18420] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1369.513061][T18420] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1369.651904][T18420] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 1369.664246][T18420] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1369.693054][T18420] System zones: 0-2, 18-18, 34-34 [ 1369.700824][T18420] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1369.716654][T18420] EXT4-fs (loop4): 1 truncate cleaned up [ 1369.720437][T18426] loop2: detected capacity change from 0 to 256 [ 1369.722521][T18420] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1369.730648][T18426] exfat: Unknown parameter 'ioscard}K¼éÚT¸' [ 1370.123712][T18432] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.5051: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1370.299042][T18435] device batadv_slave_1 entered promiscuous mode [ 1370.555147][T18439] loop5: detected capacity change from 0 to 128 [ 1370.580814][ T30] audit: type=1400 audit(2000000004.770:1353): avc: denied { ioctl } for pid=18440 comm="syz.4.5055" path="socket:[84370]" dev="sockfs" ino=84370 ioctlcmd=0x48d7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1370.616648][T18441] loop4: detected capacity change from 0 to 256 [ 1370.619645][T18439] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1370.625144][T18441] exfat: Unknown parameter 'ioscard}K¼éÚT¸' [ 1370.644933][T18439] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.808960][ T30] audit: type=1400 audit(2000000005.000:1354): avc: denied { write } for pid=18446 comm="syz.5.5058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1370.877806][T18455] device syzkaller0 entered promiscuous mode [ 1370.944545][ T30] audit: type=1400 audit(2000000005.130:1355): avc: denied { load_policy } for pid=18467 comm="syz.2.5067" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1370.944738][T18468] SELinux: failed to load policy [ 1371.061498][ T30] audit: type=1400 audit(2000000005.220:1356): avc: denied { ioctl } for pid=18475 comm="syz.5.5070" path="socket:[85217]" dev="sockfs" ino=85217 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1371.246024][T18481] loop4: detected capacity change from 0 to 16 [ 1371.381793][T18481] erofs: (device loop4): mounted with root inode @ nid 36. [ 1371.704333][T18481] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 281474976710655 [ 1371.743787][T18435] device batadv_slave_1 left promiscuous mode [ 1371.789926][ T5636] usb 4-1: USB disconnect, device number 15 [ 1371.825428][ T30] audit: type=1400 audit(2000000006.010:1357): avc: denied { read } for pid=18502 comm="syz.2.5081" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1371.914475][T18504] device pim6reg1 entered promiscuous mode [ 1372.227513][T18519] capability: warning: `syz.5.5086' uses 32-bit capabilities (legacy support in use) [ 1372.254678][T18518] loop2: detected capacity change from 0 to 8192 [ 1372.393439][T18526] loop5: detected capacity change from 0 to 512 [ 1372.500185][T18526] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1372.530662][T18526] EXT4-fs (loop5): 1 truncate cleaned up [ 1372.536425][T18526] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 1372.607726][T18536] loop2: detected capacity change from 0 to 8192 [ 1372.639430][T18544] loop5: detected capacity change from 0 to 512 [ 1372.654494][T18540] 9pnet: Insufficient options for proto=fd [ 1372.675462][T18548] loop3: detected capacity change from 0 to 128 [ 1372.684485][T18536] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1372.742197][T18544] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1372.760120][T18548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1372.771857][T18548] ext4 filesystem being mounted at /518/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1373.083795][T18568] loop4: detected capacity change from 0 to 256 [ 1373.104516][T18574] loop2: detected capacity change from 0 to 1024 [ 1373.131070][T18568] exfat: Unknown parameter 'ioscard}K¼éÚT¸' [ 1373.158225][T18574] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1373.173437][ T30] audit: type=1400 audit(2000000007.360:1358): avc: denied { write } for pid=18577 comm="syz.5.5111" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1373.174186][ T5636] kernel write not supported for file /cpu/0/msr (pid: 5636 comm: kworker/0:11) [ 1373.356799][T18584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.363929][T18584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1373.615729][ T30] audit: type=1400 audit(2000000007.800:1359): avc: denied { read } for pid=18587 comm="syz.2.5114" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1373.807930][ T30] audit: type=1400 audit(2000000007.900:1360): avc: denied { open } for pid=18587 comm="syz.2.5114" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1373.921465][ T30] audit: type=1400 audit(2000000007.900:1361): avc: denied { ioctl } for pid=18587 comm="syz.2.5114" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1373.955405][ T30] audit: type=1400 audit(2000000008.140:1362): avc: denied { getopt } for pid=18611 comm="syz.0.5123" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1374.002358][T18620] loop0: detected capacity change from 0 to 512 [ 1374.084392][T18620] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1374.095769][T18620] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.199189][ T5636] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1374.325727][T18646] input: syz1 as /devices/virtual/input/input49 [ 1374.873602][T18652] loop3: detected capacity change from 0 to 1024 [ 1374.967977][T18652] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,abort,,errors=continue. Quota mode: none. [ 1375.097312][ T5636] usb 5-1: Using ep0 maxpacket: 16 [ 1375.129228][T18670] loop2: detected capacity change from 0 to 512 [ 1375.147741][T18670] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1375.159140][T18670] EXT4-fs (loop2): 1 truncate cleaned up [ 1375.164788][T18670] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,dioread_lock,inode_readahead_blks=0x0000000008000000,debug_want_extra_isize=0x0000000000000040,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 1375.261777][ T5636] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1375.743399][T18697] loop0: detected capacity change from 0 to 256 [ 1375.761775][T18697] exfat: Unknown parameter 'ioscard}K¼éÚT¸' [ 1375.833562][ T5636] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1375.901320][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1375.901339][ T30] audit: type=1400 audit(2000000010.090:1369): avc: denied { bind } for pid=18706 comm="syz.5.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1375.927242][ T5636] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1375.936539][ T5636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1375.948887][ T5636] usb 5-1: SerialNumber: syz [ 1376.553317][ T30] audit: type=1400 audit(2000000010.740:1370): avc: denied { create } for pid=18725 comm="syz.5.5162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1376.597591][ T5636] usb 5-1: can't set config #1, error -71 [ 1376.608322][ T5636] usb 5-1: USB disconnect, device number 21 [ 1376.700444][T18738] loop3: detected capacity change from 0 to 512 [ 1376.779297][T18738] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1376.793698][T18738] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1376.824233][T18738] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1376.848502][T18738] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 1376.863476][T18738] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1376.875402][T18738] System zones: 0-2, 18-18, 34-34 [ 1376.882249][T18738] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1376.907918][T18738] EXT4-fs (loop3): 1 truncate cleaned up [ 1376.918041][T18738] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1377.226640][T18772] loop2: detected capacity change from 0 to 256 [ 1377.259240][T18772] exfat: Unknown parameter 'ioscard}K¼éÚT¸' [ 1377.285445][T18776] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #2: block 3: comm syz.3.5168: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 1377.646597][T18782] input: syz1 as /devices/virtual/input/input50 [ 1377.860316][T18797] 9pnet: Insufficient options for proto=fd [ 1378.327354][ T5636] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1378.393690][ T30] audit: type=1400 audit(2000000012.580:1371): avc: denied { write } for pid=18814 comm="syz.4.5194" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1378.477627][ T30] audit: type=1400 audit(2000000012.660:1372): avc: denied { execute } for pid=18812 comm="syz.5.5193" name="file1" dev="ramfs" ino=86093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1378.567407][ T5636] usb 3-1: Using ep0 maxpacket: 8 [ 1378.737844][ T5636] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1378.759971][ T5636] usb 3-1: config 179 has no interface number 0 [ 1378.782958][ T5636] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1378.797373][ T5636] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1378.809283][ T5636] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1378.825554][T18830] loop4: detected capacity change from 0 to 128 [ 1378.832363][ T5636] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1378.844535][ T5636] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1378.858064][ T5636] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1378.867153][ T5636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.897477][T18802] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1378.918843][ T5636] xpad: probe of 3-1:179.65 failed with error -5 [ 1379.072108][T18836] loop3: detected capacity change from 0 to 256 [ 1379.149782][ T39] usb 3-1: USB disconnect, device number 35 [ 1379.166426][ T30] audit: type=1400 audit(2000000013.350:1373): avc: denied { mounton } for pid=18829 comm="syz.4.5200" path="/512/file0" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1379.276998][T18836] loop3: detected capacity change from 0 to 512 [ 1379.372589][T18836] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 1379.387837][T18836] EXT4-fs (loop3): Unrecognized mount option "subj_type=ext4" or missing value [ 1380.102523][T18863] loop3: detected capacity change from 0 to 512 [ 1380.569565][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1380.584256][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1380.588557][T18863] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1380.593721][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1380.606274][T18863] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1380.612336][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1380.618819][T18863] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1380.634517][T18863] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 1380.640088][T18871] loop4: detected capacity change from 0 to 1024 [ 1380.643783][T18863] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 1380.658341][T18863] System zones: 0-2, 18-18, 34-34 [ 1380.659993][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1380.672542][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1380.681079][T18863] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1380.681203][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1380.699302][T18863] EXT4-fs (loop3): 1 truncate cleaned up [ 1380.704125][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1380.718145][T18863] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1380.737912][T18871] EXT4-fs (loop4): Ignoring removed bh option [ 1380.765643][T18871] EXT4-fs (loop4): dax option not supported [ 1380.768022][ T39] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1381.818217][T18889] loop2: detected capacity change from 0 to 256 [ 1381.827370][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 1381.947380][ T39] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1381.955745][ T39] usb 6-1: config 179 has no interface number 0 [ 1381.983985][ T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1382.028626][T18902] loop0: detected capacity change from 0 to 1024 [ 1382.036268][ T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1382.076990][T18902] EXT4-fs (loop0): Invalid want_extra_isize 326 [ 1382.087152][ T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1382.110321][T18905] loop2: detected capacity change from 0 to 256 [ 1382.126662][ T39] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1382.138474][ T39] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1382.152136][ T39] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1382.161445][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.187483][T18861] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1382.226761][T18905] loop2: detected capacity change from 0 to 512 [ 1382.230545][T18910] device syzkaller0 entered promiscuous mode [ 1382.254539][T18905] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 1382.292369][T18905] EXT4-fs (loop2): Unrecognized mount option "subj_type=ext4" or missing value [ 1382.370523][T18917] device veth1_to_team entered promiscuous mode [ 1382.455939][ T30] audit: type=1400 audit(2000000016.640:1374): avc: denied { append } for pid=18922 comm="syz.2.5231" name="usbmon5" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1382.487532][ T39] kernel read not supported for file /usbmon0 (pid: 39 comm: kworker/1:1) [ 1382.515008][T18926] loop2: detected capacity change from 0 to 128 [ 1382.534145][T18926] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 1382.546463][T18926] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1382.569059][ T30] audit: type=1400 audit(2000000016.760:1375): avc: denied { ioctl } for pid=18925 comm="syz.2.5232" path="/456/file1/cpu.stat" dev="loop2" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1382.684600][T18941] loop2: detected capacity change from 0 to 256 [ 1382.709862][T18941] FAT-fs (loop2): Directory bread(block 64) failed [ 1382.723051][T18941] FAT-fs (loop2): Directory bread(block 65) failed [ 1382.730113][T18941] FAT-fs (loop2): Directory bread(block 66) failed [ 1382.737497][T18941] FAT-fs (loop2): Directory bread(block 67) failed [ 1382.744414][T18941] FAT-fs (loop2): Directory bread(block 68) failed [ 1382.751583][T18941] FAT-fs (loop2): Directory bread(block 69) failed [ 1382.758485][T18941] FAT-fs (loop2): Directory bread(block 70) failed [ 1382.765293][T18941] FAT-fs (loop2): Directory bread(block 71) failed [ 1382.778642][T18941] FAT-fs (loop2): Directory bread(block 72) failed [ 1382.786457][T18941] FAT-fs (loop2): Directory bread(block 73) failed [ 1382.830762][ T30] audit: type=1400 audit(2000000017.020:1376): avc: denied { mounton } for pid=18940 comm="syz.2.5238" path="/459/bus/file0" dev="loop2" ino=1048860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 1382.931637][T18952] loop4: detected capacity change from 0 to 1024 [ 1382.978152][T18952] EXT4-fs (loop4): Ignoring removed nobh option [ 1382.984559][T18952] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1383.014293][T18952] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.5243: bad orphan inode 32767 [ 1383.025614][T18952] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,lazytime,dioread_lock,dioread_lock,resgid=0x0000000000000000,jqfmt=vfsv0,dioread_nolock,nobh,user_xattr,mb_optimize_scan=0x0000000000000000,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 1383.111446][ T30] audit: type=1400 audit(2000000017.300:1377): avc: denied { write } for pid=18950 comm="syz.4.5243" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1383.142228][T18952] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3876: comm syz.4.5243: Allocating blocks 497-513 which overlap fs metadata [ 1383.165443][T18952] EXT4-fs (loop4): pa ffff88811195adc8: logic 16, phys. 145, len 23 [ 1383.173512][T18952] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 1383.536220][ T9781] usb 6-1: USB disconnect, device number 23 [ 1383.537326][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1383.685474][T18978] loop5: detected capacity change from 0 to 128 [ 1383.740619][T18978] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1383.761709][T18978] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1383.768874][T18989] loop2: detected capacity change from 0 to 512 [ 1383.918224][T18989] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1384.042023][T18989] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 1384.059315][T18989] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1384.098129][ T30] audit: type=1400 audit(2000000018.290:1378): avc: denied { remount } for pid=18988 comm="syz.2.5256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1384.118363][T18989] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 1384.167835][T18998] loop5: detected capacity change from 0 to 1024 [ 1384.205678][T18998] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #3: block 2: comm syz.5.5259: lblock 2 mapped to illegal pblock 2 (length 1) [ 1384.235540][T18998] Quota error (device loop5): write_blk: dquota write failed [ 1384.246098][T18998] Quota error (device loop5): find_free_dqentry: Can't write quota data block 2 [ 1384.255790][T18998] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1384.267082][T18998] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.5259: Failed to acquire dquot type 0 [ 1384.287835][T18998] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 2: comm syz.5.5259: lblock 2 mapped to illegal pblock 2 (length 1) [ 1384.300689][ T30] audit: type=1400 audit(2000000018.490:1379): avc: denied { watch } for pid=19007 comm="syz.4.5263" path="/530" dev="tmpfs" ino=2886 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1384.302166][T18998] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1384.343577][T18998] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.5259: Failed to acquire dquot type 0 [ 1384.358504][T18998] EXT4-fs error (device loop5): ext4_free_blocks:6223: comm syz.5.5259: Freeing blocks not in datazone - block = 0, count = 4096 [ 1384.373237][T18998] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 2: comm syz.5.5259: lblock 2 mapped to illegal pblock 2 (length 1) [ 1384.390985][T18998] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.5259: Failed to acquire dquot type 0 [ 1384.415223][T18998] EXT4-fs (loop5): 1 orphan inode deleted [ 1384.421192][T18998] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1384.463323][T19017] loop4: detected capacity change from 0 to 256 [ 1384.478572][T19017] exfat: Deprecated parameter 'utf8' [ 1384.496016][T19017] exfat: Deprecated parameter 'namecase' [ 1384.610792][T19017] exfat: Deprecated parameter 'utf8' [ 1384.684628][T19017] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1384.947821][T19032] loop5: detected capacity change from 0 to 256 [ 1385.091777][T19032] FAT-fs (loop5): Directory bread(block 64) failed [ 1385.098607][T19032] FAT-fs (loop5): Directory bread(block 65) failed [ 1385.105338][T19032] FAT-fs (loop5): Directory bread(block 66) failed [ 1385.122570][T19032] FAT-fs (loop5): Directory bread(block 67) failed [ 1385.140228][T19036] loop3: detected capacity change from 0 to 512 [ 1385.185421][T19032] FAT-fs (loop5): Directory bread(block 68) failed [ 1385.207549][T19032] FAT-fs (loop5): Directory bread(block 69) failed [ 1385.214541][T19032] FAT-fs (loop5): Directory bread(block 70) failed [ 1385.221374][T19032] FAT-fs (loop5): Directory bread(block 71) failed [ 1385.228168][T19032] FAT-fs (loop5): Directory bread(block 72) failed [ 1385.234825][T19032] FAT-fs (loop5): Directory bread(block 73) failed [ 1385.236009][T19036] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1385.286455][T19056] loop4: detected capacity change from 0 to 2048 [ 1385.392469][T19036] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.5275: corrupted in-inode xattr [ 1385.420116][T19057] SELinux: failed to load policy [ 1385.422006][T19036] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.5275: couldn't read orphan inode 15 (err -117) [ 1385.438270][T19036] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,,errors=continue. Quota mode: writeback. [ 1385.704474][T19056] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.5284: bad orphan inode 8192 [ 1385.716456][T19056] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1385.800331][T19068] device syzkaller0 entered promiscuous mode [ 1385.938567][T19084] loop3: detected capacity change from 0 to 4096 [ 1385.945510][T19088] loop5: detected capacity change from 0 to 512 [ 1385.956529][T19090] ------------[ cut here ]------------ [ 1385.962278][T19090] trace type BPF program uses run-time allocation [ 1385.970062][T19090] WARNING: CPU: 1 PID: 19090 at kernel/bpf/verifier.c:11701 check_map_prog_compatibility+0x6cd/0x870 [ 1385.981088][T10117] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1385.981399][T19090] Modules linked in: [ 1385.997558][T19090] CPU: 0 PID: 19090 Comm: syz.4.5298 Not tainted 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 1386.007943][T19090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1386.028041][T19090] RIP: 0010:check_map_prog_compatibility+0x6cd/0x870 [ 1386.036003][T19084] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,sysvgroups,,errors=continue. Quota mode: writeback. [ 1386.049348][T19090] Code: ee ff 48 c7 c6 c0 e0 47 85 4c 8b 65 d0 e9 fd fc ff ff e8 f6 4b ee ff c6 05 f3 6d 6b 05 01 48 c7 c7 20 dd 47 85 e8 83 12 22 03 <0f> 0b e9 88 fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ac f9 ff [ 1386.059574][T19084] fs-verity (loop3, inode 16): Unknown hash algorithm number: 3433572214 [ 1386.069416][T19090] RSP: 0018:ffffc90000be7428 EFLAGS: 00010246 [ 1386.084953][T19090] RAX: e3ffc9eda7a63300 RBX: 0000000000000001 RCX: 0000000000080000 [ 1386.093677][T19090] RDX: ffffc900073ef000 RSI: 0000000000003fb9 RDI: 0000000000003fba [ 1386.102098][T19090] RBP: ffffc90000be7470 R08: dffffc0000000000 R09: ffffed103ee265e8 [ 1386.110133][T19090] R10: ffffed103ee265e8 R11: 1ffff1103ee265e7 R12: ffff888110cb4000 [ 1386.118270][T19090] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff8881055ca000 [ 1386.126353][T19090] FS: 00007f9d20f036c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1386.135890][T19090] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1386.142909][T19090] CR2: 00007fe40590d3b6 CR3: 0000000115c10000 CR4: 00000000003506a0 [ 1386.151497][T19090] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1386.159672][T19090] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1386.163222][T19088] EXT4-fs (loop5): Ignoring removed orlov option [ 1386.175682][T19090] Call Trace: [ 1386.178404][T19088] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1386.187196][T19090] [ 1386.199382][T19088] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.5294: Attempting to read directory block (0) that is past i_size (256) [ 1386.204199][T19090] resolve_pseudo_ldimm64+0x685/0x11d0 [ 1386.223521][T19088] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1386.260470][T19090] ? check_attach_btf_id+0xde0/0xde0 [ 1386.267216][T19088] EXT4-fs (loop5): mounted filesystem without journal. Opts: sysvgroups,orlov,data_err=abort,init_itable,dioread_nolock,grpjquota=.oldalloc,errors=continue,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 1386.348529][T19090] ? __mark_reg_known+0x1b0/0x1b0 [ 1386.353699][T19090] ? security_capable+0x87/0xb0 [ 1386.384235][T19090] bpf_check+0x2c44/0xf330 [ 1386.389005][T10117] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 1386.397338][T19090] ? is_bpf_text_address+0x177/0x190 [ 1386.402693][T10117] usb 1-1: config 0 has no interface number 0 [ 1386.408925][T19090] ? bpf_get_btf_vmlinux+0x60/0x60 [ 1386.414176][T10117] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 47, changing to 7 [ 1386.417403][T19090] ? unwind_get_return_address+0x4d/0x90 [ 1386.425619][T10117] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 58843, setting to 1024 [ 1386.444163][T19090] ? stack_trace_save+0xe0/0xe0 [ 1386.449185][T19090] ? arch_stack_walk+0xee/0x140 [ 1386.454210][T19090] ? stack_trace_save+0x98/0xe0 [ 1386.459498][T19090] ? __stack_depot_save+0x34/0x480 [ 1386.464819][T19090] ? __kasan_slab_alloc+0x69/0xf0 [ 1386.470408][T19090] ? __kasan_kmalloc+0xec/0x110 [ 1386.475455][T19090] ? __kasan_kmalloc+0xda/0x110 [ 1386.551927][ T3525] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1386.556324][T19090] ? kmem_cache_alloc_trace+0x119/0x270 [ 1386.567744][T19090] ? selinux_bpf_prog_alloc+0x51/0x140 [ 1386.573339][T19090] ? security_bpf_prog_alloc+0x62/0x90 [ 1386.581719][T19090] ? bpf_prog_load+0x97c/0x1550 [ 1386.586693][T19090] ? __sys_bpf+0x4c3/0x730 [ 1386.594393][T19090] ? __x64_sys_bpf+0x7c/0x90 [ 1386.600138][T19090] ? x64_sys_call+0x4b9/0x9a0 [ 1386.607817][T10117] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1386.612169][T19090] ? do_syscall_64+0x4c/0xa0 [ 1386.629001][T10117] usb 1-1: New USB device strings: Mfr=0, Product=150, SerialNumber=146 [ 1386.635706][T19090] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1386.675861][T19090] ? check_stack_object+0x81/0x140 [ 1386.677033][T10117] usb 1-1: Product: syz [ 1386.685842][T10117] usb 1-1: SerialNumber: syz [ 1386.702324][T19090] ? memset+0x35/0x40 [ 1386.704723][T10117] usb 1-1: config 0 descriptor?? [ 1386.722556][T19090] ? bpf_obj_name_cpy+0x193/0x1e0 [ 1386.741965][T19090] bpf_prog_load+0x1042/0x1550 [ 1386.753247][T19090] ? __anon_inode_getfd+0x34b/0x3b0 [ 1386.787537][T19090] ? map_freeze+0x360/0x360 [ 1386.804956][T19090] ? selinux_bpf+0xc7/0xf0 [ 1386.810046][ T3525] usb 3-1: Using ep0 maxpacket: 32 [ 1386.818303][T19090] ? security_bpf+0x82/0xa0 [ 1386.824773][T19090] __sys_bpf+0x4c3/0x730 [ 1386.830098][T19090] ? bpf_link_show_fdinfo+0x310/0x310 [ 1386.835937][T19090] ? __kasan_check_write+0x14/0x20 [ 1386.843507][T19090] ? switch_fpu_return+0x15d/0x2c0 [ 1386.857499][T19090] __x64_sys_bpf+0x7c/0x90 [ 1386.862961][T19090] x64_sys_call+0x4b9/0x9a0 [ 1386.868014][T19090] do_syscall_64+0x4c/0xa0 [ 1386.872661][T19090] ? clear_bhb_loop+0x50/0xa0 [ 1386.877468][T19090] ? clear_bhb_loop+0x50/0xa0 [ 1386.882255][T19090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1386.889015][T19090] RIP: 0033:0x7f9d2289a929 [ 1386.893780][T19090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1386.906354][T19113] device syzkaller0 entered promiscuous mode [ 1386.920937][T19090] RSP: 002b:00007f9d20f03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1386.927476][ T3525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.941359][T19090] RAX: ffffffffffffffda RBX: 00007f9d22ac1fa0 RCX: 00007f9d2289a929 [ 1386.946536][ T3525] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1386.973224][T19090] RDX: 0000000000000052 RSI: 0000200000000200 RDI: 0000000000000005 [ 1386.973882][ T3525] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1386.992936][ T3525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.998346][T19090] RBP: 00007f9d2291cb39 R08: 0000000000000000 R09: 0000000000000000 [ 1387.015741][T10117] usb 1-1: USB disconnect, device number 28 [ 1387.028812][T19090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1387.032170][ T3525] usb 3-1: config 0 descriptor?? [ 1387.046746][T19090] R13: 0000000000000000 R14: 00007f9d22ac1fa0 R15: 00007ffd0586e318 [ 1387.055096][T19090] [ 1387.058441][T19090] ---[ end trace 309925c6f6aa765e ]--- [ 1387.092618][ T3525] hub 3-1:0.0: USB hub found [ 1387.255023][T19117] device pim6reg1 entered promiscuous mode [ 1387.421969][T19136] device syzkaller0 entered promiscuous mode [ 1387.428149][ T3525] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1387.698696][ T3525] hid-generic 0003:046D:C31C.0003: item fetching failed at offset 0/1 [ 1387.708910][ T3525] hid-generic: probe of 0003:046D:C31C.0003 failed with error -22 [ 1387.732142][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1387.732159][ T30] audit: type=1400 audit(2000000021.920:1387): avc: denied { getopt } for pid=19149 comm="syz.3.5322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1388.093832][T19164] loop3: detected capacity change from 0 to 256 [ 1388.198607][ T3525] usb 3-1: USB disconnect, device number 36 [ 1388.274521][T19170] loop3: detected capacity change from 0 to 512 [ 1388.303463][T19170] EXT4-fs (loop3): Ignoring removed nobh option [ 1388.319191][T19170] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5330: invalid indirect mapped block 256 (level 2) [ 1388.339147][T19170] EXT4-fs (loop3): 2 truncates cleaned up [ 1388.352584][T19170] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 1388.371427][T19170] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.5330: bg 0: block 5: invalid block bitmap [ 1388.387723][T19170] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1388.400084][T19170] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1388.400084][T19170] [ 1388.409845][T19170] EXT4-fs (loop3): Total free blocks count 0 [ 1388.416267][T19170] EXT4-fs (loop3): Free/Dirty block details [ 1388.426146][T19170] EXT4-fs (loop3): free_blocks=0 [ 1388.431480][T19170] EXT4-fs (loop3): dirty_blocks=66 [ 1388.436832][T19170] EXT4-fs (loop3): Block reservation details [ 1388.443455][T19170] EXT4-fs (loop3): i_reserved_data_blocks=66 [ 1388.450176][T19179] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28 [ 1388.466833][T19179] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1388.466833][T19179] [ 1388.479548][ T30] audit: type=1400 audit(2000000022.670:1388): avc: denied { mounton } for pid=19169 comm="syz.3.5330" path="/568/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1388.515583][T19176] device syzkaller0 entered promiscuous mode [ 1388.522469][T19183] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5334'. [ 1388.531815][T19183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.539134][T19183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.631762][T19192] loop3: detected capacity change from 0 to 1024 [ 1388.698677][T19192] EXT4-fs (loop3): Ignoring removed bh option [ 1388.730183][T19192] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 1388.758358][T19216] 9pnet: Could not find request transport: fd0x00000000000000060xffffffffffffffff [ 1388.773676][T19192] EXT4-fs (loop3): shut down requested (1) [ 1388.783833][ T30] audit: type=1400 audit(2000000022.970:1389): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1388.811089][ T30] audit: type=1400 audit(2000000022.970:1390): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1388.836924][ T30] audit: type=1400 audit(2000000022.970:1391): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1388.860651][ T30] audit: type=1400 audit(2000000022.970:1392): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1388.893371][T19230] loop0: detected capacity change from 0 to 16 [ 1388.896496][ T30] audit: type=1400 audit(2000000022.970:1393): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1388.926922][ T30] audit: type=1400 audit(2000000022.970:1394): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1388.950430][ T30] audit: type=1400 audit(2000000022.970:1395): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1388.974289][ T30] audit: type=1400 audit(2000000023.110:1396): avc: denied { read write } for pid=19231 comm="syz.2.5357" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1388.998179][ T5636] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1389.002895][T19230] erofs: (device loop0): mounted with root inode @ nid 36. [ 1389.058341][T19230] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=46 [ 1389.377414][ T5636] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.377658][T19269] loop0: detected capacity change from 0 to 256 [ 1389.387653][ T5636] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1389.507423][ T5636] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1389.516751][ T5636] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1389.524878][ T5636] usb 6-1: SerialNumber: syz [ 1389.582096][T19276] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1390.064769][ T5636] usb 6-1: 0:2 : does not exist [ 1390.073151][ T5636] usb 6-1: USB disconnect, device number 24 [ 1390.164988][T19281] loop3: detected capacity change from 0 to 128 [ 1390.171686][T19280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=19280 comm=syz.2.5377 [ 1390.288185][ T9960] udevd[9960]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1390.523583][T19295] 9pnet: Insufficient options for proto=fd [ 1390.598397][T19293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.605468][T19293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.655046][ T3525] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1390.657211][T19293] device bridge_slave_0 entered promiscuous mode [ 1390.683536][T19293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.690884][T19293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.700063][T19293] device bridge_slave_1 entered promiscuous mode [ 1390.975369][T19293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.982519][T19293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.989900][T19293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.996927][T19293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.018705][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1391.026998][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.034317][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.044820][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1391.053075][ T9776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.060137][ T9776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.067929][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1391.076328][ T9776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.083382][ T9776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.101696][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1391.109638][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1391.119803][ T45] device bridge_slave_1 left promiscuous mode [ 1391.125986][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.133632][ T45] device bridge_slave_0 left promiscuous mode [ 1391.139918][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.148226][ T45] device veth1_macvtap left promiscuous mode [ 1391.154226][ T45] device veth0_vlan left promiscuous mode [ 1391.237439][ T39] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1391.249611][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1391.257455][ T3525] usb 3-1: config 8 has an invalid interface number: 102 but max is 0 [ 1391.266079][ T3525] usb 3-1: config 8 has no interface number 0 [ 1391.270401][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1391.272333][ T3525] usb 3-1: config 8 interface 102 has no altsetting 0 [ 1391.280777][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1391.295068][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1391.303528][T19293] device veth0_vlan entered promiscuous mode [ 1391.313715][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1391.322073][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1391.331178][T19293] device veth1_macvtap entered promiscuous mode [ 1391.340484][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1391.348412][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1391.356590][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1391.366579][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1391.375010][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1391.437757][ T3525] usb 3-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=e5.4e [ 1391.446813][ T3525] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.468784][T19329] loop5: detected capacity change from 0 to 512 [ 1391.475656][T19329] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1391.478100][ T3525] usb 3-1: Product: syz [ 1391.492221][ T39] usb 1-1: Using ep0 maxpacket: 8 [ 1391.517040][ T3525] usb 3-1: Manufacturer: syz [ 1391.521868][ T3525] usb 3-1: SerialNumber: syz [ 1391.538272][T19329] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 1391.549889][T19334] 9pnet: Insufficient options for proto=fd [ 1391.551359][T19329] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.593254][T19342] device pim6reg1 entered promiscuous mode [ 1391.593254][T19329] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #2: comm syz.5.5396: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1391.627362][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.637863][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1391.649075][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1391.659094][ T39] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1391.669005][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1391.681932][ T39] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1391.692197][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.700667][T19350] loop4: detected capacity change from 0 to 128 [ 1391.711699][ T39] usb 1-1: config 0 descriptor?? [ 1391.714936][T19352] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.5407'. [ 1391.848282][T19364] 9pnet: Insufficient options for proto=fd [ 1391.958285][T19350] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1391.975522][T19350] FAT-fs (loop4): Filesystem has been set read-only [ 1392.029480][ T3525] usb 3-1: USB disconnect, device number 37 [ 1392.197706][T19319] UDC core: couldn't find an available UDC or it's busy: -16 [ 1392.205131][T19319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1392.218969][ T5636] usb 1-1: USB disconnect, device number 29 [ 1392.247615][T19372] loop5: detected capacity change from 0 to 128 [ 1392.269430][T19372] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1392.284339][T19374] loop4: detected capacity change from 0 to 128 [ 1392.291361][T19372] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1392.327052][ T8734] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1392.374604][T19380] device pim6reg1 entered promiscuous mode [ 1392.387816][T19382] device veth1_to_team entered promiscuous mode [ 1392.416921][T19386] loop4: detected capacity change from 0 to 512 [ 1392.449733][T19386] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,lazytime,minixdf,,errors=continue. Quota mode: writeback. [ 1392.463561][T19386] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1392.563267][T19395] loop5: detected capacity change from 0 to 256 [ 1392.576013][T19397] loop2: detected capacity change from 0 to 256 [ 1392.593105][T19395] FAT-fs (loop5): Directory bread(block 64) failed [ 1392.601362][T19395] FAT-fs (loop5): Directory bread(block 65) failed [ 1392.608308][T19395] FAT-fs (loop5): Directory bread(block 66) failed [ 1392.615098][T19395] FAT-fs (loop5): Directory bread(block 67) failed [ 1392.636790][T19395] FAT-fs (loop5): Directory bread(block 68) failed [ 1392.644391][T19395] FAT-fs (loop5): Directory bread(block 69) failed [ 1392.652129][T19395] FAT-fs (loop5): Directory bread(block 70) failed [ 1392.658976][T19395] FAT-fs (loop5): Directory bread(block 71) failed [ 1392.667150][T19395] FAT-fs (loop5): Directory bread(block 72) failed [ 1392.674475][T19395] FAT-fs (loop5): Directory bread(block 73) failed [ 1392.680549][T19397] FAT-fs (loop2): Directory bread(block 64) failed [ 1392.689083][T19397] FAT-fs (loop2): Directory bread(block 65) failed [ 1392.702002][T19397] FAT-fs (loop2): Directory bread(block 66) failed [ 1392.719044][T19397] FAT-fs (loop2): Directory bread(block 67) failed [ 1392.786876][T19397] FAT-fs (loop2): Directory bread(block 68) failed [ 1392.794841][T19397] FAT-fs (loop2): Directory bread(block 69) failed [ 1392.801810][T19397] FAT-fs (loop2): Directory bread(block 70) failed [ 1392.808676][T19397] FAT-fs (loop2): Directory bread(block 71) failed [ 1392.815368][T19397] FAT-fs (loop2): Directory bread(block 72) failed [ 1392.822101][T19397] FAT-fs (loop2): Directory bread(block 73) failed [ 1393.734904][ T5636] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1393.795100][T19419] loop5: detected capacity change from 0 to 16 [ 1393.901247][T19419] erofs: (device loop5): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 1394.177068][ T5636] usb 7-1: Using ep0 maxpacket: 32 [ 1394.247455][ T60] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1394.375399][T19446] loop2: detected capacity change from 0 to 256 [ 1394.394449][ T5636] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.405614][ T5636] usb 7-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 1394.414802][ T5636] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.424517][ T5636] usb 7-1: config 0 descriptor?? [ 1394.445366][T19446] FAT-fs (loop2): Directory bread(block 64) failed [ 1394.452005][T19446] FAT-fs (loop2): Directory bread(block 65) failed [ 1394.458844][T19446] FAT-fs (loop2): Directory bread(block 66) failed [ 1394.465372][T19446] FAT-fs (loop2): Directory bread(block 67) failed [ 1394.472227][T19446] FAT-fs (loop2): Directory bread(block 68) failed [ 1394.479234][T19446] FAT-fs (loop2): Directory bread(block 69) failed [ 1394.485836][T19446] FAT-fs (loop2): Directory bread(block 70) failed [ 1394.492441][T19446] FAT-fs (loop2): Directory bread(block 71) failed [ 1394.499094][T19446] FAT-fs (loop2): Directory bread(block 72) failed [ 1394.505737][T19446] FAT-fs (loop2): Directory bread(block 73) failed [ 1394.657443][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.668042][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1394.677166][ T60] usb 5-1: config 1 has no interface number 0 [ 1394.684828][ T60] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1394.789768][T19453] loop5: detected capacity change from 0 to 256 [ 1394.818598][T19453] exfat: Bad value for 'uid' [ 1394.857628][ T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1394.866797][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=29 [ 1394.881062][ T60] usb 5-1: Product: syz [ 1394.886775][ T60] usb 5-1: Manufacturer: syz [ 1394.892314][ T60] usb 5-1: SerialNumber: syz [ 1394.923461][ T5636] wacom 0003:056A:0013.0004: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 1394.936457][ T5636] wacom 0003:056A:0013.0004: hidraw0: USB HID v10.00 Device [HID 056a:0013] on usb-dummy_hcd.6-1/input0 [ 1394.951674][ T60] usb 5-1: selecting invalid altsetting 1 [ 1394.960676][ T5636] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0013.0004/input/input51 [ 1395.532889][ T3525] usb 7-1: USB disconnect, device number 2 [ 1395.649700][T19460] fido_id[19460]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1395.742169][T19475] loop5: detected capacity change from 0 to 2048 [ 1395.748787][ T60] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 1395.755459][ T60] cdc_ncm 5-1:1.1: bind() failure [ 1395.760988][T19475] EXT4-fs (loop5): cluster size (2048) smaller than block size (4096) [ 1395.768442][ T60] usb 5-1: USB disconnect, device number 22 [ 1395.904186][T19478] loop2: detected capacity change from 0 to 256 [ 1396.026536][T19478] exFAT-fs (loop2): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1396.085622][T19485] device pim6reg1 entered promiscuous mode [ 1396.111014][T19491] loop5: detected capacity change from 0 to 128 [ 1396.136998][T19493] loop0: detected capacity change from 0 to 512 [ 1396.188553][T19493] EXT4-fs (loop0): Ignoring removed nobh option [ 1396.196646][T19493] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.5461: invalid indirect mapped block 256 (level 2) [ 1396.212990][T19493] EXT4-fs (loop0): 2 truncates cleaned up [ 1396.223717][T19493] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 1396.253901][T19493] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.5461: bg 0: block 5: invalid block bitmap [ 1396.266875][T19493] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1396.273548][T19502] loop6: detected capacity change from 0 to 512 [ 1396.279599][T19493] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1396.279599][T19493] [ 1396.297875][T19493] EXT4-fs (loop0): Total free blocks count 0 [ 1396.304133][T19493] EXT4-fs (loop0): Free/Dirty block details [ 1396.310874][T19493] EXT4-fs (loop0): free_blocks=0 [ 1396.315840][T19493] EXT4-fs (loop0): dirty_blocks=66 [ 1396.327570][T19493] EXT4-fs (loop0): Block reservation details [ 1396.334249][T19493] EXT4-fs (loop0): i_reserved_data_blocks=66 [ 1396.346224][T19502] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1396.354974][T19503] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28 [ 1396.368018][T19502] System zones: 0-2, 18-18, 34-34 [ 1396.374516][T19503] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1396.374516][T19503] [ 1396.375082][T19502] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5465: bg 0: block 248: padding at end of block bitmap is not set [ 1396.432913][T19510] loop4: detected capacity change from 0 to 256 [ 1396.438968][T19502] __quota_error: 6 callbacks suppressed [ 1396.438987][T19502] Quota error (device loop6): write_blk: dquota write failed [ 1396.454862][T19502] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1396.465436][T19502] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.5465: Failed to acquire dquot type 1 [ 1396.479994][T19502] EXT4-fs (loop6): 1 truncate cleaned up [ 1396.485784][T19502] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 1396.489733][T19510] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1396.498421][T19502] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1396.566582][ T30] audit: type=1400 audit(2000000030.750:1403): avc: denied { append } for pid=19501 comm="syz.6.5465" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1396.589979][ T8734] Quota error (device loop6): remove_tree: Getting block too big (0 >= 6) [ 1396.605728][ T8734] EXT4-fs error (device loop6): ext4_release_dquot:6231: comm kworker/u4:0: Failed to release dquot type 1 [ 1396.617904][ T30] audit: type=1400 audit(2000000030.780:1404): avc: denied { setattr } for pid=19509 comm="syz.4.5467" name="file0" dev="loop4" ino=1048877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1396.647617][T19508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.654690][T19508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.669943][T19508] device bridge_slave_0 entered promiscuous mode [ 1396.683349][T19508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.700602][T19508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.708510][T19508] device bridge_slave_1 entered promiscuous mode [ 1396.715173][T19522] device pim6reg1 entered promiscuous mode [ 1396.739407][T19530] loop6: detected capacity change from 0 to 256 [ 1396.787212][T19530] FAT-fs (loop6): Directory bread(block 64) failed [ 1396.857201][ T30] audit: type=1400 audit(2000000031.040:1405): avc: denied { bind } for pid=19525 comm="syz.2.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1396.862719][T19530] FAT-fs (loop6): Directory bread(block 65) failed [ 1396.879304][ T30] audit: type=1400 audit(2000000031.070:1406): avc: denied { listen } for pid=19525 comm="syz.2.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1396.883717][T19530] FAT-fs (loop6): Directory bread(block 66) failed [ 1396.903472][ T30] audit: type=1400 audit(2000000031.070:1407): avc: denied { write } for pid=19525 comm="syz.2.5474" path="socket:[88548]" dev="sockfs" ino=88548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1396.910093][T19530] FAT-fs (loop6): Directory bread(block 67) failed [ 1396.969527][T19530] FAT-fs (loop6): Directory bread(block 68) failed [ 1397.003904][T19530] FAT-fs (loop6): Directory bread(block 69) failed [ 1397.019691][T19530] FAT-fs (loop6): Directory bread(block 70) failed [ 1397.021272][T19536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1397.026406][T19530] FAT-fs (loop6): Directory bread(block 71) failed [ 1397.076467][T19530] FAT-fs (loop6): Directory bread(block 72) failed [ 1397.096486][T19530] FAT-fs (loop6): Directory bread(block 73) failed [ 1397.107949][T17201] device bridge_slave_1 left promiscuous mode [ 1397.114321][T17201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.118870][ T30] audit: type=1400 audit(2000000031.300:1408): avc: denied { mount } for pid=19529 comm="syz.6.5476" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1397.143593][T17201] device bridge_slave_0 left promiscuous mode [ 1397.150362][T17201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.159159][T17201] device veth1_macvtap left promiscuous mode [ 1397.165241][T17201] device veth0_vlan left promiscuous mode [ 1397.275377][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1397.283050][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1397.763622][ T26] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1397.764537][ T30] audit: type=1400 audit(2000000031.560:1409): avc: denied { create } for pid=19529 comm="syz.6.5476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1397.827316][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1397.836403][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1397.845709][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.852838][ T4696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.861489][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1397.870181][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1397.878794][ T4696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.885846][ T4696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.893411][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1397.901749][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1397.910245][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1397.925296][T19508] device veth0_vlan entered promiscuous mode [ 1397.932761][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1397.941999][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1397.962719][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1397.972639][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1397.989569][T19548] loop2: detected capacity change from 0 to 512 [ 1397.996542][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1398.004111][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1398.014372][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1398.023069][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1398.033093][T19508] device veth1_macvtap entered promiscuous mode [ 1398.044814][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1398.056542][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1398.065359][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1398.066995][T19548] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 1398.085852][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 1398.085993][T19548] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.110273][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1398.129220][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1398.141356][T19548] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.5482: Directory hole found for htree leaf block 0 [ 1398.155539][T19548] EXT4-fs (loop2): Remounting filesystem read-only [ 1398.307619][ T26] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1398.316053][ T26] usb 5-1: config 179 has no interface number 0 [ 1398.327131][ T26] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1398.416544][ T26] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1398.476535][ T26] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1398.607695][ T26] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1398.620470][ T26] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1398.637583][ T26] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1398.647097][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.877428][T19538] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1398.957420][T19581] loop6: detected capacity change from 0 to 256 [ 1399.020393][T19581] FAT-fs (loop6): Directory bread(block 64) failed [ 1399.057618][T19581] FAT-fs (loop6): Directory bread(block 65) failed [ 1399.114586][T19581] FAT-fs (loop6): Directory bread(block 66) failed [ 1399.121690][T19581] FAT-fs (loop6): Directory bread(block 67) failed [ 1399.136222][T19581] FAT-fs (loop6): Directory bread(block 68) failed [ 1399.147544][T19581] FAT-fs (loop6): Directory bread(block 69) failed [ 1399.154317][T19581] FAT-fs (loop6): Directory bread(block 70) failed [ 1399.161673][T19581] FAT-fs (loop6): Directory bread(block 71) failed [ 1399.178504][T19581] FAT-fs (loop6): Directory bread(block 72) failed [ 1399.195276][T19581] FAT-fs (loop6): Directory bread(block 73) failed [ 1399.439125][T19595] loop0: detected capacity change from 0 to 128 [ 1399.599368][ T9781] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1399.613215][T19595] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1399.627455][T19595] ext4 filesystem being mounted at /384/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.938690][T19602] loop7: detected capacity change from 0 to 512 [ 1400.352596][T10117] usb 5-1: USB disconnect, device number 23 [ 1400.363812][T19602] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 1400.373383][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1400.382404][T19602] EXT4-fs (loop7): Unrecognized mount option "fsuuid=378462ef-Qe1ã-2c97-9Tb8-764da1eM" or missing value [ 1400.384321][T19604] loop4: detected capacity change from 0 to 512 [ 1400.453970][T19604] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1400.465384][T19604] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1400.477449][ T9781] usb 3-1: Using ep0 maxpacket: 32 [ 1400.510782][T19604] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.5502: Invalid inode bitmap blk 2180712479 in block_group 0 [ 1400.512918][T19602] loop7: detected capacity change from 0 to 512 [ 1400.527944][T19621] loop0: detected capacity change from 0 to 512 [ 1400.579038][T19602] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 1400.595299][T19602] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1400.607683][ T9781] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1400.616805][T19602] EXT4-fs error (device loop7): ext4_do_update_inode:5234: inode #2: comm syz.7.5500: corrupted inode contents [ 1400.623307][ T9781] usb 3-1: config 0 has no interface number 0 [ 1400.629021][T19602] EXT4-fs error (device loop7): ext4_dirty_inode:6070: inode #2: comm syz.7.5500: mark_inode_dirty error [ 1400.644993][ T9781] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1400.646360][T19602] EXT4-fs error (device loop7): ext4_do_update_inode:5234: inode #2: comm syz.7.5500: corrupted inode contents [ 1400.667380][ T9781] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1400.677897][T19602] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.5500: mark_inode_dirty error [ 1400.721162][T19621] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #16: comm syz.0.5506: corrupted inode contents [ 1400.737998][T19625] loop4: detected capacity change from 0 to 16 [ 1400.752736][T19621] EXT4-fs error (device loop0): ext4_dirty_inode:6070: inode #16: comm syz.0.5506: mark_inode_dirty error [ 1400.764903][T19625] erofs: (device loop4): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 1400.775576][T19621] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #16: comm syz.0.5506: corrupted inode contents [ 1400.789136][T19621] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.5506: mark_inode_dirty error [ 1400.847442][ T9781] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1400.861084][ T9781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.869540][T19621] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #16: comm syz.0.5506: corrupted inode contents [ 1400.907008][ T9781] usb 3-1: Product: syz [ 1400.913088][ T9781] usb 3-1: Manufacturer: syz [ 1400.966917][T19630] syz.7.5500 (19630) used greatest stack depth: 20048 bytes left [ 1400.982632][T19621] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1400.991753][ T9781] usb 3-1: SerialNumber: syz [ 1400.998872][T19621] EXT4-fs error (device loop0): ext4_do_update_inode:5234: inode #16: comm syz.0.5506: corrupted inode contents [ 1401.043140][ T9781] usb 3-1: config 0 descriptor?? [ 1401.058685][T19621] EXT4-fs error (device loop0): ext4_truncate:4304: inode #16: comm syz.0.5506: mark_inode_dirty error [ 1401.091254][T19621] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1401.174742][T19621] EXT4-fs (loop0): 1 truncate cleaned up [ 1401.193388][T19634] loop4: detected capacity change from 0 to 512 [ 1401.207381][T19621] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1401.224140][T19621] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1401.285846][T19634] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1401.298045][T19636] loop7: detected capacity change from 0 to 256 [ 1401.305295][T19634] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1401.315080][T19634] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 1401.328426][T19634] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1401.340455][T19639] loop0: detected capacity change from 0 to 256 [ 1401.360375][T19636] FAT-fs (loop7): Directory bread(block 64) failed [ 1401.366933][T19636] FAT-fs (loop7): Directory bread(block 65) failed [ 1401.379993][T19634] System zones: 0-2, 18-18, 34-34 [ 1401.389736][T19636] FAT-fs (loop7): Directory bread(block 66) failed [ 1401.396387][T19636] FAT-fs (loop7): Directory bread(block 67) failed [ 1401.402940][T19634] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1401.403897][T19636] FAT-fs (loop7): Directory bread(block 68) failed [ 1401.425983][T19636] FAT-fs (loop7): Directory bread(block 69) failed [ 1401.432703][T19636] FAT-fs (loop7): Directory bread(block 70) failed [ 1401.439463][T19636] FAT-fs (loop7): Directory bread(block 71) failed [ 1401.446126][T19636] FAT-fs (loop7): Directory bread(block 72) failed [ 1401.451979][T19634] EXT4-fs (loop4): 1 truncate cleaned up [ 1401.452854][T19636] FAT-fs (loop7): Directory bread(block 73) failed [ 1401.463020][T19639] FAT-fs (loop0): Directory bread(block 64) failed [ 1401.467853][T19634] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1401.472238][T19639] FAT-fs (loop0): Directory bread(block 65) failed [ 1401.489297][T19639] FAT-fs (loop0): Directory bread(block 66) failed [ 1401.496546][T19639] FAT-fs (loop0): Directory bread(block 67) failed [ 1401.503550][T19639] FAT-fs (loop0): Directory bread(block 68) failed [ 1401.510618][T19639] FAT-fs (loop0): Directory bread(block 69) failed [ 1401.517632][T19639] FAT-fs (loop0): Directory bread(block 70) failed [ 1401.524760][T19639] FAT-fs (loop0): Directory bread(block 71) failed [ 1401.532469][T19639] FAT-fs (loop0): Directory bread(block 72) failed [ 1401.539210][T19639] FAT-fs (loop0): Directory bread(block 73) failed [ 1401.570519][ T9781] usb 3-1: USB disconnect, device number 38 [ 1401.657706][ T3525] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1401.937505][ T3525] usb 7-1: Using ep0 maxpacket: 8 [ 1402.057419][ T3525] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1402.065729][ T3525] usb 7-1: config 179 has no interface number 0 [ 1402.072512][ T3525] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1402.083655][ T3525] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1402.096377][ T3525] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1402.107692][ T3525] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1402.119586][ T3525] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1402.132874][ T3525] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1402.142398][ T3525] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.167372][T19643] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1402.171905][T19655] loop2: detected capacity change from 0 to 2048 [ 1402.307529][ T5636] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1402.316818][T19655] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096) [ 1402.389712][T19668] loop2: detected capacity change from 0 to 256 [ 1402.475308][T19668] FAT-fs (loop2): Directory bread(block 64) failed [ 1402.492136][T19668] FAT-fs (loop2): Directory bread(block 65) failed [ 1402.502269][T19668] FAT-fs (loop2): Directory bread(block 66) failed [ 1402.518413][T19668] FAT-fs (loop2): Directory bread(block 67) failed [ 1402.529704][T19668] FAT-fs (loop2): Directory bread(block 68) failed [ 1402.546534][T19668] FAT-fs (loop2): Directory bread(block 69) failed [ 1402.556631][T19668] FAT-fs (loop2): Directory bread(block 70) failed [ 1402.557309][ T5636] usb 8-1: Using ep0 maxpacket: 16 [ 1402.563287][ T26] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1402.582377][T19668] FAT-fs (loop2): Directory bread(block 71) failed [ 1402.589596][T19668] FAT-fs (loop2): Directory bread(block 72) failed [ 1402.598276][T19668] FAT-fs (loop2): Directory bread(block 73) failed [ 1402.613144][T19672] loop0: detected capacity change from 0 to 2048 [ 1402.723897][ T5636] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1402.740148][ T5636] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1402.761391][T19672] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1402.772345][T19672] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1402.985782][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1402.985807][ T30] audit: type=1400 audit(2000000037.170:1419): avc: denied { watch watch_reads } for pid=19671 comm="syz.0.5523" path="/392/file0/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1403.067446][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1403.077253][ T26] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1403.127445][ T5636] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1403.139654][ T5636] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.149375][T19681] loop0: detected capacity change from 0 to 2048 [ 1403.155800][ T5636] usb 8-1: Product: syz [ 1403.160606][ T5636] usb 8-1: Manufacturer: syz [ 1403.165301][ T5636] usb 8-1: SerialNumber: syz [ 1403.297413][ T26] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1403.315003][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.330800][T19681] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 1403.349040][ T26] usb 5-1: Product: syz [ 1403.356763][ T26] usb 5-1: Manufacturer: syz [ 1403.374429][ T26] usb 5-1: SerialNumber: syz [ 1403.397649][ T26] usb 5-1: config 0 descriptor?? [ 1403.427528][T19664] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1403.447140][T19664] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1403.468875][T19692] loop0: detected capacity change from 0 to 256 [ 1403.497523][ T5636] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1403.510293][T19692] FAT-fs (loop0): Directory bread(block 64) failed [ 1403.527041][T19692] FAT-fs (loop0): Directory bread(block 65) failed [ 1403.534100][T19692] FAT-fs (loop0): Directory bread(block 66) failed [ 1403.540894][T19692] FAT-fs (loop0): Directory bread(block 67) failed [ 1403.551499][T19692] FAT-fs (loop0): Directory bread(block 68) failed [ 1403.568121][T19692] FAT-fs (loop0): Directory bread(block 69) failed [ 1403.581015][ T5636] usb 8-1: USB disconnect, device number 2 [ 1403.589669][T19692] FAT-fs (loop0): Directory bread(block 70) failed [ 1403.598652][T19692] FAT-fs (loop0): Directory bread(block 71) failed [ 1403.615968][T19692] FAT-fs (loop0): Directory bread(block 72) failed [ 1403.622592][T19692] FAT-fs (loop0): Directory bread(block 73) failed [ 1403.724658][T19664] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1403.739334][T19664] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1404.041777][ T9960] udevd[9960]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1404.221804][T19704] loop7: detected capacity change from 0 to 512 [ 1404.245764][T19704] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 1404.277499][ T26] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1404.291667][T19704] EXT4-fs (loop7): Mount option "journal_ioprio=0x0000000000000000" incompatible with ext2 [ 1404.410815][ T5636] usb 7-1: USB disconnect, device number 3 [ 1404.417306][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1404.425614][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1404.469315][T19715] loop7: detected capacity change from 0 to 256 [ 1404.491878][T19714] loop0: detected capacity change from 0 to 256 [ 1404.523345][T19714] FAT-fs (loop0): Directory bread(block 64) failed [ 1404.530489][T19714] FAT-fs (loop0): Directory bread(block 65) failed [ 1404.537087][T19714] FAT-fs (loop0): Directory bread(block 66) failed [ 1404.543940][T19714] FAT-fs (loop0): Directory bread(block 67) failed [ 1404.551229][T19714] FAT-fs (loop0): Directory bread(block 68) failed [ 1404.558283][T19714] FAT-fs (loop0): Directory bread(block 69) failed [ 1404.565068][T19714] FAT-fs (loop0): Directory bread(block 70) failed [ 1404.572091][T19714] FAT-fs (loop0): Directory bread(block 71) failed [ 1404.578829][T19714] FAT-fs (loop0): Directory bread(block 72) failed [ 1404.585805][T19714] FAT-fs (loop0): Directory bread(block 73) failed [ 1404.595306][T19715] FAT-fs (loop7): Directory bread(block 64) failed [ 1404.604591][T19715] FAT-fs (loop7): Directory bread(block 65) failed [ 1404.616720][T19715] FAT-fs (loop7): Directory bread(block 66) failed [ 1404.628420][T19715] FAT-fs (loop7): Directory bread(block 67) failed [ 1404.637130][T19715] FAT-fs (loop7): Directory bread(block 68) failed [ 1404.662241][T19715] FAT-fs (loop7): Directory bread(block 69) failed [ 1404.677814][T19715] FAT-fs (loop7): Directory bread(block 70) failed [ 1404.694016][T19715] FAT-fs (loop7): Directory bread(block 71) failed [ 1404.708288][T19715] FAT-fs (loop7): Directory bread(block 72) failed [ 1404.741636][T19715] FAT-fs (loop7): Directory bread(block 73) failed [ 1404.767364][T19556] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1406.037498][T19556] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 1406.065862][T19556] usb 3-1: config 0 has no interface number 0 [ 1406.087422][ T26] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1406.100403][T19556] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1406.128026][ T26] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 52:b5:7a:3f:25:db [ 1406.157458][T19556] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1406.175077][T19741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5549'. [ 1406.204503][ T26] usb 5-1: USB disconnect, device number 24 [ 1406.217839][T19556] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1406.263074][ T26] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 1406.276586][ T30] audit: type=1400 audit(2000000040.430:1420): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1406.317349][T19556] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1406.336798][ T30] audit: type=1400 audit(2000000040.430:1421): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1406.353206][T19556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1406.358394][ T30] audit: type=1400 audit(2000000040.430:1422): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=33993 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1406.388230][ T30] audit: type=1400 audit(2000000040.430:1423): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=33993 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1406.411378][ T30] audit: type=1400 audit(2000000040.430:1424): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=33993 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1406.414157][T19556] usb 3-1: config 0 descriptor?? [ 1406.477326][ T30] audit: type=1400 audit(2000000040.540:1425): avc: denied { read } for pid=19755 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1406.502022][ T3525] ================================================================== [ 1406.510108][ T3525] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 1406.517923][ T3525] Read of size 8 at addr ffff8881330acc70 by task kworker/1:11/3525 [ 1406.525991][ T3525] [ 1406.528313][ T3525] CPU: 1 PID: 3525 Comm: kworker/1:11 Tainted: G W 5.15.185-syzkaller-00339-ge678c93d43cc #0 [ 1406.539750][ T3525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1406.550056][ T3525] Workqueue: pm hcd_resume_work [ 1406.554915][ T3525] Call Trace: [ 1406.558174][ T3525] [ 1406.561087][ T3525] __dump_stack+0x21/0x30 [ 1406.565393][ T3525] dump_stack_lvl+0xee/0x150 [ 1406.569969][ T3525] ? show_regs_print_info+0x20/0x20 [ 1406.575139][ T3525] ? load_image+0x3a0/0x3a0 [ 1406.579616][ T3525] ? probe_sched_wakeup+0x64/0x80 [ 1406.584614][ T3525] print_address_description+0x7f/0x2c0 [ 1406.590144][ T3525] ? __list_del_entry_valid+0xa6/0x120 [ 1406.595603][ T3525] kasan_report+0xf1/0x140 [ 1406.600026][ T3525] ? __list_del_entry_valid+0xa6/0x120 [ 1406.605476][ T3525] __asan_report_load8_noabort+0x14/0x20 [ 1406.611188][ T3525] __list_del_entry_valid+0xa6/0x120 [ 1406.616455][ T3525] process_one_work+0x453/0xba0 [ 1406.621282][ T3525] worker_thread+0xa59/0x1200 [ 1406.625929][ T3525] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1406.631364][ T3525] kthread+0x411/0x500 [ 1406.635407][ T3525] ? worker_clr_flags+0x190/0x190 [ 1406.640404][ T3525] ? kthread_blkcg+0xd0/0xd0 [ 1406.644966][ T3525] ret_from_fork+0x1f/0x30 [ 1406.649359][ T3525] [ 1406.652357][ T3525] [ 1406.654656][ T3525] Allocated by task 26: [ 1406.658781][ T3525] __kasan_kmalloc+0xda/0x110 [ 1406.663458][ T3525] __kmalloc+0x13d/0x2c0 [ 1406.667687][ T3525] kvmalloc_node+0x242/0x330 [ 1406.672431][ T3525] alloc_netdev_mqs+0x8d/0xc90 [ 1406.677173][ T3525] alloc_etherdev_mqs+0x34/0x40 [ 1406.681998][ T3525] usbnet_probe+0x219/0x2860 [ 1406.686645][ T3525] usb_probe_interface+0x5ff/0xae0 [ 1406.691815][ T3525] really_probe+0x285/0x970 [ 1406.696545][ T3525] __driver_probe_device+0x198/0x280 [ 1406.701816][ T3525] driver_probe_device+0x54/0x3e0 [ 1406.706903][ T3525] __device_attach_driver+0x2a6/0x460 [ 1406.712266][ T3525] bus_for_each_drv+0x175/0x200 [ 1406.717209][ T3525] __device_attach+0x2a2/0x400 [ 1406.721945][ T3525] device_initial_probe+0x1a/0x20 [ 1406.727046][ T3525] bus_probe_device+0xc0/0x1e0 [ 1406.731795][ T3525] device_add+0xb31/0xed0 [ 1406.736096][ T3525] usb_set_configuration+0x19c2/0x1f10 [ 1406.741526][ T3525] usb_generic_driver_probe+0x91/0x150 [ 1406.746955][ T3525] usb_probe_device+0x148/0x260 [ 1406.751802][ T3525] really_probe+0x285/0x970 [ 1406.756276][ T3525] __driver_probe_device+0x198/0x280 [ 1406.761550][ T3525] driver_probe_device+0x54/0x3e0 [ 1406.766544][ T3525] __device_attach_driver+0x2a6/0x460 [ 1406.771898][ T3525] bus_for_each_drv+0x175/0x200 [ 1406.776747][ T3525] __device_attach+0x2a2/0x400 [ 1406.781482][ T3525] device_initial_probe+0x1a/0x20 [ 1406.786578][ T3525] bus_probe_device+0xc0/0x1e0 [ 1406.791314][ T3525] device_add+0xb31/0xed0 [ 1406.795614][ T3525] usb_new_device+0xd06/0x1620 [ 1406.800360][ T3525] hub_event+0x27d8/0x42c0 [ 1406.804755][ T3525] process_one_work+0x6be/0xba0 [ 1406.809577][ T3525] worker_thread+0xa59/0x1200 [ 1406.814232][ T3525] kthread+0x411/0x500 [ 1406.818269][ T3525] ret_from_fork+0x1f/0x30 [ 1406.822741][ T3525] [ 1406.825050][ T3525] Freed by task 26: [ 1406.828910][ T3525] kasan_set_track+0x4a/0x70 [ 1406.833481][ T3525] kasan_set_free_info+0x23/0x40 [ 1406.838392][ T3525] ____kasan_slab_free+0x125/0x160 [ 1406.843469][ T3525] __kasan_slab_free+0x11/0x20 [ 1406.848212][ T3525] slab_free_freelist_hook+0xc2/0x190 [ 1406.853552][ T3525] kfree+0xc4/0x270 [ 1406.857330][ T3525] kvfree+0x35/0x40 [ 1406.861126][ T3525] netdev_freemem+0x3f/0x60 [ 1406.865784][ T3525] netdev_release+0x7f/0xb0 [ 1406.870371][ T3525] device_release+0x96/0x1c0 [ 1406.874956][ T3525] kobject_put+0x18a/0x270 [ 1406.879353][ T3525] put_device+0x1f/0x30 [ 1406.883477][ T3525] free_netdev+0x34b/0x450 [ 1406.887862][ T3525] usbnet_disconnect+0x24b/0x3a0 [ 1406.892835][ T3525] usb_unbind_interface+0x212/0x8c0 [ 1406.898436][ T3525] device_release_driver_internal+0x4c1/0x760 [ 1406.904472][ T3525] device_release_driver+0x19/0x20 [ 1406.909549][ T3525] bus_remove_device+0x2dd/0x340 [ 1406.914456][ T3525] device_del+0x696/0xe90 [ 1406.918754][ T3525] usb_disable_device+0x3a8/0x750 [ 1406.923747][ T3525] usb_disconnect+0x31e/0x850 [ 1406.928391][ T3525] hub_event+0x190c/0x42c0 [ 1406.932789][ T3525] process_one_work+0x6be/0xba0 [ 1406.937608][ T3525] worker_thread+0xd7b/0x1200 [ 1406.942265][ T3525] kthread+0x411/0x500 [ 1406.946304][ T3525] ret_from_fork+0x1f/0x30 [ 1406.950689][ T3525] [ 1406.952982][ T3525] Last potentially related work creation: [ 1406.958749][ T3525] kasan_save_stack+0x3a/0x60 [ 1406.963486][ T3525] __kasan_record_aux_stack+0xd2/0x100 [ 1406.968919][ T3525] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1406.974693][ T3525] insert_work+0x51/0x310 [ 1406.978992][ T3525] __queue_work+0x8e5/0xc60 [ 1406.983477][ T3525] queue_work_on+0xd2/0x140 [ 1406.988043][ T3525] usbnet_link_change+0x176/0x1a0 [ 1406.993035][ T3525] usbnet_probe+0x1dfd/0x2860 [ 1406.997708][ T3525] usb_probe_interface+0x5ff/0xae0 [ 1407.002800][ T3525] really_probe+0x285/0x970 [ 1407.007281][ T3525] __driver_probe_device+0x198/0x280 [ 1407.012600][ T3525] driver_probe_device+0x54/0x3e0 [ 1407.017693][ T3525] __device_attach_driver+0x2a6/0x460 [ 1407.023076][ T3525] bus_for_each_drv+0x175/0x200 [ 1407.027975][ T3525] __device_attach+0x2a2/0x400 [ 1407.032712][ T3525] device_initial_probe+0x1a/0x20 [ 1407.037798][ T3525] bus_probe_device+0xc0/0x1e0 [ 1407.042534][ T3525] device_add+0xb31/0xed0 [ 1407.046837][ T3525] usb_set_configuration+0x19c2/0x1f10 [ 1407.052441][ T3525] usb_generic_driver_probe+0x91/0x150 [ 1407.057875][ T3525] usb_probe_device+0x148/0x260 [ 1407.062699][ T3525] really_probe+0x285/0x970 [ 1407.067267][ T3525] __driver_probe_device+0x198/0x280 [ 1407.072528][ T3525] driver_probe_device+0x54/0x3e0 [ 1407.077688][ T3525] __device_attach_driver+0x2a6/0x460 [ 1407.083062][ T3525] bus_for_each_drv+0x175/0x200 [ 1407.087892][ T3525] __device_attach+0x2a2/0x400 [ 1407.092718][ T3525] device_initial_probe+0x1a/0x20 [ 1407.097724][ T3525] bus_probe_device+0xc0/0x1e0 [ 1407.102462][ T3525] device_add+0xb31/0xed0 [ 1407.106765][ T3525] usb_new_device+0xd06/0x1620 [ 1407.111588][ T3525] hub_event+0x27d8/0x42c0 [ 1407.115978][ T3525] process_one_work+0x6be/0xba0 [ 1407.120804][ T3525] worker_thread+0xa59/0x1200 [ 1407.125538][ T3525] kthread+0x411/0x500 [ 1407.129587][ T3525] ret_from_fork+0x1f/0x30 [ 1407.133991][ T3525] [ 1407.136381][ T3525] The buggy address belongs to the object at ffff8881330ac000 [ 1407.136381][ T3525] which belongs to the cache kmalloc-4k of size 4096 [ 1407.150770][ T3525] The buggy address is located 3184 bytes inside of [ 1407.150770][ T3525] 4096-byte region [ffff8881330ac000, ffff8881330ad000) [ 1407.164195][ T3525] The buggy address belongs to the page: [ 1407.169893][ T3525] page:ffffea0004cc2a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1330a8 [ 1407.180280][ T3525] head:ffffea0004cc2a00 order:3 compound_mapcount:0 compound_pincount:0 [ 1407.188745][ T3525] flags: 0x4000000000010200(slab|head|zone=1) [ 1407.195155][ T3525] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 1407.203937][ T3525] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1407.212489][ T3525] page dumped because: kasan: bad access detected [ 1407.218959][ T3525] page_owner tracks the page as allocated [ 1407.224643][ T3525] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4226, ts 285033246761, free_ts 284314135719 [ 1407.247009][ T3525] post_alloc_hook+0x192/0x1b0 [ 1407.251834][ T3525] prep_new_page+0x1c/0x110 [ 1407.256322][ T3525] get_page_from_freelist+0x2cc5/0x2d50 [ 1407.261836][ T3525] __alloc_pages+0x18f/0x440 [ 1407.266398][ T3525] new_slab+0xa1/0x4d0 [ 1407.270456][ T3525] ___slab_alloc+0x381/0x810 [ 1407.275017][ T3525] __slab_alloc+0x49/0x90 [ 1407.279314][ T3525] __kmalloc+0x16a/0x2c0 [ 1407.283525][ T3525] kvmalloc_node+0x242/0x330 [ 1407.288081][ T3525] alloc_netdev_mqs+0x8d/0xc90 [ 1407.292866][ T3525] __ip_tunnel_create+0x206/0x380 [ 1407.297859][ T3525] ip_tunnel_init_net+0x290/0x740 [ 1407.303116][ T3525] erspan_init_net+0x29/0x30 [ 1407.307675][ T3525] ops_init+0x1ba/0x4a0 [ 1407.311799][ T3525] setup_net+0x344/0xa90 [ 1407.316015][ T3525] copy_net_ns+0x355/0x5c0 [ 1407.320405][ T3525] page last free stack trace: [ 1407.325043][ T3525] free_unref_page_prepare+0x542/0x550 [ 1407.330470][ T3525] free_unref_page+0xa2/0x550 [ 1407.335119][ T3525] __free_pages+0x6c/0x100 [ 1407.339603][ T3525] __free_slab+0xe8/0x1e0 [ 1407.343908][ T3525] __unfreeze_partials+0x160/0x190 [ 1407.348986][ T3525] put_cpu_partial+0xc6/0x120 [ 1407.353636][ T3525] __slab_free+0x1d4/0x290 [ 1407.358020][ T3525] ___cache_free+0x104/0x120 [ 1407.362585][ T3525] qlink_free+0x4d/0x90 [ 1407.366723][ T3525] qlist_free_all+0x5f/0xb0 [ 1407.371208][ T3525] kasan_quarantine_reduce+0x14a/0x170 [ 1407.376641][ T3525] __kasan_slab_alloc+0x2f/0xf0 [ 1407.381655][ T3525] slab_post_alloc_hook+0x4f/0x2b0 [ 1407.386741][ T3525] kmem_cache_alloc+0xf7/0x260 [ 1407.391474][ T3525] __alloc_skb+0xe0/0x740 [ 1407.395777][ T3525] inet6_netconf_notify_devconf+0xd6/0x190 [ 1407.401555][ T3525] [ 1407.403859][ T3525] Memory state around the buggy address: [ 1407.409458][ T3525] ffff8881330acb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1407.417502][ T3525] ffff8881330acb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1407.425629][ T3525] >ffff8881330acc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1407.433657][ T3525] ^ [ 1407.441340][ T3525] ffff8881330acc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1407.449372][ T3525] ffff8881330acd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1407.457437][ T3525] ================================================================== [ 1407.465465][ T3525] Disabling lock debugging due to kernel taint [ 1407.487914][ T30] audit: type=1400 audit(2000000040.540:1426): avc: denied { open } for pid=19755 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1407.548583][ T30] audit: type=1400 audit(2000000040.540:1427): avc: denied { getattr } for pid=19755 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1407.557386][T19556] usb 3-1: can't set config #0, error -71 [ 1407.602413][T19556] usb 3-1: USB disconnect, device number 39 [ 1407.607570][ T30] audit: type=1400 audit(2000000041.680:1428): avc: denied { write } for pid=19754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1407.617448][ T289] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1407.757819][ T26] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1407.897306][ T289] usb 7-1: Using ep0 maxpacket: 8 [ 1408.007326][ T26] usb 8-1: Using ep0 maxpacket: 16 [ 1408.017394][ T289] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1408.025669][ T289] usb 7-1: config 179 has no interface number 0 [ 1408.032056][ T289] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1408.043313][ T289] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1408.054748][ T289] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1408.065897][ T289] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1408.077326][ T289] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1408.090800][ T289] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1408.100156][ T289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.127445][T19740] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1408.137421][ T26] usb 8-1: config 1 has an invalid interface number: 62 but max is 0 [ 1408.145936][ T26] usb 8-1: config 1 has no interface number 0 [ 1408.155338][ T26] usb 8-1: config 1 interface 62 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.166647][ T26] usb 8-1: config 1 interface 62 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 64 [ 1408.176991][ T26] usb 8-1: config 1 interface 62 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1408.190307][ T26] usb 8-1: config 1 interface 62 has no altsetting 0 [ 1408.267446][ T26] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1408.276595][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1408.284923][ T26] usb 8-1: SerialNumber: syz [ 1408.307463][T19749] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1408.548114][ T26] cdc_acm 8-1:1.62: ttyACM0: USB ACM device [ 1408.564639][ T26] usb 8-1: USB disconnect, device number 3 [ 1409.370558][ T26] usb 7-1: USB disconnect, device number 4 [ 1409.387341][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19