last executing test programs: 5.859238157s ago: executing program 0 (id=236): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg0\x00', 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000440), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000300)=0xc86, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r7) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) setgroups(0x1, &(0x7f0000000200)=[0x0]) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) r8 = syz_genetlink_get_family_id$tipc2(0x0, r4) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000", @ANYRES16=r8], 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) 5.66521589s ago: executing program 1 (id=239): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000100085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) fcntl$setlease(r7, 0x400, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="a9ab000000000000000032"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 4.742057413s ago: executing program 1 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @remote}, &(0x7f0000000140)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0) 4.686579774s ago: executing program 3 (id=244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setreuid(0x0, 0xee00) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000ded118110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.685090103s ago: executing program 0 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @remote, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x8ec, 0x1ff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0x6, 0x8, {{0x11, 0x4, 0x3, 0x2f, 0x44, 0x64, 0x0, 0xc, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x2, 0x3, 'I'}, {0x6, 0x9, "aec50ea3e55403"}, {0x5, 0xe, "ec5be86e6cbc1461020abd28"}, {0x6, 0xe, "17b5dc6967ac225b0f957851"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3, 0x20020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}], @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}]}, 0x40}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000003c0)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0xf4, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x400c805}, 0x8000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r14, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_usb_control_io$printer(r13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r12}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.683863743s ago: executing program 1 (id=246): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "e3949c79"}]}}, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793b10d10501200009010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="200b19"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000280)={0x14, &(0x7f0000000440)={0x20, 0x23, 0xff, {0xff, 0x8, "0ae5f8b8ad5f75b3495d983d2b49aca3deed647dd3f7cb63369af7146625a166d5f0fceef0449b1290eee632ad1c47de982eee5f65d7540db666a39e22cf28e6bc975838a538d9de67f0c5209855ff70f9504e5bf780800fe712dba18e80f88932776e277169cb645823683808204b81f2fc5da03c27b2daaf48af9129fc63a6740d3f88692df2d95b9bd8fc0ac969556b6bb49b685e327b49a0977c7ac546c345f18d4bb16b314c0e7557de7b99d5d193f4508f33390ed1e8ee8cbd39aba0c797979b987dc44930b98cfda240172e2768d03d9d8704b4f40103ab3841197f3cc8b08a81a36b99c98bdc636c9a9f043106ce9494affd44673a69b5c243"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000580)={0x40, 0x11, 0xe9, "9f4f6e4ac28268fc73888c42479e771e29af3671dd914ec10cb532cabebe3713e4a27c7511afb35feb976820d40fa1866b5c9c00f4ad2ce8207a2114baa7fa13fe367934f2d0326bd00408611bf2300eaf4acaa60dc3463d4fa9241ba6d503838fe776a1586225771de546bc43d831dc75eb1e1b6ff38ee56496c2ea3822a43cad8816ab92f3839a9f5dbc279844b3c27325a170e318a23fbaa9bee41c8c5637983108467c5f0b0862c60af677f7fc237dc9f8be42ab4d5471b05116ca4cacfdda221555427301dc124bff1a064861e6b05d732b0426314fd414d72da452f959278f83350f54d27330"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x10, 0x1}, &(0x7f0000bbdffc)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r3, &(0x7f0000000040)) rt_sigpending(0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000980), 0x600041, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f00000008c0)={0x224000, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740), {0x3a}, &(0x7f0000000780)=""/10, 0xa, &(0x7f00000007c0)=""/153, &(0x7f0000000880)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={&(0x7f0000000940)="e9b489dd76495e13686280594d31bf63899133fcb39ee1ee", &(0x7f0000000a80)="cfa19ec6435e7cb1fc67294cbc40d837898e890ad45ac825126a3367fd373a2acdcb2e6745c96bea73c1f8c518299279f32c9e150d003e08ee9099632bc612fc3e26d786bcc93f3ed876a2215ef17947c8966fdaccb83346537644e976d3ecd6467a00e21e249c698aa24c0ab2013ee65053830d36d61b1fd53fb17d8b993ee4aa2c331411514d0bfcb5a5c2a99677ee74d5961a1052de81804b70445bf08b0917181b6450a52e5311e038d6d0a4949d66d798047da4384dcbb3b32b9122eab13d1acae3d3786a4f06777f8d2de00a7d0f64a6d31e7069d4ff9b8d2aa849abd0825468efb82bbf259227aadf8701696c50a5779cb2c479d7b1a3cc9a951cc04839538dbf97b91e256e32d6b071b7a75b5688e4c22ac4b3be7ce123542c227e3bd0a3cfb2f6df3cb982f49e6beb18c087d5478077d6204ab9856d40246d8453849c4d6b4ea9c73c8218b04dea52e70266d71d2964948492e9aae138ae9576761763dfcd7c81a8dc335244e42e93f9fc29fba1d87fe62732e922ecae58aeaf9327"}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x25, 0x1, 0x80) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000138a732066e7f22ba74c8bd7000fedbdf250300000005000500010000004c000f0bdf955d240199b216f811f13319d5ad2f7ee0bd80060005004e2000000500000000000000d54259a717eb180100000005400500e80000001800018014000400fe80000000000000ea000000000001aa0500efff02"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendto$inet6(r4, 0x0, 0x0, 0x64008095, 0x0, 0x0) 4.572777285s ago: executing program 4 (id=247): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@bsdgroups}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@prjquota}, {@noload}, {@block_validity}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 4.536633016s ago: executing program 2 (id=248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000700)={0xfffffffb, 0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r8}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001800128008000100736974000c00028008000200e000000108000a00", @ANYRES32], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) write$cgroup_int(r5, &(0x7f0000000000)=0x700, 0x12) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x1000000, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.494005436s ago: executing program 4 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) dup(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000001c0)='f2fs_write_begin\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket(0x2, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = gettid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRESOCT=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f0000000101000004f1ff001200000008200000", @ANYBLOB="108a974fbfe2967b068ff3bbea426e2265b65592de488f68b5d47c9ef9700eedfdcd38673c1c6b769c15f90e25198eff761235545fcfe04edc8d4babfe3114e72c785682543254ef13b21267111426e154408f3b2ff9410b633664fc349970c2ebb401f2833915a4d312badc6d663ab42504cf3fb1410e352dd07cd13d866e2bc8b7e3d0df94777484831ca88134a51b33e24778a45625acaea85516da5ab59c33634a3f1f8b1379bda1eec95ac4eb35230355d0f2b38ae5e215", @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000440)={0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b20, 0x0) 3.701022698s ago: executing program 3 (id=250): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000006c0)=ANY=[], 0x25, 0x5586, &(0x7f00000079c0)="$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") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x2000000a) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="02001d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) 3.643833778s ago: executing program 2 (id=251): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 3.609815839s ago: executing program 4 (id=252): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000300)={0x40, 0x9, 0xf, {0xf, 0x29, "e6261d434ce3694f2969962e0a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x140801) r7 = socket$inet6(0xa, 0x2, 0x0) shutdown(r7, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x10200000, &(0x7f0000000100)="b4f9f1d6666f470036d5d3d8d68cbab6a8b0484a4fde255a9fedebf2ee6c90c9e9dda74a0cef7c4f51007fe90050e953c92e8702f17e51180f085164", 0x3c, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)="1694b830102b42c7eeb50463956159680fe14dc9b76789a6aacd0b39c7bfe933cdd0720dd8a978c0f3051e83483b651e9be94bf948b11c9908f450c1249ca79a7a9b5be5661412ae36a403360e05f8a5c903d30e910da07f795fd59cfd6aaa31fb8c6a1886cbac4012f56b8ddfc031166e763c1b89c417563630044a17017a8609643ffa8b9eea7eb56be5b484edb3f951a925d01d8e9f761626648e7ed97d8fed68d263bdada608bf7e12f07964fddf73fb") (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r8, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r7}, 0x20) (async, rerun: 32) pselect6(0x40, &(0x7f0000000000)={0x10, 0xcb5, 0x8, 0x5, 0xffffffff, 0x4, 0x7f, 0x7}, &(0x7f0000000080)={0x9, 0x2, 0x0, 0x394, 0x9, 0x0, 0x95, 0x100}, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$HIDIOCGCOLLECTIONINDEX(r6, 0x40184810, &(0x7f0000000200)={0x5, 0x100, 0x4, 0x6, 0x10, 0x2}) (rerun: 32) 3.53384832s ago: executing program 2 (id=253): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x11, 0x9, &(0x7f0000001500)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000183900000300000000000000000000000079950a0000008085000000480000008823f8ff"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCX_GETX(r7, 0x4018920a, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.81713974s ago: executing program 3 (id=254): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) flistxattr(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x10004) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='uid_map\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180fe20b4f020000000000000000003d891ae790e3ad0000000000ace1000000"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000100)='cq_reschedule\x00', r5}, 0x11) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r6, 0x0, 0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x6ecdf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.626419283s ago: executing program 0 (id=255): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f00000002c0)={[{@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x6c6}}, {@nombcache}, {@norecovery}, {@acl}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@noauto_da_alloc}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x9b, 0x4d8, &(0x7f0000000a40)="$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") r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x40187014) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f00000002c0)={0x0, 0x10000002000003, 0x6}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) timerfd_gettime(0xffffffffffffffff, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xf) quotactl_fd$Q_GETQUOTA(r6, 0xffffffff80000702, 0x0, 0x0) unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.602858563s ago: executing program 2 (id=256): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff7f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) r6 = dup2(r4, r5) fcntl$setown(r6, 0x8, r3) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x13, &(0x7f0000000000)=[0x6bd7, 0x6], 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x2182842, 0x0, 0x0, 0x0, &(0x7f0000000380)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x4000423) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x18) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x7540}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 2.429204235s ago: executing program 3 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) fcntl$setlease(r7, 0x400, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="a9ab000000000000000032"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2.414206826s ago: executing program 0 (id=258): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000003000000000000000100000d020000000000000000000000010000000000000c010000000061"], &(0x7f0000000940)=""/222, 0x3b, 0xde, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x6bab, '\x00', 0x0, r0, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42000773) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x87}, {0x0, 0x400000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, {0x0, 0x400000000000000, 0xfffffffffffffffa}, 0xffffffff, 0x6e6bb6, 0x1}, {{@in=@broadcast, 0x40000, 0xff}, 0xa, @in6=@loopback, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x207}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003f40)="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", 0xd79}], 0x1}}], 0x1, 0x9200000000000000) dup3(r7, r6, 0x0) 2.333361007s ago: executing program 4 (id=259): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400200000000085000000030000009500000000000000fe48d99d951fe38802affd23b36d03eb34c409e4f320b1620d04540caa7e98bf2a68226816bcaaf5e33c8c68ba1fead4711ade8a91fa6eb11a2c1a0e24d5f4569f45f018993d0c6b81e5a34c48760c12e697feb2b8a87ac1002fcd5498b64c3699f420dd9ef173433446f77189e6273d02e333be197a9c92a13d9543fa6241cfb44d802199f6382665a3785855"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000800000100000000000000000002000000000000000000d37fc0be67c1afeb38f48f421009"], 0x18}, 0x1001) close_range(r8, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) 1.322775221s ago: executing program 1 (id=260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000002e00000054000000000000009500000000ebff00"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0x2, 0x4) bind$can_raw(r4, &(0x7f0000000180), 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="0400000000000000000000400f0000000200000000000000030000003e000000060000000000000000000000000000000d000000c30300000500000003000000ce80000004000000fdffffff00000000000000000000000d0000000600000004000000ff01000005000000010000000600000000000000000000000000000008000080080000000c000000fefffffffdffffff060000000700"/167]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x26, &(0x7f0000000d40)=ANY=[@ANYRESDEC=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018110000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000185100000c000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800005a532c0f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0xbe, &(0x7f0000000e80)=""/190, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001000)={0x5, 0xb, 0x14, 0xfffffff9}, 0x10, 0x24346, r2, 0x5, &(0x7f0000001180)=[r6, r6, r6, r6, 0xffffffffffffffff, r6, 0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f00000011c0)=[{0x1, 0x5, 0x1, 0x8}, {0x5, 0x4, 0xf, 0xb}, {0x1, 0x1, 0x3, 0x3}, {0x3, 0x2, 0x4, 0xc}, {0x1, 0x4, 0x6, 0x3}], 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket(0x200000000000011, 0x4000000000080002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r9, &(0x7f0000000d00)={0x11, 0x1c, r11, 0x1, 0x7f, 0x6, @random="c1d8351a0730"}, 0x14) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xd, &(0x7f0000001240)=ANY=[@ANYBLOB="0300000085200000fa080000000002000000000000000000000000003ef872e7b2ae9ec559871e0e5a92b74c921eb8228952ffa59d92587b477aa04fe7c9b28d180215ba77b5cc422c77e77ecdb2c9514c135ab8967391b0ede94e6c55e7952f08db12c1e1a2d37b9fc62e880ae403736d2dc340fa79fd846ebb62aa8470f2cc820ab5d4718d0c8882ad233a56494ce278181fbeaf1b86597e209fc3217f88754717d17845580a17849e44c43b71c62019fc606e0a1cd4005e8078355cdc84e7526ef5c60060daca7368b254df4786b9f36e94aa085cf28e813a9e3ae8cb3f37bafadd2c7c4f5e84665fb8e59065bf5a98e16b219a", @ANYRES32, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x208, 0x5f, &(0x7f0000000880)=""/95, 0x61980, 0x1, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000000900)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0xc, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000980)=[r6, r6], &(0x7f00000009c0)=[{0x5, 0x3, 0xc, 0x3}], 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='skb_copy_datagram_iovec\x00', r8, 0x0, 0x9f}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x12002) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r13}, 0x10) getgroups(0x0, 0x0) 1.307192732s ago: executing program 3 (id=261): quotactl$Q_GETFMT(0xffffffff80000402, 0x0, 0x0, &(0x7f0000000380)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f0000000600), 0x1001) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) poll(0x0, 0x0, 0x1d) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x2, 0x2}, 0x10) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.306314352s ago: executing program 0 (id=262): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) unshare(0x24020400) (async) unshare(0x24020400) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) dup(r6) (async) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) (async) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x1000043, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chdir(&(0x7f0000000000)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 1.257284913s ago: executing program 2 (id=263): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 870.164318ms ago: executing program 4 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x4000, {0x0, 0x0, 0x0, r4, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 825.428229ms ago: executing program 4 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000700)={0xfffffffb, 0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r8}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001800128008000100736974000c00028008000200e000000108000a00", @ANYRES32], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) write$cgroup_int(r5, &(0x7f0000000000)=0x700, 0x12) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x1000000, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 804.857259ms ago: executing program 2 (id=266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@broadcast, @remote, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x8ec, 0x1ff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0x6, 0x8, {{0x11, 0x4, 0x3, 0x2f, 0x44, 0x64, 0x0, 0xc, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x2, 0x3, 'I'}, {0x6, 0x9, "aec50ea3e55403"}, {0x5, 0xe, "ec5be86e6cbc1461020abd28"}, {0x6, 0xe, "17b5dc6967ac225b0f957851"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3, 0x20020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}], @IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}]}, 0x40}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000003c0)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000400)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000600)={&(0x7f0000000000), 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0xf4, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x400c805}, 0x8000) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r14, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_usb_control_io$printer(r13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r12}, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 675.700851ms ago: executing program 1 (id=267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020305000000008000000000000000000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x15}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040053}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r3}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x5414, 0x20200007) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/rt_cache\x00') r8 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x18d]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT=r9, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r11}, 0x10) 62.60052ms ago: executing program 3 (id=268): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@bsdgroups}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@prjquota}, {@noload}, {@block_validity}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.807451ms ago: executing program 0 (id=269): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 1 (id=270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2f, 0x2}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa04710, &(0x7f00000001c0)={[{@quota}, {@i_version}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@data_err_ignore}, {@max_dir_size_kb}, {@errors_remount}, {@test_dummy_encryption}, {@bsdgroups}]}, 0x1, 0x453, &(0x7f0000000c40)="$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") ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): port 1(bridge_slave_0) entered disabled state [ 24.548957][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.556647][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.564224][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.571454][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.578613][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.585896][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.594557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.602030][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.611186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.619343][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.626395][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.652404][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.661294][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.668334][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.691430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.699647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.707720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.731033][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.738957][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.747318][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.754368][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.762242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.770476][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.777500][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.784848][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.793022][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.800024][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.807462][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.815466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.823676][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.830701][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.838013][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.846184][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.853217][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.892122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.900732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.908854][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.915880][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.923390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.932089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.939942][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.947964][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.955882][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.964011][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.972014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.979977][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.987912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.996217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.004630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.012731][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.020756][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.028747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.036710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.044531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.052690][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.060116][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.078798][ T284] device veth0_vlan entered promiscuous mode [ 25.086595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.094906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.102807][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.111350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.119618][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.128103][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.136396][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.143436][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.151037][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.159300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.167530][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.174602][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.182054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.189926][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.198012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.205675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.213213][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.221508][ T283] device veth0_vlan entered promiscuous mode [ 25.240328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.248450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.256088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.263710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.272891][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.281237][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.295945][ T283] device veth1_macvtap entered promiscuous mode [ 25.306768][ T285] device veth0_vlan entered promiscuous mode [ 25.313170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.321247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.329164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.337555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.345857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.353567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.361991][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.370224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.378492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.389914][ T287] device veth0_vlan entered promiscuous mode [ 25.397917][ T284] device veth1_macvtap entered promiscuous mode [ 25.407518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.415179][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.423908][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.432017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.439393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.450897][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.459244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.467646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.476045][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.496962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.505211][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.513703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.522198][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.531919][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.549892][ T283] request_module fs-gadgetfs succeeded, but still no fs? [ 25.557431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.572830][ T287] device veth1_macvtap entered promiscuous mode [ 25.586953][ T285] device veth1_macvtap entered promiscuous mode [ 25.595723][ T286] device veth0_vlan entered promiscuous mode [ 25.597703][ T306] loop1: detected capacity change from 0 to 256 [ 25.612462][ T306] exfat: Deprecated parameter 'utf8' [ 25.613956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.618114][ T306] exfat: Deprecated parameter 'utf8' [ 25.628905][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.642325][ T306] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 25.643577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.662438][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.671466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.678947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.696295][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.720412][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.730139][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.739270][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.748415][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.757103][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.765713][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.774417][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.783243][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.838271][ T286] device veth1_macvtap entered promiscuous mode [ 25.880773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.046476][ T318] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 26.449715][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.469725][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 26.491477][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 26.491490][ T28] audit: type=1400 audit(1748563678.409:102): avc: denied { accept } for pid=315 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 26.516948][ T323] loop2: detected capacity change from 0 to 256 [ 26.525949][ T323] ======================================================= [ 26.525949][ T323] WARNING: The mand mount option has been deprecated and [ 26.525949][ T323] and is ignored by this kernel. Remove the mand [ 26.525949][ T323] option from the mount to silence this warning. [ 26.525949][ T323] ======================================================= [ 26.528806][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.607233][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.615769][ T323] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.626637][ T323] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 26.637368][ T323] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 26.663247][ T28] audit: type=1400 audit(1748563678.579:103): avc: denied { write } for pid=322 comm="syz.2.3" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.686607][ T28] audit: type=1400 audit(1748563678.579:104): avc: denied { add_name } for pid=322 comm="syz.2.3" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.708294][ T28] audit: type=1400 audit(1748563678.579:105): avc: denied { create } for pid=322 comm="syz.2.3" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.787687][ T28] audit: type=1400 audit(1748563678.579:106): avc: denied { associate } for pid=322 comm="syz.2.3" name="cgroup.controllers" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.818602][ T28] audit: type=1400 audit(1748563678.579:107): avc: denied { read append open } for pid=322 comm="syz.2.3" path="/0/file0/cgroup.controllers" dev="loop2" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.832191][ T329] loop4: detected capacity change from 0 to 512 [ 26.951496][ T331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 27.079809][ T28] audit: type=1400 audit(1748563678.579:108): avc: denied { write } for pid=322 comm="syz.2.3" name="cgroup.controllers" dev="loop2" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.132043][ T329] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.139393][ T28] audit: type=1400 audit(1748563678.739:109): avc: denied { create } for pid=328 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.204198][ T329] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.7: corrupted inode contents [ 27.215840][ T28] audit: type=1400 audit(1748563678.739:110): avc: denied { lock } for pid=328 comm="syz.4.7" path="socket:[15976]" dev="sockfs" ino=15976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.215871][ T28] audit: type=1400 audit(1748563678.819:111): avc: denied { read write } for pid=322 comm="syz.2.3" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.396930][ T344] loop1: detected capacity change from 0 to 256 [ 27.412149][ T331] syz.2.3 (331) used greatest stack depth: 20096 bytes left [ 27.420122][ T343] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.441042][ T344] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 27.453162][ T329] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #16: comm syz.4.7: mark_inode_dirty error [ 27.526561][ T329] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.7: corrupted inode contents [ 27.581092][ T329] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.7: mark_inode_dirty error [ 27.598469][ T329] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.7: corrupted inode contents [ 27.617901][ T365] mmap: syz.0.8 (365) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.622497][ T329] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 27.740371][ T329] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.7: corrupted inode contents [ 27.756249][ T329] EXT4-fs error (device loop4): ext4_truncate:4314: inode #16: comm syz.4.7: mark_inode_dirty error [ 27.767381][ T329] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 27.978366][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 28.767467][ T329] EXT4-fs (loop4): 1 truncate cleaned up [ 28.779069][ T329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 28.788460][ T363] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:19: Failed to release dquot type 1 [ 28.800564][ T329] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.861523][ T377] loop2: detected capacity change from 0 to 256 [ 28.868325][ T377] FAT-fs (loop2): Unrecognized mount option "uoi_xlate=0" or missing value [ 28.948783][ T377] device xfrm0 entered promiscuous mode [ 30.032146][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 30.050914][ T388] device xfrm0 left promiscuous mode [ 30.257125][ T380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 30.435892][ T398] loop3: detected capacity change from 0 to 1024 [ 30.521432][ T305] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 30.587679][ T285] EXT4-fs (loop4): unmounting filesystem. [ 30.779468][ T407] loop1: detected capacity change from 0 to 512 [ 30.857607][ T405] loop4: detected capacity change from 0 to 512 [ 30.891305][ T407] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.22: bad orphan inode 15 [ 31.280659][ T405] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.20: bad orphan inode 15 [ 31.289921][ T407] ext4_test_bit(bit=14, block=5) = 0 [ 31.295879][ T407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.306570][ T405] ext4_test_bit(bit=14, block=5) = 0 [ 31.313239][ T405] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.329670][ T407] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 31.368440][ T285] EXT4-fs (loop4): unmounting filesystem. [ 31.375977][ T283] EXT4-fs (loop1): unmounting filesystem. [ 31.418931][ T419] loop1: detected capacity change from 0 to 512 [ 31.444839][ T419] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.24: bad orphan inode 15 [ 31.470151][ T419] ext4_test_bit(bit=14, block=5) = 0 [ 31.490743][ T419] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.518797][ T419] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 32.537985][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 32.538003][ T28] audit: type=1400 audit(1748563683.629:148): avc: denied { create } for pid=414 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.583622][ T434] loop2: detected capacity change from 0 to 256 [ 32.603747][ T28] audit: type=1400 audit(1748563683.639:149): avc: denied { connect } for pid=414 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.666073][ T28] audit: type=1400 audit(1748563684.489:150): avc: denied { create } for pid=432 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.685740][ T28] audit: type=1400 audit(1748563684.489:151): avc: denied { ioctl } for pid=432 comm="syz.2.29" path="socket:[16437]" dev="sockfs" ino=16437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.720907][ T283] EXT4-fs (loop1): unmounting filesystem. [ 32.738813][ T28] audit: type=1400 audit(1748563684.509:152): avc: denied { mount } for pid=432 comm="syz.2.29" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.694160][ T307] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.767503][ T28] audit: type=1400 audit(1748563685.679:153): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.805285][ T455] loop4: detected capacity change from 0 to 256 [ 33.812961][ T453] loop1: detected capacity change from 0 to 128 [ 33.823404][ T454] loop2: detected capacity change from 0 to 512 [ 33.878093][ T454] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.34: bad orphan inode 15 [ 33.890404][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 33.896721][ T307] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.912662][ T454] ext4_test_bit(bit=14, block=5) = 0 [ 33.917825][ T307] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.921604][ T454] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 33.936133][ T307] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 33.936157][ T307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.937740][ T307] hub 4-1:4.0: USB hub found [ 33.960807][ T28] audit: type=1400 audit(1748563685.869:154): avc: denied { mounton } for pid=451 comm="syz.1.35" path="/7/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 34.066613][ T465] loop1: detected capacity change from 0 to 1024 [ 34.080645][ T465] EXT4-fs: Ignoring removed bh option [ 34.090567][ T465] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.106298][ T287] EXT4-fs (loop2): unmounting filesystem. [ 34.138643][ T435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.147810][ T465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 34.158893][ T28] audit: type=1400 audit(1748563686.069:155): avc: denied { read } for pid=468 comm="syz.2.38" dev="nsfs" ino=4026532526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.192032][ T435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.220875][ T307] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 34.230966][ T28] audit: type=1400 audit(1748563686.109:156): avc: denied { open } for pid=468 comm="syz.2.38" path="net:[4026532526]" dev="nsfs" ino=4026532526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.274421][ T28] audit: type=1400 audit(1748563686.119:157): avc: denied { write } for pid=464 comm="syz.1.37" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.299291][ T307] usb 4-1: USB disconnect, device number 2 [ 34.336549][ T473] loop4: detected capacity change from 0 to 256 [ 34.369206][ T473] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 34.404059][ T473] overlayfs: bad mount option "redirect_dir=on\" [ 34.404364][ T471] IPv6: Can't replace route, no match found [ 34.854569][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 35.053470][ T283] EXT4-fs (loop1): unmounting filesystem. [ 35.169708][ T493] loop2: detected capacity change from 0 to 40427 [ 35.180105][ T493] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 35.187074][ T493] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 35.201054][ T493] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.235569][ T493] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 35.242718][ T493] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.328658][ T505] loop4: detected capacity change from 0 to 512 [ 35.336862][ T505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 35.348229][ T505] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #17: comm syz.4.48: inline data xattr refers to an external xattr inode [ 35.363278][ T505] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.48: couldn't read orphan inode 17 (err -117) [ 35.375261][ T505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.393941][ T505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.48'. [ 35.403767][ T309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 35.480323][ T60] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 35.700480][ T309] usb 2-1: Using ep0 maxpacket: 16 [ 35.705868][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 35.734754][ T309] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 35.734841][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 35.753409][ T60] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 35.811619][ T60] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 35.851872][ T309] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 35.891838][ T60] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 35.958341][ T309] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 35.980132][ T60] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 35.991830][ T287] syz-executor: attempt to access beyond end of device [ 35.991830][ T287] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 36.031772][ T309] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 36.048261][ T60] usb 4-1: config 1 interface 0 has no altsetting 0 [ 36.108532][ T60] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 36.129711][ T309] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 36.560746][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.570614][ T309] usb 2-1: config 1 interface 0 has no altsetting 0 [ 36.577241][ T309] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 36.604430][ T60] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 36.620348][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.634453][ T309] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 36.691985][ T285] EXT4-fs (loop4): unmounting filesystem. [ 36.723116][ T521] loop4: detected capacity change from 0 to 512 [ 36.746729][ T523] loop2: detected capacity change from 0 to 512 [ 36.776987][ T523] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.50: bad orphan inode 15 [ 36.789096][ T521] EXT4-fs (loop4): 1 orphan inode deleted [ 36.796050][ T521] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.805312][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 1 [ 36.806041][ T523] ext4_test_bit(bit=14, block=5) = 0 [ 36.817051][ T521] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.839292][ T528] af_packet: tpacket_rcv: packet too big, clamped from 8 to 4294967272. macoff=96 [ 36.852506][ T523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.889903][ T309] scsi host2: usb-storage 2-1:1.0 [ 36.924273][ T287] EXT4-fs (loop2): unmounting filesystem. [ 37.003802][ T539] loop3: detected capacity change from 0 to 128 [ 37.032468][ T539] EXT4-fs (loop3): Test dummy encryption mode enabled [ 37.044791][ T539] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.053688][ T539] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.110089][ T543] tmpfs: Unknown parameter 'quota' [ 37.373611][ T544] loop2: detected capacity change from 0 to 512 [ 37.401326][ T60] ums-sddr09: probe of 4-1:1.0 failed with error -22 [ 37.427600][ T60] usb 4-1: USB disconnect, device number 3 [ 37.450474][ T309] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 37.575959][ T305] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.590622][ T284] EXT4-fs (loop3): unmounting filesystem. [ 37.700372][ T309] usb 5-1: Using ep0 maxpacket: 16 [ 37.706887][ T309] usb 5-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 37.719123][ T309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.748146][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 37.748160][ T28] audit: type=1400 audit(1748563689.659:178): avc: denied { map } for pid=553 comm="syz.3.57" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.752424][ T309] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.762070][ T28] audit: type=1400 audit(1748563689.669:179): avc: denied { read write } for pid=553 comm="syz.3.57" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.797634][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.934900][ T309] usb 5-1: Product: syz [ 37.939108][ T309] usb 5-1: Manufacturer: syz [ 37.943837][ T309] usb 5-1: SerialNumber: syz [ 37.960846][ T60] scsi 2:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 38.154097][ T307] usb 2-1: USB disconnect, device number 2 [ 38.163831][ T521] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 38.170917][ T28] audit: type=1400 audit(1748563690.089:180): avc: denied { read } for pid=555 comm="syz.3.58" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.187964][ T563] fuse: Bad value for 'fd' [ 38.201847][ T521] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 38.220692][ T363] sd 2:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=0x01 driverbyte=DRIVER_OK [ 38.230483][ T28] audit: type=1400 audit(1748563690.089:181): avc: denied { open } for pid=555 comm="syz.3.58" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.260090][ T521] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 38.260508][ T28] audit: type=1400 audit(1748563690.089:182): avc: denied { ioctl } for pid=555 comm="syz.3.58" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.271322][ T363] sd 2:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 38.302848][ T363] sd 2:0:0:0: [sdb] Sense not available. [ 38.310076][ T363] sd 2:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 38.312255][ T309] usb 5-1: 0:2 : does not exist [ 38.317434][ T363] sd 2:0:0:0: [sdb] 0-byte physical blocks [ 38.328805][ T28] audit: type=1400 audit(1748563690.129:183): avc: denied { create } for pid=562 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.338322][ T566] capability: warning: `syz.1.60' uses deprecated v2 capabilities in a way that may be insecure [ 38.348125][ T28] audit: type=1400 audit(1748563690.129:184): avc: denied { setopt } for pid=562 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.369518][ T363] sd 2:0:0:0: [sdb] Write Protect is off [ 38.381339][ T28] audit: type=1400 audit(1748563690.139:185): avc: denied { unlink } for pid=549 comm="syz.0.56" name="#1" dev="tmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.406126][ T363] sd 2:0:0:0: [sdb] Asking for cache data failed [ 38.409974][ T309] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 38.422898][ T363] sd 2:0:0:0: [sdb] Assuming drive cache: write through [ 38.443442][ T363] sd 2:0:0:0: [sdb] Attached SCSI removable disk [ 38.483514][ T28] audit: type=1400 audit(1748563690.389:186): avc: denied { bind } for pid=562 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.504696][ T309] usb 5-1: USB disconnect, device number 2 [ 38.830705][ T305] udevd[305]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.879677][ T285] EXT4-fs (loop4): unmounting filesystem. [ 38.932900][ T580] loop2: detected capacity change from 0 to 40427 [ 38.941445][ T456] udevd[456]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 38.967346][ T580] F2FS-fs (loop2): invalid crc value [ 39.040035][ T580] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.056091][ T305] udevd[305]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 39.131848][ T593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 39.446927][ T580] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.547128][ T28] audit: type=1400 audit(1748563691.459:187): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.660970][ T599] syz.2.64: attempt to access beyond end of device [ 39.660970][ T599] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.925724][ T287] syz-executor: attempt to access beyond end of device [ 39.925724][ T287] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 40.069475][ T604] IPv6: addrconf: prefix option has invalid lifetime [ 40.076210][ T604] IPv6: addrconf: prefix option has invalid lifetime [ 40.241521][ T601] input: syz1 as /devices/virtual/input/input5 [ 40.278292][ T510] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 41.501394][ T614] block device autoloading is deprecated and will be removed. [ 41.509662][ T614] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 41.522818][ T510] usb 4-1: device descriptor read/64, error -71 [ 41.928197][ T623] loop2: detected capacity change from 0 to 256 [ 42.130307][ T510] usb 4-1: device descriptor read/64, error -71 [ 42.412310][ T648] overlayfs: bad mount option "redirect_dir=on:/(" [ 42.425719][ T510] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 42.492970][ T650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.80'. [ 42.600375][ T510] usb 4-1: device descriptor read/64, error -71 [ 42.666387][ T652] Illegal XDP return value 2070987784 on prog (id 46) dev N/A, expect packet loss! [ 42.720235][ T622] binder: 620:622 ioctl 4018920a 200000000280 returned -22 [ 42.750354][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 42.750370][ T28] audit: type=1400 audit(1748563694.649:204): avc: denied { execute } for pid=620 comm="syz.1.73" path="/16/cgroup.controllers" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.820034][ T632] loop2: detected capacity change from 0 to 40427 [ 42.828484][ T632] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 42.836394][ T632] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.931551][ T656] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.949901][ T656] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 43.168889][ T510] usb 4-1: device descriptor read/64, error -71 [ 43.191490][ T632] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.235743][ T668] loop4: detected capacity change from 0 to 512 [ 43.261718][ T632] F2FS-fs (loop2): access invalid blkaddr:269485312 [ 43.268448][ T632] CPU: 0 PID: 632 Comm: syz.2.75 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 43.278009][ T632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.288087][ T632] Call Trace: [ 43.290405][ T510] usb usb4-port1: attempt power cycle [ 43.291371][ T632] [ 43.291381][ T632] __dump_stack+0x21/0x24 [ 43.303993][ T632] dump_stack_lvl+0xee/0x150 [ 43.308615][ T632] ? __cfi_dump_stack_lvl+0x8/0x8 [ 43.313675][ T632] ? __this_cpu_preempt_check+0x13/0x20 [ 43.319254][ T632] dump_stack+0x15/0x24 [ 43.323431][ T632] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 43.328997][ T632] f2fs_is_valid_blkaddr+0x23/0x30 [ 43.334131][ T632] f2fs_get_node_info+0x7dd/0x1200 [ 43.339268][ T632] ? __cfi_f2fs_get_node_info+0x10/0x10 [ 43.344838][ T632] ? folio_add_lru+0x260/0x390 [ 43.349628][ T632] read_node_page+0x2e4/0x4f0 [ 43.354316][ T632] ? f2fs_ra_node_page+0x270/0x270 [ 43.359444][ T632] ? __kasan_check_write+0x14/0x20 [ 43.364573][ T632] ? _raw_spin_lock+0x8e/0xe0 [ 43.369271][ T632] ? __kasan_check_read+0x11/0x20 [ 43.374319][ T632] __get_node_page+0x14e/0xb00 [ 43.379095][ T632] ? iget_locked+0x77b/0x8b0 [ 43.383694][ T632] f2fs_get_node_page+0x21/0x30 [ 43.388560][ T632] f2fs_iget+0x7e6/0x4cb0 [ 43.392908][ T632] ? __kasan_check_write+0x14/0x20 [ 43.398043][ T632] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 43.403958][ T632] ? __kasan_kmalloc+0x95/0xb0 [ 43.407570][ T668] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.85: bad orphan inode 15 [ 43.408733][ T632] ? f2fs_build_stats+0x74/0xc30 [ 43.418889][ T668] ext4_test_bit(bit=14, block=5) = 0 [ 43.423459][ T632] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 43.423491][ T632] ? f2fs_build_stats+0x7b3/0xc30 [ 43.429000][ T668] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.434558][ T632] f2fs_fill_super+0x45e9/0x6c70 [ 43.434600][ T632] ? __cfi_f2fs_fill_super+0x10/0x10 [ 43.458187][ T632] ? mutex_unlock+0x89/0x220 [ 43.462803][ T632] ? set_blocksize+0x1df/0x360 [ 43.467585][ T632] ? sb_set_blocksize+0xaa/0xf0 [ 43.472445][ T632] ? __cfi_f2fs_fill_super+0x10/0x10 [ 43.477747][ T632] mount_bdev+0x2bc/0x3f0 [ 43.482092][ T632] ? __cfi_f2fs_fill_super+0x10/0x10 [ 43.487393][ T632] f2fs_mount+0x34/0x40 [ 43.491572][ T632] legacy_get_tree+0xfe/0x1a0 [ 43.496261][ T632] ? __cfi_f2fs_mount+0x10/0x10 [ 43.501125][ T632] vfs_get_tree+0x9a/0x270 [ 43.505560][ T632] do_new_mount+0x25a/0xa20 [ 43.510080][ T632] path_mount+0x675/0x1010 [ 43.514517][ T632] ? user_path_at_empty+0x161/0x1c0 [ 43.519725][ T632] __se_sys_mount+0x318/0x380 [ 43.524414][ T632] ? do_mkdirat+0x459/0x4c0 [ 43.528931][ T632] ? __x64_sys_mount+0xd0/0xd0 [ 43.533712][ T632] ? do_user_addr_fault+0x9ac/0x1050 [ 43.539038][ T632] __x64_sys_mount+0xbf/0xd0 [ 43.543640][ T632] x64_sys_call+0x65d/0x9a0 [ 43.548152][ T632] do_syscall_64+0x4c/0xa0 [ 43.552586][ T632] ? clear_bhb_loop+0x15/0x70 [ 43.557273][ T632] ? clear_bhb_loop+0x15/0x70 [ 43.561967][ T632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 43.568235][ T632] RIP: 0033:0x7f352c39010a [ 43.572659][ T632] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.592274][ T632] RSP: 002b:00007f352d21be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.600717][ T632] RAX: ffffffffffffffda RBX: 00007f352d21bef0 RCX: 00007f352c39010a [ 43.608695][ T632] RDX: 00002000000004c0 RSI: 0000200000000040 RDI: 00007f352d21beb0 [ 43.616775][ T632] RBP: 00002000000004c0 R08: 00007f352d21bef0 R09: 0000000002008410 [ 43.624760][ T632] R10: 0000000002008410 R11: 0000000000000246 R12: 0000200000000040 [ 43.632742][ T632] R13: 00007f352d21beb0 R14: 000000000000553b R15: 0000200000001f80 [ 43.640740][ T632] [ 43.992495][ T632] F2FS-fs (loop2): Failed to read root inode [ 44.002108][ T677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.016260][ T677] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 44.330497][ T28] audit: type=1400 audit(1748563696.219:205): avc: denied { write } for pid=671 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.457545][ T684] loop0: detected capacity change from 0 to 512 [ 44.464262][ T684] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.471060][ T684] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.478724][ T684] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.488914][ T668] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 44.500154][ T684] EXT4-fs (loop0): 1 truncate cleaned up [ 44.513534][ T684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.542723][ T285] EXT4-fs (loop4): unmounting filesystem. [ 44.626249][ T698] loop3: detected capacity change from 0 to 1024 [ 44.653394][ T698] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.776713][ T704] loop4: detected capacity change from 0 to 1024 [ 44.787552][ T704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.849478][ T286] EXT4-fs (loop0): unmounting filesystem. [ 44.870744][ T707] loop0: detected capacity change from 0 to 1024 [ 44.895997][ T707] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.914236][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.921756][ T707] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 44.949255][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 44.958391][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.966793][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 44.975166][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.988812][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.002788][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.014413][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.022983][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.037698][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 45.045270][ T510] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 45.045634][ T286] EXT4-fs (loop0): unmounting filesystem. [ 45.053303][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 45.080474][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 45.081765][ T510] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.102343][ T28] audit: type=1400 audit(1748563697.019:206): avc: denied { create } for pid=712 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.102776][ T510] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 45.127826][ T28] audit: type=1400 audit(1748563697.019:207): avc: denied { connect } for pid=712 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.131340][ T510] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.158964][ T714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.96'. [ 45.172322][ T510] usb 4-1: config 0 descriptor?? [ 45.178809][ T510] usb 4-1: bad CDC descriptors [ 45.200263][ T716] loop0: detected capacity change from 0 to 512 [ 45.211688][ T716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.226818][ T286] EXT4-fs (loop0): unmounting filesystem. [ 45.291523][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.327526][ T6] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 45.336850][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.345978][ T6] usb 5-1: config 0 descriptor?? [ 45.351923][ T6] usb 5-1: bad CDC descriptors [ 45.715981][ T28] audit: type=1400 audit(1748563697.629:208): avc: denied { write } for pid=703 comm="syz.4.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.736494][ T294] usb 5-1: USB disconnect, device number 3 [ 45.748236][ T60] usb 4-1: USB disconnect, device number 6 [ 45.754641][ T726] loop2: detected capacity change from 0 to 512 [ 45.782629][ T726] EXT4-fs (loop2): 1 orphan inode deleted [ 45.788443][ T726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.797631][ T726] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.808096][ T8] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 45.819131][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 1 [ 46.097811][ T683] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 46.242368][ T285] EXT4-fs (loop4): unmounting filesystem. [ 46.258397][ T284] EXT4-fs (loop3): unmounting filesystem. [ 46.270814][ T732] loop4: detected capacity change from 0 to 512 [ 46.310320][ T683] usb 3-1: Using ep0 maxpacket: 16 [ 46.354464][ T732] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.101: bad orphan inode 15 [ 46.561118][ T683] usb 3-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 46.572709][ T732] ext4_test_bit(bit=14, block=5) = 0 [ 46.578265][ T732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.592087][ T683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.657880][ T285] EXT4-fs (loop4): unmounting filesystem. [ 46.657927][ T683] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.680080][ T683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.688277][ T683] usb 3-1: Product: syz [ 46.692626][ T683] usb 3-1: Manufacturer: syz [ 46.697257][ T683] usb 3-1: SerialNumber: syz [ 46.771868][ T746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.791589][ T746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.911853][ T726] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 47.120750][ T28] audit: type=1400 audit(1748563698.879:209): avc: denied { name_bind } for pid=744 comm="syz.4.106" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 47.130141][ T752] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 47.160935][ T752] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 47.172173][ T683] usb 3-1: 0:2 : does not exist [ 47.180147][ T683] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 47.258787][ T683] usb 3-1: USB disconnect, device number 2 [ 47.260318][ T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 47.335097][ T755] loop0: detected capacity change from 0 to 1024 [ 47.357373][ T755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.451376][ T6] usb 4-1: config index 0 descriptor too short (expected 32820, got 52) [ 47.459766][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.469898][ T6] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 47.480386][ T6] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 47.491202][ T305] udevd[305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.506919][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.532193][ T6] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 47.546840][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.554896][ T6] usb 4-1: Product: syz [ 47.559062][ T6] usb 4-1: Manufacturer: syz [ 47.563679][ T6] usb 4-1: SerialNumber: syz [ 47.606121][ T6] usb 4-1: config 0 descriptor?? [ 47.666087][ T6] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 47.695346][ T287] EXT4-fs (loop2): unmounting filesystem. [ 47.706613][ T305] udevd[305]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.750421][ T510] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 47.865966][ T6] usb 4-1: USB disconnect, device number 7 [ 47.941330][ T510] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.952698][ T510] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 47.961839][ T510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.057766][ T683] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 48.094582][ T510] usb 1-1: config 0 descriptor?? [ 48.203865][ T510] usb 1-1: bad CDC descriptors [ 48.290354][ T683] usb 3-1: Using ep0 maxpacket: 16 [ 48.300468][ T683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 48.309465][ T683] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 48.319143][ T683] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 48.328843][ T683] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 48.338627][ T683] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 48.348582][ T683] usb 3-1: config 1 interface 0 has no altsetting 0 [ 48.355270][ T683] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 48.364385][ T683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.373810][ T683] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 48.411982][ T60] usb 1-1: USB disconnect, device number 2 [ 48.575977][ T683] scsi host1: usb-storage 3-1:1.0 [ 48.638945][ T28] audit: type=1400 audit(1748563700.549:210): avc: denied { bind } for pid=781 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.659523][ T782] device batadv_slave_0 entered promiscuous mode [ 48.669085][ T782] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 49.329421][ T28] audit: type=1400 audit(1748563701.229:211): avc: denied { write } for pid=778 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.346773][ T791] loop4: detected capacity change from 0 to 512 [ 49.380029][ T28] audit: type=1400 audit(1748563701.229:212): avc: denied { read } for pid=778 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.401035][ T791] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.115: bad orphan inode 15 [ 49.411579][ T791] ext4_test_bit(bit=14, block=5) = 0 [ 49.416949][ T791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.448346][ T285] EXT4-fs (loop4): unmounting filesystem. [ 49.555118][ T796] loop1: detected capacity change from 0 to 512 [ 49.696071][ T683] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 49.813122][ T796] EXT4-fs (loop1): 1 orphan inode deleted [ 49.818898][ T796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.828000][ T796] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.828946][ T286] EXT4-fs (loop0): unmounting filesystem. [ 49.853152][ T28] audit: type=1400 audit(1748563701.769:213): avc: denied { read append open } for pid=789 comm="syz.1.116" path="/23/file1/cgroup.controllers" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.887980][ T28] audit: type=1400 audit(1748563701.799:214): avc: denied { ioctl } for pid=789 comm="syz.1.116" path="/23/file1/cgroup.controllers" dev="loop1" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.918106][ T28] audit: type=1400 audit(1748563701.839:215): avc: denied { mounton } for pid=797 comm="syz.3.118" path="/20/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.982445][ T6] usb 3-1: USB disconnect, device number 3 [ 49.996040][ T811] FAULT_INJECTION: forcing a failure. [ 49.996040][ T811] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.005669][ T813] loop2: detected capacity change from 0 to 512 [ 50.020847][ T811] CPU: 1 PID: 811 Comm: syz.3.120 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 50.030639][ T811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.041307][ T811] Call Trace: [ 50.044585][ T811] [ 50.047518][ T811] __dump_stack+0x21/0x24 [ 50.051855][ T811] dump_stack_lvl+0xee/0x150 [ 50.056449][ T811] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.061480][ T811] dump_stack+0x15/0x24 [ 50.065635][ T811] should_fail_ex+0x3d4/0x520 [ 50.070315][ T811] should_fail+0xb/0x10 [ 50.074498][ T811] should_fail_usercopy+0x1a/0x20 [ 50.079525][ T811] _copy_from_user+0x1e/0xc0 [ 50.084109][ T811] strndup_user+0xb6/0x150 [ 50.088529][ T811] __se_sys_mount+0x9c/0x380 [ 50.093118][ T811] ? fput+0x154/0x1a0 [ 50.097182][ T811] ? __x64_sys_mount+0xd0/0xd0 [ 50.101953][ T811] ? __cfi_ksys_write+0x10/0x10 [ 50.106807][ T811] __x64_sys_mount+0xbf/0xd0 [ 50.111393][ T811] x64_sys_call+0x65d/0x9a0 [ 50.115898][ T811] do_syscall_64+0x4c/0xa0 [ 50.120318][ T811] ? clear_bhb_loop+0x15/0x70 [ 50.124990][ T811] ? clear_bhb_loop+0x15/0x70 [ 50.129663][ T811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.135587][ T811] RIP: 0033:0x7f8b7678e969 [ 50.139991][ T811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.159585][ T811] RSP: 002b:00007f8b77626038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.167999][ T811] RAX: ffffffffffffffda RBX: 00007f8b769b5fa0 RCX: 00007f8b7678e969 [ 50.175964][ T811] RDX: 0000200000000200 RSI: 00002000000003c0 RDI: 0000000000000000 [ 50.183928][ T811] RBP: 00007f8b77626090 R08: 0000200000001100 R09: 0000000000000000 [ 50.191893][ T811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.199850][ T811] R13: 0000000000000000 R14: 00007f8b769b5fa0 R15: 00007ffda7e01538 [ 50.207811][ T811] [ 50.213069][ T353] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 50.257153][ T353] sd 1:0:0:0: [sdb] Sense not available. [ 50.262978][ T353] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 50.278543][ T353] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 50.290440][ T353] sd 1:0:0:0: [sdb] Write Protect is off [ 50.303025][ T353] sd 1:0:0:0: [sdb] Asking for cache data failed [ 50.310741][ T283] EXT4-fs (loop1): unmounting filesystem. [ 50.355278][ T353] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 50.371443][ T813] EXT4-fs (loop2): 1 orphan inode deleted [ 50.372961][ T353] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 50.390421][ T358] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 50.946811][ T813] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.956454][ T28] audit: type=1400 audit(1748563702.869:216): avc: denied { watch watch_reads } for pid=814 comm="syz.3.122" path="/22" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.979064][ T358] EXT4-fs error (device loop2): ext4_release_dquot:6825: comm kworker/u4:14: Failed to release dquot type 1 [ 50.986000][ T817] loop0: detected capacity change from 0 to 512 [ 51.089264][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 51.308338][ T826] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 51.322369][ T683] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.386403][ T817] EXT4-fs (loop0): invalid inodes per group: 865056 [ 51.386403][ T817] [ 51.440951][ T813] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.650300][ T683] usb 5-1: Using ep0 maxpacket: 8 [ 51.656760][ T683] usb 5-1: unable to get BOS descriptor or descriptor too short [ 51.671047][ T683] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 51.679313][ T683] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 51.690386][ T683] usb 5-1: config 4 has no interface number 0 [ 51.708970][ T683] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 51.855853][ T28] audit: type=1400 audit(1748563703.679:217): avc: denied { connect } for pid=833 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.882430][ T683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.924039][ T683] usb 5-1: Product: 姬㊭뷎뙎婃ᱬ엋맳쯔⽏럾楆윛훲濸ᄘ儖즴ࢼ뵍넙쟔䯔㈰鎕农࠻᭵ਘ极◯ꏘ᮴ꗤ蟍粵䚝ⶽᠻ㵠쥚畐♨㐡⧐晌⡁叹ꁢ敬㗨胝闚龏峴⑁빱铺慣Ⴛ礘긛ꢛ舺폼푷핃ᐙ헷썑쿁櫡䁑걒ถ谊猦싧眇豦獦瀢ᄲ婌蘢螿雏諠楂뚙龋徺ꈷ࿒䄶 [ 51.971431][ T28] audit: type=1400 audit(1748563703.749:218): avc: denied { write } for pid=833 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.097136][ T683] usb 5-1: Manufacturer: ࠓ [ 52.120743][ T683] usb 5-1: SerialNumber: syz [ 52.455509][ T822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 52.475595][ T822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 52.497876][ T822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.517195][ T822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.554687][ T683] usb 5-1: Found UVC 0.02 device 姬㊭뷎뙎婃ᱬ엋맳쯔⽏럾楆윛훲濸ᄘ儖즴ࢼ뵍넙쟔䯔㈰鎕农࠻᭵ਘ极◯ꏘ᮴ꗤ蟍粵䚝ⶽᠻ㵠쥚畐♨㐡⧐晌⡁叹ꁢ敬㗨胝闚龏峴⑁빱铺慣Ⴛ礘긛ꢛ舺폼푷핃ᐙ헷썑쿁櫡䁑걒ถ谊猦싧眇豦獦瀢ᄲ婌蘢螿雏諠楂뚙龋徺ꈷ࿒䄶 (04f2:b746) [ 52.628141][ T845] loop0: detected capacity change from 0 to 1024 [ 52.635179][ T683] usb 5-1: No streaming interface found for terminal 6. [ 52.675582][ T683] usb 5-1: USB disconnect, device number 4 [ 52.685040][ T845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.727984][ T848] loop1: detected capacity change from 0 to 1024 [ 52.739219][ T848] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #3: block 1: comm syz.1.130: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.753639][ T848] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.130: Failed to acquire dquot type 0 [ 52.765254][ T848] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.130: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.778851][ T848] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.130: Invalid inode bitmap blk 0 in block_group 0 [ 52.780360][ T19] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 52.791957][ T848] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 52.798977][ T353] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.807922][ T848] EXT4-fs (loop1): 1 orphan inode deleted [ 52.822194][ T353] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:10: Failed to release dquot type 0 [ 52.827467][ T848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.869036][ T283] EXT4-fs (loop1): unmounting filesystem. [ 52.885986][ T851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.131'. [ 52.908149][ T853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'. [ 52.917450][ T853] FAULT_INJECTION: forcing a failure. [ 52.917450][ T853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.930544][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 52.930699][ T853] CPU: 1 PID: 853 Comm: syz.1.132 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 52.947616][ T853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.957658][ T853] Call Trace: [ 52.960924][ T853] [ 52.963842][ T853] __dump_stack+0x21/0x24 [ 52.968166][ T853] dump_stack_lvl+0xee/0x150 [ 52.972750][ T853] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.977765][ T853] dump_stack+0x15/0x24 [ 52.981911][ T853] should_fail_ex+0x3d4/0x520 [ 52.986581][ T853] should_fail+0xb/0x10 [ 52.990723][ T853] should_fail_usercopy+0x1a/0x20 [ 52.995735][ T853] _copy_to_user+0x1e/0x90 [ 53.000138][ T853] simple_read_from_buffer+0xe9/0x160 [ 53.005506][ T853] proc_fail_nth_read+0x19a/0x210 [ 53.010523][ T853] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 53.016062][ T853] ? security_file_permission+0x94/0xb0 [ 53.021598][ T853] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 53.027224][ T853] vfs_read+0x26e/0x8c0 [ 53.030389][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 53.031370][ T853] ? __cfi_vfs_read+0x10/0x10 [ 53.037634][ T19] usb 4-1: config 24 has an invalid interface number: 167 but max is 1 [ 53.041129][ T853] ? __kasan_check_write+0x14/0x20 [ 53.041161][ T853] ? mutex_lock+0x8d/0x1a0 [ 53.049712][ T19] usb 4-1: config 24 has an invalid interface number: 68 but max is 1 [ 53.054482][ T853] ? __cfi_mutex_lock+0x10/0x10 [ 53.058906][ T19] usb 4-1: config 24 has no interface number 0 [ 53.067034][ T853] ? __fdget_pos+0x2cd/0x380 [ 53.067065][ T853] ? ksys_read+0x71/0x240 [ 53.073318][ T19] usb 4-1: config 24 has no interface number 1 [ 53.078045][ T853] ksys_read+0x140/0x240 [ 53.083759][ T19] usb 4-1: config 24 interface 167 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 53.086925][ T853] ? __cfi_ksys_read+0x10/0x10 [ 53.093241][ T19] usb 4-1: config 24 interface 167 has no altsetting 0 [ 53.097288][ T853] ? debug_smp_processor_id+0x17/0x20 [ 53.108429][ T19] usb 4-1: config 24 interface 68 has no altsetting 0 [ 53.112956][ T853] __x64_sys_read+0x7b/0x90 [ 53.112985][ T853] x64_sys_call+0x2f/0x9a0 [ 53.122641][ T19] usb 4-1: New USB device found, idVendor=0582, idProduct=00c4, bcdDevice=bd.b3 [ 53.125163][ T853] do_syscall_64+0x4c/0xa0 [ 53.132057][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.136395][ T853] ? clear_bhb_loop+0x15/0x70 [ 53.136417][ T853] ? clear_bhb_loop+0x15/0x70 [ 53.141187][ T19] usb 4-1: Product: syz [ 53.149827][ T853] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.154522][ T19] usb 4-1: Manufacturer: syz [ 53.162210][ T853] RIP: 0033:0x7f492158d37c [ 53.162230][ T853] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.167191][ T19] usb 4-1: SerialNumber: syz [ 53.171560][ T853] RSP: 002b:00007f4922442030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.171584][ T853] RAX: ffffffffffffffda RBX: 00007f49217b5fa0 RCX: 00007f492158d37c [ 53.180348][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 53.181599][ T853] RDX: 000000000000000f RSI: 00007f49224420a0 RDI: 0000000000000008 [ 53.181617][ T853] RBP: 00007f4922442090 R08: 0000000000000000 R09: 0000000000000014 [ 53.187460][ T6] usb 3-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 53.190592][ T853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.190607][ T853] R13: 0000000000000000 R14: 00007f49217b5fa0 R15: 00007ffdfccdd208 [ 53.190628][ T853] [ 53.260333][ T510] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 53.263070][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.300936][ T6] usb 3-1: string descriptor 0 read error: -71 [ 53.308066][ T287] EXT4-fs (loop2): unmounting filesystem. [ 53.317711][ T6] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 53.327702][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 53.337567][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.350443][ T859] loop2: detected capacity change from 0 to 512 [ 53.357816][ T6] usb 3-1: can't set config #1, error -71 [ 53.368043][ T6] usb 3-1: USB disconnect, device number 4 [ 53.375443][ T859] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.134: bad orphan inode 15 [ 53.388273][ T832] FAULT_INJECTION: forcing a failure. [ 53.388273][ T832] name failslab, interval 1, probability 0, space 0, times 1 [ 53.407487][ T832] CPU: 0 PID: 832 Comm: syz.3.125 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 53.417142][ T832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.427200][ T832] Call Trace: [ 53.430480][ T832] [ 53.433417][ T832] __dump_stack+0x21/0x24 [ 53.436375][ T855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 53.437760][ T832] dump_stack_lvl+0xee/0x150 [ 53.451148][ T832] ? __cfi_dump_stack_lvl+0x8/0x8 [ 53.451968][ T535] udevd[535]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 53.456195][ T832] dump_stack+0x15/0x24 [ 53.468394][ T859] ext4_test_bit(bit=14, block=5) = 0 [ 53.469601][ T832] should_fail_ex+0x3d4/0x520 [ 53.479545][ T832] __should_failslab+0xac/0xf0 [ 53.484323][ T832] ? bpf_prog_test_run_skb+0x24f/0x1290 [ 53.489889][ T832] should_failslab+0x9/0x20 [ 53.494413][ T832] __kmem_cache_alloc_node+0x3d/0x2c0 [ 53.498407][ T859] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 53.499798][ T832] ? bpf_prog_test_run_skb+0x24f/0x1290 [ 53.511493][ T510] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.513730][ T832] __kmalloc+0xa1/0x1e0 [ 53.528037][ T832] bpf_prog_test_run_skb+0x24f/0x1290 [ 53.533448][ T832] ? __fget_files+0x2d5/0x330 [ 53.538152][ T832] ? __kasan_check_write+0x14/0x20 [ 53.539192][ T510] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 53.543294][ T832] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 53.543323][ T832] bpf_prog_test_run+0x3e3/0x630 [ 53.563045][ T832] ? slab_free_freelist_hook+0xc2/0x190 [ 53.568691][ T832] ? bpf_prog_query+0x270/0x270 [ 53.573541][ T832] ? selinux_bpf+0xce/0xf0 [ 53.578054][ T832] ? security_bpf+0x93/0xb0 [ 53.582559][ T832] __sys_bpf+0x56d/0x780 [ 53.586804][ T832] ? bpf_link_show_fdinfo+0x320/0x320 [ 53.592183][ T832] ? __cfi_ksys_write+0x10/0x10 [ 53.597041][ T832] ? debug_smp_processor_id+0x17/0x20 [ 53.602417][ T832] __x64_sys_bpf+0x7c/0x90 [ 53.606839][ T832] x64_sys_call+0x488/0x9a0 [ 53.611343][ T832] do_syscall_64+0x4c/0xa0 [ 53.615859][ T832] ? clear_bhb_loop+0x15/0x70 [ 53.620552][ T832] ? clear_bhb_loop+0x15/0x70 [ 53.625245][ T832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.631160][ T832] RIP: 0033:0x7f8b7678e969 [ 53.635572][ T832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.655204][ T832] RSP: 002b:00007f8b77626038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.663708][ T832] RAX: ffffffffffffffda RBX: 00007f8b769b5fa0 RCX: 00007f8b7678e969 [ 53.671782][ T832] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 53.679750][ T832] RBP: 00007f8b77626090 R08: 0000000000000000 R09: 0000000000000000 [ 53.687715][ T832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.695681][ T832] R13: 0000000000000000 R14: 00007f8b769b5fa0 R15: 00007ffda7e01538 [ 53.703654][ T832] [ 53.727945][ T859] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 53.741253][ T510] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.757359][ T510] usb 1-1: config 0 descriptor?? [ 53.762938][ T287] EXT4-fs (loop2): unmounting filesystem. [ 53.771916][ T510] usb 1-1: bad CDC descriptors [ 53.812618][ T855] loop1: detected capacity change from 0 to 8192 [ 53.841579][ T870] loop2: detected capacity change from 0 to 512 [ 53.866680][ T870] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.137: bad orphan inode 15 [ 53.889234][ T870] ext4_test_bit(bit=14, block=5) = 0 [ 53.894673][ T870] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 53.928837][ T325] udevd[325]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 53.962168][ T287] EXT4-fs (loop2): unmounting filesystem. [ 53.983344][ T510] usb 1-1: USB disconnect, device number 3 [ 54.064866][ T877] loop1: detected capacity change from 0 to 512 [ 54.117241][ T877] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.139: bad orphan inode 15 [ 54.147716][ T877] ext4_test_bit(bit=14, block=5) = 0 [ 54.167667][ T877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.207071][ T877] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 54.234838][ T283] EXT4-fs (loop1): unmounting filesystem. [ 54.266954][ T875] loop2: detected capacity change from 0 to 40427 [ 54.272622][ T19] usb 4-1: USB disconnect, device number 8 [ 54.301444][ T875] F2FS-fs (loop2): fault_injection options not supported [ 54.313656][ T882] loop1: detected capacity change from 0 to 512 [ 54.341344][ T875] F2FS-fs (loop2): invalid crc value [ 54.371106][ T875] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.391303][ T882] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.140: bad orphan inode 15 [ 54.430491][ T882] ext4_test_bit(bit=14, block=5) = 0 [ 54.435916][ T882] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.489652][ T887] overlayfs: unrecognized mount option "smackfsroot=upperdir" or missing value [ 54.507104][ T887] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 54.661734][ T875] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 54.753386][ T882] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 54.756805][ T286] EXT4-fs (loop0): unmounting filesystem. [ 54.790137][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 54.790153][ T28] audit: type=1400 audit(1748563706.699:225): avc: denied { write } for pid=874 comm="syz.2.138" path=2F32342F66696C65312F5F726177696F0C dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.808077][ T283] EXT4-fs (loop1): unmounting filesystem. [ 54.851309][ T893] loop4: detected capacity change from 0 to 512 [ 54.857901][ T892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 54.863904][ T28] audit: type=1400 audit(1748563706.759:226): avc: denied { remount } for pid=890 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.890095][ T895] loop1: detected capacity change from 0 to 128 [ 54.904160][ T893] EXT4-fs (loop4): 1 orphan inode deleted [ 54.916472][ T893] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.926511][ T895] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.931483][ T8] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 54.938564][ T895] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.951414][ T893] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.989257][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 1 [ 55.042062][ T28] audit: type=1400 audit(1748563706.959:227): avc: denied { setattr } for pid=894 comm="syz.1.143" path="/32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.096783][ T904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.106784][ T904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.119170][ T904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.145'. [ 55.962217][ T912] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.361959][ T283] EXT4-fs (loop1): unmounting filesystem. [ 56.381078][ T917] loop1: detected capacity change from 0 to 512 [ 56.395371][ T917] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.148: bad orphan inode 15 [ 56.400387][ T60] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 56.405529][ T917] ext4_test_bit(bit=14, block=5) = 0 [ 56.412889][ T510] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 56.425788][ T917] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.471530][ T287] syz-executor: attempt to access beyond end of device [ 56.471530][ T287] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.486987][ T283] EXT4-fs (loop1): unmounting filesystem. [ 56.506544][ T920] loop1: detected capacity change from 0 to 512 [ 56.540727][ T920] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #3: comm syz.1.150: corrupted inode contents [ 56.552711][ T920] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #3: comm syz.1.150: mark_inode_dirty error [ 56.564694][ T920] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #3: comm syz.1.150: corrupted inode contents [ 56.578478][ T920] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.150: mark_inode_dirty error [ 56.590632][ T920] Quota error (device loop1): write_blk: dquota write failed [ 56.598117][ T920] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 56.608312][ T920] EXT4-fs error (device loop1): ext4_acquire_dquot:6789: comm syz.1.150: Failed to acquire dquot type 0 [ 56.621121][ T920] EXT4-fs (loop1): 1 orphan inode deleted [ 56.626944][ T920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.636257][ T920] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.694763][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 56.714543][ T60] usb 5-1: config 1 has an invalid descriptor of length 204, skipping remainder of the config [ 56.724902][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.741383][ T510] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.750548][ T510] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.758660][ T510] usb 1-1: Product: syz [ 56.763077][ T60] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.772161][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.780201][ T60] usb 5-1: Product: syz [ 56.784749][ T510] usb 1-1: Manufacturer: syz [ 56.789380][ T510] usb 1-1: SerialNumber: syz [ 56.794025][ T60] usb 5-1: Manufacturer: syz [ 56.798656][ T60] usb 5-1: SerialNumber: syz [ 56.882729][ T929] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 57.330991][ T28] audit: type=1400 audit(1748563709.239:228): avc: denied { bind } for pid=931 comm="syz.3.152" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.351435][ T28] audit: type=1400 audit(1748563709.239:229): avc: denied { node_bind } for pid=931 comm="syz.3.152" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 57.447947][ T510] cdc_ncm 1-1:1.0: bind() failure [ 57.451308][ T893] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 57.454399][ T510] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 57.466891][ T510] cdc_ncm 1-1:1.1: bind() failure [ 57.476693][ T510] usb 1-1: USB disconnect, device number 4 [ 57.488306][ T60] usb 5-1: 0:2 : does not exist [ 57.586176][ T60] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 57.631428][ T28] audit: type=1400 audit(1748563709.479:230): avc: denied { setattr } for pid=919 comm="syz.1.150" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.765743][ T937] loop2: detected capacity change from 0 to 1024 [ 57.789162][ T937] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.841675][ T283] EXT4-fs (loop1): unmounting filesystem. [ 57.847511][ T60] usb 5-1: USB disconnect, device number 5 [ 57.854970][ T363] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 57.864818][ T363] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:19: Failed to release dquot type 1 [ 57.886428][ T940] fuse: Bad value for 'user_id' [ 57.893520][ T940] loop1: detected capacity change from 0 to 512 [ 57.900652][ T940] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.921009][ T940] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 57.928923][ T940] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 57.937238][ T940] System zones: 0-1, 15-15, 18-18, 34-34 [ 57.943352][ T940] EXT4-fs (loop1): orphan cleanup on readonly fs [ 57.949785][ T940] EXT4-fs warning (device loop1): ext4_enable_quotas:7041: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 57.964495][ T940] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 57.971447][ T940] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.154: bg 0: block 40: padding at end of block bitmap is not set [ 57.985711][ T940] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 57.994732][ T940] EXT4-fs (loop1): 1 truncate cleaned up [ 58.000420][ T940] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 58.056128][ T305] udevd[305]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.086059][ T285] EXT4-fs (loop4): unmounting filesystem. [ 58.100348][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 58.105597][ T946] device bridge0 entered promiscuous mode [ 58.192392][ T950] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 58.293503][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.304721][ T6] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 58.313840][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.327199][ T6] usb 3-1: config 0 descriptor?? [ 58.360960][ T6] usb 3-1: bad CDC descriptors [ 58.582008][ T6] usb 3-1: USB disconnect, device number 5 [ 58.736389][ T960] loop3: detected capacity change from 0 to 128 [ 58.753262][ T283] EXT4-fs (loop1): unmounting filesystem. [ 59.254017][ T287] EXT4-fs (loop2): unmounting filesystem. [ 59.649871][ T978] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 60.174017][ T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 60.181619][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 60.193329][ T981] device syzkaller0 entered promiscuous mode [ 60.220875][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 60.220889][ T28] audit: type=1400 audit(1748563712.129:232): avc: denied { relabelfrom } for pid=980 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.247130][ T28] audit: type=1400 audit(1748563712.129:233): avc: denied { relabelto } for pid=980 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.366118][ T994] loop1: detected capacity change from 0 to 2048 [ 60.380334][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 60.385546][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 60.387723][ T994] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 60.392192][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 60.409011][ T28] audit: type=1400 audit(1748563712.329:234): avc: denied { setopt } for pid=988 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.430632][ T6] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 60.440625][ T19] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.451692][ T6] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 60.461596][ T28] audit: type=1400 audit(1748563712.349:235): avc: denied { read } for pid=988 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.470370][ T19] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.494489][ T6] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 60.504483][ T6] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 60.514272][ T19] usb 5-1: config 0 interface 0 has no altsetting 0 [ 60.520975][ T6] usb 3-1: config 1 interface 0 has no altsetting 0 [ 60.527603][ T6] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 60.536789][ T19] usb 5-1: New USB device found, idVendor=1b96, idProduct=0016, bcdDevice= 0.00 [ 60.585886][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.594038][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.605065][ T19] usb 5-1: config 0 descriptor?? [ 60.612902][ T28] audit: type=1400 audit(1748563712.529:236): avc: denied { ioctl } for pid=993 comm="syz.1.171" path="socket:[18342]" dev="sockfs" ino=18342 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.617003][ T6] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 60.652782][ T28] audit: type=1400 audit(1748563712.559:237): avc: denied { bind } for pid=993 comm="syz.1.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.751769][ T1000] loop0: detected capacity change from 0 to 40425 [ 60.762459][ T1000] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 60.770428][ T1000] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 60.783964][ T1000] F2FS-fs (loop0): Found nat_bits in checkpoint [ 60.826157][ T6] scsi host1: usb-storage 3-1:1.0 [ 60.830414][ T1000] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 60.842573][ T1000] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 60.853694][ T1000] F2FS-fs (loop0): Failed to read root inode [ 61.013991][ T19] hid-generic 0003:1B96:0016.0001: unknown main item tag 0x1 [ 61.035140][ T19] hid-generic 0003:1B96:0016.0001: hidraw0: USB HID v8.00 Device [HID 1b96:0016] on usb-dummy_hcd.4-1/input0 [ 61.219390][ T283] EXT4-fs (loop1): unmounting filesystem. [ 61.248452][ T976] loop4: detected capacity change from 0 to 128 [ 61.288057][ T28] audit: type=1400 audit(1748563713.199:238): avc: denied { create } for pid=975 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.323752][ T28] audit: type=1400 audit(1748563713.229:239): avc: denied { getopt } for pid=975 comm="syz.4.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.169753][ T1029] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 62.380021][ T28] audit: type=1400 audit(1748563713.319:240): avc: denied { create } for pid=1024 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 62.403447][ T60] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 62.461976][ T19] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 62.477365][ T39] usb 3-1: USB disconnect, device number 6 [ 62.480389][ T19] usb 5-1: USB disconnect, device number 6 [ 62.509216][ T363] kworker/u4:19: attempt to access beyond end of device [ 62.509216][ T363] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 62.655634][ T1036] loop2: detected capacity change from 0 to 40427 [ 62.669115][ T1036] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 62.676968][ T1036] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 62.689247][ T1036] F2FS-fs (loop2): invalid crc value [ 62.696170][ T1042] xt_hashlimit: size too large, truncated to 1048576 [ 62.719947][ T1038] incfs: Can't find or create .index dir in ./file0 [ 62.735856][ T1038] incfs: mount failed -14 [ 62.750376][ T28] audit: type=1400 audit(1748563714.659:241): avc: denied { create } for pid=1037 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 62.756823][ T353] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 62.790198][ T353] sd 1:0:0:0: [sdb] Sense not available. [ 62.795953][ T353] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 62.803432][ T353] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 62.809442][ T353] sd 1:0:0:0: [sdb] Write Protect is off [ 62.815429][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 62.820681][ T1036] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.823323][ T353] sd 1:0:0:0: [sdb] Asking for cache data failed [ 62.857678][ T353] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 62.865316][ T60] usb 1-1: config 0 has an invalid interface number: 194 but max is 0 [ 62.875527][ T60] usb 1-1: config 0 has no interface number 0 [ 62.881767][ T60] usb 1-1: config 0 interface 194 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 62.892044][ T60] usb 1-1: config 0 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 62.970391][ T353] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 63.002826][ T60] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice=bc.5a [ 63.059485][ T1036] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 63.066629][ T1036] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 63.080451][ T1054] syz.4.185 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.158150][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.166462][ T60] usb 1-1: Product: syz [ 63.170665][ T60] usb 1-1: Manufacturer: syz [ 63.175267][ T60] usb 1-1: SerialNumber: syz [ 63.180834][ T60] usb 1-1: config 0 descriptor?? [ 63.186069][ T1020] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 63.195208][ T1020] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 63.210361][ T19] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 63.446557][ T1020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.471573][ T1020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.484110][ T535] udevd[535]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 63.522467][ T325] udevd[325]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 63.537438][ T60] asix 1-1:0.194 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 63.607881][ T60] asix: probe of 1-1:0.194 failed with error -71 [ 63.615661][ T60] usb 1-1: USB disconnect, device number 5 [ 63.697340][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.711936][ T19] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 63.733549][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.743114][ T19] usb 4-1: config 0 descriptor?? [ 63.891235][ T1069] netlink: 'syz.2.187': attribute type 12 has an invalid length. [ 64.114296][ T1071] netlink: 'syz.4.188': attribute type 12 has an invalid length. [ 64.122154][ T1071] netlink: 'syz.4.188': attribute type 29 has an invalid length. [ 64.170686][ T1072] loop1: detected capacity change from 0 to 512 [ 64.195242][ T1071] netlink: 148 bytes leftover after parsing attributes in process `syz.4.188'. [ 64.204465][ T1071] netlink: 'syz.4.188': attribute type 1 has an invalid length. [ 64.219130][ T1072] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.284980][ T1072] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.299977][ T1072] EXT4-fs (loop1): 1 truncate cleaned up [ 64.305822][ T1072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.412686][ T1071] netlink: 'syz.4.188': attribute type 6 has an invalid length. [ 66.322255][ T19] usb 4-1: can't set config #0, error -71 [ 66.328890][ T19] usb 4-1: USB disconnect, device number 9 [ 66.337998][ T283] EXT4-fs (loop1): unmounting filesystem. [ 66.402214][ T1091] loop2: detected capacity change from 0 to 512 [ 66.414492][ T1091] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.194: bad orphan inode 15 [ 66.414698][ T1091] ext4_test_bit(bit=14, block=5) = 0 [ 66.471339][ T1091] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.508250][ T1096] cgroup: noprefix used incorrectly [ 66.776501][ T1091] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 66.840681][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 66.840698][ T28] audit: type=1400 audit(1748563718.739:252): avc: denied { map } for pid=1101 comm="syz.0.197" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 66.879619][ T287] EXT4-fs (loop2): unmounting filesystem. [ 66.894875][ T1109] loop1: detected capacity change from 0 to 512 [ 66.925914][ T1109] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.997754][ T1116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.241506][ T1109] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.200: corrupted inode contents [ 67.256973][ T1109] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #16: comm syz.1.200: mark_inode_dirty error [ 67.268944][ T1109] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.200: corrupted inode contents [ 67.294923][ T28] audit: type=1400 audit(1748563719.209:253): avc: denied { bind } for pid=1113 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.315775][ T1109] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.200: mark_inode_dirty error [ 67.334687][ T28] audit: type=1400 audit(1748563719.209:254): avc: denied { write } for pid=1113 comm="syz.2.199" path="socket:[18674]" dev="sockfs" ino=18674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.334784][ T1109] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.200: corrupted inode contents [ 67.372858][ T1123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 67.382076][ T28] audit: type=1400 audit(1748563719.289:255): avc: denied { write } for pid=1122 comm="syz.3.203" path="socket:[19593]" dev="sockfs" ino=19593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.408028][ T1109] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 67.416765][ T1109] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #16: comm syz.1.200: corrupted inode contents [ 67.428736][ T1109] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.200: mark_inode_dirty error [ 67.440055][ T1109] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 67.456524][ T1109] EXT4-fs (loop1): 1 truncate cleaned up [ 67.471586][ T8] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 67.485179][ T8] EXT4-fs error (device loop1): ext4_release_dquot:6825: comm kworker/u4:0: Failed to release dquot type 1 [ 67.590510][ T1109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 68.399216][ T28] audit: type=1400 audit(1748563720.149:256): avc: denied { create } for pid=1125 comm="syz.3.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 68.419725][ T28] audit: type=1400 audit(1748563720.299:257): avc: denied { lock } for pid=1125 comm="syz.3.204" path="socket:[18708]" dev="sockfs" ino=18708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 68.455602][ T28] audit: type=1400 audit(1748563720.329:258): avc: denied { connect } for pid=1108 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.486370][ T283] EXT4-fs (loop1): unmounting filesystem. [ 69.030082][ T1143] loop3: detected capacity change from 0 to 512 [ 69.040711][ T1134] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 69.135636][ T1143] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.189586][ T1128] loop2: detected capacity change from 0 to 40427 [ 69.190685][ T1143] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 69.209816][ T1128] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 69.220464][ T1128] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 69.282938][ T1143] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 69.291836][ T775] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 69.294146][ T1147] loop4: detected capacity change from 0 to 128 [ 69.323813][ T1128] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.341296][ T1143] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 69.354493][ T1147] EXT4-fs (loop4): Test dummy encryption mode enabled [ 69.380430][ T1143] System zones: 0-2, 18-18, 34-34 [ 69.401063][ T1143] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 69.416139][ T1147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.432734][ T1142] loop1: detected capacity change from 0 to 40427 [ 69.450778][ T1142] F2FS-fs (loop1): fault_injection options not supported [ 69.454087][ T1147] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.468447][ T1142] F2FS-fs (loop1): invalid crc value [ 69.474264][ T1128] F2FS-fs (loop2): access invalid blkaddr:269488144 [ 69.480567][ T1147] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 69.486259][ T775] usb 1-1: Using ep0 maxpacket: 32 [ 69.500403][ T1128] CPU: 1 PID: 1128 Comm: syz.2.205 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 69.500630][ T1143] EXT4-fs (loop3): 1 truncate cleaned up [ 69.510149][ T1128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.510174][ T1128] Call Trace: [ 69.510181][ T1128] [ 69.510188][ T1128] __dump_stack+0x21/0x24 [ 69.516464][ T1143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 69.525869][ T1128] dump_stack_lvl+0xee/0x150 [ 69.525901][ T1128] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.525928][ T1128] ? __this_cpu_preempt_check+0x13/0x20 [ 69.529958][ T775] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 69.532133][ T1128] dump_stack+0x15/0x24 [ 69.532164][ T1128] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 69.532188][ T1128] f2fs_is_valid_blkaddr+0x23/0x30 [ 69.536565][ T775] usb 1-1: config 0 interface 0 has no altsetting 0 [ 69.544894][ T1128] f2fs_get_node_info+0x7dd/0x1200 [ 69.544925][ T1128] ? __cfi_f2fs_get_node_info+0x10/0x10 [ 69.544961][ T1128] ? folio_add_lru+0x260/0x390 [ 69.568763][ T775] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 69.573061][ T1128] read_node_page+0x2e4/0x4f0 [ 69.573093][ T1128] ? f2fs_ra_node_page+0x270/0x270 [ 69.573120][ T1128] ? __kasan_check_write+0x14/0x20 [ 69.580331][ T775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.582798][ T1128] ? _raw_spin_lock+0x8e/0xe0 [ 69.626191][ T775] usb 1-1: config 0 descriptor?? [ 69.628719][ T1128] ? __kasan_check_read+0x11/0x20 [ 69.656397][ T1128] __get_node_page+0x14e/0xb00 [ 69.661190][ T1128] ? iget_locked+0x77b/0x8b0 [ 69.665794][ T1128] f2fs_get_node_page+0x21/0x30 [ 69.670656][ T1128] f2fs_iget+0x7e6/0x4cb0 [ 69.675009][ T1128] ? slab_post_alloc_hook+0x4f/0x2d0 [ 69.680320][ T1128] ? __kasan_check_write+0x14/0x20 [ 69.685467][ T1128] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 69.691375][ T1128] ? __kasan_kmalloc+0x24/0xb0 [ 69.696152][ T1128] ? f2fs_build_stats+0x74/0xc30 [ 69.701114][ T1128] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 69.706941][ T1128] ? f2fs_build_stats+0x7b3/0xc30 [ 69.711982][ T1128] f2fs_fill_super+0x45e9/0x6c70 [ 69.716945][ T1128] ? __cfi_f2fs_fill_super+0x10/0x10 [ 69.722241][ T1128] ? mutex_unlock+0x89/0x220 [ 69.726863][ T1128] ? set_blocksize+0x1df/0x360 [ 69.731649][ T1128] ? sb_set_blocksize+0xaa/0xf0 [ 69.736516][ T1128] ? __cfi_f2fs_fill_super+0x10/0x10 [ 69.741814][ T1128] mount_bdev+0x2bc/0x3f0 [ 69.746164][ T1128] ? __cfi_f2fs_fill_super+0x10/0x10 [ 69.751469][ T1128] f2fs_mount+0x34/0x40 [ 69.755651][ T1128] legacy_get_tree+0xfe/0x1a0 [ 69.760355][ T1128] ? __cfi_f2fs_mount+0x10/0x10 [ 69.765228][ T1128] vfs_get_tree+0x9a/0x270 [ 69.769762][ T1128] do_new_mount+0x25a/0xa20 [ 69.774285][ T1128] path_mount+0x675/0x1010 [ 69.778721][ T1128] ? user_path_at_empty+0x161/0x1c0 [ 69.783933][ T1128] __se_sys_mount+0x318/0x380 [ 69.788635][ T1128] ? do_mkdirat+0x459/0x4c0 [ 69.793155][ T1128] ? __x64_sys_mount+0xd0/0xd0 [ 69.797935][ T1128] ? do_user_addr_fault+0x9ac/0x1050 [ 69.803238][ T1128] __x64_sys_mount+0xbf/0xd0 [ 69.805791][ T1142] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.807852][ T1128] x64_sys_call+0x65d/0x9a0 [ 69.818605][ T1128] do_syscall_64+0x4c/0xa0 [ 69.823042][ T1128] ? clear_bhb_loop+0x15/0x70 [ 69.827750][ T1128] ? clear_bhb_loop+0x15/0x70 [ 69.832446][ T1128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.838365][ T1128] RIP: 0033:0x7f352c39010a [ 69.842785][ T1128] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.862444][ T1128] RSP: 002b:00007f352d23ce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 69.870873][ T1128] RAX: ffffffffffffffda RBX: 00007f352d23cef0 RCX: 00007f352c39010a [ 69.878855][ T1128] RDX: 00002000000004c0 RSI: 0000200000000040 RDI: 00007f352d23ceb0 [ 69.886875][ T1128] RBP: 00002000000004c0 R08: 00007f352d23cef0 R09: 0000000002008410 [ 69.894853][ T1128] R10: 0000000002008410 R11: 0000000000000246 R12: 0000200000000040 [ 69.902334][ T1142] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.902830][ T1128] R13: 00007f352d23ceb0 R14: 000000000000553b R15: 0000200000001f80 [ 69.902853][ T1128] [ 69.922468][ T284] EXT4-fs (loop3): unmounting filesystem. [ 69.957601][ T1158] loop3: detected capacity change from 0 to 512 [ 69.993868][ T1158] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.211: bad orphan inode 15 [ 70.010471][ T1158] ext4_test_bit(bit=14, block=5) = 0 [ 70.020657][ T1128] F2FS-fs (loop2): Failed to read root inode [ 70.029171][ T1158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 70.121246][ T1142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.208'. [ 70.131080][ T284] EXT4-fs (loop3): unmounting filesystem. [ 70.137052][ T362] kworker/u4:18: attempt to access beyond end of device [ 70.137052][ T362] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.186028][ T775] saitek 0003:06A3:0621.0002: item fetching failed at offset 2/3 [ 70.200724][ T775] saitek 0003:06A3:0621.0002: parse failed [ 70.220364][ T775] saitek: probe of 0003:06A3:0621.0002 failed with error -22 [ 70.222265][ T1165] FAULT_INJECTION: forcing a failure. [ 70.222265][ T1165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.300474][ T1165] CPU: 1 PID: 1165 Comm: syz.4.210 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 70.310230][ T1165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.320300][ T1165] Call Trace: [ 70.323582][ T1165] [ 70.326507][ T1165] __dump_stack+0x21/0x24 [ 70.330862][ T1165] dump_stack_lvl+0xee/0x150 [ 70.335469][ T1165] ? __cfi_dump_stack_lvl+0x8/0x8 [ 70.340504][ T1165] ? memcpy+0x56/0x70 [ 70.344516][ T1165] dump_stack+0x15/0x24 [ 70.348693][ T1165] should_fail_ex+0x3d4/0x520 [ 70.353413][ T1165] should_fail+0xb/0x10 [ 70.357587][ T1165] should_fail_usercopy+0x1a/0x20 [ 70.362627][ T1165] strncpy_from_user+0x24/0x2d0 [ 70.367502][ T1165] bpf_prog_load+0x1bb/0x15a0 [ 70.372189][ T1165] ? map_freeze+0x390/0x390 [ 70.376721][ T1165] ? selinux_bpf+0xc7/0xf0 [ 70.381153][ T1165] ? security_bpf+0x93/0xb0 [ 70.385699][ T1165] __sys_bpf+0x504/0x780 [ 70.389962][ T1165] ? bpf_link_show_fdinfo+0x320/0x320 [ 70.395356][ T1165] ? __cfi_ksys_write+0x10/0x10 [ 70.400220][ T1165] ? debug_smp_processor_id+0x17/0x20 [ 70.405618][ T1165] __x64_sys_bpf+0x7c/0x90 [ 70.409428][ T1140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.410051][ T1165] x64_sys_call+0x488/0x9a0 [ 70.422893][ T1165] do_syscall_64+0x4c/0xa0 [ 70.427328][ T1165] ? clear_bhb_loop+0x15/0x70 [ 70.429514][ T1140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.432015][ T1165] ? clear_bhb_loop+0x15/0x70 [ 70.444475][ T1165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.450386][ T1165] RIP: 0033:0x7f156538e969 [ 70.454804][ T1165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.474422][ T1165] RSP: 002b:00007f1566110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.477419][ T28] audit: type=1400 audit(1748563722.389:259): avc: denied { create } for pid=1167 comm="syz.2.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.482846][ T1165] RAX: ffffffffffffffda RBX: 00007f15655b6160 RCX: 00007f156538e969 [ 70.482865][ T1165] RDX: 0000000000000090 RSI: 0000200000000140 RDI: 0000000000000005 [ 70.482879][ T1165] RBP: 00007f1566110090 R08: 0000000000000000 R09: 0000000000000000 [ 70.482892][ T1165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.482904][ T1165] R13: 0000000000000000 R14: 00007f15655b6160 R15: 00007ffc2a7ad5a8 [ 70.528413][ T1170] loop2: detected capacity change from 0 to 1024 [ 70.533992][ T1165] [ 70.565742][ T1170] EXT4-fs: Ignoring removed i_version option [ 70.570316][ T294] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 70.572280][ T1170] ext4: Unknown parameter 'fowner' [ 70.589146][ T1173] loop1: detected capacity change from 0 to 128 [ 70.624645][ T1173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 70.638275][ T1173] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.737303][ T285] EXT4-fs (loop4): unmounting filesystem. [ 70.760341][ T294] usb 4-1: Using ep0 maxpacket: 8 [ 70.766533][ T294] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 70.776129][ T283] EXT4-fs (loop1): unmounting filesystem. [ 70.791001][ T294] usb 4-1: config 179 has no interface number 0 [ 70.797430][ T294] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 70.825126][ T294] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 70.846644][ T294] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 70.875616][ T294] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 70.900373][ T294] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 70.914003][ T294] usb 4-1: config 179 interface 65 has no altsetting 0 [ 70.921050][ T294] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 70.930380][ T39] usb 1-1: USB disconnect, device number 6 [ 70.930758][ T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.952030][ T1168] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 70.960747][ T294] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input6 [ 70.972387][ T28] audit: type=1400 audit(1748563722.889:260): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=861 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.007590][ T1189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 71.016464][ T1189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 71.026846][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 71.034901][ T1189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.091083][ T1191] loop2: detected capacity change from 0 to 256 [ 71.121750][ T1191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.220'. [ 71.130836][ T1191] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 71.146914][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 71.179182][ T1168] device wireguard0 entered promiscuous mode [ 71.218703][ T1197] Zero length message leads to an empty skb [ 71.271322][ T1201] loop1: detected capacity change from 0 to 512 [ 71.289509][ T1201] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.222: bad orphan inode 15 [ 71.301783][ T1201] ext4_test_bit(bit=14, block=5) = 0 [ 71.307176][ T1201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.360516][ T294] usb 4-1: USB disconnect, device number 10 [ 71.366468][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 71.385035][ T294] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 71.400328][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 71.406595][ T283] EXT4-fs (loop1): unmounting filesystem. [ 71.418711][ T60] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 71.436584][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.438075][ T1204] x_tables: duplicate underflow at hook 4 [ 71.458067][ T60] usb 5-1: Product: syz [ 71.465432][ T60] usb 5-1: Manufacturer: syz [ 71.470048][ T60] usb 5-1: SerialNumber: syz [ 71.484923][ T60] usb 5-1: config 0 descriptor?? [ 71.505916][ T60] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 72.650325][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 72.650344][ T28] audit: type=1400 audit(1748563724.549:264): avc: denied { map } for pid=1213 comm="syz.2.227" path="socket:[18808]" dev="sockfs" ino=18808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 72.845230][ T1223] loop2: detected capacity change from 0 to 2048 [ 72.854911][ T1223] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.861432][ T1223] EXT4-fs: dax option not supported [ 72.893289][ T305] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.895882][ T1223] loop2: detected capacity change from 0 to 256 [ 72.906142][ T305] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.920964][ T1223] exfat: Unknown parameter 'GPL' [ 72.928469][ T305] Buffer I/O error on dev loop2, logical block 0, async page read [ 72.944690][ T1216] loop0: detected capacity change from 0 to 40427 [ 72.958945][ T1216] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 72.988006][ T1216] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 73.031873][ T1226] loop3: detected capacity change from 0 to 8192 [ 73.369872][ T1234] netlink: 180 bytes leftover after parsing attributes in process `syz.1.230'. [ 74.423068][ T28] audit: type=1326 audit(1748563725.349:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492158e969 code=0x7ffc0000 [ 74.449719][ T28] audit: type=1326 audit(1748563725.349:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492158e969 code=0x7ffc0000 [ 74.462198][ T294] usb 5-1: USB disconnect, device number 7 [ 74.481499][ T1216] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.557104][ T1240] loop4: detected capacity change from 0 to 512 [ 74.564679][ T28] audit: type=1326 audit(1748563725.369:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f492158e969 code=0x7ffc0000 [ 74.589603][ T28] audit: type=1326 audit(1748563725.369:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492158e969 code=0x7ffc0000 [ 74.613086][ T28] audit: type=1326 audit(1748563725.379:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492158e969 code=0x7ffc0000 [ 74.637128][ T28] audit: type=1326 audit(1748563725.389:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f492158e969 code=0x7ffc0000 [ 74.661654][ T28] audit: type=1326 audit(1748563725.399:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492158e969 code=0x7ffc0000 [ 74.686443][ T1216] F2FS-fs (loop0): access invalid blkaddr:269488144 [ 74.710181][ T1244] loop2: detected capacity change from 0 to 512 [ 74.716375][ T1216] CPU: 1 PID: 1216 Comm: syz.0.225 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 74.726192][ T1216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.736254][ T1216] Call Trace: [ 74.739524][ T1216] [ 74.742445][ T1216] __dump_stack+0x21/0x24 [ 74.746782][ T1216] dump_stack_lvl+0xee/0x150 [ 74.751412][ T1216] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.756437][ T1216] ? __this_cpu_preempt_check+0x13/0x20 [ 74.761988][ T1216] dump_stack+0x15/0x24 [ 74.766151][ T1216] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 74.771696][ T1216] f2fs_is_valid_blkaddr+0x23/0x30 [ 74.776804][ T1216] f2fs_get_node_info+0x7dd/0x1200 [ 74.781915][ T1216] ? __cfi_f2fs_get_node_info+0x10/0x10 [ 74.787457][ T1216] ? folio_add_lru+0x260/0x390 [ 74.792226][ T1216] read_node_page+0x2e4/0x4f0 [ 74.796905][ T1216] ? f2fs_ra_node_page+0x270/0x270 [ 74.802016][ T1216] ? __kasan_check_write+0x14/0x20 [ 74.807128][ T1216] ? _raw_spin_lock+0x8e/0xe0 [ 74.811807][ T1216] ? __kasan_check_read+0x11/0x20 [ 74.816848][ T1216] __get_node_page+0x14e/0xb00 [ 74.821610][ T1216] ? iget_locked+0x77b/0x8b0 [ 74.826200][ T1216] f2fs_get_node_page+0x21/0x30 [ 74.831041][ T1216] f2fs_iget+0x7e6/0x4cb0 [ 74.835371][ T1216] ? __kasan_check_write+0x14/0x20 [ 74.840483][ T1216] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 74.846377][ T1216] ? __kasan_kmalloc+0x95/0xb0 [ 74.851159][ T1216] ? f2fs_build_stats+0x74/0xc30 [ 74.856097][ T1216] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 74.861902][ T1216] ? f2fs_build_stats+0x7b3/0xc30 [ 74.866927][ T1216] f2fs_fill_super+0x45e9/0x6c70 [ 74.871873][ T1216] ? __cfi_f2fs_fill_super+0x10/0x10 [ 74.877155][ T1216] ? mutex_unlock+0x89/0x220 [ 74.881747][ T1216] ? set_blocksize+0x1df/0x360 [ 74.886506][ T1216] ? sb_set_blocksize+0xaa/0xf0 [ 74.891347][ T1216] ? __cfi_f2fs_fill_super+0x10/0x10 [ 74.896640][ T1216] mount_bdev+0x2bc/0x3f0 [ 74.900962][ T1216] ? __cfi_f2fs_fill_super+0x10/0x10 [ 74.906241][ T1216] f2fs_mount+0x34/0x40 [ 74.910394][ T1216] legacy_get_tree+0xfe/0x1a0 [ 74.915070][ T1216] ? __cfi_f2fs_mount+0x10/0x10 [ 74.919917][ T1216] vfs_get_tree+0x9a/0x270 [ 74.924333][ T1216] do_new_mount+0x25a/0xa20 [ 74.928834][ T1216] path_mount+0x675/0x1010 [ 74.933245][ T1216] ? user_path_at_empty+0x161/0x1c0 [ 74.938431][ T1216] __se_sys_mount+0x318/0x380 [ 74.943104][ T1216] ? do_mkdirat+0x459/0x4c0 [ 74.947598][ T1216] ? __x64_sys_mount+0xd0/0xd0 [ 74.952367][ T1216] ? do_user_addr_fault+0x9ac/0x1050 [ 74.957647][ T1216] __x64_sys_mount+0xbf/0xd0 [ 74.962232][ T1216] x64_sys_call+0x65d/0x9a0 [ 74.966730][ T1216] do_syscall_64+0x4c/0xa0 [ 74.971147][ T1216] ? clear_bhb_loop+0x15/0x70 [ 74.975827][ T1216] ? clear_bhb_loop+0x15/0x70 [ 74.980495][ T1216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.986388][ T1216] RIP: 0033:0x7fcb8619010a [ 74.990805][ T1216] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.010402][ T1216] RSP: 002b:00007fcb85ffee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.018810][ T1216] RAX: ffffffffffffffda RBX: 00007fcb85ffeef0 RCX: 00007fcb8619010a [ 75.026968][ T1216] RDX: 00002000000004c0 RSI: 0000200000000040 RDI: 00007fcb85ffeeb0 [ 75.034932][ T1216] RBP: 00002000000004c0 R08: 00007fcb85ffeef0 R09: 0000000002008410 [ 75.042895][ T1216] R10: 0000000002008410 R11: 0000000000000246 R12: 0000200000000040 [ 75.050856][ T1216] R13: 00007fcb85ffeeb0 R14: 000000000000553b R15: 0000200000001f80 [ 75.058821][ T1216] [ 75.071191][ T1216] F2FS-fs (loop0): Failed to read root inode [ 75.077659][ T1240] EXT4-fs error (device loop4): ext4_quota_enable:6997: comm syz.4.232: inode #100663296: comm syz.4.232: iget: illegal inode # [ 75.088632][ T28] audit: type=1326 audit(1748563725.399:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492158e969 code=0x7ffc0000 [ 75.114729][ T28] audit: type=1326 audit(1748563725.419:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f492158e969 code=0x7ffc0000 [ 75.146541][ T1240] EXT4-fs error (device loop4): ext4_quota_enable:7000: comm syz.4.232: Bad quota inode: 100663296, type: 2 [ 75.148956][ T1244] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.233: bad orphan inode 15 [ 75.173088][ T1240] EXT4-fs warning (device loop4): ext4_enable_quotas:7041: Failed to enable quota tracking (type=2, err=-117, ino=100663296). Please run e2fsck to fix. [ 75.194805][ T1240] EXT4-fs (loop4): mount failed [ 75.210606][ T1244] ext4_test_bit(bit=14, block=5) = 0 [ 75.215910][ T1244] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.302887][ T287] EXT4-fs (loop2): unmounting filesystem. [ 75.326751][ T1240] loop4: detected capacity change from 0 to 256 [ 75.344770][ T1240] exfat: Bad value for 'fmask' [ 75.846574][ T1273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 76.115136][ T1299] loop3: detected capacity change from 0 to 512 [ 76.126373][ T1299] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.202809][ T1299] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 76.213146][ T1299] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 76.524411][ T1350] loop4: detected capacity change from 0 to 512 [ 76.569424][ T1350] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.247: bad orphan inode 15 [ 76.580485][ T1350] ext4_test_bit(bit=14, block=5) = 0 [ 76.585907][ T1350] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 76.813225][ T285] EXT4-fs (loop4): unmounting filesystem. [ 77.136171][ T1357] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 77.151756][ T294] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 77.340285][ T294] usb 1-1: Using ep0 maxpacket: 16 [ 77.346651][ T294] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 77.360835][ T294] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 77.379794][ T294] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 77.396681][ T294] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 77.415678][ T294] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 77.476469][ T294] usb 1-1: config 1 interface 0 has no altsetting 0 [ 77.484274][ T294] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 77.493966][ T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.504723][ T294] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 77.506045][ T1368] loop2: detected capacity change from 0 to 512 [ 77.530797][ T1368] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.251: bad orphan inode 15 [ 77.541393][ T1368] ext4_test_bit(bit=14, block=5) = 0 [ 77.546720][ T1368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 77.563160][ T1368] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 77.578061][ T287] EXT4-fs (loop2): unmounting filesystem. [ 77.589919][ T1366] loop3: detected capacity change from 0 to 40427 [ 77.604902][ T1366] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 77.613097][ T1366] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 77.622779][ T1366] F2FS-fs (loop3): invalid crc value [ 77.629715][ T1366] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.673584][ T1366] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 77.680785][ T1366] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 77.698767][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 77.698782][ T28] audit: type=1400 audit(1748563729.609:277): avc: denied { mounton } for pid=1365 comm="syz.3.250" path="/49/bus/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.712156][ T294] scsi host1: usb-storage 1-1:1.0 [ 77.727496][ T28] audit: type=1400 audit(1748563729.609:278): avc: denied { write } for pid=1365 comm="syz.3.250" name="file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.753982][ T28] audit: type=1400 audit(1748563729.609:279): avc: denied { add_name } for pid=1365 comm="syz.3.250" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 77.942218][ T60] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 78.122711][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.154550][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.181438][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.196677][ T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.205946][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.216140][ T60] usb 5-1: config 0 descriptor?? [ 78.248755][ T28] audit: type=1400 audit(1748563730.159:280): avc: denied { remove_name } for pid=284 comm="syz-executor" name=".index" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.271556][ T28] audit: type=1400 audit(1748563730.159:281): avc: denied { rmdir } for pid=284 comm="syz-executor" name=".index" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.472973][ T294] usb 1-1: USB disconnect, device number 7 [ 78.526761][ T1393] loop0: detected capacity change from 0 to 512 [ 78.550706][ T1393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 78.566632][ T1393] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.624779][ T1397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.252'. [ 78.626382][ T60] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x4 [ 78.647562][ T60] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 78.657878][ T60] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 78.767952][ T6] usb 5-1: USB disconnect, device number 8 [ 78.798120][ T1404] fido_id[1404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 78.814031][ T1408] netlink: 'syz.4.259': attribute type 1 has an invalid length. [ 78.822396][ T1408] netlink: 'syz.4.259': attribute type 2 has an invalid length. [ 78.830035][ T1408] netlink: 228 bytes leftover after parsing attributes in process `syz.4.259'. [ 79.369319][ T1410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 79.819329][ T1419] loop0: detected capacity change from 0 to 512 [ 79.862566][ T1422] loop2: detected capacity change from 0 to 512 [ 79.911324][ T1422] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.263: bad orphan inode 15 [ 79.930527][ T1422] ext4_test_bit(bit=14, block=5) = 0 [ 79.935836][ T1422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.228947][ T1422] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 80.251346][ T1419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 80.273641][ T1419] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.308423][ T287] EXT4-fs (loop2): unmounting filesystem. [ 80.459379][ T28] audit: type=1400 audit(1748563732.369:282): avc: denied { write } for pid=1434 comm="syz.1.267" name="rt_cache" dev="proc" ino=4026532309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.460016][ T19] kernel write not supported for file /199/net/rt_cache (pid: 19 comm: kworker/0:1) [ 81.067086][ T1444] loop3: detected capacity change from 0 to 512 [ 81.099560][ T1444] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.268: bad orphan inode 15 [ 81.128101][ T1444] ext4_test_bit(bit=14, block=5) = 0 [ 81.133706][ T1444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.138947][ T60] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 81.150087][ T286] EXT4-fs (loop0): unmounting filesystem. [ 81.170500][ T1426] ------------[ cut here ]------------ [ 81.175980][ T1426] kernel BUG at fs/buffer.c:2714! [ 81.184483][ T1426] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 81.190576][ T1426] CPU: 0 PID: 1426 Comm: kmmpd-loop0 Not tainted 6.1.138-syzkaller-00046-gdb710ea87c32 #0 [ 81.200469][ T1426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.210520][ T1426] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 81.215884][ T1426] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 18 3c e8 ff e9 b0 fe ff ff e8 ae e3 a3 ff 0f 0b e8 a7 e3 a3 ff <0f> 0b e8 a0 e3 a3 ff 0f 0b e8 99 e3 a3 ff 0f 0b e8 92 e3 a3 ff 0f [ 81.235478][ T1426] RSP: 0018:ffffc90013027ca0 EFLAGS: 00010293 [ 81.241530][ T1426] RAX: ffffffff81cc0d69 RBX: 0000000000000000 RCX: ffff88811f1d6540 [ 81.249481][ T1426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.257434][ T1426] RBP: ffffc90013027cf0 R08: dffffc0000000000 R09: ffffed10266988fd [ 81.265392][ T1426] R10: ffffed10266988fd R11: 1ffff110266988fc R12: 0000000000000000 [ 81.273350][ T1426] R13: 1ffff110266988fc R14: ffff8881334c47e0 R15: 0000000000003801 [ 81.281304][ T1426] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 81.290217][ T1426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.296799][ T1426] CR2: 0000001b2dc08ff8 CR3: 0000000130c0a000 CR4: 00000000003506b0 [ 81.304758][ T1426] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.312714][ T1426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.320679][ T1426] Call Trace: [ 81.323942][ T1426] [ 81.326860][ T1426] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 81.332659][ T1426] submit_bh+0x1f/0x30 [ 81.336716][ T1426] write_mmp_block_thawed+0x34a/0x4c0 [ 81.342079][ T1426] ? read_mmp_block+0x6d0/0x6d0 [ 81.346919][ T1426] ? __cfi_process_timeout+0x10/0x10 [ 81.352211][ T1426] write_mmp_block+0x138/0x2b0 [ 81.356961][ T1426] kmmpd+0x215/0x950 [ 81.360845][ T1426] kthread+0x281/0x320 [ 81.364903][ T1426] ? __cfi_kmmpd+0x10/0x10 [ 81.369302][ T1426] ? __cfi_kthread+0x10/0x10 [ 81.373878][ T1426] ret_from_fork+0x1f/0x30 [ 81.378285][ T1426] [ 81.381294][ T1426] Modules linked in: [ 81.430126][ T1426] ---[ end trace 0000000000000000 ]--- [ 81.452318][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 81.457524][ T1426] RIP: 0010:submit_bh_wbc+0x4c9/0x4f0 [ 81.464433][ T1426] Code: c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c bd fe ff ff 48 89 df e8 18 3c e8 ff e9 b0 fe ff ff e8 ae e3 a3 ff 0f 0b e8 a7 e3 a3 ff <0f> 0b e8 a0 e3 a3 ff 0f 0b e8 99 e3 a3 ff 0f 0b e8 92 e3 a3 ff 0f [ 81.484204][ T1426] RSP: 0018:ffffc90013027ca0 EFLAGS: 00010293 [ 81.490946][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 81.490967][ T1426] RAX: ffffffff81cc0d69 RBX: 0000000000000000 RCX: ffff88811f1d6540 [ 81.504800][ T60] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 81.517686][ T60] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 81.520825][ T284] EXT4-fs (loop3): unmounting filesystem. [ 81.533363][ T60] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 81.543523][ T1426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.553374][ T1426] RBP: ffffc90013027cf0 R08: dffffc0000000000 R09: ffffed10266988fd [ 81.556059][ T1451] syz.1.270[1451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.561470][ T1451] syz.1.270[1451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.584169][ T1451] loop1: detected capacity change from 0 to 512 [ 81.602019][ T1451] EXT4-fs: Ignoring removed i_version option [ 81.608177][ T1451] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.615476][ T1451] EXT4-fs (loop1): Test dummy encryption mode enabled [ 81.642092][ T60] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 81.646813][ T1426] R10: ffffed10266988fd R11: 1ffff110266988fc R12: 0000000000000000 [ 81.662297][ T1451] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.270: inode #13: comm syz.1.270: iget: illegal inode # [ 81.674963][ T1426] R13: 1ffff110266988fc R14: ffff8881334c47e0 R15: 0000000000003801 [ 81.675183][ T1451] EXT4-fs (loop1): Remounting filesystem read-only [ 81.689557][ T1451] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.270: couldn't read orphan inode 13 (err -117) [ 81.702445][ T1451] EXT4-fs (loop1): Remounting filesystem read-only [ 81.708972][ T1451] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.723877][ T1426] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 81.745938][ T1426] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.753244][ T60] usb 3-1: config 1 interface 0 has no altsetting 0 [ 81.755730][ T1426] CR2: 00007f4921571da0 CR3: 000000013330d000 CR4: 00000000003506a0 [ 81.768397][ T60] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 81.768831][ T1426] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.786137][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.787184][ T1426] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.803726][ T1426] Kernel panic - not syncing: Fatal exception [ 81.805360][ T28] audit: type=1400 audit(1748563733.729:283): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 81.805392][ T28] audit: type=1400 audit(1748563733.729:284): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.805418][ T28] audit: type=1400 audit(1748563733.729:285): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.805445][ T28] audit: type=1400 audit(1748563733.729:286): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.813248][ T60] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 81.901509][ T1426] Kernel Offset: disabled [ 81.905844][ T1426] Rebooting in 86400 seconds..