last executing test programs: 21.305369506s ago: executing program 4 (id=8): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) setresuid(0xee00, 0xee00, 0x0) syz_usb_connect$uac3(0x5, 0x169, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902570103010750d8080b0002012430060904000000010130000a24010d6000000200001d240a040303000000000000000200000003000000020000000200000007240c050273660600200400fa1124090106010000000200000001000000152409010202000000000000000100000003000000060020ff8e06090401"], 0x0) 20.606054041s ago: executing program 4 (id=12): socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x20004010, 0x0, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000840)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x8000000000000000}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x1, 0x3, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="f4573091", @ANYRES16=r3, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000007f00000010001d800c00008008000d8004000180"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newchain={0x0, 0x64, 0x50c, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xffff}, {0xfff3, 0x7}, {0xa, 0xa}}, [@TCA_RATE={0x0, 0x5, {0x4a, 0xf}}, @TCA_CHAIN={0x0, 0xb, 0xb}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 19.694741305s ago: executing program 4 (id=14): ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffff"]) (async) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffff"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x4c8, r3, 0x810, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0xbc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x8b, 0xb, "c4dae08299024cbcdb779acb447190cccdede6421e0793c969e5877953ce8d4b291ea8d7af72d0dbe41f9abcc0db3439620a61174b4b22b3114feee91bb3cb5a7cba5725e4941933e4f29c829555f9b691a0df7481628013a367bf5d8036002f525ca926caec40d5147716b2f319a320b879fdd903d9d25688d5c3c14554f8d2d1ef58843bce79"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x3f8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xbb, 0xb, "cec190e8fb18c8355e84cc9ee0c787211516055d498942a455854e76da6d842e196754ed954453e66c7576a8a7474312a1019a077eb4d3ad7425e6589e1ffae7cde1a0973dbbcef14130d9e14f608ffc634388ca4d4ed201bc477c3d4dbe1a5e353c7899019cbe32a9bb1406feca368913df7e7d2e3938ec69c6dc9db8e6910d6b24812ec71592201bd3243d2f4cce1c6c68ce9a5d271a46119f228ebfc217c2886ef5d3a355192b9693089fd100062a01eb7edd670fc8"}, @NL80211_NAN_FUNC_SRF={0x338, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x10}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0xfffffdaa, 0x3, 0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}]}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x801}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) 19.546299333s ago: executing program 4 (id=15): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4b}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f00000002c0)="$eJzs3MtrXNUfAPDvvXm0/fWR/Gp9tFaNFiH4SJq0ahduFAUXFQVd1GVMpiV02kgTxZZiU5G6EaSga3Ep+Be4EEQQdSW41Y0rKRTtptVV5N65N52ZzrSNnWRi5vOByZwz99yc873Pc8+ZJICeNZL9SCK2RcQvETFUyzYWGKm9XbtydvqvK2enk1haeu2PJC939crZ6bJoud7WIjOaRqQfJEUlmxvqnT995vhUtVo5VeTHF068NT5/+syT75yYOlY5Vjk5eejQwQMTzzw9+VRH4sziurrnvbm9u1964+LL00cuvvnDl1l7txXL6+PolJEs8D+Xcs3LHu10ZV22vS6d9HexIaxIX0Rku2sgP/+Hoi+u77yhePH9rjYOWFXZvWlT+8WLS8AGlkS3WwB0R3mjz55/81fS+efg9ezyc7UHoCz2a8WrtqQ/0qLMQNPzbSeNRMSRxb8/y16xSuMQAAD1Ppr+9HA8Udf/W+5/pHFP/v5b/nNHMYcyHBH/j4idEXFXROyKiLsj8rL3RsR9K6x/pCl/Y/8nvfSvg7sNWf/v2WJuq7H/V/b+YrivyG3P4x9Ijs5WK/uLbTIaA5uy/MRN6vjmhZ8/bresvv+XvbL6y75g0Y5L/U0DdDNTC1N5p7QDLp+P2NPfKv5keSYgiYjdEbGnxfpft//VO8rE7GNf7G1X6Nbx30QH5pmWPs/CW8ziX4ym+EtJ/fzk7A3zk+Obo1rZP14eFTf68acLr7ar/47i74DLldp73f5vLjKc1M/Xzq+8jgu/ftj2meZ6/FvaH/9J4zozUwvpYPJ6Ps88WHz27tTCwqmJiMHkcJ5v+Hzy+rplviyfHf+j+1qf/zuLdbLq74+I7CB+ICIejIiHirY/HBGPRMS+m8T//fPtl5XxR9ql/X8+Yqbl9W95ozft/5Un+o5/91W7+m/v+ncwT40Wn+TXv1to1ZzsctHcwDvZdgAAAPBfkebfgU/SseV0mo6N1b7Dvyv+l1bn5hcePzr39smZ2nflh2MgLUe6horx0OpstTKRLBa/sTY+OlmMFZfjpQeKceNP+rbk+bHpuepMl2OHXre1zfmf+b2v260DVtmWlp9ODq55Q4AuaJ5HTxuz514JFwPYqPy9NvSuW5z/6Vq1A1h77v/Qu1qd/+ea8uYCYGNy/4fe5fyHHpV+2+0WAF3k/g896U7+rn8VE5vXRzMa/lPA4lptsfW6U/JERJlI10V7JFYp0e0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8EwAA///cRegb") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a55040, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 19.1960308s ago: executing program 4 (id=17): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x2c, r0, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x6, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8413, &(0x7f0000000300)={[{@norecovery}, {}, {@nodioread_nolock}, {@acl}, {@debug}, {@noblock_validity}, {@usrjquota}, {@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@resgid}, {@sysvgroups}]}, 0x1, 0x589, &(0x7f0000000740)="$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") 19.066058846s ago: executing program 4 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) recvfrom$packet(r2, &(0x7f0000000240)=""/201, 0xc9, 0x40000000, &(0x7f0000000080)={0x11, 0x5, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001700)="d7b8bf979da7f23bcf0ce0271658", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.039541458s ago: executing program 32 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) recvfrom$packet(r2, &(0x7f0000000240)=""/201, 0xc9, 0x40000000, &(0x7f0000000080)={0x11, 0x5, r3, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001700)="d7b8bf979da7f23bcf0ce0271658", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.351862908s ago: executing program 1 (id=77): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000000)='#\'&##\\]\x00', 0x2102, &(0x7f0000000040)={@align=0x978, {0x401, 0x196, 0x81, 0x1c}}, 0x50, &(0x7f0000000080), &(0x7f00000000c0)=0x5}, 0x1, &(0x7f0000000180)=[{0x3, 0x3, &(0x7f0000000100)='{.\x00', &(0x7f0000000140)="30ce50ec5a689ea290d6a8717849be1587ecc3397fa2257d875319ad826446a49379650a7296f86eb9d545ba", 0x2c, 0x30}]}) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000000)='#\'&##\\]\x00', 0x2102, &(0x7f0000000040)={@align=0x978, {0x401, 0x196, 0x81, 0x1c}}, 0x50, &(0x7f0000000080), &(0x7f00000000c0)=0x5}, 0x1, &(0x7f0000000180)=[{0x3, 0x3, &(0x7f0000000100)='{.\x00', &(0x7f0000000140)="30ce50ec5a689ea290d6a8717849be1587ecc3397fa2257d875319ad826446a49379650a7296f86eb9d545ba", 0x2c, 0x30}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) r1 = accept$nfc_llcp(r0, &(0x7f0000000280), &(0x7f0000000300)=0x60) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000340)=0x80000000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa10}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa4}]}, 0x54}, 0x1, 0x0, 0x0, 0x42074a3cd0787f93}, 0x8000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000004c0)={0x0, 0x8, 0x6}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000004c0)={0x0, 0x8, 0x6}) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000500)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000680)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000006c0)) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000006c0)=0x0) capset(&(0x7f0000000700)={0x20080522, r3}, &(0x7f0000000740)={0xe, 0x80000001, 0x3, 0x45, 0x3, 0x8}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000780)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000007c0)) syz_emit_ethernet(0x26, &(0x7f0000000840)={@remote, @multicast, @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x8100, 0x6, 0x1, 0x1}}, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "261589136113bea8"}}}}, &(0x7f0000000880)={0x1, 0x1, [0x721, 0x1bc, 0x641, 0x625]}) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000008c0)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000900)={'veth1_to_team\x00', {0x2, 0x4e24, @multicast1}}) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000900)={'veth1_to_team\x00', {0x2, 0x4e24, @multicast1}}) prlimit64(r3, 0x0, &(0x7f0000000940)={0x9, 0x4e0}, &(0x7f0000000980)) syz_emit_ethernet(0x43, &(0x7f00000009c0)={@random="d0243357c266", @broadcast, @void, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}, {0xc8c}, {0xe, 0x0, 0x1}, {0x2}, {0x2}, {0x4}, {0x3}, {0x3, 0x0, 0x1}, {0x9}, {0x0, 0x0, 0x1}], @generic="f4886d901f85f26a1a7f7ae5f7"}}}}, &(0x7f0000000a40)={0x1, 0x2, [0x9d, 0x473, 0x216, 0xce5]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b80)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000fec000/0xb000)=nil, &(0x7f0000000a80)="8cee844ffd7babf35c906058dff16d4dbc366ed5d5fcebe6666bdeebb3494c39bed6cf50c4dc5c4d041add4c02f23eb9eb1dd9b5db37696a18551de3a0f7b475b566382862daf54dd1756481cadfcc0eef2397b2a8a4fe49527bf7d7db1ec2308a16f9faaf1a57f0e664b6c88d61894607c0f5445619de14ced4f9c11bea50c9d3afafd9a2d4c820891b46453f70f92d0dab4a944cc79e2beb31dce5c543dd9744727420a2009cd549b25751f7a94b1018894abdcd09aac71fb49db999012b11223191a7e5782fb3feecc710435dc0aa0b2aa8674620173510c6c5a5d9f84f1ea0d5807eec1596", 0xe7, r0}, 0x68) write$tun(0xffffffffffffffff, &(0x7f0000000c00)={@void, @val={0x7, 0x3, 0x1000, 0x0, 0x1, 0x1}, @llc={@snap={0xaa, 0xab, "f15b", "b7fe39", 0x805, "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"}}}, 0x1013) (async) write$tun(0xffffffffffffffff, &(0x7f0000000c00)={@void, @val={0x7, 0x3, 0x1000, 0x0, 0x1, 0x1}, @llc={@snap={0xaa, 0xab, "f15b", "b7fe39", 0x805, "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"}}}, 0x1013) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001c80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x6c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x4800) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x6c}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x4800) socket$inet(0x2, 0xa, 0x6) (async) socket$inet(0x2, 0xa, 0x6) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000001d80)) (async) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000001d80)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001dc0)='/sys/power/image_size', 0x294080, 0x14) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000003100)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000030c0)={&(0x7f0000001e40)={0x1244, 0x1, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_PAYLOAD={0x1004, 0xa, "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"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_EXP={0x10c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_MASTER={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa8}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9f88}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2d7f}]}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x7}}, @NFQA_EXP={0x10, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, @NFQA_PAYLOAD={0xe6, 0xa, "8d01bb1eb9c367e1a62ca9fd7b761be16bef6612f8f85885c48e602f001f5fe6cc7897cd8023636cd20167cf2fd670a23ef056575882e6eef0355525787fbeaa42d12cecc1e2adf86750b81b0e8a371ab54b646d2823f1a41929fafe474d13bfef969a6af45f85270cba711fcb85a064f12e70ff11e501e42908f10bb251fae4a751cb2b28b1784c520bdb4dbac8342fe19a92189eb0e48319d58a47bd7406e749e16f979a2d54aaf5af7176015772f063596ff6a075458b497208d0600c22159186a28552e66d7fea9c005b70f4a31301432b8ccb43badf3a099f08c7681f401dd5"}]}, 0x1244}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsmount(r5, 0x1, 0x9) (async) fsmount(r5, 0x1, 0x9) sendmsg$key(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003140)={0x2, 0xd, 0x4, 0x3, 0xb, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x3, @empty, 0x6}, @in={0x2, 0x4e24, @local}}, @sadb_ident={0x2, 0xa, 0xeca5, 0x0, 0x100}]}, 0x58}}, 0x20000815) 11.31443726s ago: executing program 1 (id=78): r0 = socket(0x10, 0x803, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0x70, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010003704000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="83040500000000002000128008000100677265001400028008000600ac1414bb00000700e000030a"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket(0x10, 0x803, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0x70, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010003704000000000006000000000000", @ANYRES32=0x0, @ANYBLOB="83040500000000002000128008000100677265001400028008000600ac1414bb00000700e000030a"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 11.153856128s ago: executing program 1 (id=79): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x8, 0x1, &(0x7f0000000000)=0x9}) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000080)=[@nested_amd_inject_event={0x180, 0x38, {0x2, 0x73, 0x0, 0x6, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x280a, 0x80000000, 0x24168247, 0x10001}}, @in_dx={0x69, 0x20, {0xafd8, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xff, 0x8001}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_load_code={0x12e, 0x92, {0x0, "b805000000b90c0000000f01c1430f01cbb96e0b0000b800000000ba010000000f302e3e0f01c5b9da0a00000f3248b81d70978b8f69dc110f23d80f21f835c00000700f23f848b800a00000000000000f23c80f21f835080040000f23f80c0066baf80cb8be259e86ef66bafc0c66b8aae566ef3e67430f01c8"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x5f3, 0x6, 0x2, 0x75a}}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0x45e5}}, @rdmsr={0x66, 0x18, {0xa67}}, @in_dx={0x69, 0x20, {0xdcd, 0x5}}, @set_irq_handler={0xc8, 0x20, {0x27, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x23, 0x4, 0x3, 0x2}}, @wr_drn={0x68, 0x20, {0x3, 0x80000000}}, @rdmsr={0x66, 0x18, {0x23e}}, @nested_amd_clgi={0x17f, 0x10}], 0x2ca}) ioctl$KVM_TDX_GET_CPUID(r1, 0xc008aeba, &(0x7f0000000540)={0x5, 0x0, &(0x7f00000003c0)={0x8, 0x0, [{0x80000007, 0x10001, 0x5, 0x6, 0xffff, 0x10000, 0x1}, {0x0, 0x5, 0x1, 0xeb, 0x13d3, 0x5, 0x3}, {0x80000001, 0x5, 0x7, 0x5, 0x400, 0x1, 0x6}, {0x1, 0x2, 0x6, 0x3, 0x3ff, 0x2, 0x1}, {0x80000001, 0xb99, 0x3, 0x8, 0x7fff, 0x1, 0x7}, {0x0, 0x8, 0x0, 0x1, 0xff, 0x8}, {0x7, 0x7, 0x2, 0x5, 0xe3, 0xffffff54, 0x2}, {0x40000000, 0x0, 0x0, 0x7, 0x3, 0x8, 0x3b3}]}}) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000600)={0x1, 0x1}) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640), 0x4001, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0xd, 0x3, 0x0, @mcast2, @empty, 0x7800, 0x20, 0x88, 0x400}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x98243bc}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x20008014) (async) read$FUSE(r3, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 32) fstat(r3, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r8 = getegid() write$FUSE_STATX(r3, &(0x7f0000002980)={0x130, 0x0, r6, {0x2, 0xffff8000, 0x0, '\x00', {0x4, 0x8000, 0x9, 0x9, r7, r8, 0xa000, '\x00', 0x4, 0x6, 0x100, 0x40d, {0x78, 0x8}, {0x2, 0x8d}, {0x4, 0x9}, {0x5, 0x7}, 0x5479c610, 0x6, 0x8de}}}, 0x130) (async, rerun: 32) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000002ac0)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x6, 0x3, 0x7fff, 0x9, 0x3, 0x8}, {0x2, 0x2, 0xec85, 0x88, 0xa81, 0xfffffffffffffff9}], ['\x00', '\x00', '\x00', '\x00']}) (async, rerun: 32) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f0000002cc0)={{0x28f9, 0x9, 0x23, 0xffff, 0x95}, &(0x7f0000002c80)}) (async) r9 = open(&(0x7f0000002d40)='./file0\x00', 0x800, 0x0) write$FUSE_NOTIFY_POLL(r9, &(0x7f0000002d80)={0x18, 0x1, 0x0, {0x8}}, 0x18) (async) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002dc0), 0x202000, 0x0) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000002e00)={"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"}) (async, rerun: 32) write$UHID_DESTROY(r10, &(0x7f0000003200), 0x4) (rerun: 32) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003600)={0x0, &(0x7f0000003240)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x9c8, 0x3, 0x1}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest16=0x810, 0x3, 0xfffffffffffffff3, 0x5}}, @rdmsr={0x66, 0x18, {0x38c}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2009, 0x0, 0x4, 0xa}}, @nested_load_syzos={0x136, 0x100, {0x3, 0x4, [@set_irq_handler={0xc8, 0x20, {0xb9, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c01, 0x5, 0x5, 0x5}}, @cpuid={0x64, 0x18, {0x4, 0x400}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0xa1c}}, @nested_amd_vmsave={0x183, 0x18}, @out_dx={0x6a, 0x28, {0xaba1, 0x4, 0x25c0000000000}}]}}, @nested_load_code={0x12e, 0x50, {0x1, "0f09b9e60200000f32c4a1c967f1460fc75ead2e0f20e5b9d5090000b8e0740000ba000000000f300f082e0fc7acc30c0000000f07f30f09"}}, @nested_amd_invlpga={0x17d, 0x20, {0x4, 0xf762}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @code={0xa, 0x5c, {"66b811008ee048b800300000000000000f23d80f21f835800000600f23f83e66f30fc73485b1770000c4a24d8e063e67f30f09400f23900f358393030000002d3e0f01c82e67f30fc73426"}}, @code={0xa, 0x58, {"64440ffaaeb3000000c4a32d0a658ca5f3470f0766b80b000f00d066ba4300edf3400f0966baf80cb8b4fffd82ef66bafc0ced660f38810dd700000066400fd60e420fc7743cf3"}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0xae}}, @code={0xa, 0x69, {"c44101c4cff5470f7882af02f2f5b9800000c00f3235010000000f30f00fb1400db8010000000f01d9470f01cb66ba6100ec650fc7b80000010048b8f8b3be32e01ba53d0f23d00f21f8352000000c0f23f8c4421d477a00"}}], 0x3ad}) ioctl$KVM_TRANSLATE(r11, 0xc018ae85, &(0x7f0000003640)={0x2, 0x54000, 0x6, 0x5, 0x81}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000003680)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000003a80)={r12, "ec9c71e6162d82fb488dbb5a6c8064ef"}) (async) read$FUSE(r3, &(0x7f0000004a80)={0x2020}, 0x2020) close(r10) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006b00), r9) sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f0000006bc0)={&(0x7f0000006ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006b80)={&(0x7f0000006b40)={0x38, r13, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x69}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c804}, 0x20004040) (async) ioctl$HIDIOCGDEVINFO(r10, 0x801c4803, &(0x7f0000006c00)=""/99) 11.153357058s ago: executing program 1 (id=80): r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x2cf}) close_range(r0, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f00000000c0)={[{@noquota}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x600840, 0x1d4) syz_usb_connect$midi(0x2, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="0d00cb7d2eef2b21669fbda96c"]}]}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x2, 0x3, @mcast2, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = epoll_create(0xe) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000a00000000000000", @ANYRES32=r1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000012040000000400000000000000000000000000000000000000a814c0fe56c2fd2b45d2a75f79da733efbe1ece855a8872313ff3dd162c6bc44ce2833fbec783f0b88dbb562a6fd1db30af2317e49cd64162f4392d67e937e358c26055c5befb2d4ed98e9d88bda448f48718f5ff3c4d7cc26a82dae06f34d1aed62176523066950d1597fd06bdb701e61a16e0788cd4b358d5876d201b145ecfa0c36b90575f5c398a9e75fdbf1257c18d0f517b5b326259af7c8"], 0x50) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000280)) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5a, 0x7ffffffe}]}) sync_file_range(r7, 0x8000000000101001, 0x100000001, 0xf) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000001c0)={0x90000013}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0x74, 0x26, 0xffff, 0x70bd2b, 0x0, {}, [{0x60, 0x1, [@m_xt={0xffffffffffffffa7, 0x7, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x30, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000081}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file7\x00', 0x146) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 10.015582104s ago: executing program 1 (id=84): r0 = syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x105d6, &(0x7f0000010640)="$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") ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r0, &(0x7f0000000040)='f2fs\x00', 0x219842, &(0x7f00000000c0)={@align=0x2, {0x6, 0x1, 0x10000, 0x80}}, 0x8, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x800}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_GET_FD_BY_ID(0x9, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0x16) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0x6000) 9.630326824s ago: executing program 1 (id=89): syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0000000004000800470f003c006400000506907800000000000000000194f300040000000000000000000000000000000000000000004e2300004e210000000300000003"], 0x0) 9.466759622s ago: executing program 33 (id=89): syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0000000004000800470f003c006400000506907800000000000000000194f300040000000000000000000000000000000000000000004e2300004e210000000300000003"], 0x0) 1.924562315s ago: executing program 0 (id=215): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xa002a014}) 1.858258428s ago: executing program 0 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000040), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040051) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x4, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0xef}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x8000) 1.857651648s ago: executing program 0 (id=220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0x7, 0xb}, {0x0, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.721475885s ago: executing program 0 (id=228): close(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc5}, 0xc010) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000016c0)={0x2b}, 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000000)=@caif, 0x0, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1.074373897s ago: executing program 2 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 1.041037108s ago: executing program 2 (id=259): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000080)={0x7, 'vlan1\x00', {0x8}, 0x260f}) 997.209311ms ago: executing program 2 (id=261): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xd9, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0) 997.059151ms ago: executing program 2 (id=263): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4}, 0x6) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000140)="41000200", 0x4) 950.108283ms ago: executing program 2 (id=268): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/19, 0x14}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 863.375388ms ago: executing program 0 (id=275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)='.', 0x1, 0x12, 0x0, 0x0) 830.084239ms ago: executing program 5 (id=278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x80) 779.425772ms ago: executing program 5 (id=280): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 778.972391ms ago: executing program 5 (id=282): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x603, 0x0, {r1, r2/1000+60000}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "94b1c39a3cc2fbfd"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 732.078194ms ago: executing program 5 (id=284): syz_open_procfs$namespace(0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in=@local, 0x0, 0x8, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0xffffffff, 0x2b}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 598.309771ms ago: executing program 5 (id=297): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 597.85951ms ago: executing program 5 (id=301): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8ee2f76e1d4a32477a7cf108fea86a7e085c1575f683857cff342574109f74cf05e3f63f328f46735ba0578d84b4978ce545621b1666ca7da451d40e961a037822eebcbba9bf9e92af7281442efcaa8e0d3ecd6111d8fc1c742d0e7efe8e51a1c5e6ea04fec02a986cba677d9dc642d110df6f55c786c73f7ce4ebf9415bdb2680d0ff4597006d96e3c164114a4effae84380e492822c002b2e96f160a0784fd0ebe448eddaa801921576287f61a15be332a94eea951c0826874d105173a6b3f2a6e420ed5ef00b1f699b74c524a1859cb7d6dfb7257b6f0b92e17ce21237da0ec892735601b29693dce455876447f76df303a8cb34bd9c9241da9904c1c17d416753c71aeed9cc07d26b4a438df4e302cf120cda73c04d5a1b7295f1cb7ff88084211adde5fdf991f97cb522b56c561ad1119a4675fbf566b77660dfd457467652d23c739cc9ba93bbd5b464c46e46187ce71d7aab533e670c861b227454d7c21f9f16000eee0c1772a152c26acd2744c5553ace622369f15d5354a3b5ac4bb9261a766830d351fa931558dee7ff30768b2e29025c3b115179ed6a12ea76a23db3626bc033f85a43c3c3f50b75b89a418277837ba571189e708f4aaaacc19537e7aa156b7058c200e8f9be1da8a63c7e878f3e733060a1cb24a2a09ea76413efdc4e0b1027a09c6830b4ca5ccd4695e2e0bb1610a21b0cc66012aab283b6c5dfbd20aef8d7ad04e4c618a065a588d05e3f780126eee290cf0f94fb4a2c5a8cb97f60d9e50301a4f01f3787ab052ef8782d6ef0f92385ab59015670a054dab1ab0400be74fdc4ac3d18fb5b5da13e55a05e29ad14dd0abf0435dea601ce80573548f3c8f21ecfcbe5361d1505a91c355d8477fe7e3866be005acae25cbab7bd8684294963c3c95924f7d62ca0ed2d7aa01048cbdcd4d7ae9717d4feb97e1e825f6156e9c5fc456509798d2f5adc9356752a8974894ff5bf9d14aab3ddf18fd4f9af23c66f7e4ef7e345e769260fd9d2a22ddd078dd7e44f904ea78dd3db5b0f4a8d7ce9ae7909cedde165b7458da24d576fc0e18d3c27cccaff21146ad51c1681c629a8f0b8a4ae213c88910c54de9af7890b0a4414e0d38c31d76a130b587b764260655f17f901f96b835a1fecb1f7438f5e18ff60720d37d19b1a9ae3e03dc10aa1c4f2abb918883d56ddd4e74b48a4aeadccf2329956ed18b2001d1e1e80bdf325449beda911916f802234f5b182264754cd3bb26b2ae658cc0ee185a19cba7f9e54e47c32f8b87d0fed97c911d28f971e70be5fb830109a57b600f734a4cc734cbb67a58e6a696ccb39c328c537fe467fd194183aad728f95b0a4afb4557615408a83785c0d313e666d1dab18d49a4feaf12993e73f5537998a1ed25b93f9bca346376129dee3a5a78675d30bd19a78b77f45ea8b5b48cb4c78a1bc30df00badb811585966b8f8ef42d89236f5e99f849a44d62d1431eb187333dcde91582a29e777b9cd6e1bc86eff512ba48d6030681d395bfb8c5259b0c22028400a1d3929a6e3fa0fcda3deb9cf8e7e079c21d7c20b1670eb880789ae809608bac2b05c45da5a3a0377d1d06b917a5a6ee7dbf35f54c327d7d7921266bcb4e8e816b02872139d03d575c491ee077140f7d1aca286f977869288bf90eedaf41727abcd79056936d830bf6480bf6b4573e4dd402f6206099716593a04813cd07437ffa80f10f72ef64e320e48fa59b5ac0e412d9ed14bfc2e9365c67fc21c327d5699f58c3984db4f3ec0c362b633a784c4dfba44187801a0f0fc0f6b7a4610594556b33f1617c7b8b4f95d5d6fba7553512a6098a2e64d10a45347f3a41d11e19f7690ebcbfb9239c59b489061aad4317a08c435fa92c4f5feb662f6413c3d06dca92647fef304d9f8e96a78b5251b0a4d15710937428ab676cc7da5f0006cd04f7fa884625116a0cbddabc012cf55e3f26a4b411cfa1ba8473c3aef570cd23fe2165bf1f9b54632c7e76e5a5818bb70086c5fa609f2199424b8f2de5387a5bf44d3f246bec62433182b0c950ecc2968dba1e6a845c48c506daf90ffb0c13d376be0ac8283abb4e4283f703206a47c2b9c6a642d4bf4a245b8ec978b09d8620fc5d9f917842f83bf5e2efd976e9b98c38a8f836773357ad6d23fca68ee26431acf0196ef0fcef25a979782dc2f1688acacc53b1b2c2f694b638c1256a869f56098b89bb4a14b2dc2d187773e6a75f7d37ed91b8f8aee84c0bdbaeec229139809eaa9948e7a5e18d783ece0cd7ea8996dc3e650b1cff351ad9fbd661f303f40de084d111ec1489ae42d2fc55ce8d892a3d6290f2d2eb72733b4fdc8c433569c34854a84653884b3d90652f499eeb83886bd4246b41f231141cf1a412f1c7840fb8a1595895cfdec1961d887ac9dd1f5ad4b66bbb451d5471fcb1fb4bb25a4c4d43b9c0e3c72a00e8fc83f700c812b1b9c2f37e40bd746c39cbbca41e6fecb8d64424c82e640d8f887cb7d8e75828b2969e1628c7000fba626381dcfdc7262b2b06f47f898d0aa0dab8636c089d4339a37e80f20f8f5196608a3d1ac1418ff9ac0ac54c45c124b15a77d61d50ca05e1603b1b6476cf09d79b138a7f7394a9cf35e6d64654504663db381712da505d0985cd9a4edbd067c0f09c393486b138f01deb4771566d987ac16a6ed0ac5c9b592a20878e5b4050e594f376523697a0aba321a6704db28b0f0fcdf0d8e2a6f1788064d49807f080d7aa29f795935d61bcf152fe39a45a713fd0a3b2982f65437828e110b2edcdbd7b462d5ef8e87ad0aa2352cf3fb1e05787602ed66efd77a7b88c73e76dd1b368e5845cc032ed719635b0db27b39ddc12d899b742a1499ffaa4b95c0a1f29cd85a7d2d30be5bd1fd384a6e4dd3b93b46352ece5144a2ce989bcb8e6255e04e6d5d0a6b4b2736715b116b06189491b4a4a9fd9e482413b2b8851b273b10820040b490de9414fcdee5126ddbedaaddcb8c844cc7e0264f65c4d3607dddf0dbd88a7f3d1ff35bea1bcb48eb576e7083fd8bf8d6a6a1567f77819c3bbe93ff92418632d30fa2b933b33fcf163b5a942d870f22d13ad6be938ddf61de391b35e68fc9ad71aeb7cddfb73e071162bfd1c7facd10e50e9f8046c7ee6f89830b70955a3908c18cc79138c335a5159adb3229e02576cbd1829b4c67504fbe785e3c2129d53cbc3b00a62b232e16a01e01b2dc159fea676ea8c0ad0d8f41ea1840092f4900d26f48b5c549211240a5c5ab663b4f9ac463df05c86af9a3f2e595d4f9981b108d44e9ee060fc8736d7ff71a609252fe6becd2aacb23b7ac66ad8a3dfca068fb7846b9588a0b027e45f96d73cdf6c2d9494c6c5c129a8f5a1e8c4f4e6a1adec722ba74e5a002b1c87793cfc5c689ac82881ac346c3e5be4f6570d3669f797916e2018a784d6a88671c6cd803585ba49cabea506177c5e41145d2c7f192012e1478e409d2dde7de2ac2b03b9d808afaf5f761032fd562d587c653eb07ad8ede76dc1aa8a1e7fb5a56f04e3dfa10e77ee1e51f6879c2670278c8471e03b0f62eee8ec60336b604b6721a81d8ef630749dac6298b488ec09a4aa61ced579231d4231a9cf6d7f20683194e6709fbea4ed66cfdec9a7238bbad6894ceb6c0ca3307274f2749be8450180456280289d0179d8396902250cddd7a440c24ae7df78bc8e146b1b8e5c9924d2b07646ff577da61968503bad37d240aacc9dbba0f665acf1d56667d1aa7e497b7947cca22f7a55113f5e10bc9987e9b5d9405f625a604f7099cf365ea8d3530dfba6b9977f8441e23147049ae8bf0231d824397e885589c693d8a7e756e46baf67f21b062cf6d8db25140c4301233bcb18b408e3c7959056a3307546f09f13e2e732dc26b9bab0ac74d72bc0f115f7cf682aed23d9c627da1c4e4b221bd85a6c19f0391b23137f551cfb99cb1da33d42840439d0ec5f2d0e75c74d15918460e915c18dccf2f9d0ee508292c871ec9f4f2a2d1628a914487df2e8aa43bbb0bf1427e2f99e8eaaa588df310b9e50aeba057b2ce863eaaf9ecca3fc190d88bf10", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) 430.323039ms ago: executing program 6 (id=311): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x4, 0x4}, 0x4) 400.15568ms ago: executing program 6 (id=313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000140)) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000001200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, &(0x7f00000064c0)=0x8, r5, 0x0, 0x2000000000000e, 0x0) connect$pppl2tp(r5, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @multicast1}, 0x3, 0x3, 0x4, 0x4}}, 0x26) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r1, 0x4, 0xffffffffffffffff, 0x81}) getsockopt$sock_int(r3, 0x1, 0x28, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000000180)={0x2, 0x3, 0x7}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000000c00"], 0x94}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100c71e000108000200ac1e00010c000280050001000000000008000740ffff639c"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010003b15000800000000000200000000", @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c00028008000400c5492ed1434863fbb1ec0f4514021767ae0b429ba583a3a7eb2675a07193e02f996d08002c481d7f2f98cf6c111119bcb26a529b02831c37eaae054a943fd81427a4cb6a61acc53241736a75931bda2ecae19f25d2e3c046ffb1f51b474806e9c21e8ea043712cdbdfe00fbadbaf48a4ce9d93cfe3b1107a10808d956842a8047b68359fa3bf68098d169e2c596878ea7a03060e8ae70dd90c64bcbd102af7b7b5d719"], 0x3c}}, 0x0) 300.234375ms ago: executing program 6 (id=315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010028bd700000dcf4250a", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000) 279.650866ms ago: executing program 6 (id=316): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 226.098028ms ago: executing program 6 (id=318): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x5, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0xff], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x87, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) 186.798951ms ago: executing program 3 (id=321): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 118.397134ms ago: executing program 3 (id=322): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="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", 0xfa}, {&(0x7f00000004c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72db04d8fcda058d36d681bbb7523abda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0xad}, {&(0x7f0000000200)="f610e61f", 0x4}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 118.257424ms ago: executing program 3 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7540bd93}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) 108.199124ms ago: executing program 2 (id=324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000003c0)="5df505c85cb91603c8a0b7dbca69753ba3b07b78d836c97bf3b614eb289e1b35beaab875d3d2b6b1ac", 0x29) 97.397045ms ago: executing program 3 (id=325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0xfff, @empty, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 26.259979ms ago: executing program 3 (id=326): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x103, 0x1, 0x389, 0x8, 0x2, 0x14, 0x6, 0x0, 0x17, 0x8, 0x7fffffff, 0x8000, 0x4, 0x5, 0x10009, [0xe, 0xfb]}}) 26.024239ms ago: executing program 3 (id=327): r0 = socket$netlink(0x10, 0x3, 0x6) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000012000549"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) 16.661079ms ago: executing program 0 (id=328): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) 0s ago: executing program 6 (id=329): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48004}, 0x8041) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'geneve0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000000010", @ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a"], 0x57) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) close(0x3) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 19.128562][ T30] audit: type=1400 audit(1774112057.028:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.129629][ T273] cgroup: Unknown subsys name 'net' [ 19.136178][ T30] audit: type=1400 audit(1774112057.028:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.143301][ T30] audit: type=1400 audit(1774112057.048:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.143437][ T273] cgroup: Unknown subsys name 'devices' [ 19.273854][ T273] cgroup: Unknown subsys name 'hugetlb' [ 19.279762][ T273] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 19.475688][ T30] audit: type=1400 audit(1774112057.378:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.489862][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.499372][ T30] audit: type=1400 audit(1774112057.378:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.516171][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.533407][ T30] audit: type=1400 audit(1774112057.378:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.565789][ T30] audit: type=1400 audit(1774112057.408:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.591428][ T30] audit: type=1400 audit(1774112057.408:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.617280][ T30] audit: type=1400 audit(1774112057.418:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.643171][ T30] audit: type=1400 audit(1774112057.418:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.302274][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.309437][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.329080][ T281] device bridge_slave_0 entered promiscuous mode [ 20.336458][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.343979][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.351677][ T281] device bridge_slave_1 entered promiscuous mode [ 20.479426][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.486643][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.494220][ T287] device bridge_slave_0 entered promiscuous mode [ 20.501430][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.508807][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.516348][ T287] device bridge_slave_1 entered promiscuous mode [ 20.531048][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.538736][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.546160][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.553456][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.603905][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.611420][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.619140][ T288] device bridge_slave_0 entered promiscuous mode [ 20.633027][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.640169][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.647837][ T288] device bridge_slave_1 entered promiscuous mode [ 20.666326][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.673968][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.681426][ T285] device bridge_slave_0 entered promiscuous mode [ 20.691445][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.698886][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.706567][ T285] device bridge_slave_1 entered promiscuous mode [ 20.729139][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.736566][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.744185][ T286] device bridge_slave_0 entered promiscuous mode [ 20.769434][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.776613][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.784191][ T286] device bridge_slave_1 entered promiscuous mode [ 20.824281][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.832357][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.840657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.848249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.907937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.916299][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.923516][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.953608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.961945][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.969114][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.001432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.018408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.061908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.073929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.082552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.090111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.105917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.113669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.136363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.144653][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.151814][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.159279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.167931][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.175195][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.182797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.190927][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.197979][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.205611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.214050][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.221570][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.229242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.237583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.245702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.253654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.261365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.269398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.282069][ T281] device veth0_vlan entered promiscuous mode [ 21.291230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.299281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.307539][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.314576][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.322564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.330883][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.337954][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.353376][ T285] device veth0_vlan entered promiscuous mode [ 21.369004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.376812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.385587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.395851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.403934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.412410][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.420109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.427618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.436057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.444594][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.451897][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.459508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.467836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.476195][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.483405][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.491148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.499547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.508579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.516300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.524181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.536982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.545103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.555516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.564103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.574533][ T285] device veth1_macvtap entered promiscuous mode [ 21.582899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.591341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.604663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.613073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.623684][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.632385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.644652][ T287] device veth0_vlan entered promiscuous mode [ 21.652149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.660570][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.669687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.677347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.685352][ T281] device veth1_macvtap entered promiscuous mode [ 21.700666][ T287] device veth1_macvtap entered promiscuous mode [ 21.708550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.716303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.724675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.733454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.741447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.749920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.758065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.766423][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.775159][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.783442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.795713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.804192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.827119][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 21.835042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.843892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.853004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.861238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.869855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.878332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.886808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.895256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.914182][ T286] device veth0_vlan entered promiscuous mode [ 21.923314][ T288] device veth0_vlan entered promiscuous mode [ 21.935416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.944519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.953878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.962585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.970606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.978701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.987235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.994992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.002907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.010582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.030079][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.038742][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.061840][ T286] device veth1_macvtap entered promiscuous mode [ 22.075320][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.084282][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.092804][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.108964][ T288] device veth1_macvtap entered promiscuous mode [ 22.130609][ T307] overlayfs: './file0' not a directory [ 22.137751][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.148044][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.157486][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.168512][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.177100][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.212189][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.220900][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.231202][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.234401][ T320] loop4: detected capacity change from 0 to 512 [ 22.240572][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.282820][ T324] loop1: detected capacity change from 0 to 512 [ 22.293701][ T322] loop3: detected capacity change from 0 to 4096 [ 22.302758][ T320] Zero length message leads to an empty skb [ 22.309958][ T324] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 22.363534][ T324] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.2: bad orphan inode 13 [ 22.372247][ T335] loop2: detected capacity change from 0 to 2048 [ 22.373902][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.381936][ T324] ext4_test_bit(bit=12, block=18) = 1 [ 22.388705][ T322] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 22.393541][ T324] is_bad_inode(inode)=0 [ 22.409061][ T324] NEXT_ORPHAN(inode)=0 [ 22.413735][ T322] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.414181][ T324] max_ino=32 [ 22.433433][ T324] i_nlink=1 [ 22.436723][ T324] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 22.448905][ T335] loop2: p1 < > p2 p3 < > p4 < p5 > [ 22.454540][ T335] loop2: partition table partially beyond EOD, truncated [ 22.478786][ T322] EXT4-fs (loop3): shut down requested (1) [ 22.480117][ T335] loop2: p1 start 65537 is beyond EOD, truncated [ 22.492550][ T322] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 22.502087][ T332] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 22.511942][ T322] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 22.623148][ T341] loop3: detected capacity change from 0 to 256 [ 22.652064][ T39] usb 1-1: device descriptor read/64, error -71 [ 23.089242][ T346] loop4: detected capacity change from 0 to 1024 [ 23.101999][ T39] usb 1-1: device descriptor read/64, error -71 [ 23.123852][ T346] EXT4-fs (loop4): Mount option "nodelalloc" incompatible with ext2 [ 23.432238][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 23.756496][ T335] loop2: detected capacity change from 0 to 131072 [ 23.792972][ T339] loop1: detected capacity change from 0 to 131072 [ 23.843120][ T339] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 23.853910][ T339] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 23.863287][ T349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64045 sclass=netlink_route_socket pid=349 comm=syz.2.9 [ 23.877348][ T339] F2FS-fs (loop1): invalid crc value [ 23.898126][ T39] usb 1-1: device descriptor read/64, error -71 [ 23.973101][ T339] F2FS-fs (loop1): Found nat_bits in checkpoint [ 24.047033][ T339] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 24.058772][ T339] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 24.091389][ T363] loop4: detected capacity change from 0 to 512 [ 24.161641][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 24.161658][ T30] audit: type=1400 audit(1774112062.058:145): avc: denied { create } for pid=338 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 24.175257][ T363] EXT4-fs (loop4): Invalid want_extra_isize 75 [ 24.211811][ T30] audit: type=1400 audit(1774112062.058:146): avc: denied { create } for pid=338 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 24.231330][ T30] audit: type=1400 audit(1774112062.058:147): avc: denied { setopt } for pid=338 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 24.250953][ T30] audit: type=1400 audit(1774112062.108:148): avc: denied { prog_run } for pid=338 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 24.274278][ T310] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 24.281804][ T366] loop2: detected capacity change from 0 to 256 [ 24.290642][ T30] audit: type=1400 audit(1774112062.188:149): avc: denied { create } for pid=338 comm="syz.1.10" dev="anon_inodefs" ino=15692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.312431][ T30] audit: type=1400 audit(1774112062.198:150): avc: denied { ioctl } for pid=338 comm="syz.1.10" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15692 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.338974][ T30] audit: type=1400 audit(1774112062.198:151): avc: denied { read } for pid=338 comm="syz.1.10" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.339617][ T366] exfat: Deprecated parameter 'utf8' [ 24.392091][ T39] usb 1-1: device descriptor read/64, error -71 [ 24.400621][ T363] ======================================================= [ 24.400621][ T363] WARNING: The mand mount option has been deprecated and [ 24.400621][ T363] and is ignored by this kernel. Remove the mand [ 24.400621][ T363] option from the mount to silence this warning. [ 24.400621][ T363] ======================================================= [ 24.436766][ T30] audit: type=1400 audit(1774112062.338:152): avc: denied { read } for pid=338 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 24.464159][ T366] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 24.473216][ T30] audit: type=1400 audit(1774112062.338:153): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 24.497543][ T30] audit: type=1400 audit(1774112062.378:154): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 24.518648][ T39] usb usb1-port1: attempt power cycle [ 24.563058][ T285] syz-executor (285) used greatest stack depth: 21760 bytes left [ 24.711253][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.718445][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.728211][ T370] device bridge_slave_0 entered promiscuous mode [ 24.732086][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.735723][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.750081][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.757664][ T370] device bridge_slave_1 entered promiscuous mode [ 24.792085][ T310] usb 4-1: not running at top speed; connect to a high speed hub [ 24.806335][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.813793][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.821324][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.828919][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.836450][ T319] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.850775][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.858791][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.866524][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.876536][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.885269][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.892435][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.899885][ T310] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 24.908879][ T310] usb 4-1: config 0 has no interface number 0 [ 24.916861][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.922172][ T310] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 24.925598][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.936576][ T310] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 24.943716][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.953671][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 24.969934][ T310] usb 4-1: config 0 interface 88 has no altsetting 0 [ 24.977541][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.985936][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.002205][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.010932][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.019215][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.027028][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.037226][ T370] device veth0_vlan entered promiscuous mode [ 25.048530][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.058405][ T370] device veth1_macvtap entered promiscuous mode [ 25.082204][ T319] usb 3-1: Using ep0 maxpacket: 16 [ 25.088554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.104493][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.115207][ T379] device vlan2 entered promiscuous mode [ 25.120903][ T379] device syz_tun entered promiscuous mode [ 25.132445][ T39] usb 1-1: device descriptor read/8, error -71 [ 25.172216][ T310] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 25.172396][ T382] FAT-fs (loop5): bogus logical sector size 0 [ 25.188500][ T310] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 25.192295][ T382] FAT-fs (loop5): Can't find a valid FAT filesystem [ 25.203458][ T310] usb 4-1: Product: syz [ 25.203478][ T310] usb 4-1: Manufacturer: syz [ 25.203490][ T310] usb 4-1: SerialNumber: syz [ 25.204195][ T310] usb 4-1: config 0 descriptor?? [ 25.222953][ T319] usb 3-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 25.233415][ T319] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.266782][ T10] device bridge_slave_1 left promiscuous mode [ 25.299919][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.316505][ T385] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota,. Quota mode: writeback. [ 25.340946][ T10] device bridge_slave_0 left promiscuous mode [ 25.351073][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.362176][ T39] usb 1-1: device descriptor read/8, error -71 [ 25.368510][ T10] device veth1_macvtap left promiscuous mode [ 25.383200][ T10] device veth0_vlan left promiscuous mode [ 25.422073][ T319] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.441269][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.509755][ T319] usb 3-1: Product: syz [ 25.514276][ T319] usb 3-1: Manufacturer: syz [ 25.518990][ T319] usb 3-1: SerialNumber: syz [ 25.583165][ T310] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input4 [ 25.608748][ T310] usb 4-1: USB disconnect, device number 2 [ 25.632073][ T6] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 25.662756][ T392] device vlan2 left promiscuous mode [ 25.668448][ T392] device syz_tun left promiscuous mode [ 25.768156][ T368] input: syz1 as /devices/virtual/input/input5 [ 25.838188][ T402] exfat: Unknown parameter '0x0000000000000000ÿÿÿÿ' [ 25.872199][ T319] usb 3-1: 0:2 : does not exist [ 25.916479][ T319] usb 3-1: USB disconnect, device number 2 [ 25.938232][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.080131][ T6] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 26.092513][ T6] usb 6-1: config 0 has no interface number 0 [ 26.098639][ T6] usb 6-1: config 0 interface 41 has no altsetting 0 [ 26.244990][ T417] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 26.254614][ T417] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 26.262635][ T6] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 26.273088][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.281354][ T6] usb 6-1: Product: syz [ 26.285864][ T6] usb 6-1: Manufacturer: syz [ 26.290535][ T6] usb 6-1: SerialNumber: syz [ 26.296003][ T417] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 26.305081][ T6] usb 6-1: config 0 descriptor?? [ 26.321472][ T417] EXT4-fs (loop3): write access will be enabled during recovery [ 26.333805][ T417] EXT4-fs (loop3): barriers disabled [ 26.339341][ T417] JBD2: no valid journal superblock found [ 26.345690][ T417] EXT4-fs (loop3): error loading journal [ 26.505348][ T417] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 26.528026][ T417] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 26.548872][ T417] EXT4-fs (loop3): INFO: recovery required on readonly filesystem [ 26.567266][ T417] EXT4-fs (loop3): write access will be enabled during recovery [ 26.575876][ T417] EXT4-fs (loop3): barriers disabled [ 26.581259][ T417] JBD2: no valid journal superblock found [ 26.587400][ T417] EXT4-fs (loop3): error loading journal [ 26.736176][ T429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=429 comm=syz.3.34 [ 26.832041][ T289] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 26.925205][ T431] F2FS-fs (loop3): Encrypt feature is off [ 27.246932][ T437] set_capacity_and_notify: 10 callbacks suppressed [ 27.246943][ T437] loop3: detected capacity change from 0 to 2048 [ 27.274789][ T437] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.288685][ T437] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 27.313029][ T390] UDC core: couldn't find an available UDC or it's busy: -16 [ 27.320519][ T390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.332091][ T6] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 27.487940][ T453] device bridge1 entered promiscuous mode [ 27.502076][ T289] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.539219][ T455] tipc: Started in network mode [ 27.542087][ T289] usb 3-1: not running at top speed; connect to a high speed hub [ 27.544191][ T455] tipc: Node identity ea2b3d71ed44, cluster identity 4711 [ 27.562127][ T455] tipc: Enabled bearer , priority 0 [ 27.575059][ T455] tipc: Resetting bearer [ 27.584314][ T455] loop0: detected capacity change from 0 to 512 [ 27.591482][ T453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 27.600707][ T453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 27.614621][ T455] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 27.654783][ T459] loop1: detected capacity change from 0 to 512 [ 27.674889][ T459] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.719192][ T455] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 27.745079][ T459] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 27.754411][ T459] EXT4-fs (loop1): orphan cleanup on readonly fs [ 27.762626][ T459] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.43: corrupted inode contents [ 27.775325][ T459] EXT4-fs (loop1): Remounting filesystem read-only [ 27.782045][ T459] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #16: comm syz.1.43: mark_inode_dirty error [ 27.793634][ T459] EXT4-fs (loop1): Remounting filesystem read-only [ 27.800154][ T459] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.43: corrupted inode contents [ 27.812115][ T289] usb 3-1: New USB device found, idVendor=17cc, idProduct=0808, bcdDevice= 0.40 [ 27.812260][ T459] EXT4-fs (loop1): Remounting filesystem read-only [ 27.821160][ T289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.821181][ T289] usb 3-1: Product: syz [ 27.821194][ T289] usb 3-1: Manufacturer: syz [ 27.828220][ T459] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.43: mark_inode_dirty error [ 27.836813][ T289] usb 3-1: SerialNumber: syz [ 27.841419][ T459] EXT4-fs (loop1): Remounting filesystem read-only [ 27.871041][ T459] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.43: corrupted inode contents [ 27.884421][ T459] EXT4-fs (loop1): Remounting filesystem read-only [ 27.890994][ T459] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 27.913328][ T459] EXT4-fs (loop1): Remounting filesystem read-only [ 27.920379][ T459] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #16: comm syz.1.43: corrupted inode contents [ 27.934136][ T459] EXT4-fs (loop1): Remounting filesystem read-only [ 27.940862][ T459] EXT4-fs error (device loop1): ext4_truncate:4310: inode #16: comm syz.1.43: mark_inode_dirty error [ 28.040849][ T6] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 28.051582][ T6] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 28.074338][ T454] tipc: Disabling bearer [ 28.077738][ T459] EXT4-fs (loop1): Remounting filesystem read-only [ 28.087173][ T459] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 28.098417][ T459] EXT4-fs (loop1): Remounting filesystem read-only [ 28.105372][ T459] EXT4-fs (loop1): 1 truncate cleaned up [ 28.111698][ T459] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,. Quota mode: writeback. [ 28.115251][ T6] CoreChips: probe of 6-1:0.41 failed with error -71 [ 28.152396][ T470] capability: warning: `syz.0.44' uses deprecated v2 capabilities in a way that may be insecure [ 28.168198][ T6] usb 6-1: USB disconnect, device number 2 [ 28.184676][ T473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'. [ 28.487883][ T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.552089][ T317] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 28.632110][ T289] usb 3-1: MIDIStreaming interface descriptor not found [ 28.653484][ T289] usb 3-1: USB disconnect, device number 3 [ 28.762017][ T39] usb 4-1: device descriptor read/64, error -71 [ 28.862056][ T494] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.870241][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.112894][ T507] loop2: detected capacity change from 0 to 40427 [ 29.132089][ T317] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 29.141332][ T317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.149658][ T317] usb 1-1: Product: syz [ 29.153880][ T317] usb 1-1: Manufacturer: syz [ 29.158733][ T317] usb 1-1: SerialNumber: syz [ 29.164973][ T507] F2FS-fs (loop2): Invalid segment count (0) [ 29.171369][ T507] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 29.176716][ T317] usb 1-1: config 0 descriptor?? [ 29.180118][ T39] usb 4-1: device descriptor read/64, error -71 [ 29.192832][ T507] F2FS-fs (loop2): invalid crc value [ 29.199144][ T507] F2FS-fs (loop2): Found nat_bits in checkpoint [ 29.221289][ T507] F2FS-fs (loop2): Start checkpoint disabled! [ 29.227450][ T494] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 29.238450][ T317] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 29.245340][ T494] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 29.252237][ T507] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 29.254439][ T317] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 29.261564][ T507] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 29.269653][ T494] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.286428][ T317] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 29.293819][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 29.293834][ T30] audit: type=1400 audit(1774112067.198:208): avc: denied { write open } for pid=506 comm="syz.2.52" path="/7/file0/.pending_reads" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 29.325704][ T494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.334827][ T494] usb 2-1: config 0 descriptor?? [ 29.434994][ T519] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.462323][ T516] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 29.463866][ T60] usb 1-1: USB disconnect, device number 6 [ 29.470712][ T516] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 29.482019][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.516138][ T521] loop5: detected capacity change from 0 to 1024 [ 29.573342][ T30] audit: type=1400 audit(1774112067.478:209): avc: denied { name_bind } for pid=501 comm="syz.1.50" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 29.600065][ T521] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 29.632679][ T521] EXT4-fs (loop5): Unrecognized mount option "obj_type=/.^}" or missing value [ 29.693279][ T521] loop5: detected capacity change from 0 to 1024 [ 29.716376][ T521] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noauto_da_alloc,bsdgroups,auto_da_alloc,auto_da_alloc=0x0000000000000005,,errors=continue. Quota mode: none. [ 29.735722][ T521] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.754359][ T30] audit: type=1400 audit(1774112067.658:210): avc: denied { ioctl } for pid=520 comm="syz.5.54" path="/4/file1/file1" dev="loop5" ino=15 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.755976][ T521] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #15: comm syz.5.54: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.782153][ T39] usb 4-1: device descriptor read/64, error -71 [ 29.794386][ T521] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 29.812996][ T521] EXT4-fs (loop5): This should not happen!! Data will be lost [ 29.812996][ T521] [ 29.841352][ T10] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #15: block 4: comm kworker/u4:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 29.856416][ T10] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 29.868947][ T10] EXT4-fs (loop5): This should not happen!! Data will be lost [ 29.868947][ T10] [ 29.879250][ T10] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 29.894485][ T494] usb 2-1: string descriptor 0 read error: -71 [ 29.902615][ T494] usb 2-1: USB disconnect, device number 2 [ 29.909245][ T10] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 29.922885][ T10] EXT4-fs (loop5): This should not happen!! Data will be lost [ 29.922885][ T10] [ 29.943562][ T305] attempt to access beyond end of device [ 29.943562][ T305] loop2: rw=2049, want=40976, limit=40427 [ 30.133766][ T532] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=67438947 (134877894 ns) > initial count (917504 ns). Using initial count to start timer. [ 30.181887][ T525] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 30.190260][ T525] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 30.212051][ T39] usb 4-1: device descriptor read/64, error -71 [ 30.374262][ T39] usb usb4-port1: attempt power cycle [ 30.604466][ T30] audit: type=1400 audit(1774112068.508:211): avc: denied { read } for pid=541 comm="syz.2.60" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 30.627260][ T30] audit: type=1400 audit(1774112068.528:212): avc: denied { open } for pid=541 comm="syz.2.60" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 30.806543][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 30.851507][ T30] audit: type=1400 audit(1774112068.748:213): avc: denied { getopt } for pid=541 comm="syz.2.60" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.882022][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.891303][ T542] loop2: detected capacity change from 0 to 256 [ 30.899471][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 30.920887][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 30.931367][ T542] FAT-fs (loop2): bogus number of FAT sectors [ 30.940198][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 30.943439][ T542] FAT-fs (loop2): Can't find a valid FAT filesystem [ 30.949853][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 30.964657][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 30.973805][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 30.982226][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.000627][ T533] loop0: detected capacity change from 0 to 40427 [ 31.092100][ T39] usb 4-1: device descriptor read/8, error -71 [ 31.115223][ T548] loop2: detected capacity change from 0 to 512 [ 31.145107][ T548] EXT4-fs (loop2): Invalid want_extra_isize 75 [ 31.222367][ T30] audit: type=1400 audit(1774112069.128:214): avc: denied { read write } for pid=553 comm="syz.3.65" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.246587][ T30] audit: type=1400 audit(1774112069.128:215): avc: denied { open } for pid=553 comm="syz.3.65" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.260138][ T560] loop3: detected capacity change from 0 to 1024 [ 31.273126][ T30] audit: type=1400 audit(1774112069.128:216): avc: denied { ioctl } for pid=553 comm="syz.3.65" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.322091][ T39] usb 4-1: device descriptor read/8, error -71 [ 31.342209][ T491] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 31.410759][ T552] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 31.450738][ T568] EXT4-fs (loop3): Ignoring removed orlov option [ 31.459694][ T564] kvm [563]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x0 [ 31.460077][ T568] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 31.469656][ T564] kvm [563]: vcpu0, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x0 [ 31.478110][ T30] audit: type=1400 audit(1774112069.378:217): avc: denied { write } for pid=570 comm="syz.2.69" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.505247][ T564] kvm [563]: vcpu0, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0xbe702111 [ 31.522426][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 31.530332][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 31.547384][ T568] EXT4-fs error (device loop3): ext4_iget_extra_inode:4597: inode #15: comm syz.3.67: corrupted in-inode xattr [ 31.552068][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 31.570289][ T568] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.67: couldn't read orphan inode 15 (err -117) [ 31.573504][ T60] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 31.622289][ T568] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 31.660918][ T568] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.67: Logical block already allocated [ 31.822094][ T491] usb 6-1: unable to get BOS descriptor or descriptor too short [ 31.832623][ T590] exfat: Deprecated parameter 'namecase' [ 31.838304][ T590] exfat: Deprecated parameter 'utf8' [ 31.847959][ T590] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 31.862102][ T491] usb 6-1: not running at top speed; connect to a high speed hub [ 31.952066][ T491] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.980655][ T491] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.989829][ T491] usb 6-1: too many endpoints for config 1 interface 0 altsetting 10: 36, using maximum allowed: 30 [ 32.011198][ T491] usb 6-1: config 1 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 32.032025][ T491] usb 6-1: config 1 interface 0 has no altsetting 0 [ 32.122647][ T39] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 32.202143][ T491] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 32.221674][ T491] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.230369][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 32.242202][ T491] usb 6-1: Product: syz [ 32.246460][ T491] usb 6-1: Manufacturer: syz [ 32.251073][ T491] usb 6-1: SerialNumber: syz [ 32.298216][ T600] syz.1.77 uses obsolete (PF_INET,SOCK_PACKET) [ 32.334366][ T603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 32.352167][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.363393][ T603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 32.372003][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.382659][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 32.393133][ T603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 32.395369][ T39] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 32.412008][ T605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 32.432020][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 32.447567][ T39] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 32.482104][ T490] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 32.501358][ T612] set_capacity_and_notify: 3 callbacks suppressed [ 32.501377][ T612] loop1: detected capacity change from 0 to 1024 [ 32.514225][ T546] loop5: detected capacity change from 0 to 128 [ 32.606214][ T612] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,data_err=ignore,,errors=continue. Quota mode: none. [ 32.622127][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.640885][ T612] xt_hashlimit: size too large, truncated to 1048576 [ 32.651622][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.670068][ T39] usb 4-1: Product: syz [ 32.674854][ T39] usb 4-1: Manufacturer: syz [ 32.679468][ T39] usb 4-1: SerialNumber: syz [ 32.870121][ T581] loop2: detected capacity change from 0 to 131072 [ 32.934437][ T588] xt_hashlimit: size too large, truncated to 1048576 [ 32.965792][ T581] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0xf2f50210) [ 32.993051][ T581] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 33.003145][ T619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 33.035448][ T581] F2FS-fs (loop2): Test dummy encryption mode enabled [ 33.092175][ T581] F2FS-fs (loop2): invalid crc value [ 33.116318][ T581] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.231293][ T581] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 33.258835][ T581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 33.462089][ T39] cdc_ncm 4-1:1.0: bind() failure [ 33.469352][ T39] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 33.479497][ T39] cdc_ncm 4-1:1.1: bind() failure [ 33.490884][ T39] usb 4-1: USB disconnect, device number 6 [ 33.530722][ T633] loop0: detected capacity change from 0 to 512 [ 33.574965][ T633] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.593158][ T633] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.83: invalid indirect mapped block 9 (level 0) [ 33.610582][ T618] syz.1.80 (618) used greatest stack depth: 21056 bytes left [ 33.621249][ T288] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 33.632835][ T288] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 33.642235][ T633] EXT4-fs (loop0): 1 truncate cleaned up [ 33.649371][ T633] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 33.649549][ T288] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 33.686309][ T288] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 33.702365][ T288] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 33.726482][ T491] usb 6-1: USB disconnect, device number 3 [ 33.726851][ T288] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 33.745990][ T288] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 33.778213][ T288] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 33.789551][ T288] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 33.800810][ T288] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 33.986724][ T643] netlink: 164 bytes leftover after parsing attributes in process `syz.3.88'. [ 34.016047][ T643] netlink: 164 bytes leftover after parsing attributes in process `syz.3.88'. [ 34.035468][ T643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.88'. [ 34.058493][ T648] loop2: detected capacity change from 0 to 512 [ 34.140035][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.149665][ T654] mmap: syz.2.85 (654) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 34.165768][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.177391][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.185368][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.193066][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.195151][ T657] process 'syz.0.93' launched '/dev/fd/3' with NULL argv: empty string added [ 34.200575][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.217282][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.224777][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.232557][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.244419][ T653] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.251477][ T653] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.258841][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.266478][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.274696][ T653] device bridge_slave_0 entered promiscuous mode [ 34.281780][ T653] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.302007][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.322059][ T653] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.330048][ T653] device bridge_slave_1 entered promiscuous mode [ 34.332023][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.352014][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.371175][ T663] loop5: detected capacity change from 0 to 1024 [ 34.377618][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.393970][ T653] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.401069][ T653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.402015][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.408566][ T653] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.423074][ T653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.442015][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.448826][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.449535][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.464408][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.482077][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.492447][ T663] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 34.501943][ T663] EXT4-fs (loop5): orphan cleanup on readonly fs [ 34.502319][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.508995][ T663] EXT4-fs error (device loop5): ext4_free_blocks:6232: comm syz.5.92: Freeing blocks not in datazone - block = 0, count = 4096 [ 34.532277][ T663] EXT4-fs (loop5): Remounting filesystem read-only [ 34.539349][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.547008][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.547624][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.554790][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.554815][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.554834][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.587273][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.588999][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.595009][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.602181][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.609634][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.625314][ T662] loop0: detected capacity change from 0 to 40427 [ 34.632433][ T663] EXT4-fs (loop5): 1 orphan inode deleted [ 34.638312][ T663] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 34.642180][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.650654][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.662008][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.673333][ T662] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 34.680648][ T662] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 34.682217][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.696088][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.701989][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.710966][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.718644][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.726246][ T662] F2FS-fs (loop0): fault_type options not supported [ 34.735272][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.742928][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.750619][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.758069][ T662] F2FS-fs (loop0): invalid crc value [ 34.763521][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.763766][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.770913][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.770935][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.794141][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.804132][ T383] device bridge_slave_1 left promiscuous mode [ 34.810700][ T662] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 34.832063][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.839440][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.847998][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.872010][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.879437][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.887360][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.895774][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.903600][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.910994][ T662] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 34.918178][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.925811][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.933522][ T662] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.941315][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.963247][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.970897][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 34.978966][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.002036][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.009674][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.032021][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.039448][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.050906][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.058484][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.066619][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.074324][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.081908][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.089512][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.098528][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.101800][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 35.101813][ T30] audit: type=1400 audit(1774112072.998:260): avc: granted { setsecparam } for pid=673 comm="syz.5.96" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 35.106745][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.114206][ T30] audit: type=1400 audit(1774112073.018:261): avc: denied { create } for pid=673 comm="syz.5.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 35.131843][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.166137][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.168026][ T676] syz.0.97 (676): /proc/672/oom_adj is deprecated, please use /proc/672/oom_score_adj instead. [ 35.173805][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.173831][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.173849][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.173869][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.173888][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.173907][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.231651][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.239568][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.247341][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.254925][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.262721][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.270394][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.277850][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.285479][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.293093][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.300537][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.308266][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.315836][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.323309][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.330907][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.339053][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.346845][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.354410][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.361827][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.370173][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.377971][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.385568][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.393261][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.401017][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.408865][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.416293][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.424014][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.431426][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.439026][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.446639][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.454073][ T494] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 35.463433][ T383] device bridge_slave_0 left promiscuous mode [ 35.469641][ T494] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 35.479457][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.501113][ T383] device veth1_macvtap left promiscuous mode [ 35.507333][ T383] device veth0_vlan left promiscuous mode [ 35.618093][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.622013][ T498] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.649358][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.657656][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.666757][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.674774][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.685612][ T653] device veth0_vlan entered promiscuous mode [ 35.704121][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.713913][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.330466][ T689] loop5: detected capacity change from 0 to 512 [ 36.337287][ T653] device veth1_macvtap entered promiscuous mode [ 36.353389][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.361817][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.373217][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.392947][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.407660][ T689] EXT4-fs (loop5): Invalid want_extra_isize 75 [ 36.480765][ T30] audit: type=1400 audit(1774112074.378:262): avc: denied { mounton } for pid=653 comm="syz-executor" path="/root/syzkaller.m8x65i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.496301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.625403][ T702] loop0: detected capacity change from 0 to 128 [ 36.648409][ T696] capability: warning: `syz.5.102' uses 32-bit capabilities (legacy support in use) [ 36.688677][ T703] loop2: detected capacity change from 0 to 512 [ 36.872945][ T498] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.884803][ T30] audit: type=1326 audit(1774112074.498:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.6.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d061f799 code=0x7ffc0000 [ 36.916742][ T703] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 36.926336][ T30] audit: type=1326 audit(1774112074.498:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.6.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f49d061f799 code=0x7ffc0000 [ 36.942716][ T703] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.951613][ T30] audit: type=1326 audit(1774112074.498:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.6.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d061f799 code=0x7ffc0000 [ 36.985711][ T30] audit: type=1326 audit(1774112074.498:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.6.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d061f799 code=0x7ffc0000 [ 37.009512][ T30] audit: type=1326 audit(1774112074.498:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.6.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49d061f799 code=0x7ffc0000 [ 37.033665][ T30] audit: type=1326 audit(1774112074.508:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.6.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d061f799 code=0x7ffc0000 [ 37.058501][ T30] audit: type=1326 audit(1774112074.508:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=698 comm="syz.6.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d061f799 code=0x7ffc0000 [ 37.082038][ T498] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.091253][ T498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.104477][ T498] usb 4-1: Product: syz [ 37.108998][ T498] usb 4-1: Manufacturer: syz [ 37.116182][ T498] usb 4-1: SerialNumber: syz [ 37.152083][ T498] usb 4-1: can't set config #1, error -71 [ 37.170789][ T498] usb 4-1: USB disconnect, device number 7 [ 37.211061][ T722] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 37.225847][ T722] overlayfs: filesystem on './file0' not supported as upperdir [ 37.318146][ T719] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.332509][ T719] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 37.349829][ T719] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 1 with error 28 [ 37.363704][ T719] EXT4-fs (loop6): This should not happen!! Data will be lost [ 37.363704][ T719] [ 37.373991][ T719] EXT4-fs (loop6): Total free blocks count 0 [ 37.374011][ T719] EXT4-fs (loop6): Free/Dirty block details [ 37.374023][ T719] EXT4-fs (loop6): free_blocks=2415919520 [ 37.374036][ T719] EXT4-fs (loop6): dirty_blocks=16 [ 37.374047][ T719] EXT4-fs (loop6): Block reservation details [ 37.374057][ T719] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 37.443072][ T732] EXT4-fs (loop2): Invalid want_extra_isize 75 [ 37.552006][ T498] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 37.614768][ T735] set_capacity_and_notify: 2 callbacks suppressed [ 37.614784][ T735] loop0: detected capacity change from 0 to 40427 [ 37.642016][ T491] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 37.653081][ T735] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 37.664948][ T735] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 37.676024][ T735] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.713292][ T735] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 37.720587][ T735] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.776299][ T735] attempt to access beyond end of device [ 37.776299][ T735] loop0: rw=2049, want=55304, limit=40427 [ 37.791460][ T735] attempt to access beyond end of device [ 37.791460][ T735] loop0: rw=0, want=55304, limit=40427 [ 37.833776][ T281] attempt to access beyond end of device [ 37.833776][ T281] loop0: rw=2049, want=45104, limit=40427 [ 37.912069][ T498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 37.923311][ T736] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.930845][ T498] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.962114][ T498] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.990128][ T498] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.999778][ T498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.016094][ T498] usb 4-1: config 0 descriptor?? [ 38.056206][ T491] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.066734][ T491] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.162587][ T491] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 38.185439][ T491] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 38.443969][ T491] usb 7-1: SerialNumber: syz [ 38.458472][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 38.467264][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.479343][ T711] loop5: detected capacity change from 0 to 262144 [ 38.486802][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 38.504662][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.506379][ T711] F2FS-fs (loop5): invalid crc value [ 38.513339][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.526695][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.529839][ T711] F2FS-fs (loop5): Found nat_bits in checkpoint [ 38.535237][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.549773][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.563459][ T498] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 38.574945][ T711] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 38.575247][ T498] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 38.602463][ T736] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 38.616184][ T736] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 38.635324][ T736] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 38.644798][ T736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.672057][ T748] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 38.749843][ T719] UDC core: couldn't find an available UDC or it's busy: -16 [ 38.757618][ T719] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.813255][ T491] usb 7-1: 0:2 : does not exist [ 38.876464][ T766] loop5: detected capacity change from 0 to 128 [ 38.914088][ T491] usb 7-1: USB disconnect, device number 2 [ 38.946025][ T775] loop0: detected capacity change from 0 to 1024 [ 39.055002][ T775] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 39.055002][ T775] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 39.055002][ T775] [ 39.077095][ T775] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.096686][ T775] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,noblock_validity,init_itable=0x0000000000004068,user_xattr,max_dir_size_kb=0x00000000004007b2,data_err=ignore,nouid32,quota,user_xattr,noacl,dioread_nolock,,errors=continue. Quota mode: writeback. [ 39.133467][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.325352][ T790] loop0: detected capacity change from 0 to 512 [ 39.363749][ T790] EXT4-fs (loop0): Invalid want_extra_isize 75 [ 39.456643][ T778] loop5: detected capacity change from 0 to 131072 [ 39.507839][ T778] F2FS-fs (loop5): invalid crc value [ 39.530636][ T778] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 39.539638][ T801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 39.555477][ T801] netlink: 116 bytes leftover after parsing attributes in process `syz.0.126'. [ 39.582113][ T736] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 39.590393][ T736] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6 [ 39.842023][ T498] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.896841][ T806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.128'. [ 39.975917][ T806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=806 comm=syz.5.128 [ 39.995286][ T806] syz.5.128 (806) used greatest stack depth: 19712 bytes left [ 40.092101][ T498] usb 1-1: Using ep0 maxpacket: 16 [ 40.209304][ T839] netlink: 92 bytes leftover after parsing attributes in process `syz.6.144'. [ 40.212092][ T498] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.218587][ T839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.144'. [ 40.228784][ T498] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 40.237799][ T839] tc_dump_action: action bad kind [ 40.247216][ T498] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.408918][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 40.408930][ T30] audit: type=1400 audit(1774112078.308:306): avc: denied { setopt } for pid=866 comm="syz.6.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.436012][ T498] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.445359][ T498] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.454272][ T498] usb 1-1: Product: syz [ 40.458620][ T498] usb 1-1: Manufacturer: נּ픊䪻ਈ渂絣⢀⸆趖粹䮒婗æ©á¯£æ¦¯î–ªè›£á® á»êœ¸á†€ì¬Žé±¶è±“ォ쓀딆ꨯ栒駑窾푦頓籌뛄혞မ뼗ä共褰í•、Ἠæ‰çˆ›ä€¸ï¸±è„‡é»–陪庡쯠왖孜ᒺᛅ裎騣㰅뤊緙圤ڎ犻瀚輥Ⱬﲾ脞⊀å’â˜ï¶©ï”²çˆ’쾘횒ላ雃鈊紲〸ޑï¤è§«êƒ¥ëŸšâµ·ä¿²æ¡ë˜»åš™ï«²î¥¥ãëºîš›é»¦î§“ô‚‚½ê¤² [ 40.492189][ T498] usb 1-1: SerialNumber: syz [ 40.509060][ T30] audit: type=1400 audit(1774112078.408:307): avc: denied { map } for pid=870 comm="syz.6.160" path="socket:[18965]" dev="sockfs" ino=18965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.532945][ T30] audit: type=1400 audit(1774112078.408:308): avc: denied { read } for pid=870 comm="syz.6.160" path="socket:[18965]" dev="sockfs" ino=18965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 40.558726][ T30] audit: type=1400 audit(1774112078.458:309): avc: denied { shutdown } for pid=872 comm="syz.6.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.587976][ T875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=875 comm=syz.6.162 [ 40.602353][ T471] usb 4-1: USB disconnect, device number 8 [ 40.665334][ T878] pimreg0: tun_chr_ioctl cmd 1074025681 [ 40.743851][ T30] audit: type=1400 audit(1774112078.648:310): avc: denied { block_suspend } for pid=883 comm="syz.6.166" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.765480][ T471] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.782491][ T498] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 40.789538][ T498] cdc_ncm 1-1:1.0: bind() failure [ 40.789775][ T30] audit: type=1400 audit(1774112078.688:311): avc: denied { relabelfrom } for pid=885 comm="syz.6.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.796939][ T498] usb 1-1: USB disconnect, device number 7 [ 40.818250][ T30] audit: type=1400 audit(1774112078.688:312): avc: denied { relabelto } for pid=885 comm="syz.6.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 40.893948][ T888] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 40.903263][ T888] device syzkaller0 entered promiscuous mode [ 41.019570][ T902] netlink: 28 bytes leftover after parsing attributes in process `syz.5.176'. [ 41.105620][ T490] usb 3-1: USB disconnect, device number 4 [ 41.192488][ T471] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.219207][ T30] audit: type=1400 audit(1774112079.118:313): avc: denied { create } for pid=915 comm="syz.6.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 41.282304][ T471] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 41.302426][ T471] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 41.312024][ T935] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.320842][ T935] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.376458][ T30] audit: type=1400 audit(1774112079.278:314): avc: denied { read write } for pid=952 comm="syz.6.198" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.411874][ T30] audit: type=1400 audit(1774112079.278:315): avc: denied { open } for pid=952 comm="syz.6.198" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.502086][ T471] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 41.518199][ T471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.553106][ T471] usb 4-1: Product: syz [ 41.564930][ T471] usb 4-1: Manufacturer: syz [ 41.591993][ T471] usb 4-1: SerialNumber: syz [ 41.621536][ T971] netlink: 96 bytes leftover after parsing attributes in process `syz.6.208'. [ 41.799315][ T998] tipc: Enabled bearer , priority 0 [ 41.813989][ T998] device syzkaller0 entered promiscuous mode [ 41.835291][ T998] tipc: Resetting bearer [ 41.847877][ T997] tipc: Resetting bearer [ 41.855029][ T997] tipc: Disabling bearer [ 41.943737][ T1013] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 41.972115][ T471] usb 4-1: Can't get UAC3 power state for id 10 [ 42.052074][ T471] usb 4-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 42.067659][ T471] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 42.095953][ T471] usb 4-1: USB disconnect, device number 9 [ 42.801759][ T1115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.276'. [ 43.054040][ T1182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.303'. [ 43.097117][ T1193] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 43.259273][ T1206] netlink: 8 bytes leftover after parsing attributes in process `syz.6.313'. [ 43.396407][ T1220] xt_hashlimit: size too large, truncated to 1048576 [ 43.666008][ T1244] ================================================================== [ 43.674506][ T1244] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 43.683917][ T1244] Read of size 1 at addr ffff888120c8ebf8 by task syz.6.329/1244 [ 43.691830][ T1244] [ 43.694158][ T1244] CPU: 0 PID: 1244 Comm: syz.6.329 Not tainted syzkaller #0 [ 43.701454][ T1244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.711599][ T1244] Call Trace: [ 43.714996][ T1244] [ 43.717934][ T1244] __dump_stack+0x21/0x30 [ 43.722282][ T1244] dump_stack_lvl+0x110/0x170 [ 43.726975][ T1244] ? show_regs_print_info+0x20/0x20 [ 43.732185][ T1244] ? load_image+0x3e0/0x3e0 [ 43.736960][ T1244] ? unwind_get_return_address+0x4d/0x90 [ 43.742667][ T1244] print_address_description+0x7f/0x2c0 [ 43.748244][ T1244] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 43.755205][ T1244] kasan_report+0xf1/0x140 [ 43.759661][ T1244] ? xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 43.766279][ T1244] __asan_report_load1_noabort+0x14/0x20 [ 43.771923][ T1244] xfrm_policy_inexact_list_reinsert+0x606/0x6c0 [ 43.778420][ T1244] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 43.784617][ T1244] ? xfrm_netlink_rcv+0x72/0x90 [ 43.789776][ T1244] ? netlink_unicast+0x876/0xa40 [ 43.794920][ T1244] ? netlink_sendmsg+0x879/0xb80 [ 43.799922][ T1244] ? ____sys_sendmsg+0x5b7/0x8f0 [ 43.804878][ T1244] ? ___sys_sendmsg+0x236/0x2e0 [ 43.809742][ T1244] ? x64_sys_call+0x4b/0x9a0 [ 43.814767][ T1244] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.821035][ T1244] xfrm_policy_inexact_alloc_chain+0x53d/0xb30 [ 43.827205][ T1244] xfrm_policy_inexact_insert+0x70/0x1130 [ 43.832964][ T1244] ? __kasan_check_write+0x14/0x20 [ 43.838196][ T1244] ? _raw_spin_lock_bh+0x94/0xf0 [ 43.843253][ T1244] ? policy_hash_bysel+0x13f/0x6f0 [ 43.848735][ T1244] xfrm_policy_insert+0x126/0x9a0 [ 43.854003][ T1244] ? xfrm_policy_construct+0x54f/0x1f00 [ 43.859668][ T1244] xfrm_add_policy+0x4ed/0x850 [ 43.864548][ T1244] ? xfrm_dump_sa_done+0xc0/0xc0 [ 43.869657][ T1244] xfrm_user_rcv_msg+0x4dc/0x7b0 [ 43.874718][ T1244] ? xfrm_netlink_rcv+0x90/0x90 [ 43.879607][ T1244] ? avc_has_perm_noaudit+0x490/0x490 [ 43.885097][ T1244] ? x64_sys_call+0x4b/0x9a0 [ 43.889715][ T1244] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 43.895105][ T1244] netlink_rcv_skb+0x1f5/0x440 [ 43.899889][ T1244] ? xfrm_netlink_rcv+0x90/0x90 [ 43.904760][ T1244] ? netlink_ack+0xb50/0xb50 [ 43.909369][ T1244] ? wait_for_completion_killable_timeout+0x10/0x10 [ 43.915977][ T1244] ? __netlink_lookup+0x387/0x3b0 [ 43.921177][ T1244] xfrm_netlink_rcv+0x72/0x90 [ 43.925983][ T1244] netlink_unicast+0x876/0xa40 [ 43.930792][ T1244] netlink_sendmsg+0x879/0xb80 [ 43.935645][ T1244] ? netlink_getsockopt+0x530/0x530 [ 43.940868][ T1244] ? do_futex+0xde8/0x2800 [ 43.945365][ T1244] ? security_socket_sendmsg+0x82/0xa0 [ 43.950948][ T1244] ? netlink_getsockopt+0x530/0x530 [ 43.956176][ T1244] ____sys_sendmsg+0x5b7/0x8f0 [ 43.961056][ T1244] ? __sys_sendmsg_sock+0x40/0x40 [ 43.966298][ T1244] ? import_iovec+0x7c/0xb0 [ 43.969463][ T1256] tipc: Started in network mode [ 43.970833][ T1244] ___sys_sendmsg+0x236/0x2e0 [ 43.980484][ T1244] ? __sys_sendmsg+0x280/0x280 [ 43.982028][ T1256] tipc: Node identity e6506202887, cluster identity 4711 [ 43.985293][ T1244] ? __fdget+0x1a1/0x230 [ 43.997008][ T1244] __x64_sys_sendmsg+0x206/0x2f0 [ 44.001963][ T1244] ? ___sys_sendmsg+0x2e0/0x2e0 [ 44.002051][ T1256] tipc: Enabled bearer , priority 0 [ 44.006827][ T1244] ? __kasan_check_write+0x14/0x20 [ 44.006852][ T1244] ? switch_fpu_return+0x15d/0x2c0 [ 44.006874][ T1244] x64_sys_call+0x4b/0x9a0 [ 44.006892][ T1244] do_syscall_64+0x4c/0xa0 [ 44.006912][ T1244] ? clear_bhb_loop+0x50/0xa0 [ 44.036981][ T1256] device syzkaller0 entered promiscuous mode [ 44.038089][ T1244] ? clear_bhb_loop+0x50/0xa0 [ 44.048839][ T1244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.054936][ T1244] RIP: 0033:0x7f49d061f799 [ 44.059369][ T1244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.079642][ T1244] RSP: 002b:00007f49cf07a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.088301][ T1244] RAX: ffffffffffffffda RBX: 00007f49d0898fa0 RCX: 00007f49d061f799 [ 44.096457][ T1244] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000009 [ 44.104550][ T1244] RBP: 00007f49d06b5c99 R08: 0000000000000000 R09: 0000000000000000 [ 44.112626][ T1244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.120621][ T1244] R13: 00007f49d0899038 R14: 00007f49d0898fa0 R15: 00007fff7c239ec8 [ 44.128917][ T1244] [ 44.131950][ T1244] [ 44.134398][ T1244] Allocated by task 1244: [ 44.138723][ T1244] __kasan_kmalloc+0xda/0x110 [ 44.143499][ T1244] __kmalloc+0x13d/0x2c0 [ 44.147954][ T1244] sk_prot_alloc+0xed/0x320 [ 44.152560][ T1244] sk_alloc+0x38/0x430 [ 44.156634][ T1244] pfkey_create+0x12a/0x660 [ 44.161357][ T1244] __sock_create+0x38d/0x7a0 [ 44.165955][ T1244] __sys_socket+0xec/0x190 [ 44.170375][ T1244] __x64_sys_socket+0x7a/0x90 [ 44.175060][ T1244] x64_sys_call+0x8c5/0x9a0 [ 44.179561][ T1244] do_syscall_64+0x4c/0xa0 [ 44.184095][ T1244] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.189993][ T1244] [ 44.192321][ T1244] The buggy address belongs to the object at ffff888120c8e800 [ 44.192321][ T1244] which belongs to the cache kmalloc-1k of size 1024 [ 44.206545][ T1244] The buggy address is located 1016 bytes inside of [ 44.206545][ T1244] 1024-byte region [ffff888120c8e800, ffff888120c8ec00) [ 44.220117][ T1244] The buggy address belongs to the page: [ 44.225827][ T1244] page:ffffea0004832200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120c88 [ 44.236160][ T1244] head:ffffea0004832200 order:3 compound_mapcount:0 compound_pincount:0 [ 44.244665][ T1244] flags: 0x4000000000010200(slab|head|zone=1) [ 44.250839][ T1244] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 44.259765][ T1244] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 44.268440][ T1244] page dumped because: kasan: bad access detected [ 44.274851][ T1244] page_owner tracks the page as allocated [ 44.280562][ T1244] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 273, ts 20194076494, free_ts 0 [ 44.298193][ T1244] post_alloc_hook+0x192/0x1b0 [ 44.303142][ T1244] prep_new_page+0x1c/0x110 [ 44.307758][ T1244] get_page_from_freelist+0x2d3a/0x2dc0 [ 44.313384][ T1244] __alloc_pages+0x1a2/0x460 [ 44.318059][ T1244] new_slab+0xa1/0x4d0 [ 44.322389][ T1244] ___slab_alloc+0x381/0x810 [ 44.327079][ T1244] __slab_alloc+0x49/0x90 [ 44.331498][ T1244] __kmalloc_track_caller+0x169/0x2c0 [ 44.336952][ T1244] __alloc_skb+0x21a/0x740 [ 44.341490][ T1244] __napi_alloc_skb+0x162/0x2e0 [ 44.346345][ T1244] page_to_skb+0x287/0xb60 [ 44.350970][ T1244] receive_buf+0xcc7/0x4c50 [ 44.355564][ T1244] virtnet_poll+0x570/0xf40 [ 44.360060][ T1244] __napi_poll+0xbe/0x590 [ 44.364473][ T1244] net_rx_action+0x389/0x900 [ 44.369256][ T1244] handle_softirqs+0x250/0x560 [ 44.374106][ T1244] page_owner free stack trace missing [ 44.379554][ T1244] [ 44.381965][ T1244] Memory state around the buggy address: [ 44.388067][ T1244] ffff888120c8ea80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.396446][ T1244] ffff888120c8eb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.404684][ T1244] >ffff888120c8eb80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 44.412735][ T1244] ^ [ 44.420961][ T1244] ffff888120c8ec00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.429105][ T1244] ffff888120c8ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 44.437243][ T1244] ================================================================== [ 44.445567][ T1244] Disabling lock debugging due to kernel taint [ 44.466855][ T1259] tipc: Resetting bearer [ 44.484689][ T1255] tipc: Resetting bearer [ 44.492786][ T1255] tipc: Disabling bearer