last executing test programs: 19.065621053s ago: executing program 3 (id=4): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000002000000080000000800000001000000", @ANYRESOCT, @ANYBLOB="04"], 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sched_getparam(r0, &(0x7f0000000340)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x30, 0x19, 0x15, 0x3, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x14, 0x9, 0x0, 0x1, [@nested={0x10, 0x10c, 0x0, 0x1, [@typed={0xc, 0x72, 0x0, 0x0, @u64=0x6}]}]}]}, 0x30}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d682000000000000000000000001", [0x7]}) r6 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r6, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac3(r6, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000140)={0x0, 0x10, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlink(&(0x7f0000000100)='./file1\x00') splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) unlink(&(0x7f0000000640)='./file1\x00') r7 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd\x9b`;\x1c\xfc\xaf9\x98\x91\xe7\x00'/52, 0x0) splice(r2, 0x0, r7, 0x0, 0x400c5, 0x5) 15.600244492s ago: executing program 3 (id=10): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000240)={[{@block_validity}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@debug}, {@data_journal}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="05000000f8000000fd0920008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000002c0)={{}, {0x1, 0x4}, [{0x2, 0x3}], {0x4, 0x4}, [{0x8, 0x2}, {}, {0x8, 0x4}], {0x10, 0x96e861c38249012e}, {0x20, 0x7}}, 0x44, 0x1) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[], 0x1cb) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="0a188e9928e301df42ef860188a8", 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x22, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000f40)={[{@sb={'sb', 0x3d, 0x800}}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000000007020000f8ffffffb7ebffff07000000b70400000000000085000000030000001801000021696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001040000850000000600000095005b0000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) 15.081902285s ago: executing program 3 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f00000003c0)=0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) sendmsg$AUDIT_SET(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x3e9, 0x4, 0x70bd25, 0x25dfdbfe, {0x54, 0x0, 0x1, r4, 0xe251, 0x6, 0x6, 0x1, 0x0, 0x1db, 0x3551}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0xfd, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0xffffffffffffffff}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00210c2bbd0000fddbdf250a0080", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x81, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xdb41}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.081638965s ago: executing program 32 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f00000003c0)=0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) sendmsg$AUDIT_SET(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x3e9, 0x4, 0x70bd25, 0x25dfdbfe, {0x54, 0x0, 0x1, r4, 0xe251, 0x6, 0x6, 0x1, 0x0, 0x1db, 0x3551}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0xfd, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0xffffffffffffffff}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00210c2bbd0000fddbdf250a0080", @ANYRES32], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x81, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xdb41}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.317511285s ago: executing program 4 (id=65): execveat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000500), 0x0, 0x100) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000340)={0x5, {{0x2, 0x800, @multicast2}}, {{0x2, 0x3ff, @local}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007112460000000000950000070000df00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f00000005c0)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000020000027baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) 2.159471185s ago: executing program 4 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f0000000100)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001a00010000000000fedbdf250a0000003a2a5e247b00000009000300265c245d000000610c00"], 0x34}], 0x1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x8e93}, 0x1c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000ac0)={0x2020}, 0x2020) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x20004004) mprotect(&(0x7f00003ea000/0x1000)=nil, 0x1000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x3f00, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1}}}}) 2.106009996s ago: executing program 2 (id=75): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") open(0x0, 0x4827e, 0x20) userfaultfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000240)={@empty, 0x0, 0x2, 0x0, 0x5, 0x73, 0x2}, 0x20) 2.011670238s ago: executing program 1 (id=76): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x74, 0x0, 0xffffffffffffffff) setgid(0xee00) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r1 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000240)='stat\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = epoll_create(0x4) r7 = epoll_create(0xc1b) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x10}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000440)={&(0x7f0000000340)=""/205, 0xcd, 0x9, 0x5}) sendmmsg(r5, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x2e, 0x0, 0x0, 0xfffff010}]}, 0x10) 1.245491478s ago: executing program 2 (id=77): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_int(r0, 0x0, 0x0) 1.16996554s ago: executing program 4 (id=80): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") open(0x0, 0x4827e, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000240)={@empty, 0x0, 0x2, 0x0, 0x5, 0x73, 0x2}, 0x20) 1.111419822s ago: executing program 5 (id=83): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x275a, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.021645424s ago: executing program 2 (id=85): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd002000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x2, 0x5001) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 928.985306ms ago: executing program 0 (id=86): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@data_journal}, {@norecovery}]}, 0x3, 0x481, &(0x7f00000004c0)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./bus\x00', 0xc034e2, 0x0, 0x82, 0x0, &(0x7f0000000280)) chdir(&(0x7f00000003c0)='./bus\x00') mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 560.243855ms ago: executing program 5 (id=87): pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x10}}, 0x80) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000840), &(0x7f0000000340)}, 0x20) close(0x3) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xffec}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 427.533759ms ago: executing program 1 (id=88): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXA4XOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//hBVVxg==") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) pwritev2(r0, &(0x7f0000002f40)=[{&(0x7f0000002fc0)="0dcf", 0x2}], 0x1, 0x9c00, 0x2, 0x3) openat$dir(0xffffffffffffff9c, &(0x7f0000003140)='./file2\x00', 0x880000, 0x0) 365.86011ms ago: executing program 0 (id=89): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)="0f", 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc020) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x20, r2, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 348.929341ms ago: executing program 5 (id=90): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000535000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 326.012091ms ago: executing program 5 (id=91): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x403, 0x278bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90606}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) 257.918773ms ago: executing program 5 (id=92): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xd, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0x810, 0xb, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x7, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x440dc}, 0x24000080) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) 257.689863ms ago: executing program 4 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 147.809266ms ago: executing program 0 (id=94): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 147.504156ms ago: executing program 2 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 142.760156ms ago: executing program 5 (id=96): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x0, 0x1, 0x4, "068193b8"}, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2001d4000000ec4e644d6c981f3ce1a5f335ba47655f33ba7519cb8fec751fd9292c94da9b2886d49f1cf463c45474fd0870eb0c037c55a9955676792add20f8f1d771dca6dfc4478b83dbe12645c5adff952d63a09f27462f4a25aead4d78bace756ac3e3c148af9bb7c248fe360f353dd67bfcc9479f35b992a8e17b1892d3b91fff11432865b596785e95a780788cb657616467c8bbfd6f742a17289bfa0128c2bbc5"], &(0x7f0000000740)={0x20, 0x3, 0x1, 0xcc}}) 83.752148ms ago: executing program 1 (id=97): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x503, {0x0, 0x6, '\x00', 0xd74b, 0x0, 0xff, @private1, @mcast2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 83.569658ms ago: executing program 0 (id=98): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 83.347458ms ago: executing program 2 (id=99): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec0000002100010000000000000000007f000001000000ff0300000000000000fe80000000000000000000000000002000010000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100e0000001000000000000000000000000fe8000000000000000000000000000bbfc020000000000000000000000000001200100000000000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 83.240998ms ago: executing program 0 (id=100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6dc}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) 82.929768ms ago: executing program 2 (id=101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf32(r3, 0x0, 0x98) close(r3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) creat(0x0, 0xd931d3864d39dcdb) execve(0x0, 0x0, 0x0) signalfd(r2, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 82.704978ms ago: executing program 1 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040021}, 0x30) 30.051449ms ago: executing program 4 (id=103): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) 29.854119ms ago: executing program 1 (id=104): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0x2, @in6=@empty, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x8, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) 27.607349ms ago: executing program 1 (id=105): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.39343ms ago: executing program 0 (id=106): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000013c0)='./file1\x00', 0xa18cd6, &(0x7f0000000100)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_mixed}, {@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@shortname_lower}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@discard}, {@shortname_winnt}, {@rodir}, {@numtail}, {@shortname_win95}]}, 0x81, 0x2b7, &(0x7f0000000380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 4 (id=107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4c084) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendfile(r0, r1, 0x0, 0x7ffff006) 0s ago: executing program 1 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xffe0, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xfffffffffffffffb, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 17.821950][ T30] audit: type=1400 audit(1782898017.289:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.823028][ T277] cgroup: Unknown subsys name 'net' [ 17.825522][ T30] audit: type=1400 audit(1782898017.289:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.829487][ T30] audit: type=1400 audit(1782898017.299:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 17.829614][ T277] cgroup: Unknown subsys name 'devices' [ 17.936434][ T277] cgroup: Unknown subsys name 'hugetlb' [ 17.942044][ T277] cgroup: Unknown subsys name 'rlimit' [ 18.078604][ T30] audit: type=1400 audit(1782898017.549:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.101866][ T30] audit: type=1400 audit(1782898017.549:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 18.126759][ T30] audit: type=1400 audit(1782898017.549:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.132705][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 18.158795][ T30] audit: type=1400 audit(1782898017.639:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.184282][ T30] audit: type=1400 audit(1782898017.639:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.192812][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.210082][ T30] audit: type=1400 audit(1782898017.659:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.244085][ T30] audit: type=1400 audit(1782898017.659:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.062567][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.069655][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.077748][ T285] device bridge_slave_0 entered promiscuous mode [ 19.085561][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.092583][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.099936][ T285] device bridge_slave_1 entered promiscuous mode [ 19.174176][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.181253][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.188791][ T286] device bridge_slave_0 entered promiscuous mode [ 19.197168][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.204198][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.211610][ T286] device bridge_slave_1 entered promiscuous mode [ 19.227224][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.234446][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.241704][ T289] device bridge_slave_0 entered promiscuous mode [ 19.251431][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.258517][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.265963][ T289] device bridge_slave_1 entered promiscuous mode [ 19.357947][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.365036][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.372306][ T288] device bridge_slave_0 entered promiscuous mode [ 19.381743][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.388879][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.396369][ T288] device bridge_slave_1 entered promiscuous mode [ 19.402854][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.409895][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.417223][ T287] device bridge_slave_0 entered promiscuous mode [ 19.442524][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.449648][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.457020][ T287] device bridge_slave_1 entered promiscuous mode [ 19.497874][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.504939][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.512226][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.519281][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.558038][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.565084][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.572302][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.579323][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.614345][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.623353][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.630680][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.637733][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.646508][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.653539][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.660827][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.667856][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.702246][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.709492][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.716765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.724309][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.731801][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.739064][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.746392][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.754002][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.761296][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.785653][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.793032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.800635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.808959][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.815988][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.823738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.832037][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.839206][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.847722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.855984][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.862997][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.887609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.895155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.903259][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.910294][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.917779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.929506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.946496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.955053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.963178][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.970215][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.977692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.986063][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.993065][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.000432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.008557][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.015589][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.022915][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.031102][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.038123][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.060018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.068198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.076339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.084355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.092781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.101506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.109765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.118167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.126350][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.133367][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.140757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.149045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.157557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.165727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.173652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.181766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.189761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.205721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.214041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.222296][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.229334][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.236836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.244818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.252690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.260845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.268442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.283630][ T285] device veth0_vlan entered promiscuous mode [ 20.290498][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.298669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.306753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.315231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.323125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.331567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.342548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.359350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.367921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.379466][ T286] device veth0_vlan entered promiscuous mode [ 20.387890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.395744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.403713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.411902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.420163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.427734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.435464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.442871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.452903][ T285] device veth1_macvtap entered promiscuous mode [ 20.462751][ T287] device veth0_vlan entered promiscuous mode [ 20.469624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.477866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.486078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.493630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.502490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.516976][ T289] device veth0_vlan entered promiscuous mode [ 20.527503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.536528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.544887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.553112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.561528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.569802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.577692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.585756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.593209][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.602076][ T286] device veth1_macvtap entered promiscuous mode [ 20.611736][ T288] device veth0_vlan entered promiscuous mode [ 20.618906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.626605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.634947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.643333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.654321][ T289] device veth1_macvtap entered promiscuous mode [ 20.667541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.675369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.682773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.690983][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.699349][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.709899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.718331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.726615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.735022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.745961][ T287] device veth1_macvtap entered promiscuous mode [ 20.755704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.763883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.772243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.784598][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 20.803304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.812294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.820921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.830066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.838751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.847307][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.856480][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.865059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.877851][ T288] device veth1_macvtap entered promiscuous mode [ 20.896624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.931927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.942625][ T314] loop0: detected capacity change from 0 to 512 [ 20.943571][ T315] loop4: detected capacity change from 0 to 512 [ 20.949513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.965689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.973979][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.008149][ T310] loop1: detected capacity change from 0 to 40427 [ 21.036917][ T315] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 21.050755][ T323] loop3: detected capacity change from 0 to 256 [ 21.063969][ T315] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.081483][ T314] EXT4-fs (loop0): Project quota feature not enabled. Cannot enable project quota enforcement. [ 21.115785][ T323] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 21.130456][ T310] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 21.198330][ T326] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 21.482652][ T310] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 23.193317][ T310] F2FS-fs (loop1): invalid crc value [ 23.220093][ T310] F2FS-fs (loop1): Found nat_bits in checkpoint [ 23.227165][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 23.227181][ T30] audit: type=1400 audit(1782898022.669:100): avc: denied { mounton } for pid=316 comm="syz.3.4" path="/0/file0/bus" dev="loop3" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 23.287666][ T30] audit: type=1400 audit(1782898022.729:101): avc: denied { read write } for pid=316 comm="syz.3.4" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.319689][ T30] audit: type=1400 audit(1782898022.729:102): avc: denied { open } for pid=316 comm="syz.3.4" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.342950][ T30] audit: type=1400 audit(1782898022.729:103): avc: denied { ioctl } for pid=316 comm="syz.3.4" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.367918][ T310] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 23.384473][ T310] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 23.438402][ T30] audit: type=1400 audit(1782898022.909:104): avc: denied { write } for pid=309 comm="syz.1.2" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.480205][ T30] audit: type=1400 audit(1782898022.929:105): avc: denied { add_name } for pid=309 comm="syz.1.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.521244][ T30] audit: type=1400 audit(1782898022.929:106): avc: denied { create } for pid=309 comm="syz.1.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 23.544428][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.676150][ T317] loop3: detected capacity change from 256 to 64 [ 23.746579][ T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.764405][ T30] audit: type=1400 audit(1782898023.219:107): avc: denied { read } for pid=312 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.824445][ T30] audit: type=1400 audit(1782898023.219:108): avc: denied { open } for pid=312 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.874492][ T30] audit: type=1400 audit(1782898023.219:109): avc: denied { ioctl } for pid=312 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 23.909543][ T314] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 23.944799][ T314] kvm: pic: single mode not supported [ 23.944950][ T314] kvm: pic: non byte read [ 23.964616][ T60] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.964878][ T314] kvm: pic: non byte read [ 24.024446][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.104467][ T311] usb 4-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config [ 24.124306][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.334577][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.345626][ T311] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 24.350054][ T346] loop0: detected capacity change from 0 to 40427 [ 24.361305][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.369680][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.379874][ T346] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 24.382105][ T341] loop4: detected capacity change from 0 to 131072 [ 24.394683][ T60] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 24.402315][ T346] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 24.404050][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.420173][ T311] usb 4-1: can't set config #1, error -71 [ 24.436397][ T341] F2FS-fs (loop4): invalid crc value [ 24.437198][ T346] F2FS-fs (loop0): Found nat_bits in checkpoint [ 24.449611][ T286] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006900) [ 24.458255][ T311] usb 4-1: USB disconnect, device number 2 [ 24.467002][ T286] FAT-fs (loop3): Filesystem has been set read-only [ 24.477260][ T60] usb 3-1: config 0 descriptor?? [ 24.490867][ T286] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000000ff) [ 24.502518][ T341] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.521958][ T286] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000000ff) [ 24.563396][ T346] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 24.563931][ T341] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 24.570847][ T346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 24.644609][ T346] attempt to access beyond end of device [ 24.644609][ T346] loop0: rw=2049, want=45112, limit=40427 [ 24.666780][ T286] syz-executor (286) used greatest stack depth: 22056 bytes left [ 24.740130][ T362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 24.909828][ T338] UDC core: couldn't find an available UDC or it's busy: -16 [ 24.937571][ T338] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 25.111553][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.119015][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.130757][ T365] device bridge_slave_0 entered promiscuous mode [ 25.142372][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.150229][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.159000][ T60] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 25.196184][ T365] device bridge_slave_1 entered promiscuous mode [ 25.433335][ T362] syz.1.11 (362) used greatest stack depth: 21408 bytes left [ 25.528641][ T60] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 25.540868][ T60] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 25.558724][ T60] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 25.576148][ T60] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 25.584679][ T60] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 25.643119][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.650684][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.668160][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.676982][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.685703][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.693035][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.701408][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.710178][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.718646][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.725708][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.735282][ T306] device bridge_slave_1 left promiscuous mode [ 25.741432][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.749456][ T306] device bridge_slave_0 left promiscuous mode [ 25.755874][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.764042][ T306] device veth1_macvtap left promiscuous mode [ 25.770288][ T306] device veth0_vlan left promiscuous mode [ 25.804533][ T60] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 32: -32 [ 25.813962][ T60] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense firmware info: -32 [ 25.824220][ T60] playstation 0003:054C:0DF2.0001: Failed to get firmware info from DualSense [ 25.833126][ T60] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 25.842079][ T60] playstation: probe of 0003:054C:0DF2.0001 failed with error -32 [ 25.858055][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.866667][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.874811][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.886915][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.895145][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.909608][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.918041][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.929746][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.937775][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.946819][ T365] device veth0_vlan entered promiscuous mode [ 25.954762][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.962622][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.976384][ T365] device veth1_macvtap entered promiscuous mode [ 25.984075][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.996896][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.005281][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.026909][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.036621][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.104593][ T298] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 26.134284][ T385] loop1: detected capacity change from 0 to 1024 [ 26.154694][ T385] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 26.161386][ T381] loop0: detected capacity change from 0 to 40427 [ 26.173398][ T385] EXT4-fs (loop1): orphan cleanup on readonly fs [ 26.184141][ T381] F2FS-fs (loop0): invalid crc value [ 26.192983][ T385] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.18: Invalid inode table block 0 in block_group 0 [ 26.201142][ T381] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 26.206453][ T385] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 26.226749][ T385] EXT4-fs error (device loop1): ext4_quota_write:6639: inode #3: comm syz.1.18: mark_inode_dirty error [ 26.234769][ T381] F2FS-fs (loop0): Start checkpoint disabled! [ 26.238822][ T385] EXT4-fs error (device loop1): ext4_acquire_dquot:6227: comm syz.1.18: Failed to acquire dquot type 0 [ 26.244502][ T381] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 26.262930][ T385] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.18: Invalid inode table block 0 in block_group 0 [ 26.275725][ T385] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 26.285862][ T385] EXT4-fs error (device loop1): ext4_ext_truncate:4472: inode #15: comm syz.1.18: mark_inode_dirty error [ 26.297739][ T385] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.18: Invalid inode table block 0 in block_group 0 [ 26.310793][ T385] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 26.321502][ T385] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 26.330999][ T385] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.18: Invalid inode table block 0 in block_group 0 [ 26.343888][ T385] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 26.358426][ T385] EXT4-fs error (device loop1): ext4_truncate:4317: inode #15: comm syz.1.18: mark_inode_dirty error [ 26.369502][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 26.377223][ T385] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 26.390916][ T392] loop0: detected capacity change from 0 to 128 [ 26.394896][ T385] EXT4-fs (loop1): 1 truncate cleaned up [ 26.401401][ T392] ======================================================= [ 26.401401][ T392] WARNING: The mand mount option has been deprecated and [ 26.401401][ T392] and is ignored by this kernel. Remove the mand [ 26.401401][ T392] option from the mount to silence this warning. [ 26.401401][ T392] ======================================================= [ 26.403295][ T385] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.439064][ T392] EXT4-fs (loop0): can't mount with commit=65537, fs mounted w/o journal [ 26.536660][ T394] loop1: detected capacity change from 0 to 2048 [ 26.567070][ T394] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none. [ 26.584460][ T298] usb 5-1: unable to get BOS descriptor or descriptor too short [ 26.598662][ T394] EXT4-fs (loop1): shut down requested (1) [ 26.624497][ T298] usb 5-1: not running at top speed; connect to a high speed hub [ 26.664422][ T26] usb 6-1: Using ep0 maxpacket: 16 [ 26.678816][ T392] loop0: detected capacity change from 0 to 40427 [ 26.714482][ T298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.731163][ T392] F2FS-fs (loop0): invalid crc value [ 26.740223][ T298] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 5376, setting to 64 [ 26.758443][ T298] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.772851][ T392] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 26.784549][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.801594][ T392] F2FS-fs (loop0): Start checkpoint disabled! [ 26.804579][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.808418][ T392] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 26.835570][ T26] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.848600][ T394] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 26.857773][ T26] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.867194][ T394] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 26.876103][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.876284][ T394] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 26.884823][ T26] usb 6-1: config 0 descriptor?? [ 26.918675][ T394] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 26.927624][ T394] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 26.934749][ T298] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 26.944753][ T394] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 26.951686][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.961803][ T394] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 26.962455][ T298] usb 5-1: Product: syz [ 26.975303][ T298] usb 5-1: Manufacturer: syz [ 26.979904][ T298] usb 5-1: SerialNumber: syz [ 26.980270][ T394] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 26.997748][ T394] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 27.007292][ T402] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 27.010267][ T394] incfs: Can't find or create .index dir in ./file0 [ 27.022873][ T394] incfs: mount failed -5 [ 27.024651][ T378] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.120692][ T406] cgroup: fork rejected by pids controller in /syz1 [ 27.388728][ T26] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 27.493373][ T26] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 27.514893][ T298] usb 5-1: MIDIStreaming interface descriptor not found [ 27.586318][ T383] UDC core: couldn't find an available UDC or it's busy: -16 [ 27.666772][ T298] usb 5-1: USB disconnect, device number 2 [ 27.676875][ T383] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.775356][ T26] microsoft 0003:045E:07DA.0002: unbalanced collection at end of report description [ 27.885999][ T401] device bridge_slave_1 left promiscuous mode [ 28.168595][ T401] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.194839][ T26] microsoft 0003:045E:07DA.0002: parse failed [ 28.201241][ T401] device bridge_slave_0 left promiscuous mode [ 28.201588][ T26] microsoft: probe of 0003:045E:07DA.0002 failed with error -22 [ 28.215909][ T401] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.222855][ T26] usb 6-1: USB disconnect, device number 2 [ 28.240269][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 28.240283][ T30] audit: type=1400 audit(1782898027.709:168): avc: denied { bind } for pid=412 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.266704][ T401] device veth0_vlan left promiscuous mode [ 28.285260][ T390] usb 3-1: USB disconnect, device number 2 [ 28.314315][ T30] audit: type=1400 audit(1782898027.719:169): avc: denied { read } for pid=416 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.335724][ T30] audit: type=1400 audit(1782898027.719:170): avc: denied { open } for pid=416 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.359042][ T30] audit: type=1400 audit(1782898027.739:171): avc: denied { connect } for pid=412 comm="syz.2.25" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.541409][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.565379][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.585343][ T30] audit: type=1400 audit(1782898028.049:172): avc: denied { create } for pid=422 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.607411][ T416] device bridge_slave_0 entered promiscuous mode [ 28.630053][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.636124][ T30] audit: type=1400 audit(1782898028.089:173): avc: denied { map } for pid=422 comm="syz.0.27" path="socket:[16642]" dev="sockfs" ino=16642 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 28.660841][ T420] loop4: detected capacity change from 0 to 40427 [ 28.665536][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.682015][ T416] device bridge_slave_1 entered promiscuous mode [ 28.702905][ T30] audit: type=1400 audit(1782898028.169:174): avc: denied { nlmsg_read } for pid=426 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.741772][ T427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 28.747364][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.750819][ T420] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 28.757638][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.757736][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.779784][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.788472][ T420] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 28.796966][ T30] audit: type=1400 audit(1782898028.269:175): avc: denied { map } for pid=429 comm="syz.5.29" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.821662][ T420] F2FS-fs (loop4): invalid crc value [ 28.828237][ T30] audit: type=1400 audit(1782898028.269:176): avc: denied { execute } for pid=429 comm="syz.5.29" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.852444][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.873128][ T30] audit: type=1400 audit(1782898028.339:177): avc: denied { block_suspend } for pid=436 comm="syz.2.30" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.898015][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.907376][ T420] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.916310][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.933697][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.949456][ T440] loop0: detected capacity change from 0 to 512 [ 28.954626][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.962772][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.982733][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.991137][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.994833][ T420] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 29.007100][ T420] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 29.007577][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.027942][ T416] device veth0_vlan entered promiscuous mode [ 29.045319][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.053612][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.061463][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.076339][ T416] device veth1_macvtap entered promiscuous mode [ 29.083259][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.096808][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.115752][ T440] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 29.144679][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.154966][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.180402][ T442] loop5: detected capacity change from 0 to 40427 [ 29.189967][ T440] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.205380][ T442] F2FS-fs (loop5): Found nat_bits in checkpoint [ 29.251516][ T440] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.31: corrupted xattr block 6 [ 29.271665][ T440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 29.275938][ T442] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 29.311750][ T453] device bridge0 entered promiscuous mode [ 29.317710][ T440] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.31: corrupted xattr block 6 [ 29.329906][ T453] bridge0: port 3(vlan2) entered blocking state [ 29.338602][ T453] bridge0: port 3(vlan2) entered disabled state [ 29.347576][ T454] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #12: comm syz.0.31: corrupted xattr block 6 [ 29.353899][ T440] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 29.369667][ T453] device bridge0 left promiscuous mode [ 29.380773][ T455] loop4: detected capacity change from 0 to 2048 [ 29.384864][ T447] loop1: detected capacity change from 0 to 40427 [ 29.387622][ T440] overlayfs: missing 'lowerdir' [ 29.414420][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 29.471631][ T447] F2FS-fs (loop1): invalid crc value [ 29.480436][ T455] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.491913][ T447] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 29.511370][ T453] EXT4-fs (loop4): shut down requested (2) [ 29.531328][ T453] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 29.593979][ T464] attempt to access beyond end of device [ 29.593979][ T464] loop5: rw=2049, want=45224, limit=40427 [ 29.915279][ T453] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 29.928991][ T463] Zero length message leads to an empty skb [ 29.928989][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.929029][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.935865][ T365] attempt to access beyond end of device [ 29.935865][ T365] loop5: rw=2049, want=45232, limit=40427 [ 29.948196][ T447] F2FS-fs (loop1): Start checkpoint disabled! [ 29.975000][ T453] netlink: 'syz.4.33': attribute type 34 has an invalid length. [ 29.983030][ T447] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 30.124619][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.133849][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.142129][ T311] usb 3-1: Product: syz [ 30.146623][ T311] usb 3-1: Manufacturer: syz [ 30.151420][ T311] usb 3-1: SerialNumber: syz [ 30.294488][ T390] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.357512][ T476] process 'syz.0.38' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 30.434883][ T311] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 30.442472][ T311] cdc_ncm 3-1:1.0: bind() failure [ 30.458249][ T311] usb 3-1: USB disconnect, device number 3 [ 30.564407][ T390] usb 2-1: device descriptor read/64, error -71 [ 30.605308][ T483] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 30.654567][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 30.954404][ T390] usb 2-1: device descriptor read/64, error -71 [ 31.004713][ T487] tipc: Started in network mode [ 31.009687][ T487] tipc: Node identity 0200000000000000ff0f, cluster identity 4711 [ 31.022865][ T487] FAT-fs (loop2): Unrecognized mount option "short=winnt" or missing value [ 31.034512][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.047082][ T20] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.056536][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.068025][ T20] usb 6-1: config 0 descriptor?? [ 31.244484][ T390] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.381430][ T495] set_capacity_and_notify: 3 callbacks suppressed [ 31.381442][ T495] loop0: detected capacity change from 0 to 40427 [ 31.436647][ T495] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 31.444800][ T495] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 31.463535][ T495] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.494139][ T495] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 31.501403][ T495] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.514448][ T390] usb 2-1: device descriptor read/64, error -71 [ 31.531164][ T501] loop4: detected capacity change from 0 to 128 [ 31.553288][ T479] loop5: detected capacity change from 0 to 4096 [ 31.585244][ T479] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 31.594718][ T479] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 31.594718][ T479] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 31.594718][ T479] [ 31.622260][ T479] EXT4-fs (loop5): Test dummy encryption mode enabled [ 31.629730][ T479] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 31.642995][ T501] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 31.658492][ T501] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.696664][ T495] attempt to access beyond end of device [ 31.696664][ T495] loop0: rw=2049, want=81864, limit=40427 [ 31.724082][ T495] attempt to access beyond end of device [ 31.724082][ T495] loop0: rw=2049, want=81920, limit=40427 [ 31.739751][ T495] attempt to access beyond end of device [ 31.739751][ T495] loop0: rw=2049, want=51200, limit=40427 [ 31.757226][ T495] attempt to access beyond end of device [ 31.757226][ T495] loop0: rw=2049, want=53248, limit=40427 [ 31.775142][ T495] attempt to access beyond end of device [ 31.775142][ T495] loop0: rw=2049, want=60016, limit=40427 [ 31.792737][ T495] attempt to access beyond end of device [ 31.792737][ T495] loop0: rw=2049, want=62064, limit=40427 [ 31.804303][ T504] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 31.809835][ T495] attempt to access beyond end of device [ 31.809835][ T495] loop0: rw=2049, want=64112, limit=40427 [ 31.833931][ T495] attempt to access beyond end of device [ 31.833931][ T495] loop0: rw=2049, want=65432, limit=40427 [ 31.864414][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.914464][ T390] usb 2-1: device descriptor read/64, error -71 [ 32.034551][ T390] usb usb2-port1: attempt power cycle [ 32.085173][ T20] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 32.095248][ T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0003/input/input5 [ 32.178186][ T20] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 32.212841][ T401] attempt to access beyond end of device [ 32.212841][ T401] loop1: rw=2049, want=40976, limit=40427 [ 32.356625][ T511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 32.410698][ T513] xt_hashlimit: size too large, truncated to 1048576 [ 32.554713][ T495] syz.0.44 (495) used greatest stack depth: 21216 bytes left [ 32.594348][ T287] F2FS-fs (loop0): Issue discard(6144, 6144, 512) failed, ret: -5 [ 32.594671][ T287] F2FS-fs (loop0): Issue discard(9728, 9728, 512) failed, ret: -5 [ 32.606178][ T287] F2FS-fs (loop0): Issue discard(7168, 7168, 513) failed, ret: -5 [ 32.636748][ T516] loop4: detected capacity change from 0 to 40427 [ 32.722749][ T516] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.736174][ T523] loop0: detected capacity change from 0 to 256 [ 32.756923][ T523] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 32.788029][ T525] loop2: detected capacity change from 0 to 256 [ 32.798922][ T516] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.818099][ T525] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 33.994642][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 33.994658][ T30] audit: type=1400 audit(1782898032.719:256): avc: denied { create } for pid=522 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.021188][ T525] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 34.030256][ T525] exFAT-fs (loop2): Filesystem has been set read-only [ 34.115793][ T523] exFAT-fs (loop0): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 34.125291][ T523] exFAT-fs (loop0): Filesystem has been set read-only [ 34.169577][ T390] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 34.184761][ T30] audit: type=1400 audit(1782898032.719:257): avc: denied { setopt } for pid=522 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.204847][ T30] audit: type=1400 audit(1782898032.719:258): avc: denied { bind } for pid=522 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.213224][ T307] usb 6-1: USB disconnect, device number 3 [ 34.272596][ T538] loop5: detected capacity change from 0 to 256 [ 34.288369][ T538] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 34.289058][ T30] audit: type=1400 audit(1782898032.779:259): avc: denied { associate } for pid=522 comm="syz.0.50" name="control" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 34.371275][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 34.384458][ T30] audit: type=1400 audit(1782898033.739:260): avc: denied { read } for pid=536 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.434632][ T30] audit: type=1400 audit(1782898033.799:261): avc: denied { nlmsg_write } for pid=533 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 34.456259][ T390] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 34.459224][ T545] loop5: detected capacity change from 0 to 16 [ 34.468504][ T390] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 34.487064][ T30] audit: type=1400 audit(1782898033.799:262): avc: denied { read write } for pid=535 comm="syz.5.56" name="file2" dev="loop5" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.511390][ T390] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.518595][ T390] usb 2-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 34.529213][ T545] erofs: (device loop5): mounted with root inode @ nid 36. [ 34.532585][ T390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.551587][ T30] audit: type=1400 audit(1782898033.799:263): avc: denied { open } for pid=535 comm="syz.5.56" path="/7/file2/file2" dev="loop5" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.580394][ T390] usb 2-1: config 0 descriptor?? [ 34.619810][ T30] audit: type=1400 audit(1782898033.809:264): avc: denied { create } for pid=535 comm="syz.5.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.660820][ T553] Invalid argument reading file caps for ./file0 [ 34.692317][ T30] audit: type=1400 audit(1782898033.819:265): avc: denied { map } for pid=535 comm="syz.5.56" path="/7/file2/file2" dev="loop5" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.759890][ T547] loop4: detected capacity change from 0 to 40427 [ 34.927569][ T547] F2FS-fs (loop4): invalid crc value [ 34.979751][ T547] F2FS-fs (loop4): Found nat_bits in checkpoint [ 34.986878][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.111964][ T547] F2FS-fs (loop4): Start checkpoint disabled! [ 35.121069][ T547] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 35.197018][ T390] wacom 0003:056A:0013.0004: ignoring exceeding usage max [ 35.254882][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 35.275523][ T390] wacom 0003:056A:0013.0004: ignoring exceeding usage max [ 35.357585][ T390] wacom 0003:056A:0013.0004: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 35.384665][ T39] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.410584][ T39] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.431470][ T390] wacom 0003:056A:0013.0004: hidraw0: USB HID v4.81 Device [HID 056a:0013] on usb-dummy_hcd.1-1/input0 [ 35.647545][ T10] handle_bad_sector: 5 callbacks suppressed [ 35.647566][ T10] attempt to access beyond end of device [ 35.647566][ T10] loop4: rw=2049, want=40976, limit=40427 [ 35.692820][ T390] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0013.0004/input/input6 [ 35.692979][ T561] xt_l2tp: unknown flags: 10 [ 35.709513][ T390] usb 2-1: USB disconnect, device number 4 [ 35.744225][ T562] fido_id[562]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 35.836553][ T339] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 35.837468][ T566] capability: warning: `syz.2.61' uses deprecated v2 capabilities in a way that may be insecure [ 35.876900][ T39] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.886536][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.894602][ T39] usb 1-1: Product: syz [ 35.898793][ T39] usb 1-1: Manufacturer: syz [ 35.903401][ T39] usb 1-1: SerialNumber: syz [ 36.234431][ T339] usb 6-1: Using ep0 maxpacket: 32 [ 36.304508][ T39] usb 1-1: 0:2 : does not exist [ 36.354494][ T339] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 33, using maximum allowed: 30 [ 36.369056][ T339] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 36.382292][ T339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 36.393075][ T571] loop1: detected capacity change from 0 to 1024 [ 36.399531][ T339] usb 6-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 36.406767][ T39] usb 1-1: USB disconnect, device number 3 [ 36.410880][ T339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.423518][ T339] usb 6-1: config 0 descriptor?? [ 36.463134][ T571] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 36.480606][ T571] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.652375][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.753741][ T595] loop1: detected capacity change from 0 to 512 [ 37.760594][ T339] usbhid 6-1:0.0: can't add hid device: -71 [ 37.767356][ T339] usbhid: probe of 6-1:0.0 failed with error -71 [ 37.785844][ T339] usb 6-1: USB disconnect, device number 4 [ 37.822099][ T595] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 37.843502][ T595] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.908259][ T607] loop1: detected capacity change from 0 to 128 [ 37.933905][ T606] loop2: detected capacity change from 0 to 4096 [ 37.954037][ T606] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 37.979274][ T607] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.999547][ T607] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.162656][ T615] syz.2.75 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.849237][ T620] loop0: detected capacity change from 0 to 256 [ 38.861502][ T622] loop4: detected capacity change from 0 to 4096 [ 38.898617][ T628] loop5: detected capacity change from 0 to 256 [ 38.901777][ T626] device syzkaller0 entered promiscuous mode [ 38.918114][ T622] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 39.006956][ T636] loop5: detected capacity change from 0 to 512 [ 39.014323][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 39.014337][ T30] audit: type=1400 audit(1782898038.479:344): avc: denied { write } for pid=633 comm="syz.0.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.144083][ T641] loop0: detected capacity change from 0 to 512 [ 39.365479][ T30] audit: type=1400 audit(1782898038.829:345): avc: denied { create } for pid=637 comm="syz.2.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.390972][ T636] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 39.405287][ T636] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.416740][ T641] EXT4-fs (loop0): Test dummy encryption mode enabled [ 39.423658][ T641] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.437159][ T641] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.439698][ T30] audit: type=1400 audit(1782898038.909:346): avc: denied { write } for pid=635 comm="syz.5.83" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.475088][ T30] audit: type=1400 audit(1782898038.939:347): avc: denied { add_name } for pid=635 comm="syz.5.83" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.489043][ T641] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.86: bad orphan inode 131072 [ 39.506929][ T30] audit: type=1400 audit(1782898038.939:348): avc: denied { create } for pid=635 comm="syz.5.83" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.508657][ T641] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,data=journal,norecovery,,errors=continue. Quota mode: none. [ 39.543037][ T30] audit: type=1400 audit(1782898038.939:349): avc: denied { read write open } for pid=635 comm="syz.5.83" path="/11/file1/bus/file1" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.567564][ T30] audit: type=1400 audit(1782898038.939:350): avc: denied { append } for pid=635 comm="syz.5.83" path="/11/file1/bus/memory.numa_stat" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.582962][ T641] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 39.772853][ T649] loop1: detected capacity change from 0 to 256 [ 39.777671][ T30] audit: type=1400 audit(1782898039.159:351): avc: denied { write } for pid=648 comm="syz.5.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.798312][ T30] audit: type=1400 audit(1782898039.159:352): avc: denied { create } for pid=648 comm="syz.5.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 39.820312][ T649] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 39.833797][ T30] audit: type=1400 audit(1782898039.309:353): avc: denied { mount } for pid=647 comm="syz.1.88" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.849408][ T649] exFAT-fs (loop1): hint_cluster is invalid (17) [ 39.866021][ T649] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 39.874666][ T649] exFAT-fs (loop1): Filesystem has been set read-only [ 39.881461][ T649] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 40.060771][ T692] ================================================================== [ 40.068975][ T692] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200 [ 40.077346][ T692] Read of size 8 at addr ffff888127725cc0 by task syz.1.108/692 [ 40.077368][ T692] [ 40.077372][ T692] CPU: 1 PID: 692 Comm: syz.1.108 Not tainted syzkaller #0 [ 40.077390][ T692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 40.104808][ T692] Call Trace: [ 40.104820][ T692] [ 40.104828][ T692] __dump_stack+0x21/0x30 [ 40.115489][ T692] dump_stack_lvl+0x110/0x170 [ 40.120186][ T692] ? show_regs_print_info+0x20/0x20 [ 40.125497][ T692] ? load_image+0x3f0/0x3f0 [ 40.130273][ T692] print_address_description+0x7f/0x2c0 [ 40.130308][ T692] ? tc_setup_flow_action+0x88e/0x3200 [ 40.141843][ T692] kasan_report+0x10f/0x150 [ 40.146368][ T692] ? tc_setup_flow_action+0x88e/0x3200 [ 40.151849][ T692] __asan_report_load8_noabort+0x14/0x20 [ 40.157509][ T692] tc_setup_flow_action+0x88e/0x3200 [ 40.162827][ T692] mall_replace_hw_filter+0x2db/0x8d0 [ 40.168205][ T692] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 40.174275][ T692] ? mall_set_parms+0x520/0x520 [ 40.179138][ T692] ? tcf_exts_destroy+0xb0/0xb0 [ 40.184097][ T692] ? pcpu_alloc+0x1118/0x16f0 [ 40.188778][ T692] ? mall_set_parms+0x1e4/0x520 [ 40.193736][ T692] mall_change+0x544/0x760 [ 40.198275][ T692] ? __kasan_check_write+0x14/0x20 [ 40.203409][ T692] ? mall_get+0xa0/0xa0 [ 40.207571][ T692] ? tcf_chain_tp_insert_unique+0x946/0xa70 [ 40.213469][ T692] ? mall_get+0xa0/0xa0 [ 40.217806][ T692] tc_new_tfilter+0x13df/0x1990 [ 40.222753][ T692] ? tcf_gate_entry_destructor+0x20/0x20 [ 40.228386][ T692] ? 0xffffffffa0028000 [ 40.232543][ T692] ? security_capable+0x87/0xb0 [ 40.237397][ T692] ? ns_capable+0x8c/0xf0 [ 40.241730][ T692] ? netlink_net_capable+0x125/0x160 [ 40.247025][ T692] ? tcf_gate_entry_destructor+0x20/0x20 [ 40.252668][ T692] rtnetlink_rcv_msg+0x83c/0xcb0 [ 40.257614][ T692] ? 0xffffffffa0028000 [ 40.261770][ T692] ? rtnetlink_bind+0x80/0x80 [ 40.266543][ T692] ? avc_has_perm_noaudit+0x390/0x490 [ 40.271926][ T692] ? memcpy+0x56/0x70 [ 40.275902][ T692] ? avc_has_perm_noaudit+0x30a/0x490 [ 40.281290][ T692] ? arch_stack_walk+0xee/0x140 [ 40.286251][ T692] ? avc_denied+0x1b0/0x1b0 [ 40.290839][ T692] ? stack_trace_save+0xa6/0xf0 [ 40.295687][ T692] ? avc_has_perm+0x163/0x250 [ 40.300530][ T692] ? avc_has_perm_noaudit+0x490/0x490 [ 40.305912][ T692] ? x64_sys_call+0x4b/0x9a0 [ 40.310546][ T692] ? selinux_nlmsg_lookup+0x39d/0x440 [ 40.315913][ T692] netlink_rcv_skb+0x1e9/0x430 [ 40.320671][ T692] ? rtnetlink_bind+0x80/0x80 [ 40.325551][ T692] ? netlink_ack+0xb10/0xb10 [ 40.330128][ T692] ? _copy_from_iter+0x4a4/0x10a0 [ 40.335140][ T692] ? __netlink_lookup+0x387/0x3b0 [ 40.340154][ T692] rtnetlink_rcv+0x1c/0x20 [ 40.344580][ T692] netlink_unicast+0x86c/0xa30 [ 40.349336][ T692] netlink_sendmsg+0x879/0xb80 [ 40.354098][ T692] ? netlink_getsockopt+0x530/0x530 [ 40.359331][ T692] ? security_socket_sendmsg+0x82/0xa0 [ 40.364777][ T692] ? netlink_getsockopt+0x530/0x530 [ 40.370053][ T692] ____sys_sendmsg+0x5be/0x8f0 [ 40.374891][ T692] ? __sys_sendmsg_sock+0x40/0x40 [ 40.379918][ T692] ? import_iovec+0x7c/0xb0 [ 40.384567][ T692] ___sys_sendmsg+0x236/0x2e0 [ 40.389258][ T692] ? __sys_sendmsg+0x280/0x280 [ 40.394012][ T692] ? sock_show_fdinfo+0xa0/0xa0 [ 40.398949][ T692] ? __fdget+0x1a1/0x230 [ 40.403174][ T692] __x64_sys_sendmsg+0x201/0x2d0 [ 40.408098][ T692] ? ___sys_sendmsg+0x2e0/0x2e0 [ 40.412938][ T692] ? __kasan_check_write+0x14/0x20 [ 40.418034][ T692] ? switch_fpu_return+0x15d/0x2c0 [ 40.423141][ T692] x64_sys_call+0x4b/0x9a0 [ 40.427637][ T692] do_syscall_64+0x4c/0xa0 [ 40.432054][ T692] ? clear_bhb_loop+0x50/0xa0 [ 40.436724][ T692] ? clear_bhb_loop+0x50/0xa0 [ 40.441523][ T692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.447703][ T692] RIP: 0033:0x7f8f4e292e59 [ 40.452215][ T692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.472070][ T692] RSP: 002b:00007f8f4ccec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.480471][ T692] RAX: ffffffffffffffda RBX: 00007f8f4e51afa0 RCX: 00007f8f4e292e59 [ 40.488433][ T692] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 40.496526][ T692] RBP: 00007f8f4e328e6f R08: 0000000000000000 R09: 0000000000000000 [ 40.504494][ T692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.512544][ T692] R13: 00007f8f4e51b038 R14: 00007f8f4e51afa0 R15: 00007ffe3c783ab8 [ 40.520514][ T692] [ 40.523538][ T692] [ 40.525890][ T692] Allocated by task 692: [ 40.530112][ T692] __kasan_kmalloc+0xd4/0x100 [ 40.534769][ T692] __kmalloc+0x13d/0x2c0 [ 40.539031][ T692] tcf_idr_create+0x5f/0x790 [ 40.543898][ T692] tcf_idr_create_from_flags+0x61/0x70 [ 40.549357][ T692] tcf_gact_init+0x342/0x570 [ 40.553943][ T692] tcf_action_init_1+0x3fd/0x6b0 [ 40.558996][ T692] tcf_action_init+0x233/0x7a0 [ 40.563849][ T692] tcf_exts_validate+0x24a/0x580 [ 40.568794][ T692] mall_set_parms+0x48/0x520 [ 40.573401][ T692] mall_change+0x478/0x760 [ 40.577807][ T692] tc_new_tfilter+0x13df/0x1990 [ 40.582644][ T692] rtnetlink_rcv_msg+0x83c/0xcb0 [ 40.587566][ T692] netlink_rcv_skb+0x1e9/0x430 [ 40.592347][ T692] rtnetlink_rcv+0x1c/0x20 [ 40.594468][ T60] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 40.596749][ T692] netlink_unicast+0x86c/0xa30 [ 40.609111][ T692] netlink_sendmsg+0x879/0xb80 [ 40.613976][ T692] ____sys_sendmsg+0x5be/0x8f0 [ 40.618726][ T692] ___sys_sendmsg+0x236/0x2e0 [ 40.623384][ T692] __x64_sys_sendmsg+0x201/0x2d0 [ 40.628391][ T692] x64_sys_call+0x4b/0x9a0 [ 40.632791][ T692] do_syscall_64+0x4c/0xa0 [ 40.637210][ T692] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.643086][ T692] [ 40.645500][ T692] The buggy address belongs to the object at ffff888127725c00 [ 40.645500][ T692] which belongs to the cache kmalloc-192 of size 192 [ 40.659532][ T692] The buggy address is located 0 bytes to the right of [ 40.659532][ T692] 192-byte region [ffff888127725c00, ffff888127725cc0) [ 40.673526][ T692] The buggy address belongs to the page: [ 40.679263][ T692] page:ffffea00049dc940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127725 [ 40.689755][ T692] flags: 0x4000000000000200(slab|zone=1) [ 40.695399][ T692] raw: 4000000000000200 0000000000000000 0000000100000001 ffff888100042c00 [ 40.703997][ T692] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 40.712729][ T692] page dumped because: kasan: bad access detected [ 40.719210][ T692] page_owner tracks the page as allocated [ 40.724905][ T692] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 286, ts 19036464512, free_ts 0 [ 40.739995][ T692] post_alloc_hook+0x192/0x1b0 [ 40.744751][ T692] prep_new_page+0x1c/0x110 [ 40.749233][ T692] get_page_from_freelist+0x2c3a/0x2cd0 [ 40.754763][ T692] __alloc_pages+0x1a2/0x460 [ 40.759380][ T692] new_slab+0xa0/0x4d0 [ 40.763468][ T692] ___slab_alloc+0x3ac/0x840 [ 40.768046][ T692] __slab_alloc+0x49/0x90 [ 40.772373][ T692] kmem_cache_alloc_trace+0x146/0x270 [ 40.777747][ T692] kset_create_and_add+0x59/0x2c0 [ 40.782757][ T692] netdev_register_kobject+0x1be/0x330 [ 40.788254][ T692] register_netdevice+0xeaa/0x1490 [ 40.793355][ T692] __ip_tunnel_create+0x2c7/0x390 [ 40.798390][ T692] ip_tunnel_init_net+0x2be/0x730 [ 40.803401][ T692] erspan_init_net+0x29/0x30 [ 40.807981][ T692] ops_init+0x2c0/0x470 [ 40.812232][ T692] setup_net+0x331/0xa30 [ 40.816464][ T692] page_owner free stack trace missing [ 40.821899][ T692] [ 40.824204][ T692] Memory state around the buggy address: [ 40.829827][ T692] ffff888127725b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 40.837876][ T692] ffff888127725c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.845941][ T692] >ffff888127725c80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 40.854074][ T692] ^ [ 40.860233][ T692] ffff888127725d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 40.868277][ T692] ffff888127725d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 40.876317][ T692] ================================================================== [ 40.884623][ T692] Disabling lock debugging due to kernel taint [ 40.994502][ T532] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 41.054512][ T60] usb 5-1: config 127 has an invalid interface number: 102 but max is 0 [ 41.062901][ T60] usb 5-1: config 127 has no interface number 0 [ 41.070092][ T60] usb 5-1: config 127 interface 102 altsetting 255 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 41.081507][ T60] usb 5-1: config 127 interface 102 has no altsetting 0 [ 41.244520][ T60] usb 5-1: New USB device found, idVendor=1608, idProduct=0206, bcdDevice=db.2d [ 41.253650][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.262025][ T60] usb 5-1: Product: syz [ 41.266265][ T60] usb 5-1: Manufacturer: syz [ 41.271008][ T60] usb 5-1: SerialNumber: syz [ 41.294574][ T702] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 41.574576][ T532] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 41.583926][ T532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.591947][ T532] usb 6-1: Product: syz [ 41.596141][ T532] usb 6-1: Manufacturer: syz [ 41.600732][ T532] usb 6-1: SerialNumber: syz [ 41.606042][ T532] usb 6-1: config 0 descriptor?? [ 41.616216][ T60] usb 5-1: USB disconnect, device number 3 [ 42.933370][ T60] usb 6-1: USB disconnect, device number 5